$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json) Hash identifier: Q/E2jHcHIvfP2qT9LfJUtxDPUk6Q805D0ubWC6OO3HI= Subject key identifier: 8A:7D:F3:7B:6E:B0:35:05:21:BA:0E:86:46:A2:A1:93:4D:3C:DE:D8 Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft Manifest number: 2CA1 Signing time: Sat 14 Jun 2025 15:41:05 +0000 Manifest this update: Sat 14 Jun 2025 15:41:04 +0000 Manifest next update: Sat 21 Jun 2025 15:41:04 +0000 Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: bscVYmwBEyh21rmc/NhxfHA1xE6VI1+Bx7al2k8Cr0U=) 2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: cju0VYTCW5l5cCttT6iUNk+nPOjz7EuL15pDsjAAXc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Validity Not Before: Jun 14 15:41:04 2025 GMT Not After : Jun 21 15:41:04 2025 GMT Subject: CN=684d9811-ab3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:19:03:4d:6c:55:7c:a0:5e:c7:8a:66:64: 43:fe:67:60:0b:3c:47:76:f5:68:9e:9d:b6:f1:92: 28:5f:fd:bc:44:ef:77:44:2b:f5:9e:13:e8:e4:e8: 89:ab:95:16:d1:57:67:b7:8a:85:a2:b7:76:ff:c8: 7a:55:65:ea:9e:04:a4:ae:d8:e8:38:cd:4c:07:2e: 7f:42:ee:fe:96:b7:36:d5:88:ff:5f:85:07:14:d2: ac:ad:4f:d2:f3:0e:f9:a2:ee:9f:13:60:57:a6:1a: e7:95:cc:51:0f:5b:e5:0a:28:6b:e0:e7:0d:f0:92: aa:2c:13:b1:49:db:0b:a2:67:7f:74:47:f2:c7:2b: dd:3b:06:7f:50:81:70:9b:b6:bb:39:6e:ae:2c:bf: fe:83:12:fd:be:41:78:81:36:ac:ca:55:75:35:62: e1:0f:d7:c3:89:85:f6:48:53:5f:35:05:40:57:1e: 11:59:28:0e:0b:32:09:08:f1:b7:53:e7:05:68:33: 7e:35:92:44:2e:c9:38:53:9b:64:1d:5c:cd:17:00: 34:63:94:d3:22:92:57:ee:e2:d7:24:65:17:4f:95: b4:82:fa:1b:55:bd:ae:1e:7d:58:cd:26:df:dd:3d: 17:2b:72:1c:7b:46:39:82:9b:ae:ad:b1:1e:da:9c: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7D:F3:7B:6E:B0:35:05:21:BA:0E:86:46:A2:A1:93:4D:3C:DE:D8 X509v3 Authority Key Identifier: keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:97:2d:d8:01:1f:c4:20:d3:a6:0f:c1:7c:a5:c7:c3:6b:64: 9b:16:51:ab:ea:34:fa:ba:85:fa:a0:0d:e3:db:85:29:08:e4: 25:df:b5:3a:b6:7f:c1:f2:9a:6f:35:0e:33:0e:20:c1:73:55: 91:ea:ef:ec:40:85:ae:be:db:66:d5:e8:89:17:c6:5c:ea:23: 17:0d:2a:be:02:4b:04:59:47:84:23:07:27:6d:04:87:bc:6b: b2:9d:70:0a:51:69:a2:ba:27:10:c6:32:d9:35:ba:b1:75:7d: aa:53:ef:87:21:07:4e:6f:6b:91:06:82:38:b5:f5:37:7f:73: d3:b9:b5:87:3a:cd:34:de:d0:25:10:0b:aa:6d:f1:07:aa:24: 28:44:14:fa:e2:f3:19:6e:6f:2a:90:a5:98:7d:07:05:69:55: 9c:ac:93:bd:68:e3:59:45:50:06:24:56:2e:7c:db:91:50:ce: 84:5d:e3:30:ea:19:52:9c:3a:dc:40:75:84:47:1e:9a:fb:70: 5f:60:14:50:28:15:c8:29:55:60:51:4a:72:59:81:7d:1b:b9: a7:ea:34:d6:1f:20:8c:bb:53:92:ac:8d:5e:55:ea:a2:b4:23: 90:96:0b:19:97:a0:d8:7d:45:48:95:ae:e3:3e:6b:19:b7:90: 34:ea:fd:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NDAxMTAvBgNVBAUTKDU4QTk5NTg3RDU2MzhEODY4OEMyNTg5MEM3ODQxRjMy NTFCNDk2RDcwHhcNMjUwNjE0MTU0MTA0WhcNMjUwNjIxMTU0MTA0WjAYMRYwFAYD VQQDEw02ODRkOTgxMS1hYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAua0ZA01sVXygXseKZmRD/mdgCzxHdvVonp228ZIoX/28RO93RCv1nhPo5OiJ q5UW0Vdnt4qFord2/8h6VWXqngSkrtjoOM1MBy5/Qu7+lrc21Yj/X4UHFNKsrU/S 8w75ou6fE2BXphrnlcxRD1vlCihr4OcN8JKqLBOxSdsLomd/dEfyxyvdOwZ/UIFw m7a7OW6uLL/+gxL9vkF4gTasylV1NWLhD9fDiYX2SFNfNQVAVx4RWSgOCzIJCPG3 U+cFaDN+NZJELsk4U5tkHVzNFwA0Y5TTIpJX7uLXJGUXT5W0gvobVb2uHn1YzSbf 3T0XK3Ice0Y5gpuurbEe2pzI1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIp983tu sDUFIboOhkaioZNNPN7YMB8GA1UdIwQYMBaAFFiplYfVY42GiMJYkMeEHzJRtJbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0MC82RTVBQzQ1NEZE MkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZYUl3bGlReDRRZk1sRzBs dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLbVZoOVZqallhSXdsaVF4NFFmTWxHMGx0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0MC82RTVBQzQ1NEZEMkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZ YUl3bGlReDRRZk1sRzBsdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAply3YAR/EINOmD8F8pcfDa2SbFlGr6jT6uoX6oA3j24UpCOQl37U6 tn/B8ppvNQ4zDiDBc1WR6u/sQIWuvttm1eiJF8Zc6iMXDSq+AksEWUeEIwcnbQSH vGuynXAKUWmiuicQxjLZNbqxdX2qU++HIQdOb2uRBoI4tfU3f3PTubWHOs003tAl EAuqbfEHqiQoRBT64vMZbm8qkKWYfQcFaVWcrJO9aONZRVAGJFYufNuRUM6EXeMw 6hlSnDrcQHWERx6a+3BfYBRQKBXIKVVgUUpyWYF9G7mn6jTWHyCMu1OSrI1eVeqi tCOQlgsZl6DYfUVIla7jPmsZt5A06v2w -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:41 2025 by rpki-client