$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json) Hash identifier: e7NfIAoblMg0IX2c7gge/YqWd9Fdf907yClLbRjICjQ= Subject key identifier: 74:82:B6:F8:89:CF:3F:60:28:4A:53:1B:8D:6A:F7:19:E4:AC:B7:08 Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft Manifest number: 0861 Signing time: Thu 12 Jun 2025 20:25:31 +0000 Manifest this update: Thu 12 Jun 2025 20:25:30 +0000 Manifest next update: Thu 19 Jun 2025 20:25:30 +0000 Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: ZK/0hKhuuEJlXuOUAmRi874K6wkXegHak39oANcWybM=) 2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 75Xx9HK/DSb6cqMFmlY3w1Yvea4hRHDh6jcfeq7uocg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Validity Not Before: Jun 12 20:25:30 2025 GMT Not After : Jun 19 20:25:30 2025 GMT Subject: CN=684b37ba-775d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:45:da:12:4f:b4:89:c5:f2:90:47:63:c7:29: 93:b7:80:cf:51:02:e6:8a:5d:9f:a0:cf:0c:3c:e9: 03:5f:e7:76:2e:06:2c:a8:46:1b:8b:78:da:60:de: 81:ab:bc:f3:4b:f6:a3:42:dd:1b:30:ab:bf:41:88: 45:d6:a4:8a:a0:bb:70:f2:2e:6e:2a:fc:fa:8d:35: 20:1b:c4:b0:8d:b5:f6:4a:2f:dc:38:35:9d:81:00: 0c:a7:46:7d:99:3a:6a:0d:71:68:9f:b7:57:4d:6e: 34:d2:d7:b7:85:74:7b:2c:63:e1:d1:ed:69:5c:b0: 59:68:64:14:34:33:76:e2:76:0a:e9:58:91:52:58: c4:71:05:99:78:8d:4e:aa:cc:34:a2:a8:2f:74:4b: c8:ea:97:b4:6a:eb:e7:00:eb:6e:a4:c4:c6:06:4f: 11:8c:d9:e3:22:6b:3e:f1:58:85:78:77:ac:78:a7: f6:2d:c1:ee:4f:0f:54:40:d5:9f:e4:e6:b8:95:3e: 88:9d:78:51:1d:22:1f:05:d8:90:25:28:3f:52:bd: e2:59:23:b0:5a:89:00:8f:fc:ae:14:7c:a9:9e:dd: 48:27:ae:1d:f2:ac:60:79:9e:dd:96:46:c4:35:d0: 92:7d:79:38:72:1a:98:93:a4:08:cf:73:94:6a:96: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:82:B6:F8:89:CF:3F:60:28:4A:53:1B:8D:6A:F7:19:E4:AC:B7:08 X509v3 Authority Key Identifier: keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:0c:31:5f:5d:ae:a0:d9:81:ac:d4:7d:de:44:cb:9b:6e:57: 22:04:fe:78:ef:8d:37:df:c5:ab:07:c5:ae:e3:5c:2a:53:e2: d6:fc:9f:90:39:f4:20:55:f5:09:f6:dc:40:d1:1f:98:86:2a: 86:75:63:9c:33:ab:e2:ab:d9:d3:81:9f:54:c5:2e:04:35:c1: a2:1a:de:55:7b:53:a5:e7:f4:82:6d:1f:15:e1:5f:c4:13:76: d1:03:b8:57:2c:21:d7:c3:69:0f:95:14:78:26:2f:bf:e9:9b: 15:68:4a:ae:3f:06:ae:bb:d1:c2:e0:a4:59:a1:37:2a:32:54: 47:8a:e2:42:5f:df:21:c3:9c:35:f4:06:23:32:bc:73:92:86: b2:92:ff:fc:6f:fb:d5:38:6a:38:07:a6:6c:d6:22:ae:38:16: ff:2f:c0:b2:5f:2d:db:79:7d:52:aa:2b:73:a8:c7:94:92:94: 53:94:96:af:a6:a8:ba:d4:f3:b3:45:6b:8c:c0:5f:1e:9d:58: 7b:50:d9:4d:33:68:8b:8b:7c:32:d3:21:45:b4:67:4c:b5:76: 5b:24:da:31:8a:56:22:3f:75:c0:23:84:99:91:31:cf:d8:b6: e9:c3:61:00:bd:7c:97:63:34:1e:f0:ff:5a:e0:a1:8d:7e:ce: e4:ea:1f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF ODE3RTM5QUQwHhcNMjUwNjEyMjAyNTMwWhcNMjUwNjE5MjAyNTMwWjAYMRYwFAYD VQQDEw02ODRiMzdiYS03NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+EXaEk+0icXykEdjxymTt4DPUQLmil2foM8MPOkDX+d2LgYsqEYbi3jaYN6B q7zzS/ajQt0bMKu/QYhF1qSKoLtw8i5uKvz6jTUgG8SwjbX2Si/cODWdgQAMp0Z9 mTpqDXFon7dXTW400te3hXR7LGPh0e1pXLBZaGQUNDN24nYK6ViRUljEcQWZeI1O qsw0oqgvdEvI6pe0auvnAOtupMTGBk8RjNnjIms+8ViFeHeseKf2LcHuTw9UQNWf 5Oa4lT6InXhRHSIfBdiQJSg/Ur3iWSOwWokAj/yuFHypnt1IJ64d8qxgeZ7dlkbE NdCSfXk4chqYk6QIz3OUapbu+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSCtviJ zz9gKEpTG41q9xnkrLcIMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2 RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjE3Ni84OEFCOEU5NEM2RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXRO TmNwUXFUblQyY3ZvRi1PYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4DDFfXa6g2YGs1H3eRMubblciBP54740338WrB8Wu41wqU+LW/J+Q OfQgVfUJ9txA0R+YhiqGdWOcM6viq9nTgZ9UxS4ENcGiGt5Ve1Ol5/SCbR8V4V/E E3bRA7hXLCHXw2kPlRR4Ji+/6ZsVaEquPwauu9HC4KRZoTcqMlRHiuJCX98hw5w1 9AYjMrxzkoaykv/8b/vVOGo4B6Zs1iKuOBb/L8CyXy3beX1SqitzqMeUkpRTlJav pqi61POzRWuMwF8enVh7UNlNM2iLi3wy0yFFtGdMtXZbJNoxilYiP3XAI4SZkTHP 2Lbpw2EAvXyXYzQe8P9a4KGNfs7k6h/J -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:37 2025 by rpki-client