$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: RWp1FrpEdH7h5W6TTb1qKdlflG0OjYdrsD219HkpCJQ= Subject key identifier: EC:C6:4B:22:E6:D7:B9:D5:DD:AD:D7:ED:6C:09:ED:5A:E0:00:3E:CD Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 0144 Signing time: Thu 03 Jul 2025 04:58:25 +0000 Manifest this update: Thu 03 Jul 2025 04:58:25 +0000 Manifest next update: Thu 10 Jul 2025 04:58:25 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: pU/H4oo+L/Cxjtxskp9MJfmpzDfTlJ5hkgOu8rYNjQg=) 2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: gez5Qlcfm6c6NA79ftuR/sN6GbAgowRygpjom7unUmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Validity Not Before: Jul 3 04:58:25 2025 GMT Not After : Jul 10 04:58:25 2025 GMT Subject: CN=68660df1-5b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:f3:1b:8b:12:f0:6e:d5:52:78:ca:49:41: 24:f4:83:75:e2:72:14:5c:fe:62:d6:7b:fb:a8:06: af:06:33:6b:0e:fc:9f:4d:73:1a:10:d2:1d:ee:f6: 25:1e:5b:c7:96:ff:11:6a:80:8d:3e:34:95:c5:45: b7:0f:5f:f0:73:57:b1:09:f7:c2:03:bc:2c:6b:0f: ee:d1:1b:a3:83:3f:dc:71:52:55:cc:5d:bb:de:ba: f2:49:33:2d:a5:48:98:25:60:b8:eb:28:dc:7b:a7: fa:4f:82:3c:e3:8d:1f:ca:ed:dd:56:6d:ca:45:16: 4f:74:4a:c2:ad:c1:2a:46:cb:23:e1:9b:18:1d:2d: d7:72:e9:90:a9:c3:13:0f:b2:c5:40:2b:97:42:86: 31:73:a3:c6:0c:fd:6c:fb:ce:19:b1:fa:9a:17:8b: 96:7f:04:80:af:a7:fc:93:a3:22:af:74:b2:dd:d7: 80:dd:ce:9e:68:31:ca:30:30:5d:e2:78:44:5d:ab: 88:44:cd:95:78:dd:84:91:5d:4a:d7:ed:d2:24:19: 24:ea:27:2b:be:86:01:1c:0d:3c:fa:79:e3:c9:73: c7:13:3d:01:bc:70:06:f2:4f:67:96:64:fa:41:45: b8:ca:9d:36:74:81:ab:aa:48:6b:a3:79:7d:12:87: ef:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C6:4B:22:E6:D7:B9:D5:DD:AD:D7:ED:6C:09:ED:5A:E0:00:3E:CD X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:da:d4:c8:ed:66:f0:1b:c0:07:49:e1:8d:d5:88:88:49:a6: a0:f9:4b:b3:9f:61:13:73:cf:6f:4d:5a:7e:dc:76:4f:65:16: 76:f9:90:ad:26:e7:d4:21:3d:a7:0d:e0:c7:39:4e:60:eb:6b: d6:80:55:0e:4a:ba:17:0c:9f:61:eb:e7:3a:1a:07:ad:db:ed: 6e:b0:6d:55:a7:92:71:96:5f:fb:fc:42:78:a3:04:5e:df:83: 33:7a:65:36:a7:bf:1f:12:9c:10:6f:bf:5a:a5:df:13:c0:4c: 4e:c7:4c:d4:9c:13:1f:53:91:91:b0:d4:09:d1:cc:fd:ba:f4: 57:b5:7f:54:74:bf:ae:4f:75:81:3e:4a:4f:05:10:e1:13:f1: 73:6f:27:b8:45:7c:db:50:40:04:a9:40:41:71:d4:c9:29:bf: 12:6e:ba:55:31:1f:b9:67:e4:6f:1d:6f:c5:60:97:87:ec:25: 07:0b:bd:b7:08:12:d8:79:fa:c4:be:1c:26:ab:8f:a1:1b:4e: e7:87:ce:fa:c6:0b:68:a6:d0:34:70:b4:d9:05:ae:1d:d5:b6: dc:f1:df:bf:c6:f4:0e:f0:d2:13:2b:0a:6c:12:b7:64:a5:8d: 5f:fb:2d:60:2a:d7:d5:04:ae:48:f0:81:96:f2:eb:68:77:c9: 6a:14:bc:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF MkNDQkIyNUEwHhcNMjUwNzAzMDQ1ODI1WhcNMjUwNzEwMDQ1ODI1WjAYMRYwFAYD VQQDEw02ODY2MGRmMS01YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnrzG4sS8G7VUnjKSUEk9IN14nIUXP5i1nv7qAavBjNrDvyfTXMaENId7vYl HlvHlv8RaoCNPjSVxUW3D1/wc1exCffCA7wsaw/u0Rujgz/ccVJVzF273rrySTMt pUiYJWC46yjce6f6T4I8440fyu3dVm3KRRZPdErCrcEqRssj4ZsYHS3XcumQqcMT D7LFQCuXQoYxc6PGDP1s+84ZsfqaF4uWfwSAr6f8k6Mir3Sy3deA3c6eaDHKMDBd 4nhEXauIRM2VeN2EkV1K1+3SJBkk6icrvoYBHA08+nnjyXPHEz0BvHAG8k9nlmT6 QUW4yp02dIGrqkhro3l9EofvMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzGSyLm 17nV3a3X7WwJ7VrgAD7NMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy2tTI7WbwG8AHSeGN1YiISaag+Uuzn2ETc89vTVp+3HZPZRZ2+ZCt JufUIT2nDeDHOU5g62vWgFUOSroXDJ9h6+c6Gget2+1usG1Vp5Jxll/7/EJ4owRe 34MzemU2p78fEpwQb79apd8TwExOx0zUnBMfU5GRsNQJ0cz9uvRXtX9UdL+uT3WB PkpPBRDhE/Fzbye4RXzbUEAEqUBBcdTJKb8SbrpVMR+5Z+RvHW/FYJeH7CUHC723 CBLYefrEvhwmq4+hG07nh876xgtoptA0cLTZBa4d1bbc8d+/xvQO8NITKwpsErdk pY1f+y1gKtfVBK5I8IGW8utod8lqFLxS -----END CERTIFICATE-----Generated at Thu Jul 3 19:47:00 2025 by rpki-client