$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft File: 0WtcAvVxqLjfvUc87xSokssNAOE.mft (raw, json) Hash identifier: Ia0i10MaI/3X9WZZYrHtvS8i1dupGmvxYS+JL300tlE= Subject key identifier: 23:C3:79:D4:91:5D:5A:57:6C:00:F3:9D:64:73:33:6B:F8:A9:88:67 Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 Certificate issuer: /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft Manifest number: 11EA Signing time: Thu 12 Jun 2025 19:27:57 +0000 Manifest this update: Thu 12 Jun 2025 19:27:57 +0000 Manifest next update: Thu 19 Jun 2025 19:27:57 +0000 Files and hashes: 1: 0WtcAvVxqLjfvUc87xSokssNAOE.crl (hash: 8NQMYkgsZ9zd7a4hWesz2Sx3nV4M8GhGYoHn0fGPLi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102, serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Validity Not Before: Jun 12 19:27:57 2025 GMT Not After : Jun 19 19:27:57 2025 GMT Subject: CN=684b2a3d-1d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:e8:2b:c3:72:13:24:5d:49:d6:83:f9:d7: d3:cb:3a:89:dc:b4:b9:44:de:c2:13:2f:9a:ec:10: a4:c2:ce:eb:8a:77:f8:b5:bc:59:d3:1b:f9:3f:2c: 84:f3:43:a2:49:93:3e:e1:e1:78:bf:29:40:4b:12: 4a:5e:78:87:cb:93:51:88:41:a0:aa:f9:5c:0f:9f: 7f:f0:9c:c9:f9:61:65:32:5e:1a:a5:89:57:86:5c: 4c:2f:19:6c:bc:6e:64:e7:29:10:86:51:37:c7:5a: 61:74:cf:ca:15:1f:4c:1e:e6:2d:d4:0e:f5:fb:5d: 44:83:40:3f:ce:98:ee:d7:89:23:d1:9a:fe:df:ff: 05:bc:97:c7:66:11:1f:95:08:c6:30:6f:cd:23:5e: cf:9b:47:65:c0:2a:2b:7e:53:75:3f:f8:97:60:9e: b5:07:c8:98:1b:3e:5f:2b:cf:24:f3:4d:85:38:45: 4a:8c:96:f0:9e:58:f4:69:c5:0e:0e:fc:0e:f0:04: 3b:68:74:f3:de:b9:bc:a4:25:70:3c:1b:dd:b8:d8: 56:8f:3d:70:8a:56:97:d4:80:eb:a0:1c:c5:7b:11: 96:3a:33:f0:f5:34:bc:22:b0:0b:62:f8:4f:37:53: 51:ed:13:b9:5c:6b:5d:dc:a9:cb:a5:06:ce:33:02: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C3:79:D4:91:5D:5A:57:6C:00:F3:9D:64:73:33:6B:F8:A9:88:67 X509v3 Authority Key Identifier: keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:5d:e3:a1:2c:a0:99:8c:5a:e0:47:b7:09:5a:17:0c:ea:b1: 27:cc:32:18:dc:8d:4b:54:b8:e1:3f:d4:8f:f1:e7:a4:93:87: 14:a8:9c:b8:88:d3:45:9f:59:a9:3d:b4:ef:1d:bd:d9:f9:39: 8a:c6:b0:c9:eb:8d:74:2b:19:d3:bc:29:9f:b9:db:08:50:91: aa:d9:3e:b2:4d:c7:87:c5:9f:01:64:a9:aa:9d:f5:3f:af:03: 6c:c1:a8:fe:af:f0:f1:f7:86:f6:a3:1c:95:87:7f:e6:29:25: 14:bb:3e:f8:4e:ce:42:32:63:04:77:2f:38:3a:a6:a9:ce:05: 85:16:2e:cf:77:8f:dd:9e:c6:47:de:47:e8:35:c0:7e:40:c0: 06:45:85:99:6f:8c:64:bd:e2:b9:ff:39:01:67:4f:ff:24:bc: c3:47:e4:b2:b9:1a:fe:37:6f:6f:22:fa:96:a3:c5:b6:73:6c: c0:db:5e:e6:ef:97:45:42:49:39:d7:c2:95:8b:a7:6c:c2:32: bb:9b:5f:66:1c:f3:63:e1:66:d8:fe:14:67:14:e8:48:dd:84: 9e:6c:bc:af:d7:29:ad:c6:3f:4d:49:dd:87:80:4b:6c:21:fd: e0:6e:a9:4d:78:77:83:7a:80:b7:76:76:02:c4:da:77:c2:b9: 3a:69:75:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEQxNkI1QzAyRjU3MUE4QjhERkJENDczQ0VGMTRBODky Q0IwRDAwRTEwHhcNMjUwNjEyMTkyNzU3WhcNMjUwNjE5MTkyNzU3WjAYMRYwFAYD VQQDEw02ODRiMmEzZC0xZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1voK8NyEyRdSdaD+dfTyzqJ3LS5RN7CEy+a7BCkws7rinf4tbxZ0xv5PyyE 80OiSZM+4eF4vylASxJKXniHy5NRiEGgqvlcD59/8JzJ+WFlMl4apYlXhlxMLxls vG5k5ykQhlE3x1phdM/KFR9MHuYt1A71+11Eg0A/zpju14kj0Zr+3/8FvJfHZhEf lQjGMG/NI17Pm0dlwCorflN1P/iXYJ61B8iYGz5fK88k802FOEVKjJbwnlj0acUO DvwO8AQ7aHTz3rm8pCVwPBvduNhWjz1wilaX1IDroBzFexGWOjPw9TS8IrALYvhP N1NR7RO5XGtd3KnLpQbOMwIr4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPDedSR XVpXbADznWRzM2v4qYhnMB8GA1UdIwQYMBaAFNFrXAL1cai4371HPO8UqJLLDQDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFMamZ2VWM4N3hTb2tzc05B T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBXdGNBdlZ4cUxqZnZVYzg3eFNva3NzTkFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFM amZ2VWM4N3hTb2tzc05BT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBXeOhLKCZjFrgR7cJWhcM6rEnzDIY3I1LVLjhP9SP8eekk4cUqJy4 iNNFn1mpPbTvHb3Z+TmKxrDJ6410KxnTvCmfudsIUJGq2T6yTceHxZ8BZKmqnfU/ rwNswaj+r/Dx94b2oxyVh3/mKSUUuz74Ts5CMmMEdy84OqapzgWFFi7Pd4/dnsZH 3kfoNcB+QMAGRYWZb4xkveK5/zkBZ0//JLzDR+SyuRr+N29vIvqWo8W2c2zA217m 75dFQkk518KVi6dswjK7m19mHPNj4WbY/hRnFOhI3YSebLyv1ymtxj9NSd2HgEts If3gbqlNeHeDeoC3dnYCxNp3wrk6aXW1 -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:46 2025 by rpki-client