$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: lnZ5EL2B4q3nzBFmyqQDRQFDFzewcyUgTG17yqkC8gE= Subject key identifier: CF:45:83:54:C5:81:28:32:39:A2:21:4E:A1:EA:97:20:59:B3:34:5E Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: 0106 Signing time: Thu 03 Jul 2025 04:54:32 +0000 Manifest this update: Thu 03 Jul 2025 04:54:31 +0000 Manifest next update: Thu 10 Jul 2025 04:54:31 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: 8nQNIw5V4vSfPdxqKqR9nobL5tOTHob1zV/KsLUAmpg=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: VHJTWsm4wzJziIer/htU6hv3gqL/KMd1K2nOD3+RJsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: Jul 3 04:54:31 2025 GMT Not After : Jul 10 04:54:31 2025 GMT Subject: CN=68660d07-9008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:45:b9:fd:36:e8:66:99:d2:f3:72:56:f9:a4: 2b:c5:bd:38:51:01:f7:5e:f5:db:c1:79:be:11:3c: 58:9a:47:36:78:c7:6e:a4:03:18:8c:be:71:95:0a: c4:a0:83:fd:8e:3b:b7:1b:3e:63:7d:33:10:fd:9c: fd:7e:de:dc:d8:80:65:e8:7d:3a:9e:06:93:3e:95: 3e:dc:5a:d4:52:30:5b:ae:74:5c:2e:94:73:17:0f: 31:ac:ad:41:ff:43:3e:3a:50:75:03:90:89:a8:1d: 90:b4:f1:82:4c:12:aa:1d:df:8b:82:4d:10:8e:e1: 9c:77:55:b4:42:f4:9c:a9:a7:1a:82:57:19:95:f1: 0f:55:68:fa:c0:27:9c:de:a1:6e:8d:04:a6:68:31: ac:9c:ae:ff:57:16:c3:0c:eb:16:56:90:2d:09:4e: dd:d2:66:fd:35:d5:49:0d:5f:55:5d:95:d3:93:f7: 89:b2:00:5d:dd:3c:47:cd:0f:23:c4:47:80:9d:4d: fa:42:18:c1:f0:70:f4:da:55:7f:c2:f9:d9:fd:e4: 04:68:91:65:f0:cb:67:a6:bd:d9:9b:e1:3c:54:08: c4:3d:74:46:67:05:b3:50:e7:2b:30:e1:92:10:ae: a8:d8:81:ee:87:77:01:84:6c:dd:c9:2c:8d:23:c1: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:45:83:54:C5:81:28:32:39:A2:21:4E:A1:EA:97:20:59:B3:34:5E X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:4e:82:58:87:6c:0b:b8:ef:17:df:73:89:28:d6:d1:80:11: 90:5c:00:d1:f2:ee:a7:ba:45:35:06:5a:2e:c8:21:67:d6:8f: 84:8f:16:90:64:ac:e3:fc:f6:d1:d2:a3:b6:a4:25:68:fe:31: d2:07:a4:e6:59:73:ce:91:98:e4:0f:d4:28:13:1d:03:4b:50: 54:89:41:01:5c:4c:e6:e2:f2:4d:12:0d:9a:45:f3:2a:c6:49: 17:ec:31:78:bc:7c:08:8f:ef:56:c7:8a:a7:a7:79:b5:7a:fc: 05:b6:d4:bb:e9:49:0b:c6:9e:24:40:18:4f:fa:7e:88:03:29: bb:10:a5:8d:45:76:0a:f9:0c:e0:63:44:fe:26:96:c8:35:4c: 1f:a2:fb:16:36:18:6f:a0:d8:f2:46:d2:fb:d1:6f:13:d5:38: 37:a9:db:87:39:d8:e2:f7:29:9a:74:9a:34:de:20:67:21:2b: d2:08:e3:f0:10:76:01:22:41:31:b0:39:76:dd:ca:e6:35:02: 38:3f:70:0b:64:3b:1f:16:33:e6:3b:ec:54:fa:ad:6b:f7:24: c6:47:68:a5:99:e2:73:f3:ba:a1:5b:35:31:c7:ba:d7:f6:af: fa:9d:c4:6d:16:9e:7a:fa:9e:86:1b:b3:d3:5a:7e:91:56:03: 5d:f8:76:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjUwNzAzMDQ1NDMxWhcNMjUwNzEwMDQ1NDMxWjAYMRYwFAYD VQQDEw02ODY2MGQwNy05MDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEW5/TboZpnS83JW+aQrxb04UQH3XvXbwXm+ETxYmkc2eMdupAMYjL5xlQrE oIP9jju3Gz5jfTMQ/Zz9ft7c2IBl6H06ngaTPpU+3FrUUjBbrnRcLpRzFw8xrK1B /0M+OlB1A5CJqB2QtPGCTBKqHd+Lgk0QjuGcd1W0QvScqacaglcZlfEPVWj6wCec 3qFujQSmaDGsnK7/VxbDDOsWVpAtCU7d0mb9NdVJDV9VXZXTk/eJsgBd3TxHzQ8j xEeAnU36QhjB8HD02lV/wvnZ/eQEaJFl8Mtnpr3Zm+E8VAjEPXRGZwWzUOcrMOGS EK6o2IHuh3cBhGzdySyNI8HkHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9Fg1TF gSgyOaIhTqHqlyBZszReMB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWToJYh2wLuO8X33OJKNbRgBGQXADR8u6nukU1BlouyCFn1o+EjxaQ ZKzj/PbR0qO2pCVo/jHSB6TmWXPOkZjkD9QoEx0DS1BUiUEBXEzm4vJNEg2aRfMq xkkX7DF4vHwIj+9Wx4qnp3m1evwFttS76UkLxp4kQBhP+n6IAym7EKWNRXYK+Qzg Y0T+JpbINUwfovsWNhhvoNjyRtL70W8T1Tg3qduHOdji9ymadJo03iBnISvSCOPw EHYBIkExsDl23crmNQI4P3ALZDsfFjPmO+xU+q1r9yTGR2ilmeJz87qhWzUxx7rX 9q/6ncRtFp56+p6GG7PTWn6RVgNd+HbI -----END CERTIFICATE-----Generated at Thu Jul 3 23:36:44 2025 by rpki-client