$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft File: wQgOZhsN-mIOsJqrLerWA0uCjrw.mft (raw, json) Hash identifier: PFvIFo8Ubqg52VqLFKYSKzr3CqQUknZb6P/S8Rk6uaA= Subject key identifier: EB:81:89:9D:1E:1F:E0:E8:DC:4F:F1:DB:51:CA:94:C8:A2:31:D3:46 Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Certificate serial: 18F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft Manifest number: 18EB Signing time: Fri 20 Jun 2025 16:29:12 +0000 Manifest this update: Fri 20 Jun 2025 16:29:11 +0000 Manifest next update: Fri 27 Jun 2025 16:29:11 +0000 Files and hashes: 1: wQgOZhsN-mIOsJqrLerWA0uCjrw.crl (hash: SoONK0iyXednaHG30jd0VtVZV1ZVRIBYgjnBfe0IQ4g=) 2: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (hash: JsSR5Xyiam1gqDW8LZ3p6vMD1Unh1jWG06vXX1Pt4OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6387 (0x18f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C1, serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Validity Not Before: Jun 20 16:29:11 2025 GMT Not After : Jun 27 16:29:11 2025 GMT Subject: CN=68558c58-d831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:6e:9b:45:80:43:e0:33:ce:07:a2:bf:11: f0:ba:b0:4a:70:3a:31:9b:9d:a9:05:19:08:29:69: 21:d6:d8:9d:ae:ef:e3:ff:f4:50:72:22:ef:a9:9c: 3b:10:29:c7:d2:a5:fd:cd:63:6c:81:6b:5f:f7:f7: 14:30:39:15:79:aa:c2:61:4c:e5:77:0a:6c:8f:92: da:04:5a:db:51:46:a9:8c:8b:3c:bc:ec:46:f5:64: 4d:5e:f2:35:45:90:e9:fb:26:83:77:eb:ec:d1:0c: d6:a0:f0:79:0e:16:d7:ec:4c:68:22:0b:ff:5e:0f: c3:0e:29:0c:93:3d:08:8b:5a:b4:25:93:0d:9d:20: 2f:8c:ab:5a:ac:e1:93:8e:fd:8e:de:5d:fa:1a:61: a1:15:fb:2b:26:43:5c:3d:c8:43:d9:3d:d7:2e:dd: 8e:b8:8e:1e:2e:d7:c1:47:53:0f:f6:f7:42:96:46: 72:71:93:61:cc:68:a3:34:73:d7:ad:b7:bd:55:97: 13:c4:2d:e4:c5:3e:ca:6a:43:2b:f6:82:df:23:f8: 4b:fb:d3:7b:ef:23:b2:2d:1f:32:d4:e3:34:20:e6: 4f:fa:b1:95:c1:82:af:1c:00:b8:48:38:a7:0c:cf: 85:28:af:e3:f2:9d:06:1f:02:5b:f5:33:b8:5a:c5: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:81:89:9D:1E:1F:E0:E8:DC:4F:F1:DB:51:CA:94:C8:A2:31:D3:46 X509v3 Authority Key Identifier: keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3e:21:53:7b:e7:2d:86:26:c9:4b:a7:14:86:cf:e9:8c:f6: fe:27:d0:cb:f1:d1:f6:9a:3d:91:6d:2c:55:0b:a2:34:86:29: 3e:7e:a7:d4:00:37:4e:4d:f9:07:56:f7:c9:fd:5b:44:4a:ba: c9:ad:10:cd:06:e4:72:d6:e9:15:c3:ee:4f:35:e2:81:76:8c: de:19:ec:d3:0e:23:a9:f1:0c:33:03:61:da:2d:c9:7f:8b:d8: ba:75:e3:1b:45:b5:02:6f:a8:56:65:b9:d4:2b:fe:23:fd:cb: 26:9c:4f:e8:46:c7:86:a4:52:0d:e6:9c:1f:5c:30:c6:0f:23: d5:20:7d:b1:27:6e:8a:0a:dc:2a:df:46:91:37:96:57:03:21: 29:c4:4b:75:23:1f:82:9c:f7:92:a6:a8:cd:8c:ee:5d:75:6c: 0f:79:43:ee:12:2e:af:bd:5b:73:57:bb:fc:3e:80:c0:a8:92: 92:1c:31:1d:a8:fc:d2:3a:8f:c7:b1:d4:17:2b:9f:8d:20:12: 62:a9:53:96:b1:0b:1d:d5:61:6c:81:6a:3e:bc:4b:b1:2d:31: f8:7b:cb:d3:c5:c4:30:76:15:5b:7c:e5:2f:8a:35:76:55:6b: 2c:4b:ee:c9:64:54:5f:fe:83:e9:98:c0:f4:3a:f0:28:a1:cb: 38:49:e8:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzExMTAvBgNVBAUTKEMxMDgwRTY2MUIwREZBNjIwRUIwOUFBQjJERUFENjAz NEI4MjhFQkMwHhcNMjUwNjIwMTYyOTExWhcNMjUwNjI3MTYyOTExWjAYMRYwFAYD VQQDEw02ODU1OGM1OC1kODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGFum0WAQ+AzzgeivxHwurBKcDoxm52pBRkIKWkh1tidru/j//RQciLvqZw7 ECnH0qX9zWNsgWtf9/cUMDkVearCYUzldwpsj5LaBFrbUUapjIs8vOxG9WRNXvI1 RZDp+yaDd+vs0QzWoPB5DhbX7ExoIgv/Xg/DDikMkz0Ii1q0JZMNnSAvjKtarOGT jv2O3l36GmGhFfsrJkNcPchD2T3XLt2OuI4eLtfBR1MP9vdClkZycZNhzGijNHPX rbe9VZcTxC3kxT7KakMr9oLfI/hL+9N77yOyLR8y1OM0IOZP+rGVwYKvHAC4SDin DM+FKK/j8p0GHwJb9TO4WsWBjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuBiZ0e H+Do3E/x21HKlMiiMdNGMB8GA1UdIwQYMBaAFMEIDmYbDfpiDrCaqy3q1gNLgo68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMS84MDJDMjQzMjhB N0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1tSU9zSnFyTGVyV0EwdUNq cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dRZ09aaHNOLW1JT3NKcXJMZXJXQTB1Q2pydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMS84MDJDMjQzMjhBN0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1t SU9zSnFyTGVyV0EwdUNqcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARPiFTe+cthibJS6cUhs/pjPb+J9DL8dH2mj2RbSxVC6I0hik+fqfU ADdOTfkHVvfJ/VtESrrJrRDNBuRy1ukVw+5PNeKBdozeGezTDiOp8QwzA2HaLcl/ i9i6deMbRbUCb6hWZbnUK/4j/csmnE/oRseGpFIN5pwfXDDGDyPVIH2xJ26KCtwq 30aRN5ZXAyEpxEt1Ix+CnPeSpqjNjO5ddWwPeUPuEi6vvVtzV7v8PoDAqJKSHDEd qPzSOo/HsdQXK5+NIBJiqVOWsQsd1WFsgWo+vEuxLTH4e8vTxcQwdhVbfOUvijV2 VWssS+7JZFRf/oPpmMD0OvAoocs4SejW -----END CERTIFICATE-----Generated at Fri Jun 20 22:01:48 2025 by rpki-client