$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft File: 8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json) Hash identifier: NbLVDdbLsg1qTqNS9wkcdJgkcERpPQZ8uwJqHlNvLkU= Subject key identifier: A6:F5:33:1C:9C:D6:AA:FC:FD:73:24:01:F1:C3:60:12:BB:20:E8:B0 Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17 Certificate issuer: /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft Manifest number: 56 Signing time: Thu 15 May 2025 06:30:28 +0000 Manifest this update: Thu 15 May 2025 06:30:28 +0000 Manifest next update: Thu 22 May 2025 06:30:27 +0000 Files and hashes: 1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: xVrCE/F/ctmgaWzfT5ggB408PCDHs/9nDYpcwYb4lQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D756, serialNumber=F309B493A92EE7C6295E0090630A251A1D136517 Validity Not Before: May 15 06:30:28 2025 GMT Not After : May 22 06:30:27 2025 GMT Subject: CN=68258a04-2cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:45:de:49:1c:86:6f:94:3a:a6:9a:ac:d5: 3e:d6:3f:70:f1:93:6b:43:79:83:a1:3f:81:b2:44: 4e:d3:1e:67:48:d5:63:dd:d7:25:89:9f:36:a4:0d: c8:b8:ef:ec:4e:7a:18:1a:7e:bf:7c:4e:a8:f8:5f: d2:c7:b3:0f:66:fe:87:d0:68:2c:9b:56:3d:6a:f0: 61:0e:93:92:6f:de:df:df:2a:79:89:f2:43:04:52: e3:fc:38:18:0d:9b:38:81:6a:4b:6c:88:50:a9:11: 4d:d4:d3:29:61:52:ce:6e:fe:bf:35:ca:20:03:f5: b4:fc:1a:40:c8:74:29:58:55:b2:43:37:dd:59:4c: 05:42:4d:88:e1:a1:0d:0f:6d:1d:15:cb:83:72:38: 86:78:6b:c6:bd:a5:3c:6c:98:98:b6:f1:0a:4f:c5: 90:a9:3d:30:f4:3b:b5:9a:63:69:9c:ce:22:fe:0e: c4:b6:76:61:39:ed:5b:e4:91:b9:7d:2e:a7:65:26: 8a:f6:b5:7a:9c:71:7a:af:b1:c1:82:4b:5e:35:97: 90:1e:90:37:4a:ce:d0:b4:eb:2a:ed:4e:cc:f9:32: 02:26:2f:bf:a9:a9:bb:36:30:32:aa:fd:e2:da:22: 54:5b:9d:e5:3c:89:70:14:9c:34:9b:04:2a:2b:3c: 73:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F5:33:1C:9C:D6:AA:FC:FD:73:24:01:F1:C3:60:12:BB:20:E8:B0 X509v3 Authority Key Identifier: keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:11:7f:b0:fc:84:25:03:d3:d0:3f:77:70:45:f3:bf:62:97: 69:62:d7:14:88:38:a0:10:45:6d:de:a8:92:47:73:d4:33:c4: 8e:ea:bb:35:84:ec:69:70:36:3a:f5:d6:77:ab:fa:75:bd:cd: 10:c0:cc:b3:88:f0:aa:3e:cd:77:91:17:c1:41:a7:8a:b4:2b: c3:2f:fe:88:48:30:56:77:30:95:91:d4:3d:0c:50:f3:d6:91: 98:4a:76:76:23:6d:6b:90:79:a5:13:ef:ac:63:5b:a8:68:d2: a6:22:93:65:86:98:ca:47:16:fb:12:58:2d:a3:fd:c5:50:f8: d4:84:74:ae:87:29:1c:b2:a7:1b:73:99:d1:a2:ac:64:90:57: 9c:7f:8b:de:43:02:05:3d:20:65:eb:8e:b5:6e:05:37:8c:68: 33:a1:52:07:a8:21:3d:0d:99:91:80:9e:8b:e0:f6:c4:5d:8b: a0:c1:b0:05:40:dd:62:6e:ff:c8:70:40:2e:65:29:db:90:5b: 8c:1e:ee:5b:57:92:44:4a:e7:be:2c:b9:2e:06:83:da:66:c3: 6b:55:ee:ae:f0:e7:14:bc:fc:ea:a5:d8:52:3c:7b:2d:b5:f6: 9a:e3:e6:e9:8f:d6:b3:da:32:6b:b1:46:f8:e7:21:fa:c3:0c: 1f:fc:bb:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDc1NjExMC8GA1UEBRMoRjMwOUI0OTNBOTJFRTdDNjI5NUUwMDkwNjMwQTI1MUEx RDEzNjUxNzAeFw0yNTA1MTUwNjMwMjhaFw0yNTA1MjIwNjMwMjdaMBgxFjAUBgNV BAMTDTY4MjU4YTA0LTJjZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOIEXeSRyGb5Q6ppqs1T7WP3Dxk2tDeYOhP4GyRE7THmdI1WPd1yWJnzakDci4 7+xOehgafr98Tqj4X9LHsw9m/ofQaCybVj1q8GEOk5Jv3t/fKnmJ8kMEUuP8OBgN mziBaktsiFCpEU3U0ylhUs5u/r81yiAD9bT8GkDIdClYVbJDN91ZTAVCTYjhoQ0P bR0Vy4NyOIZ4a8a9pTxsmJi28QpPxZCpPTD0O7WaY2mcziL+DsS2dmE57Vvkkbl9 LqdlJor2tXqccXqvscGCS141l5AekDdKztC06yrtTsz5MgImL7+pqbs2MDKq/eLa IlRbneU8iXAUnDSbBCorPHORAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpvUzHJzW qvz9cyQB8cNgErsg6LAwHwYDVR0jBBgwFoAU8wm0k6ku58YpXgCQYwolGh0TZRcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNENzU2LzZBNDIxQTgwQjA2 NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZcFhnQ1FZd29sR2gwVFpS Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHdtMGs2a3U1OFlwWGdDUVl3b2xHaDBUWlJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE NzU2LzZBNDIxQTgwQjA2NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZ cFhnQ1FZd29sR2gwVFpSYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHIRf7D8hCUD09A/d3BF879il2li1xSIOKAQRW3eqJJHc9QzxI7quzWE 7GlwNjr11ner+nW9zRDAzLOI8Ko+zXeRF8FBp4q0K8Mv/ohIMFZ3MJWR1D0MUPPW kZhKdnYjbWuQeaUT76xjW6ho0qYik2WGmMpHFvsSWC2j/cVQ+NSEdK6HKRyypxtz mdGirGSQV5x/i95DAgU9IGXrjrVuBTeMaDOhUgeoIT0NmZGAnovg9sRdi6DBsAVA 3WJu/8hwQC5lKduQW4we7ltXkkRK574suS4Gg9pmw2tV7q7w5xS8/Oql2FI8ey21 9prj5umP1rPaMmuxRvjnIfrDDB/8u5A= -----END CERTIFICATE-----Generated at Sat May 17 03:45:02 2025 by rpki-client