$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: Pn4sLqIGNzCnFOuxb2OiQ2y4snX/7VOeMFCxScuC19k= Subject key identifier: 1F:47:B1:67:5F:49:32:A6:70:D4:0F:F9:F3:5B:E6:81:9F:5E:35:46 Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: 8F Signing time: Tue 13 May 2025 05:42:06 +0000 Manifest this update: Tue 13 May 2025 05:42:05 +0000 Manifest next update: Tue 20 May 2025 05:42:05 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: Yt8mcD3L7tPacfkNyLKacM1cvsBBn9g1oSLDrMx6jLw=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: DGhCmBwIVuA1yV2BSzBBRg3ZffQWFG7MuOhn3OP/r+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: May 13 05:42:05 2025 GMT Not After : May 20 05:42:05 2025 GMT Subject: CN=6822dbad-4d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6e:d7:9a:af:0b:22:69:02:15:07:05:84:d7: e3:81:95:b4:d5:aa:4e:1c:a2:e2:2d:4a:a6:58:89: 54:fe:18:9d:82:0c:24:d4:f9:d6:6d:e9:9d:7b:2a: f2:12:20:a7:ba:b2:99:00:ac:e7:39:af:53:d7:f2: 4d:e2:9e:3f:78:2d:9e:cb:66:5f:3a:de:a7:28:99: 5c:5e:ec:8f:f7:f9:44:4d:bc:bf:94:a1:9b:5e:1f: 90:7d:37:05:5b:01:05:22:40:6e:3c:66:8e:b4:fe: a8:90:ea:67:d9:9f:d6:dd:ac:56:80:aa:56:6f:1b: 4c:8b:a0:d4:9c:e2:bc:9b:a0:8c:3c:59:b7:95:5f: 29:91:49:72:31:36:e9:5b:9a:bd:d0:a9:19:9d:c9: 8a:67:42:6d:0f:09:d8:e1:85:42:62:6d:be:d4:b3: b5:2d:43:d5:fc:ce:3c:54:c0:31:e7:96:81:30:7d: 1b:dc:42:5b:4e:1f:de:34:a1:15:99:2c:de:10:4f: bc:7c:e3:d1:e9:4a:f8:dd:f4:36:3c:f7:f3:65:81: 03:c3:1e:14:94:3f:be:e0:36:76:81:b9:2d:e9:6e: 33:54:e0:63:2f:0d:c2:83:de:f5:04:71:b5:8a:bf: 58:cf:57:8e:47:3e:11:f0:69:04:78:cc:09:09:55: be:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:B1:67:5F:49:32:A6:70:D4:0F:F9:F3:5B:E6:81:9F:5E:35:46 X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ad:5e:e0:50:84:38:1f:d0:93:a6:83:a0:6d:5f:85:91:d1: 5e:bc:45:fe:62:23:f2:8c:75:7f:7c:d9:32:ad:62:f4:2b:d0: 56:04:90:80:55:d9:20:5a:ed:b0:5c:d3:a6:0d:11:83:52:ba: 94:7f:6d:84:d1:ad:23:25:c3:90:c0:e2:5c:61:d2:b4:f2:03: 44:c8:42:80:58:69:05:a7:0f:c7:e4:ec:e0:d1:a7:75:b3:41: d8:ff:18:83:88:60:ef:a1:45:d9:f5:23:01:ad:ca:3b:9d:2b: 14:c6:83:0c:ec:9b:c2:5a:dd:98:24:32:da:3d:25:ad:23:4b: 8d:7f:e8:ce:0b:69:f8:e7:c6:6e:e9:c1:a1:0a:3b:29:a0:88: c7:67:6e:b9:b2:3d:46:b1:2d:9f:21:f4:78:4d:ef:6a:be:fd: 38:33:a3:24:76:14:3b:ba:c3:c9:37:fc:75:7b:c8:5d:c5:90: 05:f2:33:87:4b:b1:08:51:4c:61:de:6e:a0:15:6b:88:3c:98: 14:bc:ca:d1:e6:d3:f9:bb:a4:0e:eb:71:ec:58:9c:fc:9a:51: 1e:1f:c2:d6:26:d0:fd:10:cb:e5:a2:aa:44:80:5d:72:a6:2f: c8:2d:36:b0:05:e0:2b:14:58:a3:78:35:fa:65:3d:ca:ea:c6: 14:29:47:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjUwNTEzMDU0MjA1WhcNMjUwNTIwMDU0MjA1WjAYMRYwFAYD VQQDEw02ODIyZGJhZC00ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA627Xmq8LImkCFQcFhNfjgZW01apOHKLiLUqmWIlU/hidggwk1PnWbemdeyry EiCnurKZAKznOa9T1/JN4p4/eC2ey2ZfOt6nKJlcXuyP9/lETby/lKGbXh+QfTcF WwEFIkBuPGaOtP6okOpn2Z/W3axWgKpWbxtMi6DUnOK8m6CMPFm3lV8pkUlyMTbp W5q90KkZncmKZ0JtDwnY4YVCYm2+1LO1LUPV/M48VMAx55aBMH0b3EJbTh/eNKEV mSzeEE+8fOPR6Ur43fQ2PPfzZYEDwx4UlD++4DZ2gbkt6W4zVOBjLw3Cg971BHG1 ir9Yz1eORz4R8GkEeMwJCVW+BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9HsWdf STKmcNQP+fNb5oGfXjVGMB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4 R0xNRkZ0bGt4RFp5THJQc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfrV7gUIQ4H9CTpoOgbV+FkdFevEX+YiPyjHV/fNkyrWL0K9BWBJCA VdkgWu2wXNOmDRGDUrqUf22E0a0jJcOQwOJcYdK08gNEyEKAWGkFpw/H5Ozg0ad1 s0HY/xiDiGDvoUXZ9SMBrco7nSsUxoMM7JvCWt2YJDLaPSWtI0uNf+jOC2n458Zu 6cGhCjspoIjHZ265sj1GsS2fIfR4Te9qvv04M6MkdhQ7usPJN/x1e8hdxZAF8jOH S7EIUUxh3m6gFWuIPJgUvMrR5tP5u6QO63HsWJz8mlEeH8LWJtD9EMvloqpEgF1y pi/ILTawBeArFFijeDX6ZT3K6sYUKUfr -----END CERTIFICATE-----Generated at Wed May 14 05:59:48 2025 by rpki-client