$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft File: MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json) Hash identifier: VF8hlb/XgqwJxFwcbXqJ+h0d7bOa9RG9TmvS3LhFXf4= Subject key identifier: E9:8E:4F:B9:13:4A:2E:40:78:17:55:F6:A6:3D:B7:53:4C:FA:91:A1 Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft Manifest number: 05C9 Signing time: Sat 10 May 2025 22:47:19 +0000 Manifest this update: Sat 10 May 2025 22:47:19 +0000 Manifest next update: Sat 17 May 2025 22:47:19 +0000 Files and hashes: 1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: O9aqbXstU6rPqWPqFjHNx2DNrjM6V06iHse/BZIcp9Q=) 2: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: 7DnrOBV+2NUrU5X6zz5SZm2S9etq/L6sq71V5Wzy0Aw=) 3: B9A42F96FEA211EDB9013076C4F9AE02.roa (hash: Vz2c1dAL2tzLijBpz5XdkyV8FKeYtLOeinzLmhM0fXs=) 4: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: CUHN5je5YaJmqE74g1efmbNy7D5sqkfCrF2BIImEEKI=) 5: B902532EFEA211EDB9013076C4F9AE02.roa (hash: +Adzl6dQW/LWPhNaA+sU3D3mSM91CUnI4jOcuyhxVQU=) 6: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: t289a4y8avgJBiwqGqR/a8EAfFLv6r10DhXTfUzfCdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: May 10 22:47:19 2025 GMT Not After : May 17 22:47:19 2025 GMT Subject: CN=681fd777-8a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:b6:5c:80:05:fb:cd:8b:35:18:f8:1b:c4: ad:59:ab:d2:e5:1e:cc:7c:29:cc:72:ff:24:a3:ae: a4:77:6b:be:b4:86:c7:51:79:f2:b2:8d:14:06:95: dc:a0:6e:11:14:b5:79:ba:5d:d2:ab:45:75:97:ad: 15:b3:6a:96:58:ce:96:1a:c0:87:b0:f5:de:9a:6e: 44:54:f6:c7:aa:48:30:a6:64:84:2c:98:ce:04:fe: 54:42:db:e0:a0:87:f9:2e:5b:e3:40:3e:40:18:60: f4:8c:cd:79:41:39:15:a1:92:76:e3:a2:6a:0b:47: 0a:52:d4:39:6d:f0:8f:55:fa:6e:3e:ea:f2:cd:82: e9:00:67:d5:46:68:2a:e7:74:e0:8a:5c:5c:e2:e5: 05:7f:29:78:80:69:59:e4:6a:a2:11:e2:9f:d1:5a: 15:c8:6f:da:53:4e:fe:56:44:65:56:51:d3:dc:49: 31:70:93:c8:4d:70:c5:0f:ee:cc:6b:97:6c:ad:a9: ff:52:17:b8:a6:4d:8e:1a:f9:fa:ce:9b:6e:85:28: db:bf:5c:f2:20:46:3d:02:ea:39:5c:f2:7e:7f:3a: ad:a9:f0:99:f7:c1:03:c5:67:c4:1a:a3:c7:88:f4: 1b:8f:ea:49:22:64:f2:5e:6a:52:f6:22:5f:d0:88: 29:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8E:4F:B9:13:4A:2E:40:78:17:55:F6:A6:3D:B7:53:4C:FA:91:A1 X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:95:a5:49:09:7c:8c:28:21:3c:ba:8b:b1:7b:a4:a8:88:e0: 32:67:0f:d1:69:cb:aa:21:96:b4:dc:e2:72:b6:5b:69:0f:37: 23:f0:cf:ab:ff:cb:ba:13:f6:ff:d4:36:2c:23:63:8f:6f:49: ff:77:18:6f:7c:fe:e1:0e:31:4b:c8:b2:b6:3b:2e:b9:de:9f: 62:f0:45:ce:be:ee:5a:3d:dc:e6:b7:95:c4:31:3d:93:64:5c: e3:34:53:a8:3f:47:ae:be:b4:8f:35:aa:08:67:e4:a6:0b:e4: 9f:f7:38:e7:cd:04:60:1a:13:80:65:73:e8:13:39:45:a7:6f: ef:25:27:07:0b:de:b4:41:b0:8e:24:50:0f:24:32:d8:16:84: b0:0f:cc:4e:c9:44:f6:06:a8:82:74:7c:61:68:de:a2:69:7d: cf:3c:fb:64:db:05:ae:c2:e5:8d:8c:5f:d6:fb:a1:e1:8f:c4: 01:00:d2:28:58:be:93:ad:ac:ff:71:a3:9e:59:6f:5b:f4:27: fb:a5:6d:bf:46:29:55:e7:96:72:ca:64:d4:76:68:96:09:d6: f6:6e:14:b2:df:36:5a:96:66:00:b4:98:0c:a3:f0:d5:b1:50: a8:a8:da:70:d3:2d:8c:22:d5:1a:35:45:62:36:be:e9:ec:e6: 0d:1e:ec:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjUwNTEwMjI0NzE5WhcNMjUwNTE3MjI0NzE5WjAYMRYwFAYD VQQDEw02ODFmZDc3Ny04YTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzu2XIAF+82LNRj4G8StWavS5R7MfCnMcv8ko66kd2u+tIbHUXnyso0UBpXc oG4RFLV5ul3Sq0V1l60Vs2qWWM6WGsCHsPXemm5EVPbHqkgwpmSELJjOBP5UQtvg oIf5LlvjQD5AGGD0jM15QTkVoZJ246JqC0cKUtQ5bfCPVfpuPuryzYLpAGfVRmgq 53Tgilxc4uUFfyl4gGlZ5GqiEeKf0VoVyG/aU07+VkRlVlHT3EkxcJPITXDFD+7M a5dsran/Uhe4pk2OGvn6zptuhSjbv1zyIEY9Auo5XPJ+fzqtqfCZ98EDxWfEGqPH iPQbj+pJImTyXmpS9iJf0IgpHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmOT7kT Si5AeBdV9qY9t1NM+pGhMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDNGMy9CMjU0NDgxQUNBMzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXky ejJWdkpyZ29MX3VlWXZrMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+laVJCXyMKCE8uouxe6SoiOAyZw/RacuqIZa03OJytltpDzcj8M+r /8u6E/b/1DYsI2OPb0n/dxhvfP7hDjFLyLK2Oy653p9i8EXOvu5aPdzmt5XEMT2T ZFzjNFOoP0euvrSPNaoIZ+SmC+Sf9zjnzQRgGhOAZXPoEzlFp2/vJScHC960QbCO JFAPJDLYFoSwD8xOyUT2BqiCdHxhaN6iaX3PPPtk2wWuwuWNjF/W+6Hhj8QBANIo WL6Traz/caOeWW9b9Cf7pW2/RilV55ZyymTUdmiWCdb2bhSy3zZalmYAtJgMo/DV sVCoqNpw0y2MItUaNUViNr7p7OYNHuxh -----END CERTIFICATE-----Generated at Sun May 11 22:41:45 2025 by rpki-client