$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft File: WIXKbgzHteUyD6ckc-5zljP17CY.mft (raw, json) Hash identifier: AxzfnXLAhkfXpFm9VhSTsFJKT2X5HknW/wPhWaz0lMc= Subject key identifier: B3:B5:2A:8B:C1:44:38:B9:B6:FC:37:67:78:AF:E5:04:06:98:20:85 Authority key identifier: 58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 Certificate issuer: /CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft Manifest number: 01CA Signing time: Sun 15 Jun 2025 02:10:40 +0000 Manifest this update: Sun 15 Jun 2025 02:10:39 +0000 Manifest next update: Sun 22 Jun 2025 02:10:39 +0000 Files and hashes: 1: WIXKbgzHteUyD6ckc-5zljP17CY.crl (hash: Ucoy0flnoaEyAW8oB+qQ6pqnOkwjr55DBUdE4h0nyFs=) 2: 9C43FA268A8A11ED9DF2425AC4F9AE02.roa (hash: XU2Kl+wDT9+IdgtwYqn/7pHHpGdYj1vHxZuNd0BPYVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB34A, serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Validity Not Before: Jun 15 02:10:39 2025 GMT Not After : Jun 22 02:10:39 2025 GMT Subject: CN=684e2ba0-198a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:a9:14:02:00:05:27:28:8e:e5:62:aa:14: bf:a6:ff:7b:89:2d:ee:ef:d4:99:b2:42:31:4e:ef: fc:6a:1c:1d:92:78:e3:11:29:9e:e4:f2:de:9a:19: 02:b3:94:d8:38:8a:4f:13:f6:ea:24:a3:17:58:06: a2:0e:d8:17:f2:13:ea:39:dc:f1:77:e1:12:e8:80: a8:c2:94:67:e4:41:3d:d7:3f:f5:3a:30:29:3c:d3: 41:03:62:b5:75:6e:fc:57:48:99:b4:3a:de:3b:19: 4c:85:6c:e3:96:8c:c7:78:24:7d:05:b6:6a:2e:56: c9:67:cb:54:78:bb:5d:f9:0b:d7:bf:3c:b8:f6:89: f8:06:b7:8b:3f:a5:5c:4f:cb:7b:b0:79:a1:d1:19: 62:8e:e5:c7:54:a7:89:aa:29:1a:aa:b5:1e:85:32: 7a:0f:f5:17:4e:a8:ea:28:8d:63:1f:0a:79:cf:b8: fc:e6:53:e7:1f:0a:02:38:a7:b9:ca:13:57:0d:da: c3:11:7f:f5:02:3f:d7:8a:5d:66:7b:a5:8d:81:2a: 90:07:55:57:20:b7:53:73:e5:f5:1a:89:52:0a:44: 8f:f3:f7:a6:54:f0:49:be:7a:94:00:ca:09:16:65: 0c:f8:dd:87:45:60:ac:08:35:c2:0d:b9:9f:9e:79: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B5:2A:8B:C1:44:38:B9:B6:FC:37:67:78:AF:E5:04:06:98:20:85 X509v3 Authority Key Identifier: keyid:58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:19:ba:46:59:eb:45:8f:9f:8e:58:f9:96:7e:19:cc:25:2a: f8:6d:c1:a5:d2:b5:45:fd:77:10:14:b1:a2:0c:c7:af:0c:28: 5b:82:95:5a:98:77:65:41:19:79:51:b0:4b:6f:77:d4:bb:1c: ea:4a:92:15:53:dd:93:d4:52:fc:6d:62:f4:42:6e:64:c5:fb: 59:48:80:84:a5:4e:e2:83:98:41:88:37:0b:5a:99:a3:df:16: 7c:38:6f:43:ba:e2:5d:6c:63:ea:a1:c5:87:6d:72:e1:94:83: ae:10:9e:9c:69:e4:aa:ca:b0:32:cd:9a:09:db:f3:18:0c:37: 49:65:1b:5a:15:bb:a1:1e:1b:0e:38:1a:24:32:35:4e:8e:e9: 53:36:89:b2:09:ca:0f:92:9c:8e:4b:43:99:7d:d7:9e:25:7d: 7f:5e:e1:94:da:3a:a3:2f:56:f1:f5:ca:a5:6e:e4:c3:19:df: ba:25:05:56:cc:b6:9c:7c:75:39:a3:9e:05:d1:af:f1:ba:70: db:f7:20:aa:c9:3f:3b:f1:23:55:08:d5:14:d5:03:0c:88:6a: 6d:23:cb:89:85:c2:9e:9e:56:f9:53:0f:62:ce:11:53:1c:dc: ef:aa:09:8a:3e:12:56:08:46:16:6e:48:a7:7f:4a:64:2f:b7: 6d:de:d1:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzNEExMTAvBgNVBAUTKDU4ODVDQTZFMENDN0I1RTUzMjBGQTcyNDczRUU3Mzk2 MzNGNUVDMjYwHhcNMjUwNjE1MDIxMDM5WhcNMjUwNjIyMDIxMDM5WjAYMRYwFAYD VQQDEw02ODRlMmJhMC0xOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngKpFAIABScojuViqhS/pv97iS3u79SZskIxTu/8ahwdknjjESme5PLemhkC s5TYOIpPE/bqJKMXWAaiDtgX8hPqOdzxd+ES6ICowpRn5EE91z/1OjApPNNBA2K1 dW78V0iZtDreOxlMhWzjlozHeCR9BbZqLlbJZ8tUeLtd+QvXvzy49on4BreLP6Vc T8t7sHmh0RlijuXHVKeJqikaqrUehTJ6D/UXTqjqKI1jHwp5z7j85lPnHwoCOKe5 yhNXDdrDEX/1Aj/Xil1me6WNgSqQB1VXILdTc+X1GolSCkSP8/emVPBJvnqUAMoJ FmUM+N2HRWCsCDXCDbmfnnmx1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO1KovB RDi5tvw3Z3iv5QQGmCCFMB8GA1UdIwQYMBaAFFiFym4Mx7XlMg+nJHPuc5Yz9ewm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM0QS84QTMwRjczNDhB ODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRlVXlENmNrYy01emxqUDE3 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dJWEtiZ3pIdGVVeUQ2Y2tjLTV6bGpQMTdDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM0QS84QTMwRjczNDhBODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRl VXlENmNrYy01emxqUDE3Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEGbpGWetFj5+OWPmWfhnMJSr4bcGl0rVF/XcQFLGiDMevDChbgpVa mHdlQRl5UbBLb3fUuxzqSpIVU92T1FL8bWL0Qm5kxftZSICEpU7ig5hBiDcLWpmj 3xZ8OG9DuuJdbGPqocWHbXLhlIOuEJ6caeSqyrAyzZoJ2/MYDDdJZRtaFbuhHhsO OBokMjVOjulTNomyCcoPkpyOS0OZfdeeJX1/XuGU2jqjL1bx9cqlbuTDGd+6JQVW zLacfHU5o54F0a/xunDb9yCqyT878SNVCNUU1QMMiGptI8uJhcKenlb5Uw9izhFT HNzvqgmKPhJWCEYWbkinf0pkL7dt3tEW -----END CERTIFICATE-----Generated at Sun Jun 15 08:27:44 2025 by rpki-client