$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft File: Wnot3qYsiQ6QHx3NQEb814zAtBw.mft (raw, json) Hash identifier: Qly989YS7QC7cdNbqftWpthQxxvXbwgnplYFJBaxK20= Subject key identifier: B1:D5:D9:5A:90:A4:B3:51:97:40:1B:E0:65:68:84:A7:AD:E9:3E:CF Authority key identifier: 5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C Certificate issuer: /CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft Manifest number: 0698 Signing time: Mon 16 Jun 2025 21:54:17 +0000 Manifest this update: Mon 16 Jun 2025 21:54:17 +0000 Manifest next update: Mon 23 Jun 2025 21:54:17 +0000 Files and hashes: 1: Wnot3qYsiQ6QHx3NQEb814zAtBw.crl (hash: ZXr0NQY7gEGodfQioKjpTsqyKSBddVWG7zuzwDjEjKI=) 2: 7C7FDC646FF711EBA7506161C4F9AE02.roa (hash: +n5J+qx7tpV2H+mHVC6O7TSh7QMWtrt2mfYoCJ9j4Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89AF, serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C Validity Not Before: Jun 16 21:54:17 2025 GMT Not After : Jun 23 21:54:17 2025 GMT Subject: CN=68509289-ccd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:89:aa:c2:35:24:a2:c1:4d:a6:98:2b:14:69: ff:4f:d8:e4:f7:d5:49:20:e0:7d:3d:ad:60:2e:1e: a5:4e:06:92:6b:af:5e:9f:a0:f1:ac:b9:ae:77:a8: d3:b1:fb:0e:7c:8a:72:26:33:dd:17:3a:28:0d:ec: 9c:e1:2f:7b:a2:8f:e7:db:14:ce:ab:f3:92:ba:8f: 82:f4:01:fc:06:38:d6:09:66:d2:bf:91:5c:5e:7f: 6f:b8:73:0f:8f:ac:88:c9:cd:24:dd:c2:37:eb:34: 7a:a5:e4:c9:bb:86:5c:9c:3e:0c:e4:76:2b:31:f9: 43:ea:4c:21:de:26:22:c4:de:d5:17:7e:87:20:30: 42:f0:62:1b:11:ba:d6:7e:d7:5c:07:89:78:46:3d: e6:98:6b:0b:1e:5a:59:73:1e:39:63:7a:85:d3:34: d9:6c:f7:20:cf:42:27:67:dd:61:f0:5e:33:a0:20: e0:cb:06:0e:56:84:66:30:b9:79:6a:06:f2:e2:4b: cb:82:b6:e2:31:1c:57:50:88:14:be:6b:34:a4:67: 3c:29:83:d1:9a:4f:f5:6d:57:07:ef:c4:80:f1:c9: 86:32:dc:a7:66:4c:80:59:e9:2e:45:dd:e4:bb:9c: 91:28:d6:f5:54:71:34:9c:57:58:6c:59:18:c4:38: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D5:D9:5A:90:A4:B3:51:97:40:1B:E0:65:68:84:A7:AD:E9:3E:CF X509v3 Authority Key Identifier: keyid:5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1d:af:64:71:70:47:46:71:14:c9:43:62:25:ec:4c:43:27: af:8d:a8:ae:25:05:86:f4:d9:0c:e1:2e:c9:ee:72:84:0f:eb: 6c:40:8f:ab:3b:b9:bf:e8:77:19:fa:19:cb:88:ad:d1:07:55: 68:6e:9f:e3:2d:95:59:61:a3:8d:6a:c7:b2:9f:6a:ad:40:50: a8:86:1a:17:d4:52:85:b9:f0:00:00:41:18:16:16:86:d2:a1: c2:f4:0d:f2:5b:f7:e2:9d:d9:4c:b8:23:0e:9f:2a:ea:c7:56: f7:62:fa:07:33:44:99:40:44:6c:83:e9:5b:2b:5b:a8:f6:b6: 19:6c:b6:2a:b4:59:7e:db:2e:06:15:c6:91:06:02:56:2d:02: d4:b6:fa:12:d6:b0:56:7f:20:a0:92:9f:c6:3b:ff:fe:51:ca: 1f:b5:35:4b:f7:0e:28:8c:60:2e:ae:8c:4f:e2:0a:4c:ed:fd: 12:eb:30:06:12:f7:0b:b4:ca:44:42:27:21:24:98:d7:c4:db: 32:6f:80:06:10:07:3e:60:1b:f3:fe:43:c5:72:f4:22:b2:0f: 0b:fc:6d:c5:40:31:06:b9:14:58:06:c7:b7:e0:b2:72:72:f1: e4:0a:43:d9:4b:be:ce:3b:00:55:34:b6:b4:19:91:b6:f2:c7: 19:ea:f6:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5QUYxMTAvBgNVBAUTKDVBN0EyRERFQTYyQzg5MEU5MDFGMURDRDQwNDZGQ0Q3 OENDMEI0MUMwHhcNMjUwNjE2MjE1NDE3WhcNMjUwNjIzMjE1NDE3WjAYMRYwFAYD VQQDEw02ODUwOTI4OS1jY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14mqwjUkosFNppgrFGn/T9jk99VJIOB9Pa1gLh6lTgaSa69en6DxrLmud6jT sfsOfIpyJjPdFzooDeyc4S97oo/n2xTOq/OSuo+C9AH8BjjWCWbSv5FcXn9vuHMP j6yIyc0k3cI36zR6peTJu4ZcnD4M5HYrMflD6kwh3iYixN7VF36HIDBC8GIbEbrW ftdcB4l4Rj3mmGsLHlpZcx45Y3qF0zTZbPcgz0InZ91h8F4zoCDgywYOVoRmMLl5 agby4kvLgrbiMRxXUIgUvms0pGc8KYPRmk/1bVcH78SA8cmGMtynZkyAWekuRd3k u5yRKNb1VHE0nFdYbFkYxDijLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHV2VqQ pLNRl0Ab4GVohKet6T7PMB8GA1UdIwQYMBaAFFp6Ld6mLIkOkB8dzUBG/NeMwLQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlBRi8xODYwQ0ExQTZG RjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lRNlFIeDNOUUViODE0ekF0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dub3QzcVlzaVE2UUh4M05RRWI4MTR6QXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlBRi8xODYwQ0ExQTZGRjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lR NlFIeDNOUUViODE0ekF0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLHa9kcXBHRnEUyUNiJexMQyevjaiuJQWG9NkM4S7J7nKED+tsQI+r O7m/6HcZ+hnLiK3RB1Vobp/jLZVZYaONaseyn2qtQFCohhoX1FKFufAAAEEYFhaG 0qHC9A3yW/findlMuCMOnyrqx1b3YvoHM0SZQERsg+lbK1uo9rYZbLYqtFl+2y4G FcaRBgJWLQLUtvoS1rBWfyCgkp/GO//+UcoftTVL9w4ojGAuroxP4gpM7f0S6zAG EvcLtMpEQichJJjXxNsyb4AGEAc+YBvz/kPFcvQisg8L/G3FQDEGuRRYBse34LJy cvHkCkPZS77OOwBVNLa0GZG28scZ6vaM -----END CERTIFICATE-----Generated at Tue Jun 17 01:30:01 2025 by rpki-client