$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json) Hash identifier: Nn+lYY2BnU9mA9wPrir8ybYPx3FrZDkZm2KAr8EV+ZY= Subject key identifier: E8:FB:C2:AF:37:42:85:A7:E2:59:2D:19:A4:B5:AA:D2:2B:F5:9F:4A Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Certificate serial: 1C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft Manifest number: 1C5C Signing time: Sat 14 Jun 2025 16:08:54 +0000 Manifest this update: Sat 14 Jun 2025 16:08:54 +0000 Manifest next update: Sat 21 Jun 2025 16:08:54 +0000 Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: tAtGMwPB7meJB3MRjdCjMOqpWMZ7Z3PI7LiuSHvP8m4=) 2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7274 (0x1c6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Validity Not Before: Jun 14 16:08:54 2025 GMT Not After : Jun 21 16:08:54 2025 GMT Subject: CN=684d9e96-a5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:19:6b:07:16:2e:5e:90:1a:3b:82:c9:5e: 87:f2:d9:10:87:ae:07:7d:69:2e:9c:4e:98:74:04: eb:bf:52:ac:9e:c6:0b:91:23:a2:74:18:ff:0a:d3: 6d:25:cf:d0:ab:5e:f7:ae:e3:60:b7:46:e9:3f:c2: 65:10:a9:8d:61:14:4b:46:1e:57:a6:ee:3b:7a:fc: 8a:64:74:24:c8:e8:f2:14:4f:8d:fe:da:7e:2c:32: 7b:92:86:ee:e3:31:ae:4b:2e:b7:49:7d:94:38:ed: 1b:88:48:70:0d:0d:6c:a3:97:a9:f4:36:63:af:02: fe:76:83:b5:b8:02:10:bb:17:c7:ac:24:15:ca:75: fc:a1:c6:33:0e:75:73:20:66:a3:17:93:ca:23:f8: 35:44:32:d7:19:37:87:56:de:bd:4f:6c:c4:e6:39: f8:50:84:56:a8:2d:89:cb:7b:de:66:76:de:bb:db: 4a:8e:dd:92:b4:96:0d:1a:3b:20:e3:4c:8c:a2:de: 37:3d:6c:57:ff:f8:7e:b1:d8:1d:36:9f:1a:83:ff: c6:68:94:c8:0d:ee:bd:5e:ca:69:00:27:f7:3f:1c: 60:36:98:39:1c:8d:52:9c:2a:fb:7b:64:6e:23:5d: 56:d8:14:9d:8f:d9:c1:fd:c6:4a:12:e2:81:6c:c4: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FB:C2:AF:37:42:85:A7:E2:59:2D:19:A4:B5:AA:D2:2B:F5:9F:4A X509v3 Authority Key Identifier: keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:6b:db:a2:7b:a3:8b:12:f2:e3:b6:16:b4:9b:cf:37:ba:5a: a6:1b:ad:b2:1d:ee:52:26:c5:31:10:20:f0:66:65:47:ee:b3: f6:60:55:77:0f:a1:f0:b8:d6:73:b3:79:b3:04:27:3d:b1:19: 46:fe:66:d0:85:3c:0c:f4:dc:0a:3c:7f:36:b6:cb:35:51:4b: 6f:f1:e5:67:6d:76:94:b4:cb:97:8d:e4:32:83:e7:81:08:92: f9:60:73:3f:61:c5:fc:ce:1e:80:3c:73:f4:b4:c5:8a:19:f1: 16:14:99:25:ec:51:52:00:76:79:4b:32:de:ba:54:35:69:2d: c3:c7:eb:b3:57:21:8e:31:2f:d5:59:e7:f9:9f:e0:92:bf:08: 70:4c:1d:a5:3a:0b:b5:83:2e:5e:1e:44:d5:2c:7b:24:e5:e9: 03:22:a0:8f:3b:6f:d6:ab:f4:7f:0e:60:89:e4:af:c1:27:3c: ab:74:bf:29:8c:d4:fe:80:b0:95:17:81:0d:73:cf:05:6f:63: 7a:a0:f8:b5:2b:52:ab:fc:8d:22:2f:4f:6b:97:0d:db:25:c9: eb:e6:0a:56:2d:f8:d2:b7:b5:45:f3:09:02:28:b7:21:ba:f5: 72:4c:62:8b:5f:e8:29:fd:30:80:3a:a3:84:ef:5d:6c:54:f4: 26:a3:5c:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5 OEE1MDc1NEMwHhcNMjUwNjE0MTYwODU0WhcNMjUwNjIxMTYwODU0WjAYMRYwFAYD VQQDEw02ODRkOWU5Ni1hNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hIZawcWLl6QGjuCyV6H8tkQh64HfWkunE6YdATrv1KsnsYLkSOidBj/CtNt Jc/Qq173ruNgt0bpP8JlEKmNYRRLRh5Xpu47evyKZHQkyOjyFE+N/tp+LDJ7kobu 4zGuSy63SX2UOO0biEhwDQ1so5ep9DZjrwL+doO1uAIQuxfHrCQVynX8ocYzDnVz IGajF5PKI/g1RDLXGTeHVt69T2zE5jn4UIRWqC2Jy3veZnbeu9tKjt2StJYNGjsg 40yMot43PWxX//h+sdgdNp8ag//GaJTIDe69XsppACf3PxxgNpg5HI1SnCr7e2Ru I11W2BSdj9nB/cZKEuKBbMQGUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOj7wq83 QoWn4lktGaS1qtIr9Z9KMB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcyOS9BN0ExQTI5QURGMTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQ elM5c2dJcFZGblNZcFFkVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5a9uie6OLEvLjtha0m883ulqmG62yHe5SJsUxECDwZmVH7rP2YFV3 D6HwuNZzs3mzBCc9sRlG/mbQhTwM9NwKPH82tss1UUtv8eVnbXaUtMuXjeQyg+eB CJL5YHM/YcX8zh6APHP0tMWKGfEWFJkl7FFSAHZ5SzLeulQ1aS3Dx+uzVyGOMS/V Wef5n+CSvwhwTB2lOgu1gy5eHkTVLHsk5ekDIqCPO2/Wq/R/DmCJ5K/BJzyrdL8p jNT+gLCVF4ENc88Fb2N6oPi1K1Kr/I0iL09rlw3bJcnr5gpWLfjSt7VF8wkCKLch uvVyTGKLX+gp/TCAOqOE711sVPQmo1zd -----END CERTIFICATE-----Generated at Sat Jun 14 19:08:47 2025 by rpki-client