$ rpki-client -vvf rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft File: wwhUyZUfLYZr_6nE1T05k3nYD6w.mft (raw, json) Hash identifier: eParamTkQZkKVw/WG32fdHpkZdWENLqrOtQgk8PZtNE= Subject key identifier: BE:BB:F6:44:C7:F8:9A:FF:6F:EF:84:3E:70:1E:15:F4:1B:45:06:1B Authority key identifier: C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC Certificate issuer: /CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC Certificate serial: 02FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft Manifest number: 02F7 Signing time: Sun 15 Jun 2025 00:58:58 +0000 Manifest this update: Sun 15 Jun 2025 00:58:57 +0000 Manifest next update: Sun 22 Jun 2025 00:58:57 +0000 Files and hashes: 1: wwhUyZUfLYZr_6nE1T05k3nYD6w.crl (hash: msvPdZa38VeWBFeNKEU1fkO2UW9MlEMwHyVMBkZsyyE=) 2: 2E5E44C40D7311ED90DA6411C4F9AE02.roa (hash: DAE4nA/YSJ+X4ohFS4FgtgN36rqtaSq7+XsAoE9m8Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C89A2, serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC Validity Not Before: Jun 15 00:58:57 2025 GMT Not After : Jun 22 00:58:57 2025 GMT Subject: CN=684e1ad1-6efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:89:0e:15:61:35:8e:b3:f5:c8:a1:e1:a3: 0d:83:d1:a0:12:3d:6f:89:69:76:f4:37:9b:3b:07: 25:cf:27:c2:ef:c0:9e:41:df:35:c5:30:58:e7:6b: ae:92:6b:07:8c:88:ec:62:44:0e:00:78:cf:c5:9c: 1d:ae:7a:8e:cf:7b:55:a5:74:a9:5c:78:b9:b6:fd: d9:b1:d9:4a:f0:6d:64:4a:ee:ad:08:d5:6e:a6:b9: a9:71:1f:b7:a7:5c:61:aa:78:5d:b1:98:40:51:83: fb:2a:a9:4b:85:ea:79:47:c6:0d:b6:a2:27:64:4f: 1e:41:79:27:d6:cf:50:bf:c6:39:b1:8a:63:ba:3d: ec:38:8f:b7:79:5f:47:10:ca:ab:62:47:0e:12:a9: 64:f4:a5:ab:33:80:f8:5e:4c:ba:f4:0a:69:68:ec: c6:c2:ff:bf:67:71:5c:b9:a6:c1:4e:58:af:6d:68: 65:eb:1f:dd:55:63:c0:20:ad:c4:e2:9a:16:76:6d: 56:64:f9:d1:6f:68:97:c8:48:ab:e2:9a:d2:3e:2a: c6:5c:92:4d:98:3d:5f:11:e3:fc:35:75:41:45:25: 45:31:dc:df:14:a3:66:e0:1e:9b:b5:b3:f0:ef:7a: d4:87:a9:e5:a6:80:85:89:93:28:e1:ca:cd:75:b6: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BB:F6:44:C7:F8:9A:FF:6F:EF:84:3E:70:1E:15:F4:1B:45:06:1B X509v3 Authority Key Identifier: keyid:C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:52:f6:97:93:8c:70:ec:a4:73:e5:40:c4:9a:30:ac:77:3a: c6:17:4b:3a:72:2f:a1:3a:5c:16:b5:9f:f7:5f:62:bd:50:d8: be:f0:1b:13:3f:e5:f3:65:a9:68:a9:5a:f8:e6:64:44:d5:8c: a6:0a:3e:c6:06:f3:0f:b1:64:ba:a1:71:ab:c8:66:78:99:a2: 25:97:5a:8d:ea:39:da:8a:4d:ee:e0:61:ac:88:53:b3:9e:3b: 16:36:a6:97:7f:81:dc:b1:ef:4f:89:bf:07:66:4f:eb:15:a9: 41:76:38:49:a6:4a:15:d8:47:32:3a:85:b7:e8:8a:dd:80:38: a2:89:7c:23:89:36:5e:37:92:2d:74:56:d8:33:f7:63:6e:51: 7f:de:65:55:a3:e3:e1:e8:91:0e:8a:b5:fd:6b:cb:e0:87:be: 0b:3d:2a:a1:57:4d:be:9a:38:9c:53:ed:db:cc:a1:ef:1d:3a: f3:c5:06:28:5d:5d:ce:98:e3:f4:6c:5e:d1:4c:11:a9:20:10: bd:60:d6:c6:26:20:80:dc:4e:be:da:17:12:db:a6:43:bd:40: a5:f1:7e:9b:b8:9d:d2:dc:fd:4f:c9:6e:67:c8:a5:9c:a7:3b: 5c:d0:93:2d:63:78:8a:fb:1b:a6:82:46:7a:30:af:5d:29:3a: 1e:d1:10:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg5QTIxMTAvBgNVBAUTKEMzMDg1NEM5OTUxRjJEODY2QkZGQTlDNEQ1M0QzOTkz NzlEODBGQUMwHhcNMjUwNjE1MDA1ODU3WhcNMjUwNjIyMDA1ODU3WjAYMRYwFAYD VQQDEw02ODRlMWFkMS02ZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+WJDhVhNY6z9cih4aMNg9GgEj1viWl29DebOwclzyfC78CeQd81xTBY52uu kmsHjIjsYkQOAHjPxZwdrnqOz3tVpXSpXHi5tv3ZsdlK8G1kSu6tCNVuprmpcR+3 p1xhqnhdsZhAUYP7KqlLhep5R8YNtqInZE8eQXkn1s9Qv8Y5sYpjuj3sOI+3eV9H EMqrYkcOEqlk9KWrM4D4Xky69AppaOzGwv+/Z3FcuabBTlivbWhl6x/dVWPAIK3E 4poWdm1WZPnRb2iXyEir4prSPirGXJJNmD1fEeP8NXVBRSVFMdzfFKNm4B6btbPw 73rUh6nlpoCFiZMo4crNdbbIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL679kTH +Jr/b++EPnAeFfQbRQYbMB8GA1UdIwQYMBaAFMMIVMmVHy2Ga/+pxNU9OZN52A+s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODlBMi9CQzYyQzk3MERG NTYxMUVDOEM2RjE2MEZDNEY5QUUwMi93d2hVeVpVZkxZWnJfNm5FMVQwNWszbllE NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d3aFV5WlVmTFlacl82bkUxVDA1azNuWUQ2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODlBMi9CQzYyQzk3MERGNTYxMUVDOEM2RjE2MEZDNEY5QUUwMi93d2hVeVpVZkxZ WnJfNm5FMVQwNWszbllENncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4UvaXk4xw7KRz5UDEmjCsdzrGF0s6ci+hOlwWtZ/3X2K9UNi+8BsT P+XzZaloqVr45mRE1YymCj7GBvMPsWS6oXGryGZ4maIll1qN6jnaik3u4GGsiFOz njsWNqaXf4Hcse9Pib8HZk/rFalBdjhJpkoV2EcyOoW36IrdgDiiiXwjiTZeN5It dFbYM/djblF/3mVVo+Ph6JEOirX9a8vgh74LPSqhV02+mjicU+3bzKHvHTrzxQYo XV3OmOP0bF7RTBGpIBC9YNbGJiCA3E6+2hcS26ZDvUCl8X6buJ3S3P1PyW5nyKWc pztc0JMtY3iK+xumgkZ6MK9dKToe0RCH -----END CERTIFICATE-----Generated at Sun Jun 15 08:07:48 2025 by rpki-client