$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: WiosL2k4bbln++rqZJj/HBtmOXe/6qlQIG9pVCU4Elg= Subject key identifier: 25:D7:1A:4B:06:C0:F4:6E:01:3B:8F:CA:79:E0:A0:98:5D:4B:76:31 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 0938 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 091A Signing time: Mon 16 Jun 2025 20:06:49 +0000 Manifest this update: Mon 16 Jun 2025 20:06:48 +0000 Manifest next update: Mon 23 Jun 2025 20:06:48 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: uV2exB7sj5/lC6hnNUSuWkMmL1WRpQHutzp98LwkmCA=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: gOCw5zLl7y7h+UWFzAOSwX3oI4JmJwwAJxjqn+jEKuo=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: NQ+08YGOdEaF/ITWmOcqyCWrC35sSFn/SumNIjZOhls=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: mVbCZmxbw75/wJuw2lQw2e9EqjrrEqzYVc8QSZMYsH8=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: c5z4KkXkym8vqTv49IzGrRHtzbiepV0IBMzX8Mue6BQ=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: ya3/+CFVUd26DRczFvF0+d7fGBWWa9IkA5jh/NTOjQU=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: qBySD0Ql5ISyNIpBRQOOsUE/7hyokJQg1egqkA93Wgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2360 (0x938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Jun 16 20:06:48 2025 GMT Not After : Jun 23 20:06:48 2025 GMT Subject: CN=68507958-894c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:ad:99:f3:75:23:ce:72:09:e7:bc:58:f3: f5:6a:f8:a7:94:62:1f:77:db:ae:89:ed:9c:66:99: 37:e9:06:77:e9:bc:2a:4b:92:de:8b:06:ad:3c:16: cc:d8:11:ef:8a:76:18:99:2d:9c:3c:58:0b:73:37: 84:02:88:90:86:a5:77:d9:95:c2:82:a6:2e:f8:bb: d2:8e:27:fa:84:c0:d9:bf:4d:11:f5:18:79:8e:a2: 72:c2:b1:35:b9:95:71:61:d7:c3:50:51:17:e1:e1: 81:d6:0b:07:d7:c3:ae:8e:07:bb:e4:59:d5:31:81: 6a:b9:14:3d:7e:fb:22:dd:26:12:8e:f5:98:26:d2: 38:c3:a0:76:3d:86:06:b0:8a:47:b4:da:6d:6e:a2: d6:ec:9e:44:dc:bb:4a:16:a5:75:94:b8:a6:31:a5: 85:e3:59:92:c6:ac:90:13:3b:77:bf:20:a1:c3:b0: 5c:07:91:7c:b7:45:4c:48:2a:39:0b:40:e2:2e:36: d7:01:90:8b:ea:90:46:9e:af:cc:8d:6c:01:59:77: ec:1b:d9:2c:de:89:f7:b6:f6:48:f4:d7:15:e6:6c: 39:11:ac:36:03:1c:70:d7:15:6a:7d:73:90:d2:18: 3e:62:a0:fb:2e:b8:5f:95:c7:f0:34:6e:f1:b6:9d: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D7:1A:4B:06:C0:F4:6E:01:3B:8F:CA:79:E0:A0:98:5D:4B:76:31 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ed:cc:8c:29:ae:a9:04:ca:ec:d4:57:11:ed:83:76:a1:6f: 6e:da:d0:86:d6:56:41:67:76:16:4d:f8:a8:b6:b3:2f:5d:c6: 95:60:95:5d:c4:22:72:a2:31:6b:c4:3d:9a:d4:b9:dd:05:24: 15:4a:9f:7e:69:a9:c9:27:8d:bc:db:27:8f:e7:53:58:ad:65: 7d:a6:98:a8:0f:68:69:64:b0:3a:62:25:08:77:fd:ba:91:b4: 1c:4d:19:d3:3f:9d:dd:c8:07:cb:80:c9:3c:d4:2b:4b:51:9d: 9f:fe:8d:92:22:9c:84:fb:72:e7:52:e6:7e:91:7e:1e:aa:b5: 91:96:d1:bd:6f:dc:39:6a:c8:70:ac:8f:22:a8:5f:a8:6d:a3: 97:f4:8d:96:d2:a5:78:1c:46:ce:ed:93:e8:2c:06:8b:5d:09: 8d:d3:39:fb:56:e4:41:5d:35:67:2b:3c:68:26:5c:4a:4a:eb: 16:5b:f4:89:30:3a:01:15:92:a9:91:b1:35:01:a3:9b:78:c2: 06:92:24:4c:83:d3:ae:4b:8d:6b:80:62:50:d8:b5:10:a1:53: 76:b2:c6:df:66:4b:d1:bd:55:f8:09:15:74:0e:f5:03:ea:d1: dc:2d:f8:76:1d:f6:78:55:99:b5:59:04:57:02:ca:65:9b:d5: ba:db:dc:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUwNjE2MjAwNjQ4WhcNMjUwNjIzMjAwNjQ4WjAYMRYwFAYD VQQDEw02ODUwNzk1OC04OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybStmfN1I85yCee8WPP1avinlGIfd9uuie2cZpk36QZ36bwqS5LeiwatPBbM 2BHvinYYmS2cPFgLczeEAoiQhqV32ZXCgqYu+LvSjif6hMDZv00R9Rh5jqJywrE1 uZVxYdfDUFEX4eGB1gsH18Oujge75FnVMYFquRQ9fvsi3SYSjvWYJtI4w6B2PYYG sIpHtNptbqLW7J5E3LtKFqV1lLimMaWF41mSxqyQEzt3vyChw7BcB5F8t0VMSCo5 C0DiLjbXAZCL6pBGnq/MjWwBWXfsG9ks3on3tvZI9NcV5mw5Eaw2Axxw1xVqfXOQ 0hg+YqD7LrhflcfwNG7xtp1GBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXXGksG wPRuATuPynngoJhdS3YxMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB27cyMKa6pBMrs1FcR7YN2oW9u2tCG1lZBZ3YWTfiotrMvXcaVYJVd xCJyojFrxD2a1LndBSQVSp9+aanJJ4282yeP51NYrWV9ppioD2hpZLA6YiUId/26 kbQcTRnTP53dyAfLgMk81CtLUZ2f/o2SIpyE+3LnUuZ+kX4eqrWRltG9b9w5ashw rI8iqF+obaOX9I2W0qV4HEbO7ZPoLAaLXQmN0zn7VuRBXTVnKzxoJlxKSusWW/SJ MDoBFZKpkbE1AaObeMIGkiRMg9OuS41rgGJQ2LUQoVN2ssbfZkvRvVX4CRV0DvUD 6tHcLfh2HfZ4VZm1WQRXAsplm9W629zy -----END CERTIFICATE-----Generated at Wed Jun 18 13:23:15 2025 by rpki-client