$ rpki-client -vvf rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft File: W2r-ya7p6tTclkY7oanLJyM9bf8.mft (raw, json) Hash identifier: sh3WhSY/Y4TZVcRcVIRqa/IoD3LCaBnX/kE1Tdtno+Y= Subject key identifier: 60:B5:1C:9E:82:50:7B:07:9B:0E:F7:27:66:1F:09:0A:2B:F5:35:12 Authority key identifier: 5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF Certificate issuer: /CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft Manifest number: 3492 Signing time: Sat 14 Jun 2025 14:55:23 +0000 Manifest this update: Sat 14 Jun 2025 14:55:22 +0000 Manifest next update: Sat 21 Jun 2025 14:55:22 +0000 Files and hashes: 1: W2r-ya7p6tTclkY7oanLJyM9bf8.crl (hash: 2qPkAyOQLmzdsLfxjxe5PW7nIMoIqqAueLL10TFb2W0=) 2: 1317969A55B711EBAAFF6E4DC4F9AE02.roa (hash: nOUxkk4420zJ2RFOdGdnQCmw3/LVGxAozFWt1FM8u4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D81D4, serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Validity Not Before: Jun 14 14:55:22 2025 GMT Not After : Jun 21 14:55:22 2025 GMT Subject: CN=684d8d5a-78b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:4c:aa:f1:4b:64:a0:e3:72:d5:c7:c6:c2: be:8a:88:4f:3c:8f:0e:e7:e4:0d:4c:c8:3c:78:d1: cd:54:6d:b7:9b:20:fd:e5:17:38:ac:6f:72:16:81: 4f:4d:a9:cf:0b:0b:ba:dc:3e:53:05:8c:a6:8b:46: 30:02:d8:4a:6f:90:a3:2b:46:a2:ba:95:5d:d0:f1: fd:cd:95:ae:a7:d9:67:40:d3:07:4c:1a:9f:9e:bd: c1:b4:27:59:51:53:ed:d4:e9:18:a4:73:89:c2:cc: 03:02:34:fb:8c:fa:bf:81:19:99:1a:53:a3:be:7b: e5:47:b9:9f:ee:ad:1c:9c:6c:9e:34:01:a7:7b:91: 9b:bc:46:53:27:ff:45:42:8d:bf:e5:e3:44:17:e1: b0:31:8a:9f:6b:13:2c:53:30:ea:54:5e:a4:3a:52: e6:b6:b1:d5:74:da:cb:d7:64:aa:cb:71:8a:2e:77: a9:80:98:5b:08:a2:f4:13:0e:7e:43:d9:30:b2:cd: bf:8f:ce:fa:e8:50:6f:83:20:f4:60:35:5e:11:4f: 64:16:4b:f1:65:fc:1f:83:75:2f:4b:91:cf:a6:de: 71:ff:ac:cd:75:f2:51:a7:56:ff:c8:c5:de:b2:68: 48:c8:33:b4:9c:38:2a:05:08:05:3e:d8:db:70:eb: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B5:1C:9E:82:50:7B:07:9B:0E:F7:27:66:1F:09:0A:2B:F5:35:12 X509v3 Authority Key Identifier: keyid:5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9b:c4:b6:ef:91:56:5d:8b:88:5a:46:e3:f3:57:2a:05:51: ca:b5:c0:5e:49:5c:f9:0d:11:85:eb:69:76:c6:5c:2e:37:8d: f6:13:b0:01:c3:e1:bd:ec:3a:3e:e7:0d:62:38:c3:a5:46:86: 94:38:21:d6:b0:8c:8f:09:38:7f:ca:29:62:02:5e:8e:9c:ad: bf:14:b5:f3:e2:0b:7f:bb:87:aa:fe:c4:9f:6d:1d:db:b7:69: 2a:d9:b9:78:ae:84:3e:70:71:c3:da:0b:2a:e1:4c:20:bd:8c: 21:a0:59:14:d0:be:d0:36:a2:ea:a7:2a:f1:f5:94:20:bf:71: d3:5a:3f:e0:21:fb:78:ed:d8:3e:a8:5a:40:83:93:9b:f9:17: 5c:f2:56:c0:9e:ad:d4:2f:76:97:8d:8e:0f:4b:87:47:fd:46: 95:15:fd:d5:ae:35:86:b1:86:cc:8e:6b:0e:b9:f6:89:f2:07: 4f:b9:9c:43:34:f8:61:3b:a3:47:1f:44:67:d4:3c:b2:a9:eb: 79:d2:e6:3a:2c:d6:41:69:28:f8:ec:14:77:d0:95:f1:da:46: ff:ae:91:ad:da:a0:d0:d1:75:8b:5f:2c:6d:7d:dc:5e:f1:95: 1c:d8:1d:a5:e2:8f:c9:d4:7c:45:c3:99:9d:26:3c:8d:f6:a4: 49:01:e7:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxRDQxMTAvBgNVBAUTKDVCNkFGRUM5QUVFOUVBRDREQzk2NDYzQkExQTlDQjI3 MjMzRDZERkYwHhcNMjUwNjE0MTQ1NTIyWhcNMjUwNjIxMTQ1NTIyWjAYMRYwFAYD VQQDEw02ODRkOGQ1YS03OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQdMqvFLZKDjctXHxsK+iohPPI8O5+QNTMg8eNHNVG23myD95Rc4rG9yFoFP TanPCwu63D5TBYymi0YwAthKb5CjK0aiupVd0PH9zZWup9lnQNMHTBqfnr3BtCdZ UVPt1OkYpHOJwswDAjT7jPq/gRmZGlOjvnvlR7mf7q0cnGyeNAGne5GbvEZTJ/9F Qo2/5eNEF+GwMYqfaxMsUzDqVF6kOlLmtrHVdNrL12Sqy3GKLnepgJhbCKL0Ew5+ Q9kwss2/j8766FBvgyD0YDVeEU9kFkvxZfwfg3UvS5HPpt5x/6zNdfJRp1b/yMXe smhIyDO0nDgqBQgFPtjbcOvi2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGC1HJ6C UHsHmw73J2YfCQor9TUSMB8GA1UdIwQYMBaAFFtq/smu6erU3JZGO6GpyycjPW3/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODFENC9EQUUzODJBQTFE OUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0VGNsa1k3b2FuTEp5TTli ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cyci15YTdwNnRUY2xrWTdvYW5MSnlNOWJmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODFENC9EQUUzODJBQTFEOUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0 VGNsa1k3b2FuTEp5TTliZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwm8S275FWXYuIWkbj81cqBVHKtcBeSVz5DRGF62l2xlwuN432E7AB w+G97Do+5w1iOMOlRoaUOCHWsIyPCTh/yiliAl6OnK2/FLXz4gt/u4eq/sSfbR3b t2kq2bl4roQ+cHHD2gsq4UwgvYwhoFkU0L7QNqLqpyrx9ZQgv3HTWj/gIft47dg+ qFpAg5Ob+Rdc8lbAnq3UL3aXjY4PS4dH/UaVFf3VrjWGsYbMjmsOufaJ8gdPuZxD NPhhO6NHH0Rn1Dyyqet50uY6LNZBaSj47BR30JXx2kb/rpGt2qDQ0XWLXyxtfdxe 8ZUc2B2l4o/J1HxFw5mdJjyN9qRJAecz -----END CERTIFICATE-----Generated at Sat Jun 14 18:41:52 2025 by rpki-client