$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json) Hash identifier: qj0Tfi+u70alNc2zPLqEXChzniP+ixBioGbfP+FpOfM= Subject key identifier: FC:0F:DF:76:10:CE:7F:5D:B2:75:8C:2E:5C:C1:CA:A3:50:5C:05:38 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft Manifest number: 0EB6 Signing time: Sat 10 May 2025 17:34:55 +0000 Manifest this update: Sat 10 May 2025 17:34:55 +0000 Manifest next update: Sat 17 May 2025 17:34:55 +0000 Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: 51XgUmimR64njj3rQ1GnoZIW7P3KDM22Wdb/GA6Z+KU=) 2: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: GRtkIj1YL0gqEVBvZmLDoilCINMA8Q7mQLGbrlN+AYw=) 3: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: 69vf8i2AyBWTvcreeXZcAmXyRzf/6fUCTiPRkTLNVcA=) 4: 21C5EC42C27411ED9C3E8009C4F9AE02.roa (hash: DPa2SyiYsDe0TvzZ1Z3q6+1dtL6Alr2cq0P1vHVdLaM=) 5: 369A67D4B01B11EEBD075854C4F9AE02.roa (hash: ll8uPXO7+p+L4mr0tZPETWCxlV0OBmMVm5vFHlyDwyk=) 6: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: f+RwKKXcne4Q7FQMnvMgxVjrAJpS0nxTkUmEioq1Njw=) 7: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: B8KBNufHoIgJko/QQOXJs97tNZDlzfBWHkTjrMS1moo=) 8: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: GQ7BlSff2SRKmCMQxyAGueYKZPB5XCwxNw5oLLxj8Xc=) 9: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: +OviFQ85mowakK+fg84OXMpO+t1TRoDLWVpJ0HIDDFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3888 (0xf30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: May 10 17:34:55 2025 GMT Not After : May 17 17:34:55 2025 GMT Subject: CN=681f8e3f-371b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:d4:6c:1e:33:81:11:46:42:6f:2e:ec:6b: 76:e4:99:71:70:f4:61:23:df:9d:4f:f6:9e:87:e7: 8c:52:cc:3f:64:63:e7:fb:97:73:b7:c4:6f:cc:e1: d3:46:e3:4e:f9:6d:d2:60:3e:cf:4f:02:cf:11:a5: 56:43:64:53:29:d9:c1:74:2f:1c:0e:b2:34:54:e5: a0:85:3d:95:d8:19:f8:cd:9c:bf:fc:56:e4:c8:5a: 4a:3c:40:16:8f:6b:45:1f:b4:e4:56:28:9c:62:3f: 89:fa:a9:86:69:a1:f7:7b:54:9a:3e:79:fe:fd:06: be:df:ce:01:ae:ca:c4:1f:4a:08:23:d8:87:68:4a: 09:b5:a1:90:1f:1a:53:35:da:d8:3d:ce:d5:68:62: 52:57:70:15:73:ba:e3:5b:51:40:07:29:bc:f6:84: 83:ce:2e:e0:0a:8c:4a:2f:51:0d:5b:50:c2:2a:cf: eb:48:ed:92:41:46:c6:e6:6b:c8:83:21:a6:3d:53: 72:bf:d8:36:7d:df:c6:2e:1d:a0:c0:43:30:d1:1b: 76:01:35:54:6c:c0:32:7d:17:48:9d:55:5d:94:5c: c7:17:d1:4c:78:4b:16:82:cf:03:30:bd:d7:80:0c: 99:33:c6:a4:ac:d4:4d:19:53:17:7d:65:ef:e8:6a: 9c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:DF:76:10:CE:7F:5D:B2:75:8C:2E:5C:C1:CA:A3:50:5C:05:38 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5c:3e:3c:85:c3:9b:3a:71:f6:67:8c:55:76:7e:6a:5d:d0: ef:09:cb:61:9a:41:c1:a7:6d:5f:8d:43:34:59:cd:6a:2d:5a: 8e:8c:50:da:98:16:8b:89:4a:4b:f9:be:9e:0e:fb:59:74:27: 38:a4:12:07:a7:e6:e5:77:04:1f:9a:94:a9:1e:43:5d:18:60: ee:10:da:68:16:38:e8:b3:27:01:e1:0c:fe:b6:f9:59:af:72: 2b:24:ba:98:f2:23:b2:cd:27:08:69:7f:26:65:ce:2f:d5:33: fe:79:01:d9:02:c6:37:81:5d:bf:8c:bd:60:b2:e8:b0:be:25: ce:36:6a:31:93:16:69:17:13:e7:3c:22:3e:c7:67:58:1c:fb: 45:66:bc:bc:9d:02:8e:f9:1e:57:47:ce:6d:14:fd:7c:05:d8: c4:54:52:f8:dd:87:ea:1a:f5:98:f6:5c:fd:74:66:1a:2a:fb: bb:7f:3a:aa:ca:e6:04:19:f7:67:86:15:b9:93:85:2c:18:3a: df:a0:1f:78:fc:d1:de:99:52:ec:28:02:b0:b1:ce:7c:8f:26: 57:5d:71:07:b4:4d:04:21:31:19:d6:73:ca:fd:ed:0e:dc:d0: e7:9c:9d:be:39:ac:91:a7:f6:e2:f3:9c:ca:4e:1e:09:87:6a: 5b:cf:2b:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUwNTEwMTczNDU1WhcNMjUwNTE3MTczNDU1WjAYMRYwFAYD VQQDEw02ODFmOGUzZi0zNzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEzUbB4zgRFGQm8u7Gt25JlxcPRhI9+dT/aeh+eMUsw/ZGPn+5dzt8RvzOHT RuNO+W3SYD7PTwLPEaVWQ2RTKdnBdC8cDrI0VOWghT2V2Bn4zZy//FbkyFpKPEAW j2tFH7TkViicYj+J+qmGaaH3e1SaPnn+/Qa+384BrsrEH0oII9iHaEoJtaGQHxpT NdrYPc7VaGJSV3AVc7rjW1FABym89oSDzi7gCoxKL1ENW1DCKs/rSO2SQUbG5mvI gyGmPVNyv9g2fd/GLh2gwEMw0Rt2ATVUbMAyfRdInVVdlFzHF9FMeEsWgs8DML3X gAyZM8akrNRNGVMXfWXv6GqcSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwP33YQ zn9dsnWMLlzByqNQXAU4MB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB V2kxSVc2UVMydEsxSjNiM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjXD48hcObOnH2Z4xVdn5qXdDvCcthmkHBp21fjUM0Wc1qLVqOjFDa mBaLiUpL+b6eDvtZdCc4pBIHp+bldwQfmpSpHkNdGGDuENpoFjjosycB4Qz+tvlZ r3IrJLqY8iOyzScIaX8mZc4v1TP+eQHZAsY3gV2/jL1gsuiwviXONmoxkxZpFxPn PCI+x2dYHPtFZry8nQKO+R5XR85tFP18BdjEVFL43YfqGvWY9lz9dGYaKvu7fzqq yuYEGfdnhhW5k4UsGDrfoB94/NHemVLsKAKwsc58jyZXXXEHtE0EITEZ1nPK/e0O 3NDnnJ2+OayRp/bi85zKTh4Jh2pbzysh -----END CERTIFICATE-----Generated at Sun May 11 01:01:00 2025 by rpki-client