$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json) Hash identifier: Fn6/K3Bw8PKDMOq1mP5B1TqGPmRvBnwOkoRlFgUiGsA= Subject key identifier: 06:55:F9:17:12:D5:6D:C8:97:9F:74:AA:62:77:7B:C4:D7:C4:A7:89 Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft Manifest number: 011D Signing time: Tue 13 May 2025 03:57:45 +0000 Manifest this update: Tue 13 May 2025 03:57:44 +0000 Manifest next update: Tue 20 May 2025 03:57:44 +0000 Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: wAaa8DI+BF6QnqRpAOjBJok080AljVNbe5SBWZ+vYGE=) 2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: 2gzrMjXP4Am0pQ80O9+rI75KjzU6RpDqcXF/j3n7Tn0=) 3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: +PmKxO27F3AHIJ3oHg1od1w1E6envfjFt6OCrfWbtQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Validity Not Before: May 13 03:57:44 2025 GMT Not After : May 20 03:57:44 2025 GMT Subject: CN=6822c338-2412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:5a:cd:03:a0:31:e1:08:f6:b9:8d:57:53: 44:9e:40:fd:a9:ac:8f:c7:77:40:5d:05:d6:96:d9: a2:39:c3:e8:d1:42:40:d3:58:1c:9b:fa:f4:c1:4e: 07:53:45:8c:b8:82:e4:9c:1d:85:74:ad:74:e1:eb: d8:e6:16:b9:64:78:ca:24:14:33:6d:d8:a2:f4:bb: 5d:c8:dd:07:7f:d8:d2:35:0c:20:1d:d9:a5:c3:55: 5b:73:2f:af:08:9f:c9:cf:eb:42:33:e7:f8:ea:91: fb:69:ff:70:7f:4d:53:5e:99:aa:c0:e8:46:f6:4e: 9a:cc:77:4d:96:5e:80:32:84:e7:4f:45:8e:eb:38: 2c:0f:42:e5:05:22:43:eb:71:b6:f1:f5:02:4c:62: cf:1d:3e:ef:ba:0d:e3:b5:5b:a6:29:34:38:b6:26: 6f:3e:ac:cd:ec:3b:ab:6d:b5:72:9f:de:b8:38:09: f1:f6:33:2a:b0:11:00:b2:80:e6:df:ab:80:7b:3f: 10:94:4e:25:9b:e6:46:e0:45:45:09:77:02:b6:ec: 47:07:67:1c:6d:82:55:9b:c2:81:0e:6a:cb:39:05: 3e:f2:d4:57:f3:c7:e9:87:21:05:2a:8b:e8:7a:fa: 5b:e8:9f:61:0b:bd:92:74:aa:09:ba:30:96:3e:b0: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:55:F9:17:12:D5:6D:C8:97:9F:74:AA:62:77:7B:C4:D7:C4:A7:89 X509v3 Authority Key Identifier: keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ca:cc:4b:ac:64:46:ee:e4:c2:a8:66:fe:9d:83:5e:29:be: b4:f7:49:a5:31:e1:41:68:cd:36:5f:2f:9e:0a:e2:12:44:d6: 1e:88:4c:ee:c8:57:03:52:b9:77:32:15:1c:37:44:fb:7e:63: 17:48:80:1a:5a:5b:34:6c:37:58:c2:21:4b:f5:9b:ec:d7:45: da:51:ab:2a:c8:ec:0b:68:a8:de:e1:3d:44:58:dc:fa:7b:13: e5:ec:9f:9c:c4:dd:28:01:67:c3:10:6a:b7:92:f3:86:0b:35: 4d:be:e7:77:17:b7:37:2c:5d:8e:17:6c:10:99:dc:f6:22:fc: 06:7a:f8:95:52:b7:77:eb:24:00:41:f7:4c:22:fc:29:26:e3: 7b:ae:91:d7:40:67:b4:c7:b7:cb:8b:7a:30:82:4c:42:89:60: a7:6f:86:22:bd:39:21:e7:e7:f2:b1:a4:1f:61:6f:b6:b2:e4: 90:39:ab:08:c9:24:b1:83:39:55:e1:d1:65:47:84:39:6a:04: c7:72:fb:60:4e:b6:30:b0:28:9f:ee:6d:d0:da:5d:7e:9b:92: 0e:7a:9e:df:24:68:f0:b9:a0:80:ba:32:80:9f:e1:e0:52:f8: 5f:9e:65:74:8d:a6:1c:78:5d:6b:55:2e:8d:79:1d:00:d5:a3: 06:f1:9a:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwRjYxMTAvBgNVBAUTKEMwQUVGNzA3N0Y1MjYyMjU2NzE3OUFDRTU2QUQ1RUU4 Q0Q2NDYwNEUwHhcNMjUwNTEzMDM1NzQ0WhcNMjUwNTIwMDM1NzQ0WjAYMRYwFAYD VQQDEw02ODIyYzMzOC0yNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxZazQOgMeEI9rmNV1NEnkD9qayPx3dAXQXWltmiOcPo0UJA01gcm/r0wU4H U0WMuILknB2FdK104evY5ha5ZHjKJBQzbdii9LtdyN0Hf9jSNQwgHdmlw1Vbcy+v CJ/Jz+tCM+f46pH7af9wf01TXpmqwOhG9k6azHdNll6AMoTnT0WO6zgsD0LlBSJD 63G28fUCTGLPHT7vug3jtVumKTQ4tiZvPqzN7DurbbVyn964OAnx9jMqsBEAsoDm 36uAez8QlE4lm+ZG4EVFCXcCtuxHB2ccbYJVm8KBDmrLOQU+8tRX88fphyEFKovo evpb6J9hC72SdKoJujCWPrCoiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZV+RcS 1W3Il590qmJ3e8TXxKeJMB8GA1UdIwQYMBaAFMCu9wd/UmIlZxeazlatXujNZGBO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjBGNi9GRUUwNUJFQzdD QUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lpVm5GNXJPVnExZTZNMWtZ RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzNCMzlTWWlWbkY1ck9WcTFlNk0xa1lFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjBGNi9GRUUwNUJFQzdDQUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lp Vm5GNXJPVnExZTZNMWtZRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNysxLrGRG7uTCqGb+nYNeKb6090mlMeFBaM02Xy+eCuISRNYeiEzu yFcDUrl3MhUcN0T7fmMXSIAaWls0bDdYwiFL9Zvs10XaUasqyOwLaKje4T1EWNz6 exPl7J+cxN0oAWfDEGq3kvOGCzVNvud3F7c3LF2OF2wQmdz2IvwGeviVUrd36yQA QfdMIvwpJuN7rpHXQGe0x7fLi3owgkxCiWCnb4YivTkh5+fysaQfYW+2suSQOasI ySSxgzlV4dFlR4Q5agTHcvtgTrYwsCif7m3Q2l1+m5IOep7fJGjwuaCAujKAn+Hg UvhfnmV0jaYceF1rVS6NeR0A1aMG8ZqJ -----END CERTIFICATE-----Generated at Tue May 13 08:29:22 2025 by rpki-client