$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: Y9dYcvCeB6mEpv6eZc2OIarBABlt9wVqMUX9cAAmO2E= Subject key identifier: FD:E4:AC:6B:BF:43:2C:18:D0:C8:87:7A:66:56:5D:FC:49:7C:B3:B5 Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 0146 Signing time: Sun 15 Jun 2025 03:33:43 +0000 Manifest this update: Sun 15 Jun 2025 03:33:43 +0000 Manifest next update: Sun 22 Jun 2025 03:33:43 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: 0+57Hxqt4rChCH9yNxGxcwX2EjGAKtlluTBYUX6OTVE=) 2: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=) 3: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=) 4: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=) 5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=) 6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 03:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Jun 15 03:33:43 2025 GMT Not After : Jun 22 03:33:43 2025 GMT Subject: CN=684e3f17-a20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:c0:c8:ca:f5:b3:fc:57:90:e3:43:37:3d: 24:00:1d:49:bd:b4:59:0c:fe:60:28:f9:d8:e2:f3: 43:82:47:a4:d6:f9:3c:c6:ab:86:0a:87:16:6c:1e: df:62:97:9e:cf:b3:2f:8f:72:99:97:d6:7b:74:81: 3b:d0:e2:cd:69:86:dc:b6:c9:06:52:24:7e:48:a0: 82:e4:04:f3:fa:76:56:af:42:be:df:64:79:79:1b: ea:4b:04:7a:79:78:04:1b:a4:d9:67:26:d7:ce:46: ae:9f:00:86:7c:9a:fd:4b:00:1e:ee:74:8b:23:5e: 20:a3:4c:51:08:ec:1a:cd:be:38:27:8b:3d:7f:df: 00:12:f9:50:8c:65:cf:ec:a0:56:f9:33:86:b1:c9: 73:44:f1:a7:31:b0:80:86:48:66:5e:91:e6:75:26: 44:7c:a3:94:7e:b5:15:53:d8:fe:e0:89:fb:9c:90: e8:39:dd:8f:86:b8:07:2e:0f:44:3b:50:9e:42:aa: 4b:b7:7f:1d:4a:8d:69:9a:9f:61:45:4d:03:6f:53: 33:5f:ee:16:d7:ed:1b:26:b8:29:06:76:72:0c:0f: 02:75:67:32:16:6f:77:eb:19:6f:9e:20:e0:01:f5: 54:18:76:32:81:b7:d0:a0:2a:cf:bb:2e:f6:29:dc: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E4:AC:6B:BF:43:2C:18:D0:C8:87:7A:66:56:5D:FC:49:7C:B3:B5 X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:de:77:ae:73:55:8c:17:a5:1b:b1:3f:09:4f:38:f5:ee:c4: a9:29:8f:95:01:36:3a:8a:08:53:9d:96:e9:a6:b9:d7:07:bb: 9b:09:99:a9:0d:c8:c7:79:6f:d4:5b:40:99:a6:fd:77:77:2b: 61:f4:46:0e:a2:0b:fc:8f:4b:3d:0c:d2:ba:43:9d:85:bf:8f: 68:80:74:83:d3:91:42:ed:ca:c7:1d:78:9d:37:9d:12:df:c4: de:a9:e4:95:de:84:00:71:0f:c0:f5:58:11:5f:46:d7:65:c6: c0:64:b7:1a:4c:e6:13:99:b6:4d:b1:2b:1c:21:b3:40:26:08: 5f:1a:a1:ce:7a:f7:b5:46:a8:15:dc:20:23:73:f3:ae:07:e2: fe:66:ba:16:16:77:3b:7b:5a:6e:7d:f7:c0:e4:26:50:e9:f2: 06:16:bf:b9:38:61:14:b6:4d:a3:ab:f7:ae:8f:73:60:75:af: ec:a4:cd:11:30:43:b3:47:80:11:54:fc:36:2e:51:f2:62:c4: 7b:86:a5:42:1d:d4:dd:8e:7c:3e:d1:5e:13:1c:1a:93:c3:ae: 61:10:6d:0e:bd:4d:48:86:31:b7:45:2a:b4:49:e3:e3:28:6a: df:9d:d2:02:f2:0e:e5:25:96:0b:da:d8:ae:d7:b2:eb:b9:ba: b3:c8:7f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUwNjE1MDMzMzQzWhcNMjUwNjIyMDMzMzQzWjAYMRYwFAYD VQQDEw02ODRlM2YxNy1hMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBDAyMr1s/xXkONDNz0kAB1JvbRZDP5gKPnY4vNDgkek1vk8xquGCocWbB7f Ypeez7Mvj3KZl9Z7dIE70OLNaYbctskGUiR+SKCC5ATz+nZWr0K+32R5eRvqSwR6 eXgEG6TZZybXzkaunwCGfJr9SwAe7nSLI14go0xRCOwazb44J4s9f98AEvlQjGXP 7KBW+TOGsclzRPGnMbCAhkhmXpHmdSZEfKOUfrUVU9j+4In7nJDoOd2PhrgHLg9E O1CeQqpLt38dSo1pmp9hRU0Db1MzX+4W1+0bJrgpBnZyDA8CdWcyFm936xlvniDg AfVUGHYygbfQoCrPuy72Kdys0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3krGu/ QywY0MiHemZWXfxJfLO1MB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn3neuc1WMF6UbsT8JTzj17sSpKY+VATY6ighTnZbpprnXB7ubCZmp DcjHeW/UW0CZpv13dyth9EYOogv8j0s9DNK6Q52Fv49ogHSD05FC7crHHXidN50S 38TeqeSV3oQAcQ/A9VgRX0bXZcbAZLcaTOYTmbZNsSscIbNAJghfGqHOeve1RqgV 3CAjc/OuB+L+ZroWFnc7e1pufffA5CZQ6fIGFr+5OGEUtk2jq/euj3Ngda/spM0R MEOzR4ARVPw2LlHyYsR7hqVCHdTdjnw+0V4THBqTw65hEG0OvU1IhjG3RSq0SePj KGrfndIC8g7lJZYL2tiu17LrubqzyH8e -----END CERTIFICATE-----Generated at Mon Jun 16 21:05:54 2025 by rpki-client