$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json) Hash identifier: mVpYkKq/oLkR3ey8bvLRUl7WvvbWMvRD0owZutW0nDM= Subject key identifier: 35:CC:03:D5:75:0E:A0:D9:9F:B2:38:92:7B:DE:6C:9F:32:50:F3:02 Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft Manifest number: 059C Signing time: Sat 14 Jun 2025 22:55:52 +0000 Manifest this update: Sat 14 Jun 2025 22:55:52 +0000 Manifest next update: Sat 21 Jun 2025 22:55:52 +0000 Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: 1cWQDkHhjktyNoX4rssj4AEDENSKhLnXmI5JNglbwQ0=) 2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: uguUMCdjeeoR+3BZNUcz2rlEWQIIVlblf1lRNkNHvS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Validity Not Before: Jun 14 22:55:52 2025 GMT Not After : Jun 21 22:55:52 2025 GMT Subject: CN=684dfdf8-debf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:6d:2e:63:9a:c8:91:50:30:eb:da:9f:9c: 89:ec:05:5f:c3:fc:b4:72:67:67:2a:c5:2f:4d:e7: 6e:d2:d8:8a:3d:51:33:42:27:33:13:fb:ee:76:05: a2:60:81:c3:4d:c2:aa:a1:f2:40:99:e5:c4:cc:1f: 35:31:7b:5f:9b:88:ae:23:d6:58:45:49:63:ac:81: 1e:3d:6c:6a:6c:2e:88:93:56:4b:67:4f:ec:0e:b2: cc:fb:97:08:12:0d:15:7c:1d:5b:38:42:e8:2e:0a: 57:2f:b9:cf:9f:ff:68:fe:f4:e3:95:1e:1a:62:40: df:bf:6c:de:36:27:c5:99:3b:97:d8:98:3d:8f:61: 2b:88:d4:f9:c0:89:65:fc:0a:45:8f:60:e3:c8:c3: 2c:0b:bb:c1:31:6d:90:9e:31:4b:54:91:aa:da:aa: 0c:34:80:a6:6b:8f:07:2d:78:a1:9b:3d:57:19:11: a0:45:1b:1f:85:a1:9e:fb:43:96:74:53:75:b7:2e: 96:06:81:33:34:f2:80:0e:4a:58:4e:0e:a5:5a:61: 64:c1:1c:29:32:1f:83:af:f9:e9:38:5c:b3:75:e8: 4b:2c:1b:bd:eb:9e:06:f2:21:c7:c6:c8:c9:3d:3c: 61:d9:df:14:b2:3e:29:be:6c:31:d5:d5:9a:08:d5: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CC:03:D5:75:0E:A0:D9:9F:B2:38:92:7B:DE:6C:9F:32:50:F3:02 X509v3 Authority Key Identifier: keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:13:dc:44:41:69:41:ff:62:a1:31:0f:5e:82:bd:04:ea:5f: cf:3d:f6:80:73:d7:42:a7:40:3b:66:88:dc:da:e0:1f:18:74: 07:cf:8f:8a:33:42:d9:f5:d2:75:5e:09:92:ed:b6:1b:10:6a: 9c:5b:11:b4:04:05:c9:5a:85:3e:d9:03:4b:e9:17:03:54:af: 95:21:7d:71:b2:12:04:fc:58:94:c2:e7:f0:56:52:9b:2f:d1: 4f:13:40:74:1f:66:61:c7:9c:e5:bc:d0:41:b8:b4:21:26:bb: 80:73:c3:79:48:e7:a3:0b:36:e0:16:85:e4:47:47:20:8f:25: 08:63:6d:2f:70:10:40:f6:75:8a:c6:21:c5:fc:9a:5a:51:6b: 34:94:00:1a:31:35:60:bf:f7:30:aa:86:99:1b:4e:ec:79:53: 42:af:a9:a6:57:97:98:24:47:e0:0f:6b:9e:53:aa:c3:6c:48: ff:e0:49:0e:38:04:4d:92:db:9b:f4:cf:f3:58:e7:46:db:85: 57:60:c6:d7:5c:fb:b0:b5:22:9b:5d:32:7b:13:e3:8b:a1:08: b5:70:55:28:8f:46:06:99:bd:43:4f:57:f1:c1:3a:d3:3f:b5: 68:b1:55:a2:e1:40:3a:97:52:68:6f:c3:83:fd:fe:3f:41:03: 53:d2:74:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVGMjUxMTAvBgNVBAUTKDVBNjg0NDFGQjlEMUI3OTBGQzZDNzk5RTM5NTEwMUQ5 Mjc2MDk2N0QwHhcNMjUwNjE0MjI1NTUyWhcNMjUwNjIxMjI1NTUyWjAYMRYwFAYD VQQDEw02ODRkZmRmOC1kZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQptLmOayJFQMOvan5yJ7AVfw/y0cmdnKsUvTedu0tiKPVEzQiczE/vudgWi YIHDTcKqofJAmeXEzB81MXtfm4iuI9ZYRUljrIEePWxqbC6Ik1ZLZ0/sDrLM+5cI Eg0VfB1bOELoLgpXL7nPn/9o/vTjlR4aYkDfv2zeNifFmTuX2Jg9j2EriNT5wIll /ApFj2DjyMMsC7vBMW2QnjFLVJGq2qoMNICma48HLXihmz1XGRGgRRsfhaGe+0OW dFN1ty6WBoEzNPKADkpYTg6lWmFkwRwpMh+Dr/npOFyzdehLLBu9654G8iHHxsjJ PTxh2d8Usj4pvmwx1dWaCNX7OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXMA9V1 DqDZn7I4knvebJ8yUPMCMB8GA1UdIwQYMBaAFFpoRB+50beQ/Gx5njlRAdknYJZ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUYyNS9GOEVEOEI4QUQz NUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1RDhiSG1lT1ZFQjJTZGds bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dtaEVIN25SdDVEOGJIbWVPVkVCMlNkZ2xuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUYyNS9GOEVEOEI4QUQzNUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1 RDhiSG1lT1ZFQjJTZGdsbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9E9xEQWlB/2KhMQ9egr0E6l/PPfaAc9dCp0A7Zojc2uAfGHQHz4+K M0LZ9dJ1XgmS7bYbEGqcWxG0BAXJWoU+2QNL6RcDVK+VIX1xshIE/FiUwufwVlKb L9FPE0B0H2Zhx5zlvNBBuLQhJruAc8N5SOejCzbgFoXkR0cgjyUIY20vcBBA9nWK xiHF/JpaUWs0lAAaMTVgv/cwqoaZG07seVNCr6mmV5eYJEfgD2ueU6rDbEj/4EkO OARNktub9M/zWOdG24VXYMbXXPuwtSKbXTJ7E+OLoQi1cFUoj0YGmb1DT1fxwTrT P7VosVWi4UA6l1Job8OD/f4/QQNT0nRa -----END CERTIFICATE-----Generated at Sun Jun 15 05:50:18 2025 by rpki-client