$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json) Hash identifier: 6DAxfysDDjclnltu72Mz7L0B/ES4AIhU0QEAw7OuCv4= Subject key identifier: 83:37:A1:3D:38:E9:27:F3:E0:4A:73:95:B7:A9:15:0E:2C:AD:E9:A7 Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft Manifest number: F9 Signing time: Thu 15 May 2025 04:31:31 +0000 Manifest this update: Thu 15 May 2025 04:31:31 +0000 Manifest next update: Thu 22 May 2025 04:31:31 +0000 Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: rH/YwS0O3StQ9hTV6GYgLLvOrWDCEHwcmkgXxJGs+z4=) 2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: CRo8pDS3QFFaAXTL+9qZM9K187fka63VWkrPnljCSFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Validity Not Before: May 15 04:31:31 2025 GMT Not After : May 22 04:31:31 2025 GMT Subject: CN=68256e23-d932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:1a:70:bb:76:d5:e7:be:10:4c:63:71:15: 8e:47:e4:b0:f7:08:e0:6c:79:15:48:ef:32:cd:0c: dd:5f:a7:d9:f9:ed:39:9d:da:93:8f:42:ed:ce:cf: 82:3a:9a:e9:94:d6:5f:93:2f:36:b7:68:82:0a:50: 57:e3:9f:22:f5:23:ba:da:4b:f8:f9:d2:5d:11:9d: 61:87:23:a0:20:03:fd:73:09:fa:f6:96:ba:02:54: 0d:53:89:a0:e0:fb:c3:35:e1:2a:97:6e:f1:b2:51: 8f:27:b5:18:1d:47:fd:8d:aa:d0:d0:5e:2b:f9:22: 6d:bd:78:b0:2f:5c:69:c5:f2:ab:47:ad:b7:0d:4a: d4:a6:12:ff:ca:81:34:0d:26:dc:90:b8:f0:dd:8e: 00:81:05:4c:c8:f5:2c:5c:bd:92:af:46:61:43:58: 7f:2a:69:3c:80:09:b5:6b:3c:1f:31:06:be:de:d2: f0:55:3e:8e:0e:a3:c7:fa:ba:e4:f0:6c:1b:ed:68: 4a:b6:e3:01:5d:87:a2:b5:81:87:f5:c3:a8:69:05: 23:63:8f:6b:8d:29:94:6e:83:ae:bf:10:5f:4f:27: e9:21:1f:5e:06:78:7c:03:b2:61:69:2b:67:61:65: 99:46:b2:f3:52:d8:f6:8f:9a:0f:a4:90:b6:1e:f4: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:37:A1:3D:38:E9:27:F3:E0:4A:73:95:B7:A9:15:0E:2C:AD:E9:A7 X509v3 Authority Key Identifier: keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7d:0f:d4:59:6c:ce:77:8f:e5:03:8b:1b:d1:f0:8f:fe:a0: aa:ae:23:1e:72:24:7e:9f:33:bc:de:65:ba:ce:7a:14:6f:c4: 1d:48:a3:ca:3d:3f:ef:fb:e8:f1:17:c3:06:13:25:ea:0c:2d: 80:b6:01:c1:07:00:4b:65:ac:48:80:e1:ce:7f:32:c7:88:cf: 04:31:49:9a:56:d5:7d:e9:60:b6:44:d2:f5:13:5d:37:8b:fe: 2f:ea:7f:b3:e4:c5:49:25:a7:80:8e:3b:56:f8:73:95:d6:91: 19:b9:bb:d7:5e:f6:aa:8d:8f:6e:06:47:92:58:3d:78:3a:14: 9a:82:49:27:d0:c3:18:13:20:29:1f:ff:8f:68:a9:ee:c0:53: 43:04:9a:5a:f1:8c:61:ea:6a:c1:be:fe:5e:e4:23:5d:4c:43: a6:90:3d:0a:a9:ae:5d:ea:74:e8:ff:53:a8:35:ea:70:47:22: 40:75:1a:21:22:e9:bb:11:ba:8e:40:5b:7e:ad:d8:b3:36:10: 27:13:5d:03:c2:b6:aa:8f:af:1d:22:fe:92:ce:62:86:37:d9: 70:b7:81:02:dd:0a:cd:7b:28:81:b5:34:6e:19:ea:d4:2f:d6: 83:85:74:95:de:21:f9:2d:e2:fb:a3:b8:23:02:9a:06:f9:54: 8d:d7:42:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI4NUIxMTAvBgNVBAUTKEMyNzVGN0I4QUVDQzI5NDhENEI0QkE5OTlGQTlDMEUy QUQ1NEVBNTkwHhcNMjUwNTE1MDQzMTMxWhcNMjUwNTIyMDQzMTMxWjAYMRYwFAYD VQQDEw02ODI1NmUyMy1kOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLEacLt21ee+EExjcRWOR+Sw9wjgbHkVSO8yzQzdX6fZ+e05ndqTj0Ltzs+C OprplNZfky82t2iCClBX458i9SO62kv4+dJdEZ1hhyOgIAP9cwn69pa6AlQNU4mg 4PvDNeEql27xslGPJ7UYHUf9jarQ0F4r+SJtvXiwL1xpxfKrR623DUrUphL/yoE0 DSbckLjw3Y4AgQVMyPUsXL2Sr0ZhQ1h/Kmk8gAm1azwfMQa+3tLwVT6ODqPH+rrk 8Gwb7WhKtuMBXYeitYGH9cOoaQUjY49rjSmUboOuvxBfTyfpIR9eBnh8A7JhaStn YWWZRrLzUtj2j5oPpJC2HvSaPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIM3oT04 6Sfz4EpzlbepFQ4sremnMB8GA1UdIwQYMBaAFMJ197iuzClI1LS6mZ+pwOKtVOpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjg1Qi8yMDQ3RDc0NkI0 QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtValV0THFabjZuQTRxMVU2 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjg1Qi8yMDQ3RDc0NkI0QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtV alV0THFabjZuQTRxMVU2bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+fQ/UWWzOd4/lA4sb0fCP/qCqriMeciR+nzO83mW6znoUb8QdSKPK PT/v++jxF8MGEyXqDC2AtgHBBwBLZaxIgOHOfzLHiM8EMUmaVtV96WC2RNL1E103 i/4v6n+z5MVJJaeAjjtW+HOV1pEZubvXXvaqjY9uBkeSWD14OhSagkkn0MMYEyAp H/+PaKnuwFNDBJpa8Yxh6mrBvv5e5CNdTEOmkD0Kqa5d6nTo/1OoNepwRyJAdRoh Ium7EbqOQFt+rdizNhAnE10Dwraqj68dIv6SzmKGN9lwt4EC3QrNeyiBtTRuGerU L9aDhXSV3iH5LeL7o7gjApoG+VSN10Ia -----END CERTIFICATE-----Generated at Fri May 16 13:54:40 2025 by rpki-client