$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft File: W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json) Hash identifier: VSsJmX9D2cW02B5fnApf8zGIsKhQs+oLKaJzB446zPk= Subject key identifier: 83:7B:78:1B:18:39:E7:1A:11:8F:4A:1E:E5:AF:78:7D:A4:61:E1:19 Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A Certificate issuer: /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft Manifest number: 08C7 Signing time: Wed 14 May 2025 20:35:29 +0000 Manifest this update: Wed 14 May 2025 20:35:28 +0000 Manifest next update: Wed 21 May 2025 20:35:28 +0000 Files and hashes: 1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: r2CYW8RedQcTohcYqWhSO0EEDxx4ZZ615xGcFEVmMls=) 2: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: glSctB67kcgRNgcA0b3/jW6A3plk8SZgtFK9qI9gKIo=) 3: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: NkR/nF+Vmt/Gcc86ZcEETph8N4g/HWKaL5fwvV3ReJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A Validity Not Before: May 14 20:35:28 2025 GMT Not After : May 21 20:35:28 2025 GMT Subject: CN=6824fe91-fbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:21:d8:95:25:de:0b:3d:87:14:b7:74:7a:1c: bc:11:07:e6:02:97:f9:ae:35:26:70:d1:0f:b0:7d: db:6e:bb:62:3a:28:f6:39:7a:c5:0d:e7:4c:ec:a5: 38:1f:e7:ec:21:c5:be:58:29:29:2e:0a:56:d7:76: 7a:97:fa:4a:ee:f8:92:1f:a8:7a:6f:57:32:d0:f6: f3:1d:67:98:78:3e:af:41:13:cc:85:13:33:75:72: f9:e4:f4:23:6a:31:d5:ee:bd:dd:80:cc:11:ee:0e: 03:b8:29:0f:0e:57:1f:b1:8e:e8:63:42:28:92:f2: ef:0f:16:d0:2e:9c:c3:0e:bb:73:69:b8:cd:29:81: fc:81:ae:0a:a6:61:09:45:e5:b9:21:a9:d2:d2:68: 5e:99:be:26:83:03:e2:a5:e7:e4:82:78:29:58:29: 55:a7:e4:5a:61:3e:2d:22:55:60:ec:11:52:12:5c: bd:d6:8a:65:3a:bb:9f:2e:d2:8c:ad:71:55:bd:fb: 0a:59:32:01:b7:1d:0a:5e:92:d2:5a:6f:bb:ec:88: b6:38:6a:d4:4d:75:93:e7:1e:93:d8:86:5d:e1:d2: 3b:e7:46:04:5e:94:67:23:c3:2d:72:3b:15:f3:c9: d8:e4:12:5f:17:d1:3d:3f:12:e4:36:e1:f9:aa:91: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7B:78:1B:18:39:E7:1A:11:8F:4A:1E:E5:AF:78:7D:A4:61:E1:19 X509v3 Authority Key Identifier: keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8d:52:63:fe:41:84:aa:68:aa:ac:72:99:5b:80:0c:df:ac: bf:ba:e5:ec:08:2c:80:fb:00:8c:2c:21:ac:70:cd:c8:1c:f6: c8:4a:61:ed:e5:7a:ef:89:ca:59:03:7a:c1:f4:31:6c:24:32: b6:9a:33:b6:44:07:2d:92:d2:a4:0f:d9:f9:b0:78:cf:37:9e: 4c:42:08:fb:b9:0a:51:2c:5a:82:8e:e4:59:ac:02:2e:f9:0f: 9a:8d:15:62:c3:4a:4f:2c:2b:27:01:67:5b:9e:95:ce:fc:88: 57:1b:ae:f1:4c:9c:00:99:d2:8b:4b:5f:72:c4:07:c5:35:93: 37:cd:96:ce:6c:54:5d:8d:c3:6a:0b:52:71:dd:80:9d:89:d5: 29:01:69:63:ed:d7:ab:e5:e8:0d:f6:57:ab:91:db:49:24:e9: a9:fe:65:ac:96:23:06:95:da:e0:c4:48:86:6b:7a:05:fc:e9: f3:88:9b:fb:da:e0:66:d2:19:7b:0c:56:e0:2c:01:f4:e5:72: 9e:03:76:e2:07:b0:b0:f4:9c:1d:8b:18:74:43:d7:ba:75:ab: e9:05:43:1f:b6:ca:76:bf:77:56:e0:88:4f:80:6b:76:73:e6: e7:57:f5:1d:f8:a8:db:e7:21:4a:31:31:93:96:f4:6e:9a:64: f1:72:dc:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4MEUxMTAvBgNVBAUTKDVCQkQ2NkU4NjMzNEU5OTgxN0UyQzZENUJDRUI3REFE MDIwRkNBOEEwHhcNMjUwNTE0MjAzNTI4WhcNMjUwNTIxMjAzNTI4WjAYMRYwFAYD VQQDEw02ODI0ZmU5MS1mYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7yHYlSXeCz2HFLd0ehy8EQfmApf5rjUmcNEPsH3bbrtiOij2OXrFDedM7KU4 H+fsIcW+WCkpLgpW13Z6l/pK7viSH6h6b1cy0PbzHWeYeD6vQRPMhRMzdXL55PQj ajHV7r3dgMwR7g4DuCkPDlcfsY7oY0IokvLvDxbQLpzDDrtzabjNKYH8ga4KpmEJ ReW5IanS0mhemb4mgwPipefkgngpWClVp+RaYT4tIlVg7BFSEly91oplOrufLtKM rXFVvfsKWTIBtx0KXpLSWm+77Ii2OGrUTXWT5x6T2IZd4dI750YEXpRnI8MtcjsV 88nY5BJfF9E9PxLkNuH5qpEakwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIN7eBsY OecaEY9KHuWveH2kYeEZMB8GA1UdIwQYMBaAFFu9ZuhjNOmYF+LG1bzrfa0CD8qK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTgwRS8wMEU5MjUwNEIx Q0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZaZ1g0c2JWdk90OXJRSVB5 b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c3MW02R00wNlpnWDRzYlZ2T3Q5clFJUHlvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTgwRS8wMEU5MjUwNEIxQ0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZa Z1g0c2JWdk90OXJRSVB5b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqjVJj/kGEqmiqrHKZW4AM36y/uuXsCCyA+wCMLCGscM3IHPbISmHt 5XrvicpZA3rB9DFsJDK2mjO2RActktKkD9n5sHjPN55MQgj7uQpRLFqCjuRZrAIu +Q+ajRViw0pPLCsnAWdbnpXO/IhXG67xTJwAmdKLS19yxAfFNZM3zZbObFRdjcNq C1Jx3YCdidUpAWlj7der5egN9lerkdtJJOmp/mWsliMGldrgxEiGa3oF/OnziJv7 2uBm0hl7DFbgLAH05XKeA3biB7Cw9Jwdixh0Q9e6davpBUMftsp2v3dW4IhPgGt2 c+bnV/Ud+Kjb5yFKMTGTlvRummTxctyK -----END CERTIFICATE-----Generated at Fri May 16 18:12:47 2025 by rpki-client