$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json) Hash identifier: htj+tSLJfsmo4xmRow4qMLDuLn1L2aBLiZZ6XFZTtTA= Subject key identifier: 37:EB:C9:97:40:24:1C:BD:3D:AD:10:4E:8B:5A:B4:17:B6:D5:0B:47 Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft Manifest number: A5 Signing time: Sun 11 May 2025 04:57:07 +0000 Manifest this update: Sun 11 May 2025 04:57:06 +0000 Manifest next update: Sun 18 May 2025 04:57:06 +0000 Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: Kzp0RZONVuNNqYAf4Q+epsm0ghTzIJpa/AC4AROFrW4=) 2: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: m8ZhY4FkFGGeGM7tNFXFvXEgkHBlhu8L/mZKfvzoZd8=) 3: 1F04A04C346611EF90CE2150C4F9AE02.roa (hash: zif08OzaGPPedGPIwrQhRPE8pOs4ZsH49eqd+XDcfaU=) 4: F76C6448346511EF80C6F34FC4F9AE02.roa (hash: Don0S4nk9nm0mmjHLO0K6d0HSv8chlDSOmW/UglwVZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: May 11 04:57:06 2025 GMT Not After : May 18 04:57:06 2025 GMT Subject: CN=68202e22-ad00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:c1:46:13:3d:c6:e2:50:c5:89:91:a0:a7: 80:b8:58:92:17:e5:92:cb:85:33:40:6d:a3:7e:06: 44:a9:2a:d3:6f:d0:fe:8f:d8:bf:5a:ba:46:f6:29: 68:38:2a:db:e3:d9:74:3d:0a:22:4b:d6:0d:f2:5f: c1:97:c3:5c:46:c8:2c:2f:c4:ba:61:13:2c:d4:fe: d5:3d:81:c6:32:44:a9:4c:9d:24:26:8d:c8:eb:84: f6:73:88:e6:e0:15:b4:62:91:ac:a0:97:ff:90:d2: d4:69:ee:ec:82:38:15:cb:cd:40:eb:c9:35:dc:ea: f3:1a:56:13:4e:5d:9d:40:9a:9d:95:ad:0c:61:ae: ce:3b:e0:f7:a5:d6:fe:85:b8:d1:02:60:ba:42:b6: de:de:bc:63:c2:ad:83:a1:90:b0:b1:5d:b1:c2:72: f9:da:32:42:1f:8f:44:72:46:dc:de:05:ca:a6:62: be:dc:88:fd:43:d6:35:28:bc:2b:b2:3e:f8:36:15: d9:3d:6b:d1:02:4c:da:0a:d2:c2:ac:a3:df:3e:09: 1b:eb:68:6a:da:cf:2b:28:4d:86:4c:c3:71:77:be: 61:48:95:8b:19:3a:77:a7:9c:84:e5:3f:7d:53:46: d2:32:f4:ce:8b:24:76:47:c2:10:e8:08:38:2c:fc: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EB:C9:97:40:24:1C:BD:3D:AD:10:4E:8B:5A:B4:17:B6:D5:0B:47 X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:22:8d:c9:83:dd:65:b5:f6:e1:d0:57:a0:de:56:f4:2f:d1: 6a:57:07:f4:c0:58:04:fd:54:cf:e3:88:86:47:33:bc:41:27: 7d:8f:e0:9d:c9:04:a8:d4:44:ee:ef:48:81:11:55:e4:b8:9c: 45:72:12:f7:92:74:a6:38:56:90:b5:63:9d:60:1b:af:74:1e: 4b:ad:8e:c9:56:61:bf:cb:bc:18:84:f2:db:2f:77:9b:2b:6b: 8f:3b:aa:80:d5:7c:5e:22:9a:7e:25:44:1f:a0:01:92:c4:4b: 8d:df:84:e3:26:c7:c6:5c:b6:de:a7:0c:00:ec:29:8a:19:a0: ee:88:05:0d:31:9d:38:0a:1a:0d:3e:e9:3b:6c:b1:83:a7:31: b8:fb:d1:32:f5:6c:71:b1:5f:24:5d:7c:1c:4d:79:69:01:91: de:d2:04:e0:46:5f:b5:b6:0b:3e:cf:5c:54:15:6d:8d:78:4e: 36:28:3d:f3:43:39:ec:a1:e6:72:e9:94:5d:73:77:e4:9b:44: cf:8c:3e:f2:43:ef:a7:76:76:7a:f7:9b:c6:92:6b:3a:c0:59: 7c:d5:27:54:63:e0:da:6c:56:32:65:1f:87:d8:92:d4:63:12: 44:d2:6f:a3:57:2c:2c:84:65:19:af:5a:da:0d:66:22:cc:e6: 25:4f:3a:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx RTI1Qzc5OEEwHhcNMjUwNTExMDQ1NzA2WhcNMjUwNTE4MDQ1NzA2WjAYMRYwFAYD VQQDEw02ODIwMmUyMi1hZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXzBRhM9xuJQxYmRoKeAuFiSF+WSy4UzQG2jfgZEqSrTb9D+j9i/WrpG9ilo OCrb49l0PQoiS9YN8l/Bl8NcRsgsL8S6YRMs1P7VPYHGMkSpTJ0kJo3I64T2c4jm 4BW0YpGsoJf/kNLUae7sgjgVy81A68k13OrzGlYTTl2dQJqdla0MYa7OO+D3pdb+ hbjRAmC6Qrbe3rxjwq2DoZCwsV2xwnL52jJCH49Eckbc3gXKpmK+3Ij9Q9Y1KLwr sj74NhXZPWvRAkzaCtLCrKPfPgkb62hq2s8rKE2GTMNxd75hSJWLGTp3p5yE5T99 U0bSMvTOiyR2R8IQ6Ag4LPwp2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfryZdA JBy9Pa0QTotatBe21QtHMB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0 NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0NFMy9BOTBDQUZDNDM0NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2 ODZmWEZkNGI4NlllSmNlWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOIo3Jg91ltfbh0Feg3lb0L9FqVwf0wFgE/VTP44iGRzO8QSd9j+Cd yQSo1ETu70iBEVXkuJxFchL3knSmOFaQtWOdYBuvdB5LrY7JVmG/y7wYhPLbL3eb K2uPO6qA1XxeIpp+JUQfoAGSxEuN34TjJsfGXLbepwwA7CmKGaDuiAUNMZ04ChoN Puk7bLGDpzG4+9Ey9WxxsV8kXXwcTXlpAZHe0gTgRl+1tgs+z1xUFW2NeE42KD3z QznsoeZy6ZRdc3fkm0TPjD7yQ++ndnZ695vGkms6wFl81SdUY+DabFYyZR+H2JLU YxJE0m+jVywshGUZr1raDWYizOYlTzon -----END CERTIFICATE-----Generated at Mon May 12 04:08:58 2025 by rpki-client