$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft File: WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json) Hash identifier: JvhtJH8Ru8ImUUwAUZ3/ij+eKWPz/a9BUIrivZy1gTU= Subject key identifier: 94:C0:90:72:32:F1:AE:DA:5F:59:0D:F6:A4:19:E1:BD:12:A1:A8:04 Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft Manifest number: 78 Signing time: Thu 19 Jun 2025 06:15:54 +0000 Manifest this update: Thu 19 Jun 2025 06:15:53 +0000 Manifest next update: Thu 26 Jun 2025 06:15:53 +0000 Files and hashes: 1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: tPX/+FK32H6Dbsuh4aP9X+8w6a6T04y2w2cw1sZCXRc=) 2: 25BD1CFA3D6311F0AF2C2257C4F9AE02.roa (hash: aRkI7tQEQCwESW+AVm8WUWidr8skaQZ/Cucm3ddKBWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Validity Not Before: Jun 19 06:15:53 2025 GMT Not After : Jun 26 06:15:53 2025 GMT Subject: CN=6853ab1a-77a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:49:f5:4a:e2:0f:ee:26:b9:76:71:54:77: ee:53:8d:b5:62:3c:4a:17:2e:05:95:61:2f:5f:8f: 3b:55:8d:24:95:aa:9b:41:0f:a6:90:9c:80:00:cd: 94:d3:70:7b:88:88:84:83:11:d5:24:60:7b:40:27: 44:05:9d:56:20:70:02:41:0f:94:19:d8:c7:3a:d5: b8:31:ef:80:63:e3:20:65:62:42:08:cb:27:5e:b7: 06:f5:c8:d9:8b:d9:0f:f6:76:83:f4:e2:28:66:92: 51:19:f9:8c:8c:4f:e6:23:73:4d:ca:d9:32:4f:94: 89:be:7f:92:b6:65:00:0a:60:e5:32:c4:fa:bf:76: d4:0d:35:5c:3b:f0:dc:95:08:0e:aa:f9:c1:bb:ba: 52:1b:ab:21:04:66:5a:46:32:93:2c:d3:a5:a4:f5: 36:e2:d8:27:09:e9:53:5d:00:6b:b5:22:5b:ab:3b: 0f:b7:86:19:5f:a1:2d:58:0f:d8:fc:62:03:5b:a5: a7:20:36:50:0b:85:17:1c:76:91:d4:84:89:df:01: 9c:c9:95:ab:36:59:b8:2b:84:88:6b:16:0f:8a:6a: bb:d8:22:da:c3:50:1e:06:ff:1f:4c:8e:b8:1b:85: 91:77:5e:db:f2:14:f2:55:dc:1a:22:1a:37:f2:86: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C0:90:72:32:F1:AE:DA:5F:59:0D:F6:A4:19:E1:BD:12:A1:A8:04 X509v3 Authority Key Identifier: keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:63:e3:f0:0f:34:c5:8b:dd:e1:2d:6f:e9:f9:49:f4:08:8f: e7:d0:62:30:a6:82:00:aa:cc:48:c8:3c:b1:1b:7c:8c:3a:a3: 8a:9e:49:24:14:df:b6:af:00:51:b3:14:dc:e4:4c:9d:e3:64: 1e:66:5a:c7:2a:43:2b:ed:ca:2e:ec:18:a1:ac:6f:7f:a8:b7: f9:e2:39:e4:0c:7d:5c:da:d8:95:d8:33:d7:50:29:cb:f9:15: c6:d3:2c:27:69:f2:b9:bb:2e:3f:3b:5e:1e:c5:04:32:d8:6f: a0:8c:0e:34:cf:f6:15:71:5d:d0:ae:a4:1d:04:07:69:7a:ef: 2e:67:5c:e1:67:f5:9a:c9:f7:53:bb:c7:e7:57:07:4d:b9:13: bd:d5:4d:78:7e:8d:96:4b:ab:46:55:a5:46:ba:6f:7e:fb:f9: b7:6e:d5:80:85:e7:05:f6:0e:19:70:3f:4b:7b:5d:44:9e:57: 91:91:19:a4:27:5a:3d:c7:c1:62:ef:aa:7d:83:d0:43:58:67: df:8a:1e:be:7a:6f:e4:1b:7e:03:64:44:11:09:d8:06:0d:56: 38:8a:c7:9e:f4:28:a4:ca:4d:14:42:8f:bc:91:e0:e0:fc:38: 55:fc:38:95:ea:9f:07:b6:5e:c5:54:12:7f:63:ff:7f:4b:5a: e4:13:f8:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoNUE1NkM0REU5NDIzQjlFMkI4MDBBQjdFMDQwRENBM0Uw OUYyMzQ3NTAeFw0yNTA2MTkwNjE1NTNaFw0yNTA2MjYwNjE1NTNaMBgxFjAUBgNV BAMTDTY4NTNhYjFhLTc3YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAakn1SuIP7ia5dnFUd+5TjbViPEoXLgWVYS9fjztVjSSVqptBD6aQnIAAzZTT cHuIiISDEdUkYHtAJ0QFnVYgcAJBD5QZ2Mc61bgx74Bj4yBlYkIIyydetwb1yNmL 2Q/2doP04ihmklEZ+YyMT+Yjc03K2TJPlIm+f5K2ZQAKYOUyxPq/dtQNNVw78NyV CA6q+cG7ulIbqyEEZlpGMpMs06Wk9Tbi2CcJ6VNdAGu1IlurOw+3hhlfoS1YD9j8 YgNbpacgNlALhRccdpHUhInfAZzJlas2WbgrhIhrFg+KarvYItrDUB4G/x9Mjrgb hZF3XtvyFPJV3BoiGjfyhrWBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlMCQcjLx rtpfWQ32pBnhvRKhqAQwHwYDVR0jBBgwFoAUWlbE3pQjueK4AKt+BA3KPgnyNHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzgzRkQ2QjJFQTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyL1dsYkUzcFFqdWVLNEFLdC1CQTNLUGdueU5I VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2xiRTNwUWp1ZUs0QUt0LUJBM0tQZ255TkhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzgzRkQ2QjJFQTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyL1dsYkUzcFFqdWVL NEFLdC1CQTNLUGdueU5IVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABdj4/APNMWL3eEtb+n5SfQIj+fQYjCmggCqzEjIPLEbfIw6o4qeSSQU 37avAFGzFNzkTJ3jZB5mWscqQyvtyi7sGKGsb3+ot/niOeQMfVza2JXYM9dQKcv5 FcbTLCdp8rm7Lj87Xh7FBDLYb6CMDjTP9hVxXdCupB0EB2l67y5nXOFn9ZrJ91O7 x+dXB025E73VTXh+jZZLq0ZVpUa6b377+bdu1YCF5wX2DhlwP0t7XUSeV5GRGaQn Wj3HwWLvqn2D0ENYZ9+KHr56b+QbfgNkRBEJ2AYNVjiKx570KKTKTRRCj7yR4OD8 OFX8OJXqnwe2XsVUEn9j/39LWuQT+Bk= -----END CERTIFICATE-----Generated at Thu Jun 19 12:12:45 2025 by rpki-client