$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: YN0dBiLO597RAyns+UqaJZwT8CD4kopF7f/tUvNTTYQ= Subject key identifier: FF:34:27:E9:56:AE:3E:8D:CE:FC:F6:19:E9:71:11:DC:B2:C6:62:09 Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 2623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 25FD Signing time: Thu 08 May 2025 15:46:53 +0000 Manifest this update: Thu 08 May 2025 15:46:53 +0000 Manifest next update: Thu 15 May 2025 15:46:52 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: xwLBA7Ax6Payo7XBnjLDNJSvc2RBTlECztTEyKalpBU=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bub+bmfe4PnreQ1ZPIst7Ck9C3Kep4qMMCvN4ZXfJXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9763 (0x2623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: May 8 15:46:53 2025 GMT Not After : May 15 15:46:52 2025 GMT Subject: CN=681cd1ed-b79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:5f:69:8b:68:d1:ff:17:66:ba:2b:f2:a1: 92:a0:db:4b:5e:f2:7d:8d:fe:19:ab:90:34:b6:8d: 2e:65:b8:71:11:21:99:6e:71:62:ab:47:a9:ce:77: 21:21:f0:a4:c0:5d:0a:0c:a7:a1:5b:18:7a:69:a8: 75:26:2c:e4:09:19:f7:c1:e7:87:de:46:eb:7b:23: a3:16:7b:ab:f0:3b:0d:5e:5f:f5:ed:ff:84:50:d4: d1:31:ba:3e:92:da:31:dd:b5:7a:2c:7a:c8:ab:3c: 6a:a9:69:74:e9:3a:f3:12:9a:af:dd:b6:12:2c:3d: b9:d1:81:a0:5f:de:57:12:55:e9:08:34:10:ab:32: 04:4e:77:14:fe:e7:da:09:ec:61:68:62:96:35:51: 0c:ad:21:97:bf:f6:be:a5:9c:7d:9f:c7:a1:13:f8: 45:5f:32:c3:45:7c:5e:5b:0f:96:7c:8f:a5:c2:63: 36:62:b4:5c:c5:95:71:e0:4e:4f:27:7d:4d:0b:f2: 27:be:57:7a:f7:1c:68:45:95:d0:05:04:8e:76:06: 4d:04:b0:cb:76:f6:4d:7a:86:4b:49:e1:b2:9d:2b: 39:7b:ee:bb:01:c4:ab:aa:af:40:0d:3e:73:c3:2a: fa:d0:a4:fa:6d:1e:1f:cf:13:05:55:7a:d0:a8:97: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:34:27:E9:56:AE:3E:8D:CE:FC:F6:19:E9:71:11:DC:B2:C6:62:09 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:29:8e:66:89:65:bf:ca:53:f0:0d:82:52:af:91:ad:08:e1: 81:a1:0c:12:44:0a:fe:0c:08:00:7d:15:0a:d4:28:4f:b7:de: a9:5b:f0:8a:35:15:0e:60:11:34:1b:ad:8b:dc:b4:19:e8:bb: 81:fc:2b:32:1c:23:1b:4d:71:62:6e:0c:3e:13:37:01:5f:66: c9:b4:22:ba:eb:a2:b7:10:36:c0:63:df:b0:47:30:04:c7:6d: 78:66:2a:f9:ef:cd:ed:ba:6b:f3:eb:33:a1:7b:8d:58:48:8c: 93:c7:68:a1:6a:4d:80:f1:85:a8:18:d9:f3:13:8c:74:1e:5d: 9a:5b:20:c6:93:97:0d:9e:b8:3f:1f:5c:90:5d:9a:cd:ca:ad: 17:cd:d5:c6:09:00:47:1a:15:a2:59:cb:1b:a8:98:28:0a:87: 23:d8:08:02:37:5c:b2:d5:2b:54:67:4a:66:eb:b8:f0:aa:eb: 1f:62:c4:16:aa:c5:f1:31:5b:97:4b:f0:33:eb:90:ef:1c:bd: 69:9e:21:8f:0e:4b:de:1b:9f:d2:71:25:3d:f7:bf:34:ca:71: 91:a4:7e:6b:89:0f:51:0a:e2:92:c9:eb:d4:41:47:0e:d9:7f: 29:04:dd:77:8f:6a:5d:73:01:6c:e2:0f:ab:81:46:fd:f6:71: ac:5c:de:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUwNTA4MTU0NjUzWhcNMjUwNTE1MTU0NjUyWjAYMRYwFAYD VQQDEw02ODFjZDFlZC1iNzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbdfaYto0f8XZror8qGSoNtLXvJ9jf4Zq5A0to0uZbhxESGZbnFiq0epznch IfCkwF0KDKehWxh6aah1JizkCRn3weeH3kbreyOjFnur8DsNXl/17f+EUNTRMbo+ ktox3bV6LHrIqzxqqWl06TrzEpqv3bYSLD250YGgX95XElXpCDQQqzIETncU/ufa CexhaGKWNVEMrSGXv/a+pZx9n8ehE/hFXzLDRXxeWw+WfI+lwmM2YrRcxZVx4E5P J31NC/Invld69xxoRZXQBQSOdgZNBLDLdvZNeoZLSeGynSs5e+67AcSrqq9ADT5z wyr60KT6bR4fzxMFVXrQqJepAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP80J+lW rj6Nzvz2GelxEdyyxmIJMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApKY5miWW/ylPwDYJSr5GtCOGBoQwSRAr+DAgAfRUK1ChPt96pW/CK NRUOYBE0G62L3LQZ6LuB/CsyHCMbTXFibgw+EzcBX2bJtCK666K3EDbAY9+wRzAE x214Zir5783tumvz6zOhe41YSIyTx2ihak2A8YWoGNnzE4x0Hl2aWyDGk5cNnrg/ H1yQXZrNyq0XzdXGCQBHGhWiWcsbqJgoCocj2AgCN1yy1StUZ0pm67jwqusfYsQW qsXxMVuXS/Az65DvHL1pniGPDkveG5/ScSU99780ynGRpH5riQ9RCuKSyevUQUcO 2X8pBN13j2pdcwFs4g+rgUb99nGsXN5v -----END CERTIFICATE-----Generated at Sat May 10 10:03:58 2025 by rpki-client