$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: Z822pGfA2Z+fqWxIdbzBzY/+bHdjQxQN4uJqiGJ6iuI= Subject key identifier: 43:22:61:3B:E1:AE:64:D3:60:AF:DF:D9:F6:06:3B:8E:93:C9:14:9F Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 0988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 097C Signing time: Wed 14 May 2025 20:15:02 +0000 Manifest this update: Wed 14 May 2025 20:15:02 +0000 Manifest next update: Wed 21 May 2025 20:15:02 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: Dbr3ELjtujDNUWozaBg1wWpLzlEPr1VTgsYNhdxonuc=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2440 (0x988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: May 14 20:15:02 2025 GMT Not After : May 21 20:15:02 2025 GMT Subject: CN=6824f9c6-f4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:49:97:e2:7f:6e:52:07:9f:86:0a:ef:ad: 2e:cf:bc:1c:a3:6c:82:e4:03:13:0a:18:91:5b:aa: b6:e2:39:51:dc:5f:6d:26:c9:93:b2:39:ab:28:91: 55:e1:4c:00:d0:39:09:1c:23:95:1b:40:02:29:61: 75:4a:8c:08:a0:a1:c8:7a:90:51:ab:c7:bc:fe:8f: 1e:06:67:a6:c3:05:f6:c5:26:84:d6:b1:22:03:74: ca:38:72:c9:5e:e9:ce:03:a1:47:83:e3:e5:50:9c: e6:63:bd:31:f0:cd:dd:0f:0c:07:48:c7:c0:84:77: c3:60:b6:b1:ee:76:ad:29:42:5f:ed:67:f1:93:91: 10:52:3c:42:cb:52:ac:50:97:20:35:bb:ce:c5:fb: 3f:ef:ee:79:b0:79:6c:79:18:76:7c:c4:45:db:ee: ec:84:4f:79:ce:01:15:cc:e5:89:b3:de:0e:31:35: da:c5:3b:a7:c2:51:f7:7b:86:d8:0d:d8:45:a5:f9: 5c:ae:79:6c:23:20:27:99:4b:f7:db:19:1d:7a:97: cb:1c:7a:f8:70:d4:12:0d:aa:e3:33:43:5e:c2:13: b4:bb:43:1a:ac:a9:f8:07:be:94:28:e9:fe:5b:bb: e9:a1:a9:87:77:44:7f:5c:56:9e:c7:b8:24:20:d4: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:22:61:3B:E1:AE:64:D3:60:AF:DF:D9:F6:06:3B:8E:93:C9:14:9F X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0b:38:36:cf:c7:2f:ca:34:55:ea:d6:a4:a6:db:f0:73:7b: 28:95:9c:a7:d8:9c:4a:8e:95:e5:ee:74:69:2d:47:66:c9:ff: 9d:bf:a7:1d:dd:1f:c9:f8:6a:7a:7b:90:0c:66:ba:b1:ec:ee: ca:f9:d4:8d:cd:84:7d:67:a1:3e:58:02:41:e7:45:8f:3f:a8: 78:02:1d:a7:80:ee:20:32:cd:b6:b4:33:78:49:22:c8:ba:5a: ef:f5:3f:11:2f:31:56:ef:17:80:11:c6:a2:8b:fe:6b:9b:60: cf:de:19:e9:7b:f6:6d:fe:39:ec:c7:13:d5:fa:59:02:18:46: 7b:8e:02:2d:46:4e:64:e9:a8:58:76:94:a3:58:97:4c:5b:fb: 19:e0:d7:6d:6d:e9:e8:cf:c3:a0:6f:00:96:26:07:e4:5f:58: 18:4a:6e:66:8f:8c:25:fe:ad:9b:c6:c0:15:13:d6:13:02:da: 07:8c:a5:e8:50:05:c7:b3:87:2d:a6:9b:60:c6:bb:22:92:5c: 7f:1c:33:04:94:7a:5c:e3:f6:f9:fe:fd:be:80:42:81:1e:47: 38:63:16:5d:eb:1e:ae:79:e0:16:84:08:34:a5:9a:01:98:1d: 41:3c:ad:8e:59:4b:42:fe:76:1a:ce:c2:04:b4:4e:63:79:12: 8e:bf:26:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjUwNTE0MjAxNTAyWhcNMjUwNTIxMjAxNTAyWjAYMRYwFAYD VQQDEw02ODI0ZjljNi1mNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrZJl+J/blIHn4YK760uz7wco2yC5AMTChiRW6q24jlR3F9tJsmTsjmrKJFV 4UwA0DkJHCOVG0ACKWF1SowIoKHIepBRq8e8/o8eBmemwwX2xSaE1rEiA3TKOHLJ XunOA6FHg+PlUJzmY70x8M3dDwwHSMfAhHfDYLax7natKUJf7Wfxk5EQUjxCy1Ks UJcgNbvOxfs/7+55sHlseRh2fMRF2+7shE95zgEVzOWJs94OMTXaxTunwlH3e4bY DdhFpflcrnlsIyAnmUv32xkdepfLHHr4cNQSDarjM0NewhO0u0MarKn4B76UKOn+ W7vpoamHd0R/XFaex7gkINS2CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMiYTvh rmTTYK/f2fYGO46TyRSfMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYCzg2z8cvyjRV6takptvwc3solZyn2JxKjpXl7nRpLUdmyf+dv6cd 3R/J+Gp6e5AMZrqx7O7K+dSNzYR9Z6E+WAJB50WPP6h4Ah2ngO4gMs22tDN4SSLI ulrv9T8RLzFW7xeAEcaii/5rm2DP3hnpe/Zt/jnsxxPV+lkCGEZ7jgItRk5k6ahY dpSjWJdMW/sZ4Ndtbenoz8OgbwCWJgfkX1gYSm5mj4wl/q2bxsAVE9YTAtoHjKXo UAXHs4ctpptgxrsiklx/HDMElHpc4/b5/v2+gEKBHkc4YxZd6x6ueeAWhAg0pZoB mB1BPK2OWUtC/nYazsIEtE5jeRKOvyau -----END CERTIFICATE-----Generated at Fri May 16 18:36:15 2025 by rpki-client