$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft File: wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json) Hash identifier: 2JGVFaDKFmpRfoxNUVhseKsz7e1G8HNzxQwgXtA1sfw= Subject key identifier: D0:85:41:9A:7F:76:15:B9:2D:C2:6D:E8:5B:12:12:58:97:D1:99:24 Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft Manifest number: 01B3 Signing time: Fri 09 May 2025 02:22:35 +0000 Manifest this update: Fri 09 May 2025 02:22:35 +0000 Manifest next update: Fri 16 May 2025 02:22:35 +0000 Files and hashes: 1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: uDrNNFPU/cwYhKLEQoZQH7LEkWnxs1RDJHqNps97PLs=) 2: 7FB6349E967111ED94CA8D6AC4F9AE02.roa (hash: mnijhx9DILhp0Nx/nOSf9QNtyjN28pmYv0fUVMQBN3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Validity Not Before: May 9 02:22:35 2025 GMT Not After : May 16 02:22:35 2025 GMT Subject: CN=681d66eb-d11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:d6:cd:6a:0b:83:ef:7c:7c:05:44:85:5b: 0b:7e:91:c2:90:a8:aa:b9:6f:e4:43:89:04:4e:17: cb:52:d9:a1:1a:a4:25:30:f1:42:50:a5:36:29:9b: c2:1a:f7:d9:31:1a:ae:b9:54:dc:fb:88:92:9a:6a: 45:f7:5f:75:5e:96:6f:4f:06:83:03:de:ae:95:4b: f1:e8:f0:8b:01:dd:64:7f:4b:56:ce:89:f1:a3:77: 88:64:b0:d6:df:ac:12:7f:a5:38:5b:43:a8:28:bc: fc:82:f7:6f:31:65:8b:26:29:44:36:32:25:70:57: 01:c1:17:7b:8f:13:b0:d5:42:ad:fb:c1:eb:a6:eb: 6f:ca:b3:86:d8:38:2c:6b:01:b5:31:b1:30:68:b5: e0:79:73:5f:8b:aa:90:32:a1:c9:ac:25:00:63:5f: 91:3a:7c:18:50:47:c5:d5:0b:03:3d:a9:2a:ac:f5: 4e:4b:49:52:99:9e:c8:82:7a:4f:9c:08:6d:22:f6: 8b:02:b1:1a:4b:70:df:d5:49:3f:30:a1:e0:94:24: 82:9f:c3:39:49:7d:d6:59:a0:59:18:8a:fc:4a:00: 57:26:4f:e2:f5:ad:09:b4:9d:7c:c5:a6:36:23:28: 69:60:09:02:d7:e4:b2:df:18:ef:10:bb:1e:4a:4b: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:85:41:9A:7F:76:15:B9:2D:C2:6D:E8:5B:12:12:58:97:D1:99:24 X509v3 Authority Key Identifier: keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5c:03:fc:ee:b6:e3:cf:6d:a3:de:cb:c6:58:83:0f:8b:bc: 67:09:ce:ff:2c:51:aa:ae:19:a9:8b:4a:e9:d8:a0:16:d8:06: 64:8d:8b:c3:ad:48:b8:e3:84:35:4b:c1:d7:35:02:2e:35:4c: ec:32:11:dc:63:3e:21:64:01:55:21:91:01:b2:a1:25:da:0f: ee:28:ec:83:b2:a1:4a:c9:45:4f:2f:67:1a:c7:ad:56:b5:c6: 76:6b:e9:99:3a:44:a3:6a:f9:3f:3c:f4:8f:f3:0b:09:b7:c3: 36:a7:30:1f:b7:68:41:a3:92:a5:a5:90:8d:18:20:1b:9a:ed: 20:ec:e0:81:42:2f:07:ba:c1:65:91:50:78:be:e8:95:0c:e8: 3a:a2:5b:52:71:6d:67:48:b4:7f:f4:94:df:ea:fc:1b:de:25: 0b:0d:57:78:8d:d7:c5:a5:c4:6d:e6:1f:87:98:75:10:00:93: 88:6a:b0:05:cc:b3:cd:77:c1:45:e2:8f:6d:f3:31:f6:28:db: 20:da:e2:84:80:33:e4:fb:4b:0e:4c:cd:0b:30:4f:2b:7d:47: 88:35:3e:07:70:44:60:1f:67:db:74:72:d4:f8:b3:18:97:ad: c7:29:5c:ff:ff:f6:f4:a1:4a:f5:87:b0:bb:7a:68:00:cf:cf: e1:fc:06:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0MUUxMTAvBgNVBAUTKEMxMzc2NEEwQTYzQTc3NjdGM0E0NzVEN0E4MUFFOERG MThBRkUwOEQwHhcNMjUwNTA5MDIyMjM1WhcNMjUwNTE2MDIyMjM1WjAYMRYwFAYD VQQDEw02ODFkNjZlYi1kMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbnWzWoLg+98fAVEhVsLfpHCkKiquW/kQ4kEThfLUtmhGqQlMPFCUKU2KZvC GvfZMRquuVTc+4iSmmpF9191XpZvTwaDA96ulUvx6PCLAd1kf0tWzonxo3eIZLDW 36wSf6U4W0OoKLz8gvdvMWWLJilENjIlcFcBwRd7jxOw1UKt+8HrputvyrOG2Dgs awG1MbEwaLXgeXNfi6qQMqHJrCUAY1+ROnwYUEfF1QsDPakqrPVOS0lSmZ7IgnpP nAhtIvaLArEaS3Df1Uk/MKHglCSCn8M5SX3WWaBZGIr8SgBXJk/i9a0JtJ18xaY2 IyhpYAkC1+Sy3xjvELseSkvbgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCFQZp/ dhW5LcJt6FsSEliX0ZkkMB8GA1UdIwQYMBaAFME3ZKCmOndn86R116ga6N8Yr+CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTQxRS9FRjFGQUQxODk2 NkUxMUVEQjBFQ0MwNjlDNEY5QUUwMi93VGRrb0tZNmQyZnpwSFhYcUJybzN4aXY0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUZGtvS1k2ZDJmenBIWFhxQnJvM3hpdjRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTQxRS9FRjFGQUQxODk2NkUxMUVEQjBFQ0MwNjlDNEY5QUUwMi93VGRrb0tZNmQy ZnpwSFhYcUJybzN4aXY0STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7XAP87rbjz22j3svGWIMPi7xnCc7/LFGqrhmpi0rp2KAW2AZkjYvD rUi444Q1S8HXNQIuNUzsMhHcYz4hZAFVIZEBsqEl2g/uKOyDsqFKyUVPL2cax61W tcZ2a+mZOkSjavk/PPSP8wsJt8M2pzAft2hBo5KlpZCNGCAbmu0g7OCBQi8HusFl kVB4vuiVDOg6oltScW1nSLR/9JTf6vwb3iULDVd4jdfFpcRt5h+HmHUQAJOIarAF zLPNd8FF4o9t8zH2KNsg2uKEgDPk+0sOTM0LME8rfUeINT4HcERgH2fbdHLU+LMY l63HKVz///b0oUr1h7C7emgAz8/h/AZV -----END CERTIFICATE-----Generated at Sat May 10 22:29:21 2025 by rpki-client