$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft File: wJ7fW2leBHksNRT0mPS7FEcJbvc.mft (raw, json) Hash identifier: 8O69deZA0uYvN8V/21WS8YDdaQaXC2Bgn8W+f/Uw4sc= Subject key identifier: BD:95:C2:E2:E0:28:83:6F:F7:54:D9:94:B5:70:B2:CC:41:44:95:F5 Authority key identifier: C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 Certificate issuer: /CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft Manifest number: F7 Signing time: Sun 15 Jun 2025 04:22:45 +0000 Manifest this update: Sun 15 Jun 2025 04:22:45 +0000 Manifest next update: Sun 22 Jun 2025 04:22:45 +0000 Files and hashes: 1: wJ7fW2leBHksNRT0mPS7FEcJbvc.crl (hash: Dyxi0Q1lbPCYk/hHzB7pgR3Yx1uNam9Y5Jo+dCvuGB4=) 2: FC0907B8D45711EE93BD8B7CC4F9AE02.roa (hash: 4csKsNHVa4/05cRZpUWAlRIA5HnGFBYyOyZZA1vjUEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B, serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Validity Not Before: Jun 15 04:22:45 2025 GMT Not After : Jun 22 04:22:45 2025 GMT Subject: CN=684e4a95-9423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:04:6e:13:63:9e:a0:39:56:ed:79:28:56:1e: 6d:96:6e:dc:8f:5c:a1:55:2c:a7:3b:30:04:8e:f8: 6c:23:35:49:f6:7a:96:cc:42:1d:6c:3c:7c:3a:ba: 1d:71:aa:a3:f8:c4:ab:83:82:0a:f7:97:90:c9:53: 95:f4:46:bb:83:92:05:e0:26:a6:1a:4e:1a:2f:de: 66:04:94:16:3e:a9:df:be:03:5a:5f:06:35:ad:f9: 23:25:60:cc:59:3b:af:88:03:d3:d6:90:a9:db:ab: 2b:ef:d6:6f:da:0e:0f:73:c0:5c:d4:7c:93:22:73: 64:10:23:a7:58:eb:ae:09:ae:48:a1:84:d1:df:be: aa:24:17:27:87:63:af:02:ca:94:d1:ed:56:43:c7: 2a:f2:a2:29:e9:72:bb:b5:68:7b:17:cd:88:6b:69: 13:ce:07:d8:0d:4a:1f:df:a7:8c:6c:07:6e:19:e4: 9e:ac:5a:f6:e2:66:b7:c0:2f:d8:35:e3:b4:da:65: e8:b3:42:6b:2c:76:e1:74:8a:dc:c2:3c:07:39:3b: 21:12:1f:03:3e:2a:a3:ea:fd:9d:82:61:c1:03:84: 0f:46:9c:52:ce:ce:25:65:46:3f:e6:79:9a:41:92: 4a:6e:3b:ce:84:37:a0:51:32:c6:70:c6:89:3e:a1: 0b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:95:C2:E2:E0:28:83:6F:F7:54:D9:94:B5:70:B2:CC:41:44:95:F5 X509v3 Authority Key Identifier: keyid:C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8d:0b:f1:cd:38:12:b5:35:00:03:44:ae:1e:e1:41:f1:8c: 61:5a:25:1a:60:28:71:94:41:9d:6e:a1:3b:64:98:ab:29:a3: c6:f1:9a:b1:d5:6a:95:0c:f6:2d:b1:08:c5:37:86:22:ca:2c: 83:e0:be:db:fa:b0:60:30:4e:49:87:b8:72:4e:b5:37:db:70: a3:4b:c2:b9:4b:2b:88:80:2f:90:aa:4b:c6:0a:7f:39:5d:1f: 04:48:d4:45:78:d5:47:07:fb:16:a3:2f:2e:19:57:ed:c5:ea: ad:07:05:ac:34:37:76:19:38:73:9d:73:28:a8:96:cc:44:91: e1:18:db:55:99:08:ed:39:d5:a2:f0:cc:57:7f:bb:4d:a6:36: 47:d0:10:4a:99:de:1e:e3:5b:26:70:ee:04:d0:63:89:1e:7a: 5d:98:fa:bc:d0:fb:ee:65:5b:d5:4f:f7:e7:e1:b7:af:99:fb: df:65:14:f7:1c:ca:98:5f:e8:54:0f:aa:d4:2e:6b:2b:52:f3: 06:aa:e7:29:c4:c4:33:6b:a8:e4:57:3e:ff:96:b9:5c:9e:c7: 0b:fc:58:d1:ee:74:a8:12:7e:1f:e0:d8:94:dc:89:23:bc:8d: 5e:c5:fb:e5:a8:d9:1d:81:dc:8b:ff:e8:57:a9:b0:82:3a:4f: 01:d8:52:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCMkIxMTAvBgNVBAUTKEMwOUVERjVCNjk1RTA0NzkyQzM1MTRGNDk4RjRCQjE0 NDcwOTZFRjcwHhcNMjUwNjE1MDQyMjQ1WhcNMjUwNjIyMDQyMjQ1WjAYMRYwFAYD VQQDEw02ODRlNGE5NS05NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgRuE2OeoDlW7XkoVh5tlm7cj1yhVSynOzAEjvhsIzVJ9nqWzEIdbDx8Orod caqj+MSrg4IK95eQyVOV9Ea7g5IF4CamGk4aL95mBJQWPqnfvgNaXwY1rfkjJWDM WTuviAPT1pCp26sr79Zv2g4Pc8Bc1HyTInNkECOnWOuuCa5IoYTR376qJBcnh2Ov AsqU0e1WQ8cq8qIp6XK7tWh7F82Ia2kTzgfYDUof36eMbAduGeSerFr24ma3wC/Y NeO02mXos0JrLHbhdIrcwjwHOTshEh8DPiqj6v2dgmHBA4QPRpxSzs4lZUY/5nma QZJKbjvOhDegUTLGcMaJPqELnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2VwuLg KINv91TZlLVwssxBRJX1MB8GA1UdIwQYMBaAFMCe31tpXgR5LDUU9Jj0uxRHCW73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEIyQi85QjgyMDZENENG OUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJIa3NOUlQwbVBTN0ZFY0pi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dKN2ZXMmxlQkhrc05SVDBtUFM3RkVjSmJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEIyQi85QjgyMDZENENGOUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJI a3NOUlQwbVBTN0ZFY0pidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCjQvxzTgStTUAA0SuHuFB8YxhWiUaYChxlEGdbqE7ZJirKaPG8Zqx 1WqVDPYtsQjFN4YiyiyD4L7b+rBgME5Jh7hyTrU323CjS8K5SyuIgC+QqkvGCn85 XR8ESNRFeNVHB/sWoy8uGVftxeqtBwWsNDd2GThznXMoqJbMRJHhGNtVmQjtOdWi 8MxXf7tNpjZH0BBKmd4e41smcO4E0GOJHnpdmPq80PvuZVvVT/fn4bevmfvfZRT3 HMqYX+hUD6rULmsrUvMGqucpxMQza6jkVz7/lrlcnscL/FjR7nSoEn4f4NiU3Ikj vI1exfvlqNkdgdyL/+hXqbCCOk8B2FIK -----END CERTIFICATE-----Generated at Tue Jun 17 04:03:12 2025 by rpki-client