$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: jUpLMfOCmGfA8wKAqCn+f3T+gYbrJCFjmMw+IsezUxM= Subject key identifier: A9:A6:62:94:98:DB:5C:C1:4C:54:7D:3F:59:69:DA:73:77:5B:AF:25 Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0D8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0D84 Signing time: Fri 16 May 2025 18:11:44 +0000 Manifest this update: Fri 16 May 2025 18:11:44 +0000 Manifest next update: Fri 23 May 2025 18:11:44 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: FzGyll7kgsX4OACeU797gtcFuWjygGnG1hW9JZIyl+o=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: Jn/++SfV1VdnkIlweTbZK1B7H5Xpb4S9KYcvJi/sW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3468 (0xd8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: May 16 18:11:44 2025 GMT Not After : May 23 18:11:44 2025 GMT Subject: CN=68277fe0-961d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:9c:6c:98:e6:36:dd:7f:1f:3c:00:da:64: 9b:c4:d6:35:7b:ca:20:97:af:68:fe:77:ce:3f:16: d8:52:3e:8e:a6:9e:47:65:db:15:54:d8:db:73:9c: 2c:d0:c9:72:29:ab:92:b7:8c:71:74:a0:b4:ee:33: 3a:2d:91:5f:55:72:db:b4:b6:1f:27:d5:cf:dc:69: 78:6c:ad:42:c5:df:74:f7:ec:7e:c6:16:54:71:98: 4b:47:d8:5f:3e:70:4f:11:69:f2:17:28:ea:2b:de: ff:ba:c0:55:ed:8d:c3:09:e8:f2:3f:e4:cf:ce:c4: dc:47:d6:22:7e:d5:6b:63:91:4c:1d:c7:dd:13:93: 97:7a:3e:01:ed:64:14:9b:a5:ad:7c:4b:f1:5a:7b: 09:77:90:56:d0:c4:f4:09:39:13:42:38:3f:33:2b: ed:84:f9:5a:dd:80:1e:c5:bd:bc:03:0a:4a:1c:70: e8:f2:8c:47:92:15:d2:c8:c1:0d:7c:62:42:fa:1f: 70:c5:a6:43:c3:39:ad:c0:6b:97:61:60:ea:43:e2: d2:2b:1a:a1:4a:8d:1d:dd:d4:31:07:ce:c0:ff:ef: 7e:80:07:38:ec:b1:b1:4f:94:59:18:b8:08:40:b1: 68:3b:fb:25:9b:12:e3:f3:8a:71:4d:c6:45:e7:4f: 0d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:62:94:98:DB:5C:C1:4C:54:7D:3F:59:69:DA:73:77:5B:AF:25 X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a9:90:d4:dd:c0:de:e8:5c:cf:ed:af:82:1f:57:5a:bf:3b: 9a:a6:e4:a1:85:cc:6e:70:5a:79:db:e3:be:13:ca:04:05:03: 83:16:98:a6:42:ea:74:42:09:23:9d:96:e9:2a:40:6e:54:fe: ba:6e:ac:83:9d:d6:77:71:ad:49:f1:be:d8:f1:02:63:62:ce: 62:0f:42:e7:ca:3a:13:fa:1f:cd:8e:37:23:38:03:2a:c8:69: 9f:e0:18:26:8d:a7:3f:dc:3d:29:aa:3a:81:ae:d6:2d:75:18: ab:be:6a:cc:22:46:ef:88:83:8b:dd:90:be:de:22:34:fc:11: 62:ac:e2:39:53:37:53:ba:70:f6:9d:4e:c3:9a:80:a2:ef:a0: df:af:dd:f7:85:38:fa:72:13:04:7c:83:de:ae:d9:52:8e:d2: a8:6c:61:8b:36:b0:d6:28:e9:e8:a3:38:09:95:af:77:41:0a: 8f:f2:7f:31:5a:42:07:7a:80:38:9c:ca:e2:d6:67:6f:2f:f4: 07:06:21:27:73:83:19:99:b4:15:29:05:d9:9a:93:84:b8:59: 1d:bf:21:c9:4d:4a:77:3f:fa:94:0b:83:43:c0:d4:cc:00:4c: 36:56:40:bd:78:16:45:74:0e:b9:eb:1d:26:05:1b:45:64:9f: 26:27:c7:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjUwNTE2MTgxMTQ0WhcNMjUwNTIzMTgxMTQ0WjAYMRYwFAYD VQQDEw02ODI3N2ZlMC05NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbicbJjmNt1/HzwA2mSbxNY1e8ogl69o/nfOPxbYUj6Opp5HZdsVVNjbc5ws 0MlyKauSt4xxdKC07jM6LZFfVXLbtLYfJ9XP3Gl4bK1Cxd909+x+xhZUcZhLR9hf PnBPEWnyFyjqK97/usBV7Y3DCejyP+TPzsTcR9YiftVrY5FMHcfdE5OXej4B7WQU m6WtfEvxWnsJd5BW0MT0CTkTQjg/MyvthPla3YAexb28AwpKHHDo8oxHkhXSyMEN fGJC+h9wxaZDwzmtwGuXYWDqQ+LSKxqhSo0d3dQxB87A/+9+gAc47LGxT5RZGLgI QLFoO/slmxLj84pxTcZF508NXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmmYpSY 21zBTFR9P1lp2nN3W68lMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbqZDU3cDe6FzP7a+CH1davzuapuShhcxucFp52+O+E8oEBQODFpim Qup0QgkjnZbpKkBuVP66bqyDndZ3ca1J8b7Y8QJjYs5iD0LnyjoT+h/NjjcjOAMq yGmf4Bgmjac/3D0pqjqBrtYtdRirvmrMIkbviIOL3ZC+3iI0/BFirOI5UzdTunD2 nU7DmoCi76Dfr933hTj6chMEfIPertlSjtKobGGLNrDWKOnoozgJla93QQqP8n8x WkIHeoA4nMri1mdvL/QHBiEnc4MZmbQVKQXZmpOEuFkdvyHJTUp3P/qUC4NDwNTM AEw2VkC9eBZFdA656x0mBRtFZJ8mJ8fE -----END CERTIFICATE-----Generated at Sat May 17 15:32:37 2025 by rpki-client