$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: Op9GZaqOGnX6fVI4i1+Nz1Lr0iodjBuMXmtxB8qOH7k= Subject key identifier: D1:31:36:9D:05:40:5D:A5:55:D1:89:04:C1:23:76:D0:E8:BD:57:4E Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 0F38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 0F1E Signing time: Sat 14 Jun 2025 17:33:38 +0000 Manifest this update: Sat 14 Jun 2025 17:33:38 +0000 Manifest next update: Sat 21 Jun 2025 17:33:38 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: dngAXqClRbnleYjmNxK2fCuDsKd46reszsrtqP8OAEE=) 2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: gca4NiRXS/2ZRRaXGWLGL59Wf1jvZfKpV78dD1T70Vg=) 3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: P21sWTdEvS+OR+eBWq38z1ZuadpIkizBtR94Vsv/HGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3896 (0xf38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: Jun 14 17:33:38 2025 GMT Not After : Jun 21 17:33:38 2025 GMT Subject: CN=684db272-6a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:d8:f8:4f:1b:01:cc:27:e1:d4:13:b7:6f: cb:a3:9d:c8:35:a2:77:c7:70:cb:c2:98:ea:da:52: fa:01:70:60:71:16:17:9f:9e:f1:21:62:70:0d:d9: 67:f3:24:ef:27:4e:81:dc:e0:73:d1:3a:4e:cc:d1: 8c:50:d3:b9:1a:78:70:8b:20:f1:22:6e:c9:96:5c: ff:9b:fe:26:0d:1d:4c:38:94:dc:be:7f:e2:1b:06: db:3e:a0:85:84:7e:c3:26:7b:60:f5:1c:db:28:e1: 13:b8:6a:2a:b3:51:34:93:6a:56:cd:0f:85:c2:9e: 4b:41:df:58:52:20:48:ff:d3:82:92:8a:e8:1e:b2: ad:68:6a:8c:7b:56:bf:7d:47:05:47:80:da:77:7b: 24:e1:2a:ab:33:a0:ff:34:0a:11:c9:b5:7e:0f:26: b6:87:bb:85:2d:c0:f9:3a:dc:5d:28:31:3f:60:3c: 26:52:c6:cc:0e:83:b0:d7:e3:43:ea:b9:a9:d1:95: 1f:57:c0:01:ec:b0:9e:8c:36:ae:e0:30:bc:42:2a: 4f:7e:d4:c0:9c:ca:a8:a9:f0:60:ae:7c:7f:7a:3d: 18:d1:24:88:39:c8:4b:a8:fd:1a:ec:a8:4f:a5:60: 43:1f:b2:73:8f:db:36:e3:f4:fd:9b:49:b4:b6:d0: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:31:36:9D:05:40:5D:A5:55:D1:89:04:C1:23:76:D0:E8:BD:57:4E X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:1a:16:ed:ad:e7:c9:04:6c:18:d3:4d:4c:a3:f2:14:83:fd: 49:67:bd:d8:28:73:1b:82:15:b0:8b:77:dc:ad:4a:c6:4b:b9: 33:c0:47:d3:5e:a1:b6:b4:f3:43:b3:27:40:ad:32:ec:63:55: 03:2c:52:c5:93:47:d9:a0:43:01:76:f7:b9:6a:22:6c:f3:6f: 72:9b:22:2c:de:d7:93:25:3b:08:70:2d:1c:48:37:fc:4e:5c: 28:c0:94:84:ff:99:37:2d:4e:41:b5:93:25:7e:bc:51:94:c6: c3:f9:7c:f3:fa:2e:2d:0e:86:f3:4f:fb:ff:ac:b5:6b:d1:89: f2:87:e2:30:46:a6:66:fa:f6:e2:10:f1:63:a9:69:e6:19:13: 47:13:15:19:a2:5e:65:03:e6:a5:8a:2c:b0:46:12:78:64:f2: 2d:a1:1f:bf:cd:09:42:cf:27:41:cb:02:38:0f:1a:e6:1f:06: 4e:d0:e8:73:81:4e:17:e0:d3:39:c0:3c:38:85:30:db:ac:ac: 3c:cb:44:8d:3d:4a:e3:00:ab:f9:24:a6:bf:7a:6b:07:5e:f2: 97:50:cf:a8:be:9a:4b:56:05:54:55:b4:79:b9:0b:9a:51:4f: e1:8c:cb:32:79:6c:4f:f9:37:91:2b:23:d2:67:33:47:14:35: a2:ae:8c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjUwNjE0MTczMzM4WhcNMjUwNjIxMTczMzM4WjAYMRYwFAYD VQQDEw02ODRkYjI3Mi02YThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGLY+E8bAcwn4dQTt2/Lo53INaJ3x3DLwpjq2lL6AXBgcRYXn57xIWJwDdln 8yTvJ06B3OBz0TpOzNGMUNO5GnhwiyDxIm7Jllz/m/4mDR1MOJTcvn/iGwbbPqCF hH7DJntg9RzbKOETuGoqs1E0k2pWzQ+Fwp5LQd9YUiBI/9OCkoroHrKtaGqMe1a/ fUcFR4Dad3sk4SqrM6D/NAoRybV+Dya2h7uFLcD5OtxdKDE/YDwmUsbMDoOw1+ND 6rmp0ZUfV8AB7LCejDau4DC8QipPftTAnMqoqfBgrnx/ej0Y0SSIOchLqP0a7KhP pWBDH7Jzj9s24/T9m0m0ttD2RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNExNp0F QF2lVdGJBMEjdtDovVdOMB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4GhbtrefJBGwY001Mo/IUg/1JZ73YKHMbghWwi3fcrUrGS7kzwEfT XqG2tPNDsydArTLsY1UDLFLFk0fZoEMBdve5aiJs829ymyIs3teTJTsIcC0cSDf8 TlwowJSE/5k3LU5BtZMlfrxRlMbD+Xzz+i4tDobzT/v/rLVr0Ynyh+IwRqZm+vbi EPFjqWnmGRNHExUZol5lA+aliiywRhJ4ZPItoR+/zQlCzydBywI4DxrmHwZO0Ohz gU4X4NM5wDw4hTDbrKw8y0SNPUrjAKv5JKa/emsHXvKXUM+ovppLVgVUVbR5uQua UU/hjMsyeWxP+TeRKyPSZzNHFDWirowp -----END CERTIFICATE-----Generated at Sun Jun 15 10:01:31 2025 by rpki-client