$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json) Hash identifier: QEmtUo3bQz9VGc5As8eWakHnZjd2KJ+BaArJxj1SmAw= Subject key identifier: 5E:F2:EF:76:D8:38:2F:6F:3A:1D:5A:C6:AC:A1:A0:33:DD:06:B6:09 Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft Manifest number: 0138 Signing time: Thu 03 Jul 2025 04:34:34 +0000 Manifest this update: Thu 03 Jul 2025 04:34:33 +0000 Manifest next update: Thu 10 Jul 2025 04:34:33 +0000 Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: Fawxfy1tzbpGVf2SAzAcR9qGKiyfyidL+7ueuYg1VF4=) 2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: /QiKgn5sBz0ONRYcM1JvQlCWVa4Jvc9ROw/bHMNmg2o=) 3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: 4PWxSJvGPsYEjGtgHYM8obqb8f7X6eyOT+IKt9t0/2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Validity Not Before: Jul 3 04:34:33 2025 GMT Not After : Jul 10 04:34:33 2025 GMT Subject: CN=68660859-72ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:9c:f9:d9:d7:bd:34:18:8d:3e:68:51:4e: 1e:c7:a9:c7:3c:f5:8d:0b:9b:1e:ee:46:f0:98:41: 08:ba:f3:d3:94:6c:c4:cb:dc:4c:1b:fa:9c:24:fe: 3e:a7:d4:dc:74:ac:77:f4:8d:6b:5f:df:4c:8c:07: 9c:1a:b6:85:fc:5b:25:09:2f:40:ce:5e:ce:62:1f: e9:36:76:d3:e3:9e:09:97:30:03:cd:3b:fa:82:8f: 20:9c:8f:94:90:67:de:ea:53:2e:6d:e3:4c:ba:1f: f1:3f:11:7d:9f:ab:5e:35:12:22:06:07:d0:9b:56: 06:ba:94:d8:96:4e:d0:44:9f:b1:6e:c1:64:fb:62: 6f:ea:82:25:83:d6:b5:9d:c3:f0:24:14:9d:96:3f: 77:6a:25:4c:41:c1:3b:26:9e:1b:06:e6:7b:89:f3: 73:89:74:08:a2:cc:d6:af:5e:b7:85:ab:97:2b:50: 57:3a:94:8b:cc:1e:8d:e2:61:19:5b:be:6e:7f:84: 7e:b2:d9:79:8e:d8:85:da:8d:87:7f:4c:dd:4c:b3: 18:23:ae:67:b8:a3:31:1f:cc:4f:8b:85:6e:d8:a9: d8:99:c4:bd:2d:d1:dd:00:5d:a4:e9:71:3d:43:2c: 16:07:70:55:3b:14:8c:57:3c:50:35:10:76:e3:f3: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F2:EF:76:D8:38:2F:6F:3A:1D:5A:C6:AC:A1:A0:33:DD:06:B6:09 X509v3 Authority Key Identifier: keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:5d:77:76:20:59:56:dc:8d:f7:3e:74:f9:20:e7:41:13:bd: ad:13:15:b6:d3:eb:f4:08:3a:6b:5f:20:13:c4:c2:50:fe:2b: a5:bc:dd:86:09:32:26:68:b0:44:27:ce:78:48:ff:c2:91:6e: 32:34:84:48:e6:ad:86:81:b7:cd:37:9d:ea:41:75:49:65:81: b5:44:ee:2f:d0:ea:a2:a7:cd:13:39:72:98:72:87:7c:4b:10: 40:65:af:76:ec:fa:46:13:79:15:9d:e3:ba:69:4c:bd:ff:d4: 1a:2f:1d:43:e1:68:64:4e:e1:dc:7d:3c:0b:4b:40:2a:97:3a: fd:1c:99:9a:5c:88:2d:aa:b1:e6:c1:20:76:96:b1:50:7f:6e: 60:1e:b1:6f:23:4b:8d:12:33:d8:4d:f1:c3:2c:f4:d7:5b:cc: d5:dc:3d:12:bf:3a:6c:2e:b1:70:31:e2:1f:8e:4a:26:c1:ce: 91:1b:60:7b:77:6b:d3:9e:9c:c2:b0:39:27:3d:79:ba:fb:a3: db:de:89:dc:88:92:29:09:69:f0:77:8b:56:e9:a3:82:5a:56: bc:60:49:41:97:b3:05:06:f7:5a:7e:07:75:38:ab:94:3f:85: f6:8e:1b:0a:b5:46:6e:c7:28:ac:96:f8:e1:d9:3e:46:22:31: 71:7c:d8:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwRjYxMTAvBgNVBAUTKEMwQUVGNzA3N0Y1MjYyMjU2NzE3OUFDRTU2QUQ1RUU4 Q0Q2NDYwNEUwHhcNMjUwNzAzMDQzNDMzWhcNMjUwNzEwMDQzNDMzWjAYMRYwFAYD VQQDEw02ODY2MDg1OS03MmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1Kc+dnXvTQYjT5oUU4ex6nHPPWNC5se7kbwmEEIuvPTlGzEy9xMG/qcJP4+ p9TcdKx39I1rX99MjAecGraF/FslCS9Azl7OYh/pNnbT454JlzADzTv6go8gnI+U kGfe6lMubeNMuh/xPxF9n6teNRIiBgfQm1YGupTYlk7QRJ+xbsFk+2Jv6oIlg9a1 ncPwJBSdlj93aiVMQcE7Jp4bBuZ7ifNziXQIoszWr163hauXK1BXOpSLzB6N4mEZ W75uf4R+stl5jtiF2o2Hf0zdTLMYI65nuKMxH8xPi4Vu2KnYmcS9LdHdAF2k6XE9 QywWB3BVOxSMVzxQNRB24/OD8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7y73bY OC9vOh1axqyhoDPdBrYJMB8GA1UdIwQYMBaAFMCu9wd/UmIlZxeazlatXujNZGBO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjBGNi9GRUUwNUJFQzdD QUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lpVm5GNXJPVnExZTZNMWtZ RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzNCMzlTWWlWbkY1ck9WcTFlNk0xa1lFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjBGNi9GRUUwNUJFQzdDQUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lp Vm5GNXJPVnExZTZNMWtZRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxXXd2IFlW3I33PnT5IOdBE72tExW20+v0CDprXyATxMJQ/iulvN2G CTImaLBEJ854SP/CkW4yNIRI5q2GgbfNN53qQXVJZYG1RO4v0Oqip80TOXKYcod8 SxBAZa927PpGE3kVneO6aUy9/9QaLx1D4WhkTuHcfTwLS0Aqlzr9HJmaXIgtqrHm wSB2lrFQf25gHrFvI0uNEjPYTfHDLPTXW8zV3D0SvzpsLrFwMeIfjkomwc6RG2B7 d2vTnpzCsDknPXm6+6Pb3onciJIpCWnwd4tW6aOCWla8YElBl7MFBvdafgd1OKuU P4X2jhsKtUZuxyislvjh2T5GIjFxfNjp -----END CERTIFICATE-----Generated at Thu Jul 3 10:08:21 2025 by rpki-client