$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json) Hash identifier: 5IihNwSb53A6zX5UNTVnDZ9mVnpeJnZIaO2zcAD105A= Subject key identifier: 3B:C0:E6:32:E1:4F:91:70:F2:36:E2:68:E1:1D:EF:C1:BB:4A:49:2D Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft Manifest number: B5 Signing time: Thu 15 May 2025 05:16:11 +0000 Manifest this update: Thu 15 May 2025 05:16:11 +0000 Manifest next update: Thu 22 May 2025 05:16:11 +0000 Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: Pxg+tu5pj/d6ParYQ2RVoyoHavc5oKUYsI/Uq1cJ2EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Validity Not Before: May 15 05:16:11 2025 GMT Not After : May 22 05:16:11 2025 GMT Subject: CN=6825789b-5d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:69:9d:3b:87:06:fb:36:ec:0b:b9:48:fe: be:23:2a:a4:07:c9:28:bc:82:36:b4:a1:19:43:7a: 56:94:cd:cd:22:a3:27:5d:45:f1:91:75:42:97:c3: 8c:6b:e0:6f:2d:37:db:41:b0:a5:85:df:97:03:be: 6a:4a:82:e4:0d:39:6e:f7:8b:e6:33:51:4a:33:fe: 65:84:9c:d9:7f:79:5e:b9:eb:3a:31:8a:7b:c8:72: 21:53:1a:28:04:c0:0d:ea:2e:26:40:21:5c:af:01: b7:b3:fc:bc:c3:cd:3c:80:f5:e2:0d:a9:4f:c9:ee: 8b:56:99:52:7d:4f:fd:a7:b6:1b:d6:dc:0f:69:73: 21:94:c8:dc:b9:8a:e8:6a:90:c1:4c:dd:b8:84:91: 8d:5a:67:c8:51:7d:a1:90:fc:3b:d6:7d:48:77:8b: 06:f0:33:7a:83:13:0d:f8:0b:7b:83:86:6f:44:35: d6:db:07:b2:14:79:18:0d:5e:81:60:52:00:e8:c0: c3:02:9f:07:5e:ce:21:9b:9d:49:45:1f:e6:53:69: 84:b6:0c:66:f6:d9:b2:17:65:95:cc:b1:43:b2:ec: ab:79:38:69:65:f3:95:36:f0:a7:41:61:47:df:98: 85:34:7d:26:ec:45:3c:b4:13:fd:97:b2:bc:e0:20: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C0:E6:32:E1:4F:91:70:F2:36:E2:68:E1:1D:EF:C1:BB:4A:49:2D X509v3 Authority Key Identifier: keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:81:bd:f8:ef:cd:8f:15:ee:31:50:68:e8:9d:52:6f:6a:bd: 48:dc:fa:8b:1b:1b:07:4c:85:09:5c:bb:1b:97:60:9b:c9:bd: f5:cf:ed:d6:44:34:ea:60:9d:64:60:da:0b:e6:7f:ed:e6:dd: d9:0b:de:9c:e0:1b:af:04:3a:29:0f:eb:db:90:c1:52:35:2a: 5c:0d:6a:fc:a2:26:87:ff:24:20:31:51:e4:37:01:57:9a:b6: 17:ca:68:a5:32:14:a4:a3:a7:21:7e:74:63:e0:25:e0:2a:36: d2:ed:57:b9:7d:57:1c:c5:bb:c6:41:3d:d1:f8:5e:0e:f4:2a: ea:9f:61:41:15:ee:a4:84:dd:32:5b:b4:a4:dc:23:76:4f:79: 5d:8f:85:04:b4:9e:4c:17:ec:4b:51:f4:0e:57:e1:23:f1:09: 7b:55:89:68:86:aa:ec:14:08:72:74:a8:39:ba:da:92:44:e5: 15:2e:94:74:75:70:fe:b5:8f:47:93:4f:22:04:a8:ff:34:38: 04:b1:f9:85:26:15:e0:7a:59:4a:66:ff:17:7d:90:b4:07:04: da:77:68:a2:15:e3:f4:4b:88:1c:de:9d:e7:fa:20:36:5a:79: 2f:e2:d3:32:75:9b:f4:a4:8d:a4:29:89:3f:ed:e3:c2:2a:cc: 05:c9:84:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzRDMxMTAvBgNVBAUTKEMwRkYxRjMyNjdEOEFEOTgxMjhCM0UzOTdDQ0ZGNzk3 M0I3NTA4Q0QwHhcNMjUwNTE1MDUxNjExWhcNMjUwNTIyMDUxNjExWjAYMRYwFAYD VQQDEw02ODI1Nzg5Yi01ZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbVpnTuHBvs27Au5SP6+IyqkB8kovII2tKEZQ3pWlM3NIqMnXUXxkXVCl8OM a+BvLTfbQbClhd+XA75qSoLkDTlu94vmM1FKM/5lhJzZf3leues6MYp7yHIhUxoo BMAN6i4mQCFcrwG3s/y8w808gPXiDalPye6LVplSfU/9p7Yb1twPaXMhlMjcuYro apDBTN24hJGNWmfIUX2hkPw71n1Id4sG8DN6gxMN+At7g4ZvRDXW2weyFHkYDV6B YFIA6MDDAp8HXs4hm51JRR/mU2mEtgxm9tmyF2WVzLFDsuyreThpZfOVNvCnQWFH 35iFNH0m7EU8tBP9l7K84CD37QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvA5jLh T5Fw8jbiaOEd78G7SkktMB8GA1UdIwQYMBaAFMD/HzJn2K2YEos+OXzP95c7dQjN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTNEMy80MjUyOUY5RTFE ODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJaZ1NpejQ1Zk1fM2x6dDFD TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQOGZNbWZZclpnU2l6NDVmTV8zbHp0MUNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTNEMy80MjUyOUY5RTFEODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJa Z1NpejQ1Zk1fM2x6dDFDTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWgb34782PFe4xUGjonVJvar1I3PqLGxsHTIUJXLsbl2Cbyb31z+3W RDTqYJ1kYNoL5n/t5t3ZC96c4BuvBDopD+vbkMFSNSpcDWr8oiaH/yQgMVHkNwFX mrYXymilMhSko6chfnRj4CXgKjbS7Ve5fVccxbvGQT3R+F4O9Crqn2FBFe6khN0y W7Sk3CN2T3ldj4UEtJ5MF+xLUfQOV+Ej8Ql7VYlohqrsFAhydKg5utqSROUVLpR0 dXD+tY9Hk08iBKj/NDgEsfmFJhXgellKZv8XfZC0BwTad2iiFeP0S4gc3p3n+iA2 Wnkv4tMydZv0pI2kKYk/7ePCKswFyYQB -----END CERTIFICATE-----Generated at Fri May 16 19:27:02 2025 by rpki-client