$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft File: r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json) Hash identifier: MoNHzITvN55e2OTSgh7Zh917dhc6ymyPiqQQyxnouD4= Subject key identifier: 45:81:82:18:F0:12:5E:FE:91:A1:39:1B:1F:37:70:B7:E4:E0:11:AC Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Certificate serial: 0712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft Manifest number: 0703 Signing time: Wed 14 May 2025 22:00:14 +0000 Manifest this update: Wed 14 May 2025 22:00:13 +0000 Manifest next update: Wed 21 May 2025 22:00:13 +0000 Files and hashes: 1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: 4t20mFapvCuZP7LB62NQog0cWwMsVG4M3C5rms2LxBE=) 2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: Ze9P8zUvpUUuNDb2f6jUuTz0IuEk5HXo9HL8O2n8v1w=) 3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: cENNW/nbgAC9wITEnAsu2/v6Nt+Sg/6ucMETk/SBbPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194692, serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Validity Not Before: May 14 22:00:13 2025 GMT Not After : May 21 22:00:13 2025 GMT Subject: CN=6825126d-b724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:34:cb:f1:38:06:bc:3f:1d:7b:0b:3f:61: 1d:f2:d0:98:29:5b:02:e0:df:9f:34:3e:d2:01:6b: 22:24:25:cc:30:0c:6f:43:e9:71:dc:07:2b:1a:34: d6:62:c3:43:64:dc:21:e3:88:f3:23:b9:42:ae:31: a3:82:c2:82:61:ee:f9:55:e8:f1:f8:3a:9b:a9:16: 23:78:b4:75:c5:b1:df:50:19:3b:ef:6a:72:bd:ad: 83:d2:f7:a3:84:d6:2b:eb:e8:3d:7e:8d:b9:c3:a9: 0c:fa:63:72:88:7f:5d:b1:de:b2:07:2e:cf:29:ae: d8:c8:ce:37:88:30:ad:8b:c4:b6:b9:bf:54:0a:d9: 0e:48:7f:40:ff:00:56:d1:9d:8d:40:82:eb:79:a6: 63:c8:e4:0c:35:14:9b:2e:20:44:91:70:5b:8f:55: 7e:9f:95:7f:0a:91:ff:d8:b6:17:d8:68:9d:44:4a: 96:80:ff:4e:f3:b4:b2:9a:8f:37:44:e5:35:13:1b: e8:69:4d:ce:7d:88:81:46:0a:ba:de:d3:16:09:de: 55:a6:6a:66:88:99:a6:4d:d3:e2:a2:c6:a8:cb:f9: c9:b4:65:8d:92:af:a5:aa:c1:45:74:48:e2:73:f4: d4:72:60:e0:4a:6d:71:ce:b4:74:a2:9f:1a:14:3f: 02:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:81:82:18:F0:12:5E:FE:91:A1:39:1B:1F:37:70:B7:E4:E0:11:AC X509v3 Authority Key Identifier: keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f2:eb:b3:53:87:00:ff:d4:f8:88:fe:a1:1a:43:6a:99:8f: d5:eb:1d:13:65:d8:bb:47:88:54:fa:86:5b:f4:c5:59:8d:12: e9:25:37:d9:6d:37:ff:ef:57:cc:28:58:8f:65:b6:51:16:f2: f4:7d:94:a1:e7:62:86:11:91:b6:2a:03:2c:a6:b5:0b:48:81: 92:d0:14:fe:2f:23:e0:a0:04:55:db:fe:5c:8a:57:f4:62:da: 5d:64:d9:a1:86:30:f5:55:fa:3b:2d:49:69:18:25:70:67:d8: d4:21:9c:25:e8:f8:dc:31:69:e6:0d:2f:80:f6:93:1e:71:57: ab:b1:44:17:a4:3c:1c:20:18:9f:2a:8e:d3:68:df:36:3e:54: 30:6b:58:2b:e4:36:0b:35:1f:1d:40:c5:da:f6:46:37:8f:80: 9d:e6:f0:91:9f:d4:1d:ae:a4:32:52:5d:c8:24:4c:f3:b9:0b: e5:a0:3e:1a:0f:6b:14:ac:d2:06:fa:5f:24:e8:02:f5:5f:95: be:3c:9c:7c:3b:8d:ac:c2:3a:19:c1:b2:88:31:04:c7:1c:4f: 63:ff:35:bc:49:cb:39:ea:2c:0b:77:22:26:31:76:44:65:f5: 6b:97:e9:ba:28:b7:c6:09:e8:af:93:70:75:c8:7e:8f:ee:6a: 99:74:e9:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3 ODQyOTBBNDAwHhcNMjUwNTE0MjIwMDEzWhcNMjUwNTIxMjIwMDEzWjAYMRYwFAYD VQQDEw02ODI1MTI2ZC1iNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWY0y/E4Brw/HXsLP2Ed8tCYKVsC4N+fND7SAWsiJCXMMAxvQ+lx3AcrGjTW YsNDZNwh44jzI7lCrjGjgsKCYe75Vejx+DqbqRYjeLR1xbHfUBk772pyva2D0vej hNYr6+g9fo25w6kM+mNyiH9dsd6yBy7PKa7YyM43iDCti8S2ub9UCtkOSH9A/wBW 0Z2NQILreaZjyOQMNRSbLiBEkXBbj1V+n5V/CpH/2LYX2GidREqWgP9O87Symo83 ROU1ExvoaU3OfYiBRgq63tMWCd5VpmpmiJmmTdPiosaoy/nJtGWNkq+lqsFFdEji c/TUcmDgSm1xzrR0op8aFD8CWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWBghjw El7+kaE5Gx83cLfk4BGsMB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY5Mi84ODVBMzJGRTQyOTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2 dUtXT3M1Z05YbDU0UXBDa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC58uuzU4cA/9T4iP6hGkNqmY/V6x0TZdi7R4hU+oZb9MVZjRLpJTfZ bTf/71fMKFiPZbZRFvL0fZSh52KGEZG2KgMsprULSIGS0BT+LyPgoARV2/5cilf0 YtpdZNmhhjD1Vfo7LUlpGCVwZ9jUIZwl6PjcMWnmDS+A9pMecVersUQXpDwcIBif Ko7TaN82PlQwa1gr5DYLNR8dQMXa9kY3j4Cd5vCRn9QdrqQyUl3IJEzzuQvloD4a D2sUrNIG+l8k6AL1X5W+PJx8O42swjoZwbKIMQTHHE9j/zW8Scs56iwLdyImMXZE ZfVrl+m6KLfGCeivk3B1yH6P7mqZdOlL -----END CERTIFICATE-----Generated at Thu May 15 16:21:38 2025 by rpki-client