$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft File: WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json) Hash identifier: nG25p1miJd6w3gpdKh/H42v/EVpO08J6JRHhjButyBM= Subject key identifier: 14:B3:05:78:E2:84:96:15:4F:CC:84:75:91:F0:14:52:BB:91:BA:6C Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft Manifest number: 01F5 Signing time: Thu 19 Jun 2025 01:58:15 +0000 Manifest this update: Thu 19 Jun 2025 01:58:14 +0000 Manifest next update: Thu 26 Jun 2025 01:58:14 +0000 Files and hashes: 1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: uw2HgXppMJjMuRiBZNKH75X2UBwdrne/jpm57zLZQNc=) 2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: tljXT8G1BNgl+pD66knbjuh1b8kVzEqRHqexSVNncjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Validity Not Before: Jun 19 01:58:14 2025 GMT Not After : Jun 26 01:58:14 2025 GMT Subject: CN=68536eb6-3f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:04:a0:03:e9:03:b6:ab:9a:b2:a6:9f:1f: 94:7d:91:70:b2:89:47:8b:78:66:46:11:34:1c:3d: 30:26:bf:9e:0f:db:83:35:a6:6c:f4:c7:ed:47:5d: b5:78:7c:1b:aa:9f:03:69:33:8b:b2:5d:63:0d:50: ec:c8:60:24:89:41:69:cf:60:b6:36:0c:87:bc:65: 53:4d:d3:55:84:95:d0:d6:e3:b5:42:d9:8f:0f:e0: 34:95:12:8d:41:62:18:37:9d:fc:d7:84:c0:54:79: e7:9f:3b:70:ba:cc:91:e1:b4:e5:37:7f:78:38:01: 7d:02:0d:d8:01:d7:b3:13:f6:ce:8f:bb:1d:e3:c0: 61:6d:6d:f2:71:e2:e1:0e:28:30:9d:03:e1:15:c2: 5f:77:0b:09:0c:55:b0:0f:53:31:86:b3:4a:ff:03: 23:c2:c9:11:55:c1:60:27:f1:c2:02:cd:22:98:dc: 00:a2:ad:7f:2b:17:2d:93:28:ac:1e:d6:9a:54:e6: ca:ff:cb:ba:45:be:87:db:26:1d:5f:5d:91:86:46: 55:44:0b:45:e3:42:83:0c:7d:ba:1b:f0:94:23:bd: 83:d1:88:62:93:22:d9:76:8f:e7:ce:b8:f2:f7:69: f1:bc:9f:28:ee:41:28:26:8f:48:53:5a:0b:c8:4e: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B3:05:78:E2:84:96:15:4F:CC:84:75:91:F0:14:52:BB:91:BA:6C X509v3 Authority Key Identifier: keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:3e:17:96:7c:b6:df:53:80:d3:00:e7:be:dc:b7:7c:ae:77: 57:19:a9:ff:72:64:e4:8f:c0:d1:05:c4:db:5c:d8:f5:26:03: fe:48:60:40:bd:af:82:93:71:32:a7:2c:89:86:3c:f8:cd:7c: cc:b0:1c:e4:45:36:39:b5:14:4f:b9:83:9b:06:32:3e:ec:a6: d7:72:ff:19:fb:a1:f7:9d:bd:c9:3d:00:1b:71:80:92:63:41: d5:a6:70:99:8d:21:9c:3d:7d:3a:7d:91:37:18:79:b0:ac:99: f4:8d:6c:2d:fb:18:06:49:05:7f:f0:97:5d:21:1d:6b:b3:89: f6:d7:64:89:81:65:e6:bb:39:20:80:cd:95:62:99:9a:f6:ec: be:1f:c5:93:b8:ca:ba:0e:f9:dc:13:b2:46:db:cb:65:69:76: 00:77:a3:5d:12:a4:0f:e0:a3:e7:da:37:cd:c4:26:1a:68:be: ad:1e:28:5a:65:6d:e3:da:e9:01:b3:e2:fd:65:09:85:a3:cb: 7d:3b:ed:27:58:4c:c4:d1:7c:1d:61:52:bd:62:a2:4f:2a:aa: 3f:7a:34:85:32:85:29:e7:c8:33:a0:fd:30:d3:fd:52:94:4f: 8e:88:0a:c8:91:68:60:e1:40:1b:e9:de:1f:58:b1:ca:a9:b5: c3:8c:e5:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDU5NEY3QTBCQTlCRDFDMTM4Njg0N0NFODk2Mzk2M0ZF NEU3MTYzNkMwHhcNMjUwNjE5MDE1ODE0WhcNMjUwNjI2MDE1ODE0WjAYMRYwFAYD VQQDEw02ODUzNmViNi0zZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTkEoAPpA7armrKmnx+UfZFwsolHi3hmRhE0HD0wJr+eD9uDNaZs9MftR121 eHwbqp8DaTOLsl1jDVDsyGAkiUFpz2C2NgyHvGVTTdNVhJXQ1uO1QtmPD+A0lRKN QWIYN53814TAVHnnnztwusyR4bTlN394OAF9Ag3YAdezE/bOj7sd48BhbW3yceLh DigwnQPhFcJfdwsJDFWwD1MxhrNK/wMjwskRVcFgJ/HCAs0imNwAoq1/Kxctkyis HtaaVObK/8u6Rb6H2yYdX12RhkZVRAtF40KDDH26G/CUI72D0YhikyLZdo/nzrjy 92nxvJ8o7kEoJo9IU1oLyE6QKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSzBXji hJYVT8yEdZHwFFK7kbpsMB8GA1UdIwQYMBaAFFlPegupvRwThoR86JY5Y/5OcWNs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zNEQ1RDdFNjU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhCT0doSHpvbGpsal9rNXhZ MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dVOTZDNm05SEJPR2hIem9samxqX2s1eFkydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zNEQ1RDdFNjU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhC T0doSHpvbGpsal9rNXhZMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnPheWfLbfU4DTAOe+3Ld8rndXGan/cmTkj8DRBcTbXNj1JgP+SGBA va+Ck3EypyyJhjz4zXzMsBzkRTY5tRRPuYObBjI+7KbXcv8Z+6H3nb3JPQAbcYCS Y0HVpnCZjSGcPX06fZE3GHmwrJn0jWwt+xgGSQV/8JddIR1rs4n212SJgWXmuzkg gM2VYpma9uy+H8WTuMq6DvncE7JG28tlaXYAd6NdEqQP4KPn2jfNxCYaaL6tHiha ZW3j2ukBs+L9ZQmFo8t9O+0nWEzE0XwdYVK9YqJPKqo/ejSFMoUp58gzoP0w0/1S lE+OiArIkWhg4UAb6d4fWLHKqbXDjOWy -----END CERTIFICATE-----Generated at Thu Jun 19 18:27:15 2025 by rpki-client