$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: sylUl592A0fGXWeM5dPScVvGah9pvbfs+9VYmyIsE48= Subject key identifier: 3F:0C:3F:44:9B:C7:13:2A:54:6C:FB:F8:A9:C8:65:AE:35:0D:C3:1E Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 0202 Signing time: Thu 19 Jun 2025 01:54:15 +0000 Manifest this update: Thu 19 Jun 2025 01:54:14 +0000 Manifest next update: Thu 26 Jun 2025 01:54:14 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: UsUAMOxjT50AL9jWE2QycoAGOri2Xc3K5rw3Bmracd4=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MniMCaT7GS5dM8liFRmMS+V0grGgkVjsR8fvxiwRJoU=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: yFTXv2eFumW58i8EpayoiAuuDpkxivQ9zhERap37PtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Jun 19 01:54:14 2025 GMT Not After : Jun 26 01:54:14 2025 GMT Subject: CN=68536dc7-13cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:8a:ed:d0:50:79:7a:a5:b1:5e:aa:9d:33: 6f:c3:b0:25:cd:db:f9:b9:43:1a:65:3d:34:3a:67: ba:86:ea:ea:53:c5:36:68:d0:a4:ea:ef:02:b8:c6: cc:f0:11:e3:03:0e:46:af:2b:94:23:9d:b9:b7:20: c7:ac:44:56:00:1b:08:97:5e:13:d4:aa:df:6c:e9: d6:a7:be:30:9b:c1:4f:e8:6c:84:8a:59:72:8a:b6: 18:e1:97:52:9d:96:93:d3:d0:a0:98:54:21:8e:7f: 1c:0b:d6:83:c7:c3:a8:13:2c:48:32:d9:87:d7:b7: 85:4b:47:90:9f:87:9d:d5:b8:61:7b:2b:79:8c:6c: ac:ed:58:1f:ab:0f:98:e0:06:32:ec:97:5e:fb:58: 82:64:70:c6:38:1e:09:15:53:36:d0:1d:66:a7:65: 2b:74:e3:c9:37:8c:b9:5a:44:32:08:3a:8a:dd:13: 23:d4:95:01:ec:f1:56:34:9c:4d:e6:d6:d4:34:b9: f0:b2:ec:87:73:7b:e1:0e:a2:63:c7:85:aa:62:99: b4:62:6c:f6:bb:d8:88:62:9e:81:db:5c:39:b0:6d: cd:4a:b5:da:4b:1d:ba:c0:83:ca:5a:ef:1a:32:70: 53:65:c2:b4:dc:26:1d:ba:e4:43:b5:a5:e5:70:01: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0C:3F:44:9B:C7:13:2A:54:6C:FB:F8:A9:C8:65:AE:35:0D:C3:1E X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:28:12:94:c2:b0:25:3c:6f:3b:e5:c1:e4:e1:34:c4:81:6d: 8e:0b:f9:5b:9d:f3:aa:1d:7f:3a:87:ea:4c:ab:09:6c:d5:fb: 7c:aa:1c:b3:5e:88:bc:df:c2:a5:76:eb:81:3b:b9:c8:71:92: 47:69:0d:04:c2:ce:de:18:35:e2:8e:2b:57:38:5a:76:75:7c: 89:7f:20:ce:64:f8:f4:b7:92:00:e4:5b:2b:33:4c:a8:e0:16: e8:ff:89:84:4e:be:7e:f7:53:f3:4f:7b:5f:d0:73:ee:47:84: d9:bb:45:c3:a7:2c:d2:da:fe:81:43:a9:18:ff:0b:14:95:fb: 10:9b:69:2a:a5:50:08:5c:5b:e4:cb:d7:08:be:52:4f:b9:25: 4d:50:07:42:ee:b8:91:bf:b0:58:b8:d1:21:0d:18:c9:7d:d2: e2:2d:89:13:62:56:13:00:24:8a:a8:61:2a:fa:dc:b3:65:ba: 28:7c:ac:51:8b:33:5d:28:1d:9d:a2:3e:d4:d4:76:51:97:0a: 22:d0:de:a3:78:ac:3b:65:1c:a0:db:37:d3:c9:f1:df:26:b6: 63:3b:79:62:1a:fc:cf:56:f4:58:0b:7d:f1:b7:af:46:bc:4f: 08:3f:b6:df:25:76:e0:75:68:1e:9a:fb:08:30:48:62:63:6b: e6:cc:68:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUwNjE5MDE1NDE0WhcNMjUwNjI2MDE1NDE0WjAYMRYwFAYD VQQDEw02ODUzNmRjNy0xM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWyK7dBQeXqlsV6qnTNvw7Alzdv5uUMaZT00Ome6hurqU8U2aNCk6u8CuMbM 8BHjAw5GryuUI525tyDHrERWABsIl14T1KrfbOnWp74wm8FP6GyEillyirYY4ZdS nZaT09CgmFQhjn8cC9aDx8OoEyxIMtmH17eFS0eQn4ed1bhheyt5jGys7Vgfqw+Y 4AYy7Jde+1iCZHDGOB4JFVM20B1mp2UrdOPJN4y5WkQyCDqK3RMj1JUB7PFWNJxN 5tbUNLnwsuyHc3vhDqJjx4WqYpm0Ymz2u9iIYp6B21w5sG3NSrXaSx26wIPKWu8a MnBTZcK03CYduuRDtaXlcAGOvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8MP0Sb xxMqVGz7+KnIZa41DcMeMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARKBKUwrAlPG875cHk4TTEgW2OC/lbnfOqHX86h+pMqwls1ft8qhyz Xoi838KlduuBO7nIcZJHaQ0Ews7eGDXijitXOFp2dXyJfyDOZPj0t5IA5FsrM0yo 4Bbo/4mETr5+91PzT3tf0HPuR4TZu0XDpyzS2v6BQ6kY/wsUlfsQm2kqpVAIXFvk y9cIvlJPuSVNUAdC7riRv7BYuNEhDRjJfdLiLYkTYlYTACSKqGEq+tyzZboofKxR izNdKB2doj7U1HZRlwoi0N6jeKw7ZRyg2zfTyfHfJrZjO3liGvzPVvRYC33xt69G vE8IP7bfJXbgdWgemvsIMEhiY2vmzGje -----END CERTIFICATE-----Generated at Fri Jun 20 09:31:01 2025 by rpki-client