$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json) Hash identifier: SoAeC6NnzX9Qiqc02Bz7T3t4ScpdKIEF38q1B4fWzrw= Subject key identifier: 9F:04:5A:69:FA:56:76:B2:7E:F8:D8:BC:F2:8A:6D:9F:18:7B:6C:18 Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft Manifest number: 0578 Signing time: Sat 14 Jun 2025 23:03:11 +0000 Manifest this update: Sat 14 Jun 2025 23:03:11 +0000 Manifest next update: Sat 21 Jun 2025 23:03:11 +0000 Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: 6pKni90ITMTVN/Lhm+dF0DT7/vHHprbeuB9WxrR8yso=) 2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: w5XSagCBbj7wYrqd/6P5FJGCYb7FRwj35SS+I3gJcAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Validity Not Before: Jun 14 23:03:11 2025 GMT Not After : Jun 21 23:03:11 2025 GMT Subject: CN=684dffaf-0271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:d3:ec:7e:e6:fa:ef:c7:9c:4e:5c:0e:4e: 0c:4f:61:59:06:b6:1f:47:4a:4e:09:ae:e7:b3:96: cc:89:66:b2:f8:e3:ed:36:cd:7f:ef:d1:bb:de:66: 09:3b:74:18:84:ca:bf:41:7e:c7:26:8a:4b:db:c5: 90:3c:7a:da:a9:f0:5c:0d:8c:cd:ae:55:2e:58:4e: 71:2f:06:f0:e3:1d:ae:dd:8b:bc:0d:1f:10:4c:39: 54:f5:06:ff:bd:98:36:3b:b5:90:d9:09:7d:9f:24: a3:c3:e9:30:fb:a1:b3:e9:4b:e7:68:0b:ce:78:52: fa:88:7c:41:27:40:0a:2c:d4:a8:0c:5e:a0:0e:c5: 4e:20:22:b7:79:27:f5:9a:14:e3:f9:32:8b:00:a1: aa:8a:de:e1:8d:a9:00:16:5d:b3:e6:2e:50:82:59: 73:5b:d6:0a:02:e6:ee:b0:2f:d6:31:0d:d0:61:32: ba:82:28:ba:80:43:d5:89:9b:d6:bc:54:f2:a5:4d: 89:54:81:67:bb:5b:dd:8b:05:49:13:49:34:f7:d9: 1c:d6:c2:ab:06:ec:c2:35:53:1d:dd:7c:06:bb:31: 44:d0:a8:27:ce:59:e8:cf:cd:0b:e9:d4:b9:91:9a: db:a0:4d:41:39:5e:48:9c:97:4d:24:ca:06:00:40: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:04:5A:69:FA:56:76:B2:7E:F8:D8:BC:F2:8A:6D:9F:18:7B:6C:18 X509v3 Authority Key Identifier: keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9b:09:3b:45:7f:5d:bd:a6:44:fd:7f:25:ad:8d:e6:d4:f3: cb:cc:96:51:62:22:a6:97:8d:2a:eb:91:25:a5:68:11:a9:a5: af:75:48:76:23:e3:e7:80:f5:1c:dc:e9:7f:ae:eb:17:3e:b8: 93:bb:57:6d:2d:6a:d2:44:eb:99:d4:69:fe:a8:20:1b:0c:b3: 9b:d5:f1:5a:c4:51:3f:5d:be:60:5a:be:c1:1f:67:7d:75:cd: 7b:b6:77:59:c8:56:31:3e:ee:05:20:99:7a:3d:12:00:fc:48: ab:85:27:71:43:51:d4:73:d3:d6:81:3f:59:b0:c3:5e:ac:4b: 08:ff:c3:6e:d4:32:49:e4:6c:a4:bc:89:8f:c9:d5:f6:23:9d: f3:61:f6:15:e8:c6:e6:1f:2b:91:54:b6:20:ae:50:c2:45:f3: 95:3b:fe:6b:58:26:cf:20:a5:3f:3d:e6:ab:ee:3e:06:3b:9b: 24:61:c5:04:0f:57:e5:fa:7b:a6:bd:a1:13:6b:70:e6:15:e8: 92:5f:86:02:64:c4:77:da:73:2e:7c:b9:52:3d:fc:23:cb:74: 4f:7a:30:e3:f0:8f:6b:46:ec:f4:08:ff:2c:53:d0:5e:de:e1: 96:22:34:91:9f:fb:3b:43:0d:58:9a:f9:c5:8c:fe:86:98:f8: 98:54:9e:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy Njc3NzNGQzkwHhcNMjUwNjE0MjMwMzExWhcNMjUwNjIxMjMwMzExWjAYMRYwFAYD VQQDEw02ODRkZmZhZi0wMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SfT7H7m+u/HnE5cDk4MT2FZBrYfR0pOCa7ns5bMiWay+OPtNs1/79G73mYJ O3QYhMq/QX7HJopL28WQPHraqfBcDYzNrlUuWE5xLwbw4x2u3Yu8DR8QTDlU9Qb/ vZg2O7WQ2Ql9nySjw+kw+6Gz6UvnaAvOeFL6iHxBJ0AKLNSoDF6gDsVOICK3eSf1 mhTj+TKLAKGqit7hjakAFl2z5i5QgllzW9YKAubusC/WMQ3QYTK6gii6gEPViZvW vFTypU2JVIFnu1vdiwVJE0k099kc1sKrBuzCNVMd3XwGuzFE0Kgnzlnoz80L6dS5 kZrboE1BOV5InJdNJMoGAEDqgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8EWmn6 VnayfvjYvPKKbZ8Ye2wYMB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqmwk7RX9dvaZE/X8lrY3m1PPLzJZRYiKml40q65ElpWgRqaWvdUh2 I+PngPUc3Ol/rusXPriTu1dtLWrSROuZ1Gn+qCAbDLOb1fFaxFE/Xb5gWr7BH2d9 dc17tndZyFYxPu4FIJl6PRIA/EirhSdxQ1HUc9PWgT9ZsMNerEsI/8Nu1DJJ5Gyk vImPydX2I53zYfYV6MbmHyuRVLYgrlDCRfOVO/5rWCbPIKU/Pear7j4GO5skYcUE D1fl+numvaETa3DmFeiSX4YCZMR32nMufLlSPfwjy3RPejDj8I9rRuz0CP8sU9Be 3uGWIjSRn/s7Qw1YmvnFjP6GmPiYVJ60 -----END CERTIFICATE-----Generated at Sun Jun 15 09:44:08 2025 by rpki-client