$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: 5ELuODRuwNKm4wzxD55zib+QnhjWi2o9Qa2yc96uDaI= Subject key identifier: 63:9A:76:B1:BF:7B:1F:4E:25:B7:6D:57:7E:9B:88:CD:86:24:BD:D1 Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: A8 Signing time: Thu 19 Jun 2025 05:29:21 +0000 Manifest this update: Thu 19 Jun 2025 05:29:21 +0000 Manifest next update: Thu 26 Jun 2025 05:29:21 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: nqbE044xa7MSDty2vWEowzloNwXtKdukXsywFzwwrf8=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: EOPx00rRZjGS/73Br0xTrWoW0kA4+3+SpewBHZe+BK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Jun 19 05:29:21 2025 GMT Not After : Jun 26 05:29:21 2025 GMT Subject: CN=6853a031-f9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5b:30:e8:c5:bb:4d:dd:c7:ba:6a:c9:24:77: db:09:68:a1:c9:e4:ae:6f:d4:40:ee:64:b6:4c:ed: 46:de:19:7e:3d:14:94:3a:20:5e:a6:28:e9:0d:17: 06:4f:2f:92:5b:12:c1:86:e7:88:8d:88:fd:3a:62: eb:6f:28:9b:35:e6:d1:b3:6d:db:08:e6:5a:28:88: 98:53:9a:20:67:d6:24:05:de:3f:2d:ac:55:85:c7: 78:21:fc:0f:9e:45:76:92:6d:be:d6:4a:90:de:5d: 4e:1e:87:51:be:c8:d4:5c:91:03:4f:53:3e:9a:14: 4e:88:e2:24:ce:31:2e:21:e6:06:ba:b6:99:90:e6: 27:fd:b3:00:5a:45:25:17:17:ea:db:13:81:69:9f: d5:a5:93:7e:1d:51:a7:01:9f:1b:fd:8a:cf:0c:f0: 77:f8:1d:0e:7e:a6:a9:23:9b:8c:be:32:18:6a:93: 36:fb:ee:43:bf:d0:31:99:7a:09:37:7f:06:07:f3: 75:16:d4:7b:4b:c7:9c:b4:73:26:b2:e6:de:9c:88: 36:97:72:f0:8b:f6:43:ac:0b:d8:15:34:31:e1:51: 80:b5:31:4c:f7:07:70:16:35:90:7d:98:cd:90:6c: 36:a5:46:b3:54:1e:88:76:05:6c:dc:03:db:7a:13: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9A:76:B1:BF:7B:1F:4E:25:B7:6D:57:7E:9B:88:CD:86:24:BD:D1 X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b9:bf:ce:ca:37:52:8d:3c:3f:1c:05:9e:9e:ca:81:ad:5e: f0:f9:2f:f6:67:b5:63:5a:8b:0c:ee:55:a7:1c:81:4d:6f:62: e3:b3:0e:9d:bc:7e:41:ee:8a:53:22:49:af:e4:a0:96:19:78: 71:90:04:d2:d8:96:dc:2e:5f:0a:da:ea:97:28:e0:70:1a:12: ee:b5:dc:d2:12:25:43:f6:23:cf:df:a5:0e:ab:75:2a:0e:fe: 5a:a8:c5:e5:dc:b9:66:f5:84:33:eb:cb:8f:a1:d7:d4:9a:9e: 91:85:84:61:70:8a:57:19:09:07:74:10:91:63:5a:ce:ab:09: d4:8d:a6:e5:e2:68:23:60:d5:2d:a0:15:13:b0:fb:d7:c8:15: f1:83:73:8c:0c:da:3c:42:bb:8e:e9:0f:26:39:9f:23:de:6e: c2:c5:86:a6:9d:c8:d5:ee:76:ed:26:ab:34:25:5c:53:e7:e0: 34:7e:98:e7:63:55:4b:a3:70:ce:15:22:bf:8b:da:ca:a3:b8: 97:8c:e7:83:17:70:21:e5:29:08:73:69:c9:e5:5f:60:4f:46: b7:08:6f:aa:38:81:d0:55:e6:10:44:6e:e9:1f:da:83:d1:07: d4:e3:dc:21:42:82:e9:3d:5d:0f:5c:a4:02:af:43:c5:e4:24: 29:93:e1:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjUwNjE5MDUyOTIxWhcNMjUwNjI2MDUyOTIxWjAYMRYwFAYD VQQDEw02ODUzYTAzMS1mOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Vsw6MW7Td3HumrJJHfbCWihyeSub9RA7mS2TO1G3hl+PRSUOiBepijpDRcG Ty+SWxLBhueIjYj9OmLrbyibNebRs23bCOZaKIiYU5ogZ9YkBd4/LaxVhcd4IfwP nkV2km2+1kqQ3l1OHodRvsjUXJEDT1M+mhROiOIkzjEuIeYGuraZkOYn/bMAWkUl Fxfq2xOBaZ/VpZN+HVGnAZ8b/YrPDPB3+B0OfqapI5uMvjIYapM2++5Dv9AxmXoJ N38GB/N1FtR7S8ectHMmsubenIg2l3Lwi/ZDrAvYFTQx4VGAtTFM9wdwFjWQfZjN kGw2pUazVB6IdgVs3APbehMNCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOadrG/ ex9OJbdtV36biM2GJL3RMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqub/OyjdSjTw/HAWensqBrV7w+S/2Z7VjWosM7lWnHIFNb2Ljsw6d vH5B7opTIkmv5KCWGXhxkATS2JbcLl8K2uqXKOBwGhLutdzSEiVD9iPP36UOq3Uq Dv5aqMXl3Llm9YQz68uPodfUmp6RhYRhcIpXGQkHdBCRY1rOqwnUjabl4mgjYNUt oBUTsPvXyBXxg3OMDNo8QruO6Q8mOZ8j3m7CxYamncjV7nbtJqs0JVxT5+A0fpjn Y1VLo3DOFSK/i9rKo7iXjOeDF3Ah5SkIc2nJ5V9gT0a3CG+qOIHQVeYQRG7pH9qD 0QfU49whQoLpPV0PXKQCr0PF5CQpk+ER -----END CERTIFICATE-----Generated at Fri Jun 20 18:40:23 2025 by rpki-client