$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: D15E/nnZ6LEO4LyW/AcmnwVrCjJxHEJuLiPwfekBUB8= Subject key identifier: 8D:4A:C8:AA:C9:8C:87:CC:1A:52:30:31:53:68:89:D9:AA:89:40:1D Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 13FE Signing time: Sat 10 May 2025 16:50:43 +0000 Manifest this update: Sat 10 May 2025 16:50:42 +0000 Manifest next update: Sat 17 May 2025 16:50:42 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: uyBcVsJYlyhOfhlPesMLPAxqMRXHaEmH1h+DjsgWUow=) 2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: 3UDqux2pyFF/Bk7qZfNBKUplKVtNPBgZPpnXk8snk4g=) 3: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: OwQjzjq4z1p3OKHRKYKyS/M55XVWZ+v6tClUy+yiWnc=) 4: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: PdnkTM08eG2sjPAy8+yW/MtnozIOdAkbD6OPtta7i0w=) 5: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: TNsMJFZbcdKegim5sz+iSFbDGvmlLTbjneRhrtC2NlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5137 (0x1411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: May 10 16:50:42 2025 GMT Not After : May 17 16:50:42 2025 GMT Subject: CN=681f83e3-1c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:2b:27:7b:ea:d3:70:93:04:bb:a2:f4:7d: b6:e5:23:9c:04:a4:2e:d7:be:84:97:d4:01:c0:40: 01:c0:84:2d:7b:db:6a:44:05:8f:51:e4:1c:e6:d9: e8:4b:3e:f6:1f:c3:85:33:5c:96:45:70:d8:0d:15: 59:dc:21:5a:3c:a9:06:2f:53:0f:33:0c:ba:af:f2: 4a:51:45:0b:ee:93:42:16:f4:c8:65:83:70:f7:dd: 54:08:7d:9f:c3:5e:94:22:19:f2:a1:b1:0d:83:88: 16:e5:a3:97:aa:a5:0f:61:ca:68:2b:9e:88:9f:cf: 18:18:33:f9:87:d6:07:92:a9:02:f0:4a:2b:1b:e3: 0d:32:93:b3:81:76:db:a7:7e:2b:63:26:8a:d9:19: d9:68:c9:b7:84:eb:bc:7b:c1:c0:04:08:21:9b:f7: 80:e6:84:b0:3b:8b:b8:50:d9:80:c9:59:71:cc:bb: a8:e6:5f:3c:d4:b2:ec:09:c4:e4:98:72:f2:a5:0c: df:b3:30:78:f9:90:cd:87:5f:76:87:80:f8:b7:01: e7:8a:b6:2a:28:87:86:8c:38:55:e5:49:20:18:ee: ce:37:1b:3a:d6:a9:7a:14:f1:e0:cc:bf:88:ae:c4: 9f:9e:2a:af:b3:06:eb:60:8d:fd:2c:8b:6b:e7:64: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4A:C8:AA:C9:8C:87:CC:1A:52:30:31:53:68:89:D9:AA:89:40:1D X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:aa:54:d9:8d:84:4a:57:82:05:a3:17:a1:1d:ab:5a:18:bc: 83:6e:30:c2:e1:7b:1e:21:c5:fd:1b:8d:16:16:36:6a:be:00: 5d:49:37:f1:00:7f:e7:f2:87:fa:0d:9f:06:b4:d9:5a:68:af: 47:a3:43:bb:05:50:85:4e:a1:3a:d3:61:fd:4d:fa:e3:82:7e: c3:03:e4:56:7c:ac:ba:57:aa:9e:fb:8d:00:df:ce:31:3f:ee: d6:d3:32:a9:9c:67:58:61:58:19:0f:40:32:d4:b9:2c:18:19: c3:69:c2:e5:7d:4d:a2:5a:49:92:12:43:74:40:de:7c:a7:6e: 4b:e2:07:1a:af:2d:3f:2b:bd:67:32:d1:de:8b:71:2b:6b:bb: 5a:b8:21:fd:69:6a:10:12:35:0f:be:4c:ff:7d:03:0c:d5:26: 2a:17:95:04:42:26:3c:cd:06:61:69:dc:2d:0e:c8:d6:00:c2: 50:d9:d2:10:a8:a0:97:e6:e3:d9:b1:e6:37:8d:30:c7:c1:4a: 93:7c:6a:fd:eb:53:ba:fb:20:5a:cc:54:29:12:f9:dd:7b:00: cd:c2:7f:22:1b:55:96:c9:57:ef:ba:ee:4e:3c:d3:c0:95:a2: 55:95:5f:ca:75:5d:2f:35:a0:04:cd:64:69:d9:84:bf:a9:8c: 6d:7c:45:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNTEwMTY1MDQyWhcNMjUwNTE3MTY1MDQyWjAYMRYwFAYD VQQDEw02ODFmODNlMy0xYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmkrJ3vq03CTBLui9H225SOcBKQu176El9QBwEABwIQte9tqRAWPUeQc5tno Sz72H8OFM1yWRXDYDRVZ3CFaPKkGL1MPMwy6r/JKUUUL7pNCFvTIZYNw991UCH2f w16UIhnyobENg4gW5aOXqqUPYcpoK56In88YGDP5h9YHkqkC8EorG+MNMpOzgXbb p34rYyaK2RnZaMm3hOu8e8HABAghm/eA5oSwO4u4UNmAyVlxzLuo5l881LLsCcTk mHLypQzfszB4+ZDNh192h4D4twHnirYqKIeGjDhV5UkgGO7ONxs61ql6FPHgzL+I rsSfniqvswbrYI39LItr52SMmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1KyKrJ jIfMGlIwMVNoidmqiUAdMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkqlTZjYRKV4IFoxehHataGLyDbjDC4XseIcX9G40WFjZqvgBdSTfx AH/n8of6DZ8GtNlaaK9Ho0O7BVCFTqE602H9Tfrjgn7DA+RWfKy6V6qe+40A384x P+7W0zKpnGdYYVgZD0Ay1LksGBnDacLlfU2iWkmSEkN0QN58p25L4gcary0/K71n MtHei3Era7tauCH9aWoQEjUPvkz/fQMM1SYqF5UEQiY8zQZhadwtDsjWAMJQ2dIQ qKCX5uPZseY3jTDHwUqTfGr961O6+yBazFQpEvndewDNwn8iG1WWyVfvuu5OPNPA laJVlV/KdV0vNaAEzWRp2YS/qYxtfEWK -----END CERTIFICATE-----Generated at Mon May 12 04:09:03 2025 by rpki-client