$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: QOA+e292jHH1l6sycBfJWa5c+rXQR4Ty2Pdiv+6W3E4= Subject key identifier: 59:4B:D9:8A:EF:A8:0C:EB:84:2A:8F:45:AB:B5:91:E8:9B:65:8A:2D Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: 04 Signing time: Fri 13 Jun 2025 07:05:30 +0000 Manifest this update: Fri 13 Jun 2025 07:05:30 +0000 Manifest next update: Fri 20 Jun 2025 07:05:30 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: Mzm44i5QvmGbP4+9DLry2HUy0UDwuNK7mRDaDpWIOxU=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Jun 13 07:05:30 2025 GMT Not After : Jun 20 07:05:30 2025 GMT Subject: CN=684bcdba-d038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:17:84:ff:7e:b1:bd:d9:b6:39:5e:02:dd: 0f:bc:c1:c1:a8:ce:36:72:01:07:32:30:fb:f7:a4: 08:7c:9c:be:51:b0:f0:54:cc:df:53:8a:fa:b0:56: 6d:02:c7:95:b3:19:5b:c3:87:db:b1:2c:dc:9e:f4: b9:78:67:29:1e:c5:46:80:5e:ee:11:c4:ff:50:7f: 88:9f:3e:c2:d8:d0:77:ac:78:ce:dd:69:1c:40:ce: 0b:17:da:e9:f6:80:5b:b0:b2:c4:87:2c:90:36:be: ad:f2:e5:e5:a1:cc:7c:3f:42:3d:a7:25:7c:f8:61: c2:55:1a:55:d7:c8:b4:56:cf:37:2e:6b:9b:88:ea: 4e:df:4e:76:47:af:5c:03:7c:fc:55:e3:5a:e4:62: 4d:6f:e2:90:6b:00:2c:a9:87:ef:1a:69:2c:54:be: e9:83:7f:45:80:de:e4:76:e0:b4:99:ff:08:bc:6b: b7:2a:cd:b3:a7:af:89:f0:34:07:a2:ce:07:ef:b7: 00:77:a8:ca:ad:f1:38:62:19:c8:9d:86:a5:cb:f6: e1:04:32:2e:ec:55:0c:56:88:46:74:3f:e4:c3:9f: 13:82:2f:ab:ba:d8:83:4f:59:1d:4d:56:8a:68:76: ba:b5:10:17:77:89:71:08:3c:f4:46:69:1f:83:c0: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4B:D9:8A:EF:A8:0C:EB:84:2A:8F:45:AB:B5:91:E8:9B:65:8A:2D X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ea:0b:6e:e9:c0:eb:76:1e:2e:0b:38:79:50:c9:36:0a:ef: ad:80:e0:45:56:a5:32:8a:74:7a:ed:ad:59:1f:f4:d0:2f:a5: df:b1:85:41:74:a3:8f:63:ed:84:24:e1:62:ab:b2:57:5d:c4: 2d:55:14:ae:47:8b:75:84:88:05:e7:d4:ce:cf:62:41:9b:b4: e4:98:da:f0:fb:70:5e:01:5d:41:8c:98:98:ec:3a:5b:91:af: 0b:4a:e9:09:34:69:74:2c:de:86:8c:93:de:e0:1c:c6:9a:61: ce:74:cb:c3:e4:9a:d2:ca:ad:76:8f:c7:56:03:b8:74:44:4b: 27:46:08:ca:8f:98:66:66:f9:3e:9b:92:3f:b0:ef:87:1a:a8: cc:99:0c:9c:4a:fe:83:2d:dd:2a:4f:5a:a6:9e:d8:b6:7c:8e: 8b:54:43:6d:43:1c:69:c5:1d:d4:b6:3b:5c:ec:c8:a6:fc:e2: 0a:ac:00:1f:1e:24:7e:11:a2:e7:f1:f7:a7:19:56:e3:dd:e5: 5c:9c:e7:f3:6f:c9:a6:66:e6:8d:08:37:4b:bb:26:f6:3c:9d: a8:86:58:57:ae:2f:36:6d:f5:e4:d0:58:ac:36:ab:71:ac:05: 39:05:fc:bb:96:4e:8f:7f:2b:14:fa:fd:b2:c0:1b:1d:52:84: 50:1f:1e:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkI5QTExMC8GA1UEBRMoQzNEQ0Q5NUE3MjRBRDZFM0I5ODc0QzZFNEQ2QjM5RUJD RTE0MkNENDAeFw0yNTA2MTMwNzA1MzBaFw0yNTA2MjAwNzA1MzBaMBgxFjAUBgNV BAMTDTY4NGJjZGJhLWQwMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyFBeE/36xvdm2OV4C3Q+8wcGozjZyAQcyMPv3pAh8nL5RsPBUzN9TivqwVm0C x5WzGVvDh9uxLNye9Ll4ZykexUaAXu4RxP9Qf4ifPsLY0HeseM7daRxAzgsX2un2 gFuwssSHLJA2vq3y5eWhzHw/Qj2nJXz4YcJVGlXXyLRWzzcua5uI6k7fTnZHr1wD fPxV41rkYk1v4pBrACyph+8aaSxUvumDf0WA3uR24LSZ/wi8a7cqzbOnr4nwNAei zgfvtwB3qMqt8ThiGcidhqXL9uEEMi7sVQxWiEZ0P+TDnxOCL6u62INPWR1NVopo drq1EBd3iXEIPPRGaR+DwIwDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWUvZiu+o DOuEKo9Fq7WR6Jtlii0wHwYDVR0jBBgwFoAUw9zZWnJK1uO5h0xuTWs5684ULNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQjlBLzIyN0FDNDg2NDVD NzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzl6WlduSksxdU81aDB4dVRXczU2ODRVTE5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QjlBLzIyN0FDNDg2NDVDNzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVP NWgweHVUV3M1Njg0VUxOUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIXqC27pwOt2Hi4LOHlQyTYK762A4EVWpTKKdHrtrVkf9NAvpd+xhUF0 o49j7YQk4WKrslddxC1VFK5Hi3WEiAXn1M7PYkGbtOSY2vD7cF4BXUGMmJjsOluR rwtK6Qk0aXQs3oaMk97gHMaaYc50y8PkmtLKrXaPx1YDuHRESydGCMqPmGZm+T6b kj+w74caqMyZDJxK/oMt3SpPWqae2LZ8jotUQ21DHGnFHdS2O1zsyKb84gqsAB8e JH4Roufx96cZVuPd5Vyc5/NvyaZm5o0IN0u7JvY8naiGWFeuLzZt9eTQWKw2q3Gs BTkF/LuWTo9/KxT6/bLAGx1ShFAfHuI= -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:03 2025 by rpki-client