$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json) Hash identifier: 8JHyWWKgOX9EihAU1dFcH/wqsxEm6l/zfW5JbJmQqG0= Subject key identifier: 34:F6:D5:67:B5:6D:DC:71:9E:95:09:6B:00:A1:97:24:EA:75:F0:50 Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Certificate serial: 02E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft Manifest number: 02DA Signing time: Sun 15 Jun 2025 01:04:00 +0000 Manifest this update: Sun 15 Jun 2025 01:03:59 +0000 Manifest next update: Sun 22 Jun 2025 01:03:59 +0000 Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: e0dMhLAcvmcHc/ZUUM+mA7HAZOlwT+jobc64dl3t0h8=) 2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: SKYjC2+Kll4ZZKRgRzaVrVL/om+GJv0anlAPWT1K3TE=) 3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: +tMP8g15DFcYp7mMqY0WVEOydxXfPdFwqrShsC1V228=) 4: 8409527078B011EE8D737723C4F9AE02.roa (hash: 0ZYVM7VxDyYQJk7ae/RUp5ynDYTJuRZ5sT+0mo9VS4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Validity Not Before: Jun 15 01:03:59 2025 GMT Not After : Jun 22 01:03:59 2025 GMT Subject: CN=684e1bff-97f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:ea:b1:8b:89:e4:66:a9:a4:19:6d:58:1b: 54:07:bd:56:a5:15:69:dc:f8:d2:9d:5f:6a:a4:48: 2f:8b:50:ef:bd:b9:1f:67:5e:6f:b6:76:2e:2d:eb: d3:40:fc:86:bc:16:aa:44:07:17:39:d4:3c:a1:02: 79:a7:f3:09:0b:19:d9:8a:45:61:00:89:28:26:48: 3a:ed:c1:02:ea:16:4b:18:62:a6:1a:c4:dc:6f:29: 1d:68:ee:80:6c:02:44:43:03:01:be:64:24:77:c8: 8e:f9:1c:e4:a2:7d:2b:d2:3e:1c:81:43:b3:4b:39: b9:6f:6f:11:cd:ed:c4:c5:e3:42:84:78:91:48:55: 83:15:26:3f:f0:79:eb:26:b8:be:2b:33:1b:0b:34: 7e:3a:de:2f:e7:c6:58:96:e2:73:2c:f2:73:b5:7a: c3:86:58:8b:f0:c2:c3:7a:83:2a:dd:75:ea:5f:58: 9a:d3:b0:1e:c7:4a:22:0b:64:46:56:bc:8e:75:ff: 09:12:34:ae:95:6e:93:76:b0:29:16:bc:6b:25:d5: a2:3b:fd:bf:33:6a:09:e6:f5:ff:ad:02:04:64:68: 95:ad:eb:38:72:cd:14:e4:2c:2e:9e:ff:fb:73:91: 7f:cf:9d:bc:e4:17:14:cd:cf:20:dd:7b:0e:14:53: 2f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F6:D5:67:B5:6D:DC:71:9E:95:09:6B:00:A1:97:24:EA:75:F0:50 X509v3 Authority Key Identifier: keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:33:7a:d1:62:8c:ec:24:c3:71:ee:ac:36:af:d7:00:43:79: 7d:79:9c:07:9a:0f:00:79:f3:bc:98:38:a3:58:4f:aa:d4:b9: a0:45:d6:2a:e4:cd:f0:7d:3a:f1:f0:5d:70:7d:32:17:20:6a: 16:cf:6f:60:e3:6e:61:4f:3e:24:32:11:64:9d:08:f8:4d:c5: 58:45:35:ea:49:2a:e8:74:bf:7e:b8:cd:25:a3:c8:57:c7:6c: 74:32:f3:39:e5:63:dd:4c:37:87:41:db:64:98:1f:63:30:a1: 20:02:e8:ef:07:b5:b7:5f:6a:5d:3e:7e:34:63:00:31:4f:c6: 7f:73:05:2f:40:9a:0e:8c:f3:c2:af:0b:fa:9b:83:68:81:a6: 6d:52:d2:1b:32:11:c7:2a:f5:9e:b4:1e:19:fe:6e:e5:c2:6c: f9:32:df:c5:3f:91:63:12:7d:a4:ea:e4:0e:b8:f0:fc:be:83: 69:a5:3e:3b:96:b7:0c:44:db:8b:3b:66:92:09:47:3b:97:6e: 41:f9:a0:03:d0:aa:3f:41:8f:e2:4f:15:81:d8:74:9d:09:2d: 5c:46:52:34:3c:25:64:4e:a1:d5:c5:b9:30:11:f1:33:47:2f: 10:b6:34:c9:3d:be:86:25:24:5e:29:94:81:0a:21:e2:1a:ab: bd:d3:da:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEyRkIxMTAvBgNVBAUTKDU5MTE4REQ3NTNGMDUzMEVEQzJCOEMzQkUyNjNCRURC MENDRUJDMEUwHhcNMjUwNjE1MDEwMzU5WhcNMjUwNjIyMDEwMzU5WjAYMRYwFAYD VQQDEw02ODRlMWJmZi05N2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2TqsYuJ5GappBltWBtUB71WpRVp3PjSnV9qpEgvi1DvvbkfZ15vtnYuLevT QPyGvBaqRAcXOdQ8oQJ5p/MJCxnZikVhAIkoJkg67cEC6hZLGGKmGsTcbykdaO6A bAJEQwMBvmQkd8iO+Rzkon0r0j4cgUOzSzm5b28Rze3ExeNChHiRSFWDFSY/8Hnr Jri+KzMbCzR+Ot4v58ZYluJzLPJztXrDhliL8MLDeoMq3XXqX1ia07Aex0oiC2RG VryOdf8JEjSulW6TdrApFrxrJdWiO/2/M2oJ5vX/rQIEZGiVres4cs0U5Cwunv/7 c5F/z5285BcUzc8g3XsOFFMvfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT21We1 bdxxnpUJawChlyTqdfBQMB8GA1UdIwQYMBaAFFkRjddT8FMO3CuMO+JjvtsMzrwO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTJGQi9FMEQ2NDUxNEVE MUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3N2NLNHc3NG1PLTJ3ek92 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSR04xMVB3VXc3Y0s0dzc0bU8tMnd6T3ZBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTJGQi9FMEQ2NDUxNEVEMUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3 N2NLNHc3NG1PLTJ3ek92QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2M3rRYozsJMNx7qw2r9cAQ3l9eZwHmg8AefO8mDijWE+q1LmgRdYq 5M3wfTrx8F1wfTIXIGoWz29g425hTz4kMhFknQj4TcVYRTXqSSrodL9+uM0lo8hX x2x0MvM55WPdTDeHQdtkmB9jMKEgAujvB7W3X2pdPn40YwAxT8Z/cwUvQJoOjPPC rwv6m4NogaZtUtIbMhHHKvWetB4Z/m7lwmz5Mt/FP5FjEn2k6uQOuPD8voNppT47 lrcMRNuLO2aSCUc7l25B+aAD0Ko/QY/iTxWB2HSdCS1cRlI0PCVkTqHVxbkwEfEz Ry8QtjTJPb6GJSReKZSBCiHiGqu909pv -----END CERTIFICATE-----Generated at Sun Jun 15 09:50:07 2025 by rpki-client