$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: 8GXmbmQ9mEwMgwaLetYCtPdAvN+/d5b6WNInPoQ8vDY= Subject key identifier: B1:67:43:32:32:B4:6F:DA:FF:AD:88:03:AB:E5:B5:CF:82:84:41:05 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 1B7F Signing time: Mon 16 Jun 2025 16:39:07 +0000 Manifest this update: Mon 16 Jun 2025 16:39:07 +0000 Manifest next update: Mon 23 Jun 2025 16:39:07 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: Rm0DL2hy4GjP36+YUw5lWKSD9QTGYmQoHsY4p1u72DA=) 2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: eXJjjkwH5jRXforBrF78HYiKBo92Atf+IpNaNde3A4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Jun 16 16:39:07 2025 GMT Not After : Jun 23 16:39:07 2025 GMT Subject: CN=685048ab-bfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:ef:c2:8c:10:ce:a9:25:0b:4f:41:f7:5c: 8d:ae:f0:8f:48:b5:37:87:0b:e7:53:49:d0:cb:00: 0f:2d:9a:76:15:05:07:d3:2b:e9:bc:dd:b9:7e:33: 65:80:58:8c:7e:3f:45:55:7c:93:a5:03:21:b2:89: a1:4d:7a:55:c9:f3:2a:2c:82:b5:42:c6:86:f9:34: f3:52:39:43:31:1a:ba:55:e9:46:36:9a:d4:e1:f6: ca:cc:91:ed:27:d8:08:ca:22:ba:f9:cc:32:f4:1a: 5e:fe:4e:57:44:58:8e:ee:c9:1d:bb:e2:6c:7e:bb: 07:03:af:da:18:5d:a5:2b:8b:44:67:de:d2:70:93: a8:fe:53:ea:18:61:ce:c2:c3:c5:46:d2:4d:e3:b5: 5d:82:c1:0a:86:f0:53:35:d7:88:41:25:29:ad:cc: 56:f9:bc:80:da:05:74:7f:0c:55:8c:1e:3a:9d:30: ff:48:aa:93:87:1b:c1:64:a4:d1:ee:f9:d5:72:f5: d0:e9:76:bf:49:28:81:40:ad:85:53:7e:0e:2f:9a: 2a:46:ae:1d:62:7d:ee:b9:2e:49:17:66:c9:1a:20: c4:9c:c7:5d:e0:fd:4f:65:ce:32:26:d7:3d:b3:14: a7:95:81:d6:c6:39:66:06:5a:37:c7:19:84:d7:37: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:67:43:32:32:B4:6F:DA:FF:AD:88:03:AB:E5:B5:CF:82:84:41:05 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:62:ab:7d:cc:b9:7e:35:1e:9b:54:65:5b:ff:20:35:38:cb: 58:76:e2:e5:f3:39:b1:d9:4f:9e:d5:c9:f8:42:18:a0:9f:16: f6:1a:21:9c:7b:71:5f:7e:7f:b6:7d:43:7f:28:89:bb:eb:e8: 7f:b0:5e:a0:29:ff:19:32:8c:ff:2d:af:b0:2c:73:a3:60:8f: 34:c3:de:42:49:dd:e1:e4:d9:9f:3e:d5:17:25:62:87:ca:70: b7:82:77:86:01:e1:1c:f9:7c:51:11:fc:05:01:ea:fc:aa:2e: a5:11:af:d2:0b:4e:63:ee:af:c1:0f:ff:73:65:0f:bc:de:84: b9:33:ed:77:1b:8f:2e:a3:04:4c:f9:e6:73:2d:ac:78:71:19: 1e:59:5d:94:74:ea:1d:19:ba:c2:6f:cc:a1:73:88:e0:af:b6: e0:be:ab:88:53:d5:fc:fd:fd:85:30:0f:c3:00:21:d1:1c:82: 73:f7:3c:ec:be:34:d6:9c:47:f9:c0:24:1c:0b:7c:74:b4:2a: aa:39:53:71:49:47:6f:91:ad:1d:99:27:e9:d5:12:2d:57:85: 22:9d:b2:ac:85:32:da:7e:c1:8a:5b:84:16:4e:16:97:ed:c5: a7:4d:77:b1:f2:59:54:33:b8:30:4a:53:00:2c:93:a5:a8:6b: 99:e6:fd:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjUwNjE2MTYzOTA3WhcNMjUwNjIzMTYzOTA3WjAYMRYwFAYD VQQDEw02ODUwNDhhYi1iZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxw3vwowQzqklC09B91yNrvCPSLU3hwvnU0nQywAPLZp2FQUH0yvpvN25fjNl gFiMfj9FVXyTpQMhsomhTXpVyfMqLIK1QsaG+TTzUjlDMRq6VelGNprU4fbKzJHt J9gIyiK6+cwy9Bpe/k5XRFiO7skdu+JsfrsHA6/aGF2lK4tEZ97ScJOo/lPqGGHO wsPFRtJN47VdgsEKhvBTNdeIQSUprcxW+byA2gV0fwxVjB46nTD/SKqThxvBZKTR 7vnVcvXQ6Xa/SSiBQK2FU34OL5oqRq4dYn3uuS5JF2bJGiDEnMdd4P1PZc4yJtc9 sxSnlYHWxjlmBlo3xxmE1zflEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFnQzIy tG/a/62IA6vltc+ChEEFMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfYqt9zLl+NR6bVGVb/yA1OMtYduLl8zmx2U+e1cn4Qhignxb2GiGc e3Fffn+2fUN/KIm76+h/sF6gKf8ZMoz/La+wLHOjYI80w95CSd3h5NmfPtUXJWKH ynC3gneGAeEc+XxREfwFAer8qi6lEa/SC05j7q/BD/9zZQ+83oS5M+13G48uowRM +eZzLax4cRkeWV2UdOodGbrCb8yhc4jgr7bgvquIU9X8/f2FMA/DACHRHIJz9zzs vjTWnEf5wCQcC3x0tCqqOVNxSUdvka0dmSfp1RItV4UinbKshTLafsGKW4QWThaX 7cWnTXex8llUM7gwSlMALJOlqGuZ5v13 -----END CERTIFICATE-----Generated at Tue Jun 17 12:15:56 2025 by rpki-client