$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: L3ZepfcVHHb4WHdrXj7JXpVmKOleR+gfnFGZlZ1XY0k= Subject key identifier: F2:EE:59:23:F7:EC:C0:49:62:60:22:3B:D7:70:6B:81:6A:F0:E7:82 Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 010C Signing time: Tue 13 May 2025 04:11:30 +0000 Manifest this update: Tue 13 May 2025 04:11:30 +0000 Manifest next update: Tue 20 May 2025 04:11:30 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: 1aCMMdk+6ic/gCd3alyN9xkSqGqOepjak9yMjEuw8aY=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: May 13 04:11:30 2025 GMT Not After : May 20 04:11:30 2025 GMT Subject: CN=6822c672-0ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:8f:57:c4:2b:f2:53:80:e7:0b:38:f0:ac: 3b:0e:0d:4e:55:2f:d5:c0:98:09:50:59:ab:a1:c9: 45:bb:15:df:0c:2f:bc:21:c1:4a:7c:99:f1:18:c2: 19:32:43:56:17:fd:f0:c4:74:c8:67:f7:b5:7a:dd: 45:8b:da:e6:7e:0b:5a:49:c6:49:19:ad:78:b4:c3: 21:34:a7:4f:cb:7f:46:6a:1d:ef:0a:08:e4:c4:22: f3:95:4d:50:64:92:4e:b5:0f:e8:06:66:b0:a2:cb: 10:02:75:30:04:17:11:3a:62:b4:25:43:2d:89:d9: ae:7a:44:23:34:ef:6d:35:17:68:89:0d:1d:03:88: b4:51:6d:13:8b:1f:cc:b8:be:cf:5d:f4:f0:01:0e: b8:9f:9e:b5:bc:eb:05:6b:aa:96:9e:d8:d5:23:8e: 02:97:24:23:de:2a:de:48:07:73:15:0e:05:24:7b: b3:a8:85:4e:27:e9:a0:d2:f1:b5:66:43:be:5c:fb: 81:5c:04:b3:29:49:51:36:02:2e:81:0d:49:12:ba: 3a:ad:2a:2f:be:ad:ec:ce:d5:eb:e3:d2:2c:17:c5: 98:40:3d:24:a9:af:8b:d8:db:c6:44:31:f8:f1:23: ee:2f:85:90:2d:22:fd:ff:1d:9f:3d:6c:f3:27:30: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EE:59:23:F7:EC:C0:49:62:60:22:3B:D7:70:6B:81:6A:F0:E7:82 X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d0:23:96:ad:11:cb:2f:ce:a7:79:c8:0e:f5:fc:52:dd:97: f1:ba:76:c5:a5:5d:b7:d3:5f:d5:b5:f7:df:59:c0:a4:55:9d: 6e:33:1d:b4:27:bc:4a:af:ee:82:c7:0e:1e:4f:e2:14:bd:4f: 65:37:17:06:4d:49:c3:07:98:9d:1d:c9:1d:da:d6:cb:58:bf: 38:49:55:e1:3a:d9:69:c6:25:e0:85:bb:f0:b0:73:17:f0:72: 6a:41:7c:38:58:76:3b:10:42:02:51:e4:dc:dc:7c:c7:8b:4b: 31:69:7c:e3:16:70:3e:85:58:97:81:41:35:f5:97:ad:a9:65: f5:cc:3e:8d:b3:df:fa:4b:e6:03:f7:4b:5b:94:7f:9d:82:b3: 3f:a6:0a:74:1a:8a:3d:29:ac:04:7a:14:79:a1:55:8f:b5:f2: 29:99:be:99:d4:32:7b:87:5d:44:c5:1e:d2:7d:11:ed:5b:1f: 06:63:ef:55:8f:a8:fb:51:52:38:7c:bb:31:ba:dd:9b:55:f6: 85:98:6d:32:0e:b6:ff:0c:a4:b9:b5:52:1d:15:31:e0:e3:76: 82:1b:49:79:7e:b7:5c:82:13:98:a8:51:99:34:91:b7:95:1e: 10:4c:b4:b1:11:a7:40:95:ea:44:fc:b3:3a:25:b0:f9:89:7b: 5b:ad:ad:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjUwNTEzMDQxMTMwWhcNMjUwNTIwMDQxMTMwWjAYMRYwFAYD VQQDEw02ODIyYzY3Mi0wYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzGPV8Qr8lOA5ws48Kw7Dg1OVS/VwJgJUFmroclFuxXfDC+8IcFKfJnxGMIZ MkNWF/3wxHTIZ/e1et1Fi9rmfgtaScZJGa14tMMhNKdPy39Gah3vCgjkxCLzlU1Q ZJJOtQ/oBmawossQAnUwBBcROmK0JUMtidmuekQjNO9tNRdoiQ0dA4i0UW0Tix/M uL7PXfTwAQ64n561vOsFa6qWntjVI44ClyQj3ireSAdzFQ4FJHuzqIVOJ+mg0vG1 ZkO+XPuBXASzKUlRNgIugQ1JEro6rSovvq3sztXr49IsF8WYQD0kqa+L2NvGRDH4 8SPuL4WQLSL9/x2fPWzzJzBr5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLuWSP3 7MBJYmAiO9dwa4Fq8OeCMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE0COWrRHLL86necgO9fxS3ZfxunbFpV2301/VtfffWcCkVZ1uMx20 J7xKr+6Cxw4eT+IUvU9lNxcGTUnDB5idHckd2tbLWL84SVXhOtlpxiXghbvwsHMX 8HJqQXw4WHY7EEICUeTc3HzHi0sxaXzjFnA+hViXgUE19ZetqWX1zD6Ns9/6S+YD 90tblH+dgrM/pgp0Goo9KawEehR5oVWPtfIpmb6Z1DJ7h11ExR7SfRHtWx8GY+9V j6j7UVI4fLsxut2bVfaFmG0yDrb/DKS5tVIdFTHg43aCG0l5frdcghOYqFGZNJG3 lR4QTLSxEadAlepE/LM6JbD5iXtbra21 -----END CERTIFICATE-----Generated at Tue May 13 09:58:24 2025 by rpki-client