$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json) Hash identifier: kKLM3ztKRMiHrDWIKSg9qlTrNqP8AqCXVOHsUI729pI= Subject key identifier: FB:33:4A:FC:4C:42:A4:1E:0E:87:C8:8C:1F:62:30:CD:F3:BA:F2:2C Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0B0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft Manifest number: 0B02 Signing time: Sat 14 Jun 2025 19:11:45 +0000 Manifest this update: Sat 14 Jun 2025 19:11:45 +0000 Manifest next update: Sat 21 Jun 2025 19:11:45 +0000 Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: KRubysPvG4ql6D3AOMgc0Cmq6S6TIsxCEtqjUgG3RNg=) 2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: Mg9FSloatKIT5DeKmuz+Qvjhu8F3q0aOXlO1sHBkA98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2828 (0xb0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Validity Not Before: Jun 14 19:11:45 2025 GMT Not After : Jun 21 19:11:45 2025 GMT Subject: CN=684dc971-8c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:c9:b5:87:6e:ea:a2:46:1c:f1:f1:35:b4: cf:0c:0d:f3:6d:62:aa:9a:57:86:bd:a4:54:43:c0: ef:3e:00:7a:4b:e5:b1:3d:e9:22:d7:e0:77:be:a0: 69:a5:14:e8:dc:50:e3:2a:f0:2b:23:63:cd:cb:f5: 96:43:4c:a1:09:3f:37:6a:6a:eb:30:38:e9:6c:04: 35:fb:5a:53:76:3d:c9:91:2f:3a:3a:f0:55:43:16: cf:0f:0c:d2:3a:aa:c5:89:06:bf:38:af:73:a1:26: 4e:72:80:52:06:09:58:a4:f4:47:e0:a5:2e:cc:e6: 31:ab:eb:02:da:e8:4c:ee:77:a6:90:e8:11:1b:7a: 8a:55:fc:14:8a:00:1a:8d:38:e0:98:56:c8:8f:11: cc:ec:b7:96:07:0d:3a:ef:b2:94:ca:7b:47:e4:e3: 35:4f:52:fe:99:ff:ba:8b:10:c7:28:6e:7f:ae:54: ad:ab:a3:45:8a:27:2d:73:dd:52:37:ae:b4:9a:e1: fd:07:14:b5:98:01:e5:15:55:6d:45:87:c1:59:77: e0:a1:d7:96:f4:15:a7:df:e7:37:95:bf:7f:f1:5e: 35:ae:89:bf:9a:77:7e:91:7e:09:44:d1:c3:1c:87: dd:2f:f2:62:a3:0f:25:60:60:f7:08:fe:97:23:d3: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:33:4A:FC:4C:42:A4:1E:0E:87:C8:8C:1F:62:30:CD:F3:BA:F2:2C X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:3b:d5:33:b8:ed:a2:c5:45:ce:c5:59:a3:ae:0d:96:0e:89: 24:bd:e7:4f:7e:ee:4e:90:6f:77:a4:e1:8c:f3:0a:a5:4a:29: 36:bb:ca:1c:db:5e:75:9d:73:96:85:5c:7e:75:f0:6e:a3:c5: df:47:18:45:4e:8c:d5:e9:03:26:6d:93:fd:e4:34:eb:e2:44: b2:c1:a5:a2:c9:d4:9c:18:2a:ac:b6:22:60:4d:0b:0c:09:37: 9d:93:a8:48:d8:fe:4a:c1:14:05:9a:03:eb:03:33:1a:2a:51: 12:37:31:6f:c0:d5:1c:68:f4:3b:7a:f9:c0:23:8e:90:93:1f: 98:12:da:46:7e:eb:1e:54:74:7d:58:78:a9:f8:37:a7:80:c6: 2e:ce:e1:7f:47:c4:34:8c:bb:49:f4:c9:d8:b9:2c:e1:c6:a1: 97:ea:aa:00:2c:6b:36:7b:8e:bc:9a:56:c0:c2:8b:e5:6a:7d: fe:8a:35:67:29:2b:2c:ba:fd:87:e4:88:cf:f0:36:03:82:b9: e3:e1:12:42:75:fd:ed:05:83:23:36:ac:69:11:5d:36:2a:5b: fb:5f:1d:6f:9f:82:52:dd:99:75:85:06:30:23:a9:3e:5d:b6: 78:57:72:87:a1:8d:4b:fa:fc:98:6e:90:4b:44:d3:d6:cf:98: 0c:80:0e:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjUwNjE0MTkxMTQ1WhcNMjUwNjIxMTkxMTQ1WjAYMRYwFAYD VQQDEw02ODRkYzk3MS04YzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiDJtYdu6qJGHPHxNbTPDA3zbWKqmleGvaRUQ8DvPgB6S+WxPeki1+B3vqBp pRTo3FDjKvArI2PNy/WWQ0yhCT83amrrMDjpbAQ1+1pTdj3JkS86OvBVQxbPDwzS OqrFiQa/OK9zoSZOcoBSBglYpPRH4KUuzOYxq+sC2uhM7nemkOgRG3qKVfwUigAa jTjgmFbIjxHM7LeWBw0677KUyntH5OM1T1L+mf+6ixDHKG5/rlStq6NFiictc91S N660muH9BxS1mAHlFVVtRYfBWXfgodeW9BWn3+c3lb9/8V41rom/mnd+kX4JRNHD HIfdL/Jiow8lYGD3CP6XI9P0XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPszSvxM QqQeDofIjB9iMM3zuvIsMB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5 SDRYaTFaRDkxZlFHZlF1OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSO9UzuO2ixUXOxVmjrg2WDokkvedPfu5OkG93pOGM8wqlSik2u8oc 2151nXOWhVx+dfBuo8XfRxhFTozV6QMmbZP95DTr4kSywaWiydScGCqstiJgTQsM CTedk6hI2P5KwRQFmgPrAzMaKlESNzFvwNUcaPQ7evnAI46Qkx+YEtpGfuseVHR9 WHip+DengMYuzuF/R8Q0jLtJ9MnYuSzhxqGX6qoALGs2e468mlbAwovlan3+ijVn KSssuv2H5IjP8DYDgrnj4RJCdf3tBYMjNqxpEV02Klv7Xx1vn4JS3Zl1hQYwI6k+ XbZ4V3KHoY1L+vyYbpBLRNPWz5gMgA57 -----END CERTIFICATE-----Generated at Sun Jun 15 04:53:28 2025 by rpki-client