$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft File: wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json) Hash identifier: iCpwlz5Pt1puZUlpaapxHv2PCM9oGmfTBaZANE5moWA= Subject key identifier: 1D:A9:D1:CB:FE:2A:85:50:BB:B6:AC:1A:21:8D:D0:C9:96:F4:BA:6C Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D Certificate issuer: /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft Manifest number: 055B Signing time: Mon 16 Jun 2025 23:01:44 +0000 Manifest this update: Mon 16 Jun 2025 23:01:44 +0000 Manifest next update: Mon 23 Jun 2025 23:01:44 +0000 Files and hashes: 1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: 3HyD4r27KeTNgCrzxOC+T2/uUyCZxaorg+5yA8hiXYA=) 2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: bEuAdA3yRgHUx1B8M9eSaNpdhvP9aDsmMm6seL8p7oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Validity Not Before: Jun 16 23:01:44 2025 GMT Not After : Jun 23 23:01:44 2025 GMT Subject: CN=6850a258-1213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:00:01:91:a5:9f:34:0f:2a:f2:f5:94:8d: 5a:32:cf:05:61:89:d1:0e:09:b2:35:ed:d9:c8:54: 6b:c9:e9:a0:f8:ed:32:b5:bd:0c:a8:c9:c5:63:f6: 0a:4f:81:fc:9f:db:8f:19:9f:2a:a8:42:ce:6f:43: 8a:92:5c:93:14:02:c9:ed:f3:05:85:7c:17:68:ce: b0:61:5f:41:a5:06:c9:a8:2c:3b:c9:43:b4:18:36: 01:7d:34:0e:b1:0d:66:13:a8:95:5d:f3:26:4e:98: 53:3b:53:65:ac:7e:32:b1:54:35:df:8f:e4:a8:ad: 51:fe:dd:d4:9c:b7:c4:05:24:10:f5:4e:11:d3:1b: cd:20:8d:af:97:1b:32:6c:e4:ff:01:53:a7:80:fb: 11:f1:87:79:f5:fc:e3:94:72:29:e7:c2:1e:9c:51: 6e:0d:a7:dd:19:df:7f:fa:0c:af:ed:89:4f:3f:7c: 48:c4:21:2e:b0:db:d2:c1:c6:4f:f7:5d:0b:5e:81: 7c:f5:87:15:00:24:fe:e6:b4:22:29:6f:04:c3:7e: 3e:3b:6b:01:d2:91:46:9c:ac:22:fb:ea:31:66:1d: 90:cb:41:f5:cd:50:74:20:a1:76:5b:36:cc:4d:2c: 3a:fb:f1:1d:aa:c6:33:03:bf:dc:5c:e5:32:f6:67: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A9:D1:CB:FE:2A:85:50:BB:B6:AC:1A:21:8D:D0:C9:96:F4:BA:6C X509v3 Authority Key Identifier: keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9c:db:41:ad:b2:41:4d:27:fe:25:c2:e1:03:a0:4b:e2:3d: d0:6e:23:4c:37:74:30:e7:e3:1c:aa:58:71:63:e2:be:7c:e2: 2b:ea:e7:21:01:0a:bb:73:83:84:f4:54:15:56:42:96:2c:53: d7:53:f4:d4:72:d0:2d:94:2e:ca:b5:96:2f:0c:6a:9c:7f:1c: 4d:04:87:c3:69:7e:c6:29:c1:a9:bd:12:38:c0:9d:a3:a4:5a: 9d:59:e9:95:40:b5:ae:a4:80:57:c9:fa:c6:74:ac:cf:fb:f5: 67:7e:e4:b9:1a:b6:9d:6e:df:15:cf:79:8f:c7:b3:db:fc:b8: 72:ba:31:68:ef:dd:e0:3f:ac:eb:cb:d1:33:c2:83:69:3f:2f: 63:71:42:28:e8:56:6f:6d:27:d1:d8:25:b5:f0:10:cc:aa:68: 2f:a5:fa:8c:f4:5d:99:8f:a4:0f:9f:41:62:89:a6:f1:10:b8: 60:ff:e5:62:f9:c6:c8:4b:ec:c6:7a:3b:7d:30:bd:06:98:d1: a6:47:bc:48:8b:04:c5:83:b9:88:1f:78:55:44:f9:bd:04:05: c5:a9:f9:3e:d3:ae:e1:e3:ff:6b:62:8d:67:b1:88:02:ec:d6: 17:2d:2c:b5:a7:94:c2:71:ef:e7:ba:90:aa:ca:26:58:b1:88: ed:22:42:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE QUFBMTc4NEQwHhcNMjUwNjE2MjMwMTQ0WhcNMjUwNjIzMjMwMTQ0WjAYMRYwFAYD VQQDEw02ODUwYTI1OC0xMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaAAAZGlnzQPKvL1lI1aMs8FYYnRDgmyNe3ZyFRryemg+O0ytb0MqMnFY/YK T4H8n9uPGZ8qqELOb0OKklyTFALJ7fMFhXwXaM6wYV9BpQbJqCw7yUO0GDYBfTQO sQ1mE6iVXfMmTphTO1NlrH4ysVQ134/kqK1R/t3UnLfEBSQQ9U4R0xvNII2vlxsy bOT/AVOngPsR8Yd59fzjlHIp58IenFFuDafdGd9/+gyv7YlPP3xIxCEusNvSwcZP 910LXoF89YcVACT+5rQiKW8Ew34+O2sB0pFGnKwi++oxZh2Qy0H1zVB0IKF2WzbM TSw6+/EdqsYzA7/cXOUy9mecFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2p0cv+ KoVQu7asGiGN0MmW9LpsMB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ d244VHpvY2lWZ2ZhcWhlRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJnNtBrbJBTSf+JcLhA6BL4j3QbiNMN3Qw5+McqlhxY+K+fOIr6uch AQq7c4OE9FQVVkKWLFPXU/TUctAtlC7KtZYvDGqcfxxNBIfDaX7GKcGpvRI4wJ2j pFqdWemVQLWupIBXyfrGdKzP+/VnfuS5Gradbt8Vz3mPx7Pb/LhyujFo793gP6zr y9EzwoNpPy9jcUIo6FZvbSfR2CW18BDMqmgvpfqM9F2Zj6QPn0FiiabxELhg/+Vi +cbIS+zGejt9ML0GmNGmR7xIiwTFg7mIH3hVRPm9BAXFqfk+067h4/9rYo1nsYgC 7NYXLSy1p5TCce/nupCqyiZYsYjtIkLk -----END CERTIFICATE-----Generated at Wed Jun 18 15:08:54 2025 by rpki-client