$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft File: WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json) Hash identifier: n1viDQsYFGm0tHGbBqUxEO9Un26mL45bN/OJS6xOlQU= Subject key identifier: 9E:EA:1E:39:C8:34:64:8F:F0:DA:7C:68:83:9D:C1:7B:93:8E:4C:CC Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6 Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft Manifest number: 011F Signing time: Sun 15 Jun 2025 04:00:14 +0000 Manifest this update: Sun 15 Jun 2025 04:00:14 +0000 Manifest next update: Sun 22 Jun 2025 04:00:14 +0000 Files and hashes: 1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: 0RNJFpNPFK2rBre1sDQo+o1IgarckpII3rJ0XT6RnFo=) 2: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: bc2WkbYAbuGAx2Gf2EfnLZLtMVMYcpQMrHnCADXGRJs=) 3: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: pLOgKyFyMkYkgWZ7IaxS8IlsIuIv5okTjVaTAgIeoac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6 Validity Not Before: Jun 15 04:00:14 2025 GMT Not After : Jun 22 04:00:14 2025 GMT Subject: CN=684e454e-a108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:51:d2:33:0c:0e:d3:5a:a9:cf:1d:dd:e6: e0:d9:5a:b5:a2:98:bc:2a:19:11:2c:d8:bf:06:0a: 61:e6:22:c9:30:a8:f1:37:5d:b3:17:94:88:bd:75: 71:e7:77:80:a5:38:50:a1:21:fe:73:1c:ad:6b:b5: d0:0a:87:e4:92:4f:14:a3:1d:e3:26:fa:be:df:7d: 24:9b:a7:a3:5d:09:49:4b:53:af:a5:5d:1b:b7:4a: bc:2d:b8:7a:f7:1e:ce:0d:60:df:9d:7b:5e:68:13: 6d:13:97:cb:95:11:54:18:ce:3d:db:96:2f:c6:75: d7:aa:37:34:47:13:7a:62:fb:18:15:52:f5:9b:0f: 90:81:c0:dc:4d:db:ed:06:b2:f3:f0:6c:29:48:bd: 4e:24:f5:cd:55:b2:01:54:5c:1c:91:9a:f6:d1:02: 17:78:f0:81:61:fd:19:be:e9:fc:50:59:3c:01:a4: ce:d0:bc:2f:30:5f:15:83:21:e9:ae:f1:95:7d:e6: 8b:1c:8e:41:c0:2b:e3:a2:29:6b:94:5a:c0:eb:38: 87:dc:cd:98:32:eb:de:6e:07:64:1a:2d:25:33:87: 1d:e4:81:e9:b1:09:07:7a:86:d5:7a:b4:9e:7f:39: 0d:cd:7e:5e:21:fb:91:4f:a7:25:a7:fc:8f:67:f9: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EA:1E:39:C8:34:64:8F:F0:DA:7C:68:83:9D:C1:7B:93:8E:4C:CC X509v3 Authority Key Identifier: keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:23:88:8c:9a:80:58:8d:32:36:94:df:1f:3a:1d:65:a0:34: 86:65:81:f9:55:d6:9d:90:80:44:35:44:82:ca:d8:86:fe:11: 3c:26:4f:1b:68:d5:bf:cc:7e:80:35:bd:3e:5b:9a:b9:ec:70: a1:97:6d:c1:7d:3c:da:b5:1c:f9:53:f9:7b:bd:e8:5b:d8:bd: e8:66:4f:d4:da:49:ed:03:0b:7f:05:e9:eb:70:fe:c1:73:9c: e3:8a:22:44:12:07:76:e3:a3:8a:db:03:67:ca:dc:e5:92:64: 48:fe:57:5a:28:6a:f3:f5:d8:51:71:b2:60:14:43:36:55:68: 60:53:c7:86:6d:1a:2d:e8:86:9b:30:4d:1b:63:e0:44:42:5b: 99:ae:77:78:24:93:51:f1:3c:b8:51:b3:ee:4b:88:8f:a9:d3: cf:f6:f0:79:74:41:cf:c9:61:b0:73:66:20:40:09:ab:97:de: 16:81:04:49:47:7a:8e:90:58:5c:68:81:63:b3:6c:c1:40:30: dd:6e:31:57:2c:1d:11:dc:bc:1b:28:2a:75:73:6a:46:cb:b5: 3d:1f:e3:e0:69:fb:18:6a:eb:a7:44:55:6b:be:41:cc:78:fa: c8:b2:21:e7:f8:d6:b9:6e:a2:4a:2c:57:01:d5:19:9d:d2:0a: e8:4b:10:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBQjkxMTAvBgNVBAUTKDU5Q0EwRUQ2Qjk2QjcwQzI5QjNERDhFNEVDNTk4RUEx MkUwREMyRTYwHhcNMjUwNjE1MDQwMDE0WhcNMjUwNjIyMDQwMDE0WjAYMRYwFAYD VQQDEw02ODRlNDU0ZS1hMTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAym9R0jMMDtNaqc8d3ebg2Vq1opi8KhkRLNi/Bgph5iLJMKjxN12zF5SIvXVx 53eApThQoSH+cxyta7XQCofkkk8Uox3jJvq+330km6ejXQlJS1OvpV0bt0q8Lbh6 9x7ODWDfnXteaBNtE5fLlRFUGM4925YvxnXXqjc0RxN6YvsYFVL1mw+QgcDcTdvt BrLz8GwpSL1OJPXNVbIBVFwckZr20QIXePCBYf0Zvun8UFk8AaTO0LwvMF8VgyHp rvGVfeaLHI5BwCvjoilrlFrA6ziH3M2YMuvebgdkGi0lM4cd5IHpsQkHeobVerSe fzkNzX5eIfuRT6clp/yPZ/lCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7qHjnI NGSP8Np8aIOdwXuTjkzMMB8GA1UdIwQYMBaAFFnKDta5a3DCmz3Y5OxZjqEuDcLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FCOS9BQjU3NTMwNjlC MTMxMUVFQUFBQTM5ODJDNEY5QUUwMi9XY29PMXJscmNNS2JQZGprN0ZtT29TNE53 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1djb08xcmxyY01LYlBkams3Rm1Pb1M0Tnd1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0FCOS9BQjU3NTMwNjlCMTMxMUVFQUFBQTM5ODJDNEY5QUUwMi9XY29PMXJscmNN S2JQZGprN0ZtT29TNE53dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmI4iMmoBYjTI2lN8fOh1loDSGZYH5VdadkIBENUSCytiG/hE8Jk8b aNW/zH6ANb0+W5q57HChl23BfTzatRz5U/l7vehb2L3oZk/U2kntAwt/BenrcP7B c5zjiiJEEgd246OK2wNnytzlkmRI/ldaKGrz9dhRcbJgFEM2VWhgU8eGbRot6Iab ME0bY+BEQluZrnd4JJNR8Ty4UbPuS4iPqdPP9vB5dEHPyWGwc2YgQAmrl94WgQRJ R3qOkFhcaIFjs2zBQDDdbjFXLB0R3LwbKCp1c2pGy7U9H+PgafsYauunRFVrvkHM ePrIsiHn+Na5bqJKLFcB1Rmd0groSxCG -----END CERTIFICATE-----Generated at Sun Jun 15 08:33:08 2025 by rpki-client