$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: HADYdb0A2PqP0xofBxgGR/BY3fEb1uS+o5G3GPkUxwE= Subject key identifier: 4E:48:CC:E4:CA:BB:A5:35:F3:23:1D:E8:00:08:DE:6B:4F:78:EF:67 Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 05B8 Signing time: Sat 14 Jun 2025 22:51:12 +0000 Manifest this update: Sat 14 Jun 2025 22:51:12 +0000 Manifest next update: Sat 21 Jun 2025 22:51:12 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: KIMVsmtr3SzLW90pKkGEzsf8/3jn48IZZ4gIk8QQ+ec=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: bmMn0IWRpy37XK6k+WXVEF+nIujAMD8B3cc9TjWsaYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Jun 14 22:51:12 2025 GMT Not After : Jun 21 22:51:12 2025 GMT Subject: CN=684dfce0-8715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a4:ab:2b:7d:b2:a1:0c:c4:c3:83:07:15:1e: d9:d2:3b:d9:5c:2b:7f:4e:44:50:5e:3e:ef:be:87: fb:68:4c:a0:74:31:b7:0b:02:a8:e8:17:a8:4a:d3: c3:12:e5:3f:27:8d:c6:e5:8f:b6:86:ab:a3:d2:1a: f2:db:8a:49:19:f5:27:ac:c5:a5:a1:f8:02:79:75: 8d:cd:84:54:dd:55:7c:62:49:13:42:77:4d:c2:d9: 4f:79:93:96:4c:a8:c5:60:4a:08:14:70:ef:ec:17: 24:b2:d7:10:05:73:64:46:73:88:c3:a1:75:9c:ee: b6:bd:f5:6d:79:ad:ff:48:95:bb:69:ba:a6:fd:31: ea:e1:af:30:e6:6f:89:ce:9b:69:36:15:d4:0d:f0: 06:cf:be:15:4a:29:7d:1d:8d:38:1e:52:f8:50:28: c1:34:92:03:93:2b:1b:ab:5b:0e:f4:31:f8:db:90: 26:0a:af:87:4b:4d:49:6c:9b:a0:fb:9e:af:3b:87: 37:ac:01:55:e7:3f:61:8b:a9:40:b0:b1:d1:fc:e5: f3:6c:b3:e3:2b:22:1a:c9:0a:cf:e1:6e:20:4d:72: a3:3d:db:4e:96:d3:6b:e9:ca:d8:90:c2:f6:48:ae: 8c:4c:a1:68:3f:da:2b:eb:db:ce:5e:a8:e7:55:2a: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:CC:E4:CA:BB:A5:35:F3:23:1D:E8:00:08:DE:6B:4F:78:EF:67 X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:31:d7:6c:9e:f3:20:f3:53:f7:57:92:ba:3e:7c:cc:02:3a: 8e:91:2b:74:0b:8a:fc:12:ee:c5:f0:e2:8a:b7:3c:96:e1:3e: ec:30:31:da:09:31:2f:ad:24:b4:c4:30:f0:8f:9d:58:84:a8: d3:71:4d:93:7a:91:09:29:bf:ff:81:3e:8c:da:00:24:88:70: 73:68:ea:74:35:7f:03:69:58:c0:b6:b3:b6:2d:90:41:3b:5e: 41:86:6a:fd:0a:3e:2a:12:ef:d4:55:9f:fd:fb:8b:f3:6c:c6: dc:a1:d0:6e:cd:a1:d4:42:c3:65:0c:3f:b7:1a:06:76:97:d6: e8:ee:84:2c:17:81:a1:a5:60:5b:32:bd:4c:9c:a5:97:27:05: 80:ae:3d:87:c0:b7:48:1b:95:4f:e1:5d:f3:b8:ae:25:21:ce: 3f:41:a0:58:f9:f6:a1:b4:b3:2a:4a:ea:0a:2b:1f:ca:8f:ba: 72:bc:d6:96:fa:11:0d:21:d5:85:6e:c1:08:51:94:7c:61:cf: bb:9c:b5:8b:62:c2:1d:46:d6:1c:8f:ec:f6:c5:68:de:08:bf: d1:19:18:00:2f:34:20:bb:fe:b7:95:ed:60:d0:a7:75:01:43: f7:ce:6d:60:ed:a0:85:31:08:62:88:55:bb:40:25:64:bc:fc: 04:36:6e:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjUwNjE0MjI1MTEyWhcNMjUwNjIxMjI1MTEyWjAYMRYwFAYD VQQDEw02ODRkZmNlMC04NzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aSrK32yoQzEw4MHFR7Z0jvZXCt/TkRQXj7vvof7aEygdDG3CwKo6BeoStPD EuU/J43G5Y+2hquj0hry24pJGfUnrMWlofgCeXWNzYRU3VV8YkkTQndNwtlPeZOW TKjFYEoIFHDv7BckstcQBXNkRnOIw6F1nO62vfVtea3/SJW7abqm/THq4a8w5m+J zptpNhXUDfAGz74VSil9HY04HlL4UCjBNJIDkysbq1sO9DH425AmCq+HS01JbJug +56vO4c3rAFV5z9hi6lAsLHR/OXzbLPjKyIayQrP4W4gTXKjPdtOltNr6crYkML2 SK6MTKFoP9or69vOXqjnVSqN7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5IzOTK u6U18yMd6AAI3mtPeO9nMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKMddsnvMg81P3V5K6PnzMAjqOkSt0C4r8Eu7F8OKKtzyW4T7sMDHa CTEvrSS0xDDwj51YhKjTcU2TepEJKb//gT6M2gAkiHBzaOp0NX8DaVjAtrO2LZBB O15Bhmr9Cj4qEu/UVZ/9+4vzbMbcodBuzaHUQsNlDD+3GgZ2l9bo7oQsF4GhpWBb Mr1MnKWXJwWArj2HwLdIG5VP4V3zuK4lIc4/QaBY+fahtLMqSuoKKx/Kj7pyvNaW +hENIdWFbsEIUZR8Yc+7nLWLYsIdRtYcj+z2xWjeCL/RGRgALzQgu/63le1g0Kd1 AUP3zm1g7aCFMQhiiFW7QCVkvPwENm4G -----END CERTIFICATE-----Generated at Sun Jun 15 08:39:07 2025 by rpki-client