$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json) Hash identifier: HycPqC1h7u9VaVsI0JhYL9qNQoLnDVH+Een9qimYEJY= Subject key identifier: E0:95:82:F4:35:3B:CB:A4:1D:A4:80:02:1F:F9:47:A3:3F:EF:88:E5 Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:11:10 +0000 Manifest this update: Thu 03 Jul 2025 06:11:09 +0000 Manifest next update: Thu 10 Jul 2025 06:11:09 +0000 Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: IxLddlI3RuoN3g4jqxRVxndVhXoEjfhe2c0iU+XxQZ4=) 2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Validity Not Before: Jul 3 06:11:09 2025 GMT Not After : Jul 10 06:11:09 2025 GMT Subject: CN=68661efd-805c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:df:95:f9:ab:71:0d:c8:25:27:42:92:2f: db:ab:61:da:7f:3e:2e:27:83:d9:e6:51:68:04:7d: e4:c8:42:0d:ef:0b:b3:05:52:28:10:6d:a5:47:da: 2c:cc:87:3b:8a:41:e7:b8:91:03:64:22:f4:29:5b: 46:62:17:4f:34:97:f5:9a:51:70:81:a8:a3:41:e1: 3d:2d:ab:3c:bb:ab:98:fe:15:47:00:aa:d4:2a:67: 6e:b0:8a:21:0b:83:b8:03:d0:9b:6b:43:4f:90:b2: 36:19:1c:a5:da:b7:65:8a:4f:c9:b4:85:90:87:f7: d1:b8:63:1d:18:fa:16:77:64:20:b4:b6:d7:6c:d4: 1c:27:e8:92:4e:b6:61:c5:27:8b:22:8a:27:b2:c9: 4b:20:b4:d5:8e:e6:b5:1e:4a:9e:4c:c7:a1:56:0a: 4a:29:74:1e:b7:a6:6e:3c:fc:35:2a:82:0d:0f:b3: 3a:45:8d:33:e2:5d:5f:9d:b7:e3:90:e4:50:ad:35: 66:6e:0d:d3:4f:ed:40:14:ae:78:81:bf:0f:9e:7f: 32:1d:ae:b8:41:11:72:c7:06:f1:84:c4:88:89:d1: cc:c6:6f:0a:f0:85:21:c9:fa:47:89:85:12:75:11: c8:54:2b:1e:05:81:1a:83:22:3a:4a:07:8d:1a:4b: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:95:82:F4:35:3B:CB:A4:1D:A4:80:02:1F:F9:47:A3:3F:EF:88:E5 X509v3 Authority Key Identifier: keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:bd:3a:ee:97:23:e9:67:87:cd:59:1a:c4:0b:15:2e:5c:c9: 1a:90:93:e7:96:53:70:4d:e2:f8:d4:f9:61:22:f7:50:f1:0c: 37:15:5e:32:d0:9e:4f:fb:7f:c8:43:fa:09:ce:73:fa:3d:4e: a5:42:f0:19:e8:e8:5f:bb:0d:a2:ef:f2:48:e6:6a:f0:c8:19: 3d:64:f6:da:dc:ec:fa:af:1b:ef:4f:10:c1:d0:33:e0:27:bf: 7e:3d:5f:ba:48:72:91:fe:05:06:5b:da:d5:4a:c1:74:ef:08: 57:ed:c3:53:1c:6c:8c:63:62:a1:8c:97:15:1f:28:7c:02:e7: b8:8c:5a:06:76:60:06:91:ca:55:18:b8:73:60:be:0e:91:e1: 3f:54:af:7f:30:5e:82:15:86:a1:5a:14:96:c1:06:e2:bd:4a: ae:16:ca:82:f6:f4:0a:3e:11:8d:9c:ee:9b:c0:4c:d8:eb:7f: 55:95:b9:7b:6d:96:d2:a5:0f:e8:6a:53:8e:74:c0:7c:fb:36: bb:d2:e6:b6:db:2f:52:c8:c6:95:bb:55:b3:16:71:07:24:c5: ce:89:5a:5f:83:9a:e3:a3:37:30:67:38:cc:fe:4f:52:83:f7: 9e:31:7b:52:21:ac:ea:2a:52:d8:f1:1b:fd:bb:af:d6:a7:20: f8:8f:8d:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKEMzOTNCQ0RGN0Q0NUE3MTk2RkYzQ0Q2RDMwRDYyMzBE RjRGREM1N0QwHhcNMjUwNzAzMDYxMTA5WhcNMjUwNzEwMDYxMTA5WjAYMRYwFAYD VQQDEw02ODY2MWVmZC04MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjLflfmrcQ3IJSdCki/bq2Hafz4uJ4PZ5lFoBH3kyEIN7wuzBVIoEG2lR9os zIc7ikHnuJEDZCL0KVtGYhdPNJf1mlFwgaijQeE9Las8u6uY/hVHAKrUKmdusIoh C4O4A9Cba0NPkLI2GRyl2rdlik/JtIWQh/fRuGMdGPoWd2QgtLbXbNQcJ+iSTrZh xSeLIoonsslLILTVjua1HkqeTMehVgpKKXQet6ZuPPw1KoIND7M6RY0z4l1fnbfj kORQrTVmbg3TT+1AFK54gb8Pnn8yHa64QRFyxwbxhMSIidHMxm8K8IUhyfpHiYUS dRHIVCseBYEagyI6SgeNGkvJ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCVgvQ1 O8ukHaSAAh/5R6M/74jlMB8GA1UdIwQYMBaAFMOTvN99RacZb/PNbTDWIw30/cV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi9GQzExQkZEMjQ1 QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4bHY4ODF0TU5ZakRmVDl4 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi9GQzExQkZEMjQ1QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4 bHY4ODF0TU5ZakRmVDl4WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVvTrulyPpZ4fNWRrECxUuXMkakJPnllNwTeL41PlhIvdQ8Qw3FV4y 0J5P+3/IQ/oJznP6PU6lQvAZ6Ohfuw2i7/JI5mrwyBk9ZPba3Oz6rxvvTxDB0DPg J79+PV+6SHKR/gUGW9rVSsF07whX7cNTHGyMY2KhjJcVHyh8Aue4jFoGdmAGkcpV GLhzYL4OkeE/VK9/MF6CFYahWhSWwQbivUquFsqC9vQKPhGNnO6bwEzY639Vlbl7 bZbSpQ/oalOOdMB8+za70ua22y9SyMaVu1WzFnEHJMXOiVpfg5rjozcwZzjM/k9S g/eeMXtSIazqKlLY8Rv9u6/WpyD4j42o -----END CERTIFICATE-----Generated at Thu Jul 3 23:23:33 2025 by rpki-client