$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json) Hash identifier: 8LxE7KPYbTB06HhnpZlqWTJlltfmb5LEnJCkRD0Jsc4= Subject key identifier: 55:FA:B6:D7:1D:D7:2B:69:7F:92:4D:00:5D:08:4B:AD:DA:F0:97:7C Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft Manifest number: 089E Signing time: Wed 18 Jun 2025 20:24:35 +0000 Manifest this update: Wed 18 Jun 2025 20:24:35 +0000 Manifest next update: Wed 25 Jun 2025 20:24:35 +0000 Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: 7bx0D14vdrtotAQl6N5TZOevQmhvhaTxeBgPeEZp4q8=) 2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: MbzDlkokZBR/aS6/hcoRXo43UcCAHhzz3LI8ih+FSVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: Jun 18 20:24:35 2025 GMT Not After : Jun 25 20:24:35 2025 GMT Subject: CN=68532083-a896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:f3:1c:3e:c4:e4:91:87:98:c7:11:9e:bd: d5:1c:c0:77:e7:27:b7:a4:de:29:ca:b9:1b:36:a7: 44:c0:56:2e:9c:36:5b:37:af:b3:e3:58:7e:8d:88: 38:8b:7e:18:9c:a1:f1:da:0a:01:32:7a:c4:fd:d5: 7c:2c:83:bc:45:db:75:64:0a:c1:f7:88:6c:73:69: bb:a2:1c:65:ca:03:9b:cd:83:2c:20:f5:c0:97:f5: 93:71:8e:a2:bb:c2:6b:15:0d:f2:3d:21:03:54:0c: 6a:4c:8e:86:8f:1a:1c:6f:97:8a:ba:69:e6:aa:83: b4:14:4c:96:cc:33:71:03:ef:92:9a:95:11:5f:d6: 4d:3e:af:ae:e6:a3:cc:e9:0b:20:c6:71:f5:4b:65: 43:e0:36:9f:04:43:20:02:0a:6d:01:96:e8:3d:d5: 70:7b:03:21:04:6e:d6:1a:15:03:ee:bb:cf:c4:f1: 3e:4d:04:24:99:f3:6a:1d:ff:e1:b0:1b:c3:f7:59: 7c:ff:5e:20:96:74:76:9a:f4:5b:50:2d:1f:ae:fe: ee:4c:73:30:7a:8d:73:fc:3c:1b:e2:2b:9e:ab:29: 45:a5:3c:c8:42:65:19:97:16:6c:e3:36:4a:c9:65: 81:0a:d7:f9:49:3f:07:95:c6:cc:fb:2b:be:43:9c: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FA:B6:D7:1D:D7:2B:69:7F:92:4D:00:5D:08:4B:AD:DA:F0:97:7C X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1a:b6:bb:6a:6c:c7:42:11:4d:0d:29:40:aa:63:0d:63:83: 80:25:e2:1c:83:d0:95:97:33:ad:02:b1:c7:70:78:95:c8:8d: 95:45:46:f0:7b:f7:d4:ab:11:e8:38:0a:f6:10:be:bc:f0:18: ae:c0:12:07:e4:1a:d6:c8:da:3f:44:2b:bc:f6:08:80:c9:bd: ff:fb:a2:0a:a0:ca:51:bb:d1:8b:e9:1c:f1:24:5e:1a:da:e9: 0a:f9:47:b7:af:19:5c:bf:35:ba:05:f8:b0:b2:cb:5c:66:cd: b8:bc:a1:16:bd:bb:30:bc:51:18:f1:64:f7:21:4d:18:cc:92: 88:3a:ad:3d:7a:91:43:a1:d8:94:b7:74:bd:7c:78:55:17:2d: e6:8e:ca:c0:6c:7b:e7:ac:7b:ec:25:8e:e2:d1:d2:4a:64:54: 9a:06:ce:a7:aa:1e:09:19:88:69:56:f8:ca:4d:46:ad:65:f7: 6d:88:cb:19:2c:de:b0:05:02:ab:4f:32:4a:a3:c6:91:fa:a9: 28:07:60:0d:82:d4:17:e2:0c:4c:72:dc:78:15:2a:23:ab:0e: f5:fa:c9:93:fe:e6:b8:4c:01:4b:d6:5d:d6:7f:9b:83:14:9d: cf:fe:88:ac:01:04:6e:a5:9c:89:53:47:68:ac:62:e4:97:17: 23:33:56:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjUwNjE4MjAyNDM1WhcNMjUwNjI1MjAyNDM1WjAYMRYwFAYD VQQDEw02ODUzMjA4My1hODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAfzHD7E5JGHmMcRnr3VHMB35ye3pN4pyrkbNqdEwFYunDZbN6+z41h+jYg4 i34YnKHx2goBMnrE/dV8LIO8Rdt1ZArB94hsc2m7ohxlygObzYMsIPXAl/WTcY6i u8JrFQ3yPSEDVAxqTI6Gjxocb5eKumnmqoO0FEyWzDNxA++SmpURX9ZNPq+u5qPM 6QsgxnH1S2VD4DafBEMgAgptAZboPdVwewMhBG7WGhUD7rvPxPE+TQQkmfNqHf/h sBvD91l8/14glnR2mvRbUC0frv7uTHMweo1z/Dwb4iueqylFpTzIQmUZlxZs4zZK yWWBCtf5ST8HlcbM+yu+Q5xDFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFX6ttcd 1ytpf5JNAF0IS63a8Jd8MB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011 TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdGra7amzHQhFNDSlAqmMNY4OAJeIcg9CVlzOtArHHcHiVyI2VRUbw e/fUqxHoOAr2EL688BiuwBIH5BrWyNo/RCu89giAyb3/+6IKoMpRu9GL6RzxJF4a 2ukK+Ue3rxlcvzW6BfiwsstcZs24vKEWvbswvFEY8WT3IU0YzJKIOq09epFDodiU t3S9fHhVFy3mjsrAbHvnrHvsJY7i0dJKZFSaBs6nqh4JGYhpVvjKTUatZfdtiMsZ LN6wBQKrTzJKo8aR+qkoB2ANgtQX4gxMctx4FSojqw71+smT/ua4TAFL1l3Wf5uD FJ3P/oisAQRupZyJU0dorGLklxcjM1aI -----END CERTIFICATE-----Generated at Fri Jun 20 17:44:11 2025 by rpki-client