$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: 6bV3kD+Fqbp1ZrpK9N/CPXz3t9Ka+yLAkT3eIjTIXCc= Subject key identifier: 43:9A:78:16:3E:B8:38:EF:D5:41:D0:54:40:B2:C4:31:35:39:D1:A9 Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 14CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 1922 Signing time: Sat 14 Jun 2025 16:49:09 +0000 Manifest this update: Sat 14 Jun 2025 16:49:09 +0000 Manifest next update: Sat 21 Jun 2025 16:49:09 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: T/PshXwJ60e+JnnfIMiNGf9WC6eu7G1jEZuO7/GcY8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5322 (0x14ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: Jun 14 16:49:09 2025 GMT Not After : Jun 21 16:49:09 2025 GMT Subject: CN=684da805-77c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:5e:e4:47:2c:c4:1c:98:61:7a:ba:15:61: d9:07:63:e7:61:b6:17:d3:4b:59:0c:40:58:06:97: c7:a6:4e:5b:14:81:27:54:0d:55:1b:94:12:c4:c3: 5a:28:8f:a2:37:ba:27:10:b6:eb:44:d2:a7:d2:69: ea:71:46:b0:3b:50:c8:42:3e:44:3b:d0:8e:58:48: 71:2c:87:f0:bb:b8:06:80:4f:74:65:ec:5b:89:a5: 98:88:27:52:55:ae:3c:a4:fa:66:a2:6e:cf:ba:77: c6:50:eb:27:10:84:e3:b9:af:54:1c:d3:eb:5e:a5: 6a:bb:f7:53:e7:43:ef:53:f5:ed:2a:e1:49:3c:f1: 70:92:d6:0f:1f:d3:e3:b0:3e:f8:b5:3c:7e:91:8e: 4e:e5:a3:6f:90:4e:d9:87:f6:f4:1c:76:83:67:2d: 80:eb:c2:f4:24:d4:96:61:31:38:63:1d:63:15:03: 54:a4:09:ad:4d:22:f9:76:91:3f:a9:21:0c:56:1a: df:0b:7d:17:5a:c2:21:70:ca:bc:8e:1a:4a:35:cc: 2e:d9:6f:af:d1:05:da:cd:e3:c0:5f:59:98:df:d2: d2:78:84:3f:4a:62:09:dc:2a:2c:7c:78:42:83:33: 83:77:7b:9a:41:75:02:ec:6b:17:a5:cc:ee:ab:ad: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9A:78:16:3E:B8:38:EF:D5:41:D0:54:40:B2:C4:31:35:39:D1:A9 X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:41:ee:ed:1a:09:af:71:2f:a4:00:17:a2:e9:11:44:59:1b: 8e:57:0e:44:28:b9:48:51:fa:c0:3d:00:ac:a9:2c:96:80:8d: 0b:31:4c:13:03:f0:b9:af:04:44:2a:8a:97:63:09:95:3a:34: bf:1e:95:52:7b:78:90:7e:00:af:e8:64:27:23:47:51:36:d0: dd:b9:df:97:69:81:99:83:1e:12:56:68:c3:18:96:98:c8:cb: 4f:f4:8e:0a:f7:70:57:d0:d9:04:33:b8:80:6b:d6:0f:58:9e: 11:6a:fd:dd:04:2b:f6:42:f2:c9:58:d4:f4:18:56:2f:c4:07: 18:13:bc:a6:7a:a0:8a:3d:30:e8:be:72:53:ef:e7:df:8e:a7: 7c:cb:ee:83:ab:a2:c1:6a:47:8c:31:2a:ca:33:74:5f:b6:ee: 7e:10:17:53:fe:0f:77:0e:c7:2f:70:ab:e7:b5:6a:45:86:0c: 66:f7:0c:db:a3:e3:b0:0e:e5:a2:ee:8d:c2:c1:e0:c1:03:0a: 84:f4:8e:0c:b2:f8:59:32:8e:49:4c:b9:72:79:f7:38:ba:5c: e2:64:f1:cb:68:fe:8a:75:2d:fa:ea:02:89:3f:92:46:18:44: 9a:8e:e6:45:2b:8d:f7:d8:05:f9:5b:96:b8:43:39:11:a2:55: 08:c0:e2:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjUwNjE0MTY0OTA5WhcNMjUwNjIxMTY0OTA5WjAYMRYwFAYD VQQDEw02ODRkYTgwNS03N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2xe5EcsxByYYXq6FWHZB2PnYbYX00tZDEBYBpfHpk5bFIEnVA1VG5QSxMNa KI+iN7onELbrRNKn0mnqcUawO1DIQj5EO9COWEhxLIfwu7gGgE90ZexbiaWYiCdS Va48pPpmom7PunfGUOsnEITjua9UHNPrXqVqu/dT50PvU/XtKuFJPPFwktYPH9Pj sD74tTx+kY5O5aNvkE7Zh/b0HHaDZy2A68L0JNSWYTE4Yx1jFQNUpAmtTSL5dpE/ qSEMVhrfC30XWsIhcMq8jhpKNcwu2W+v0QXazePAX1mY39LSeIQ/SmIJ3CosfHhC gzODd3uaQXUC7GsXpczuq615DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOaeBY+ uDjv1UHQVECyxDE1OdGpMB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcQe7tGgmvcS+kABei6RFEWRuOVw5EKLlIUfrAPQCsqSyWgI0LMUwT A/C5rwREKoqXYwmVOjS/HpVSe3iQfgCv6GQnI0dRNtDdud+XaYGZgx4SVmjDGJaY yMtP9I4K93BX0NkEM7iAa9YPWJ4Rav3dBCv2QvLJWNT0GFYvxAcYE7ymeqCKPTDo vnJT7+ffjqd8y+6Dq6LBakeMMSrKM3Rftu5+EBdT/g93DscvcKvntWpFhgxm9wzb o+OwDuWi7o3CweDBAwqE9I4MsvhZMo5JTLlyefc4ulziZPHLaP6KdS366gKJP5JG GESajuZFK4332AX5W5a4QzkRolUIwOLd -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:19 2025 by rpki-client