$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json) Hash identifier: 5apIAA4blhQ5iE8javz2QLg4C8682jXdv9Fy7BUQzIA= Subject key identifier: 01:A9:9D:41:78:31:8D:0A:11:F3:D3:B5:23:73:4D:E2:F6:7E:F2:2A Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft Manifest number: 01E0 Signing time: Tue 01 Jul 2025 03:12:43 +0000 Manifest this update: Tue 01 Jul 2025 03:12:43 +0000 Manifest next update: Tue 08 Jul 2025 03:12:43 +0000 Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: iWo4+AZYkfZVoJ+5+B/OXDnIoepXjSGQ6/GWLhTxqNY=) 2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: i5f17u0APuwWVrNQJwRvrSbhYIzk4h0SdlZzDluJdHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Validity Not Before: Jul 1 03:12:43 2025 GMT Not After : Jul 8 03:12:43 2025 GMT Subject: CN=6863522b-47b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:56:83:94:9e:99:5d:3c:e5:6e:af:3b:a7: c4:3f:93:70:e2:7d:53:b1:c9:27:9d:18:c6:74:eb: 96:47:ec:34:37:5c:8f:a6:b0:39:cd:c9:32:fb:c7: 98:ba:e6:31:c8:b2:b9:6c:00:68:d4:f7:4f:08:98: a8:e6:78:1b:eb:20:28:af:bf:ca:53:c2:c0:14:10: cf:d5:65:92:f7:7d:00:c0:03:c9:9c:d4:21:c6:05: 01:01:0d:eb:02:41:63:9d:6a:96:55:1e:33:03:c0: 15:1f:df:f8:cf:8d:60:45:9a:9a:6d:8e:e6:bc:82: 2f:8d:b1:d7:c5:de:bf:26:5a:9c:e4:b9:bf:5d:9a: 02:8b:30:55:8f:63:90:1d:cb:69:ef:e8:46:2a:3f: 87:3e:a4:e4:5e:c1:b1:fb:68:b9:78:0a:1e:cc:2b: 7d:85:f8:c2:c9:5a:d4:11:9e:10:d1:78:f0:2a:08: 19:4b:2a:2e:dc:c4:36:44:26:7f:ed:45:18:bc:cf: 30:6a:60:fd:77:4d:8e:2d:2c:c0:ad:36:a2:97:e0: 3c:fb:1d:31:8b:25:40:6c:8c:9c:a6:56:6d:c0:d2: 12:5e:44:8a:9e:21:2b:c1:84:00:54:b0:7a:ff:fa: 2e:b6:98:3a:b2:46:2f:ba:15:5b:a8:54:59:a2:15: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A9:9D:41:78:31:8D:0A:11:F3:D3:B5:23:73:4D:E2:F6:7E:F2:2A X509v3 Authority Key Identifier: keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:24:39:71:5a:6a:98:ff:01:da:0d:a1:c5:28:88:1e:d7:34: 95:fc:b8:8f:08:a3:9b:86:c6:87:94:87:4a:f0:72:11:86:df: 3b:e7:f6:a0:f8:43:6e:3b:6f:0e:b9:b5:e7:1e:0b:08:e6:7b: 49:16:fe:10:47:19:db:b4:c8:51:0c:79:b4:6b:9a:48:36:8d: ed:c2:1b:89:13:95:72:11:5d:be:f5:82:39:0d:85:73:8d:c1: 51:9c:1f:ac:a7:1c:5d:f9:eb:6d:16:64:97:ca:00:a6:38:15: 44:4d:06:53:9e:1b:66:d1:65:66:8e:5d:c9:d7:11:a5:b6:77: 2e:05:c7:1e:7c:3f:8a:ad:3a:b4:d3:69:10:2d:bd:56:ac:14: 95:fa:58:2d:f3:2b:5f:ff:a6:73:a5:81:f8:f7:ef:62:c9:b0: e8:f6:6a:d0:d4:a8:86:a2:55:93:ba:15:13:b0:6a:dd:a3:98: 71:c9:06:70:1a:0b:00:17:97:f3:80:67:1a:10:a5:57:f6:4d: 5e:84:59:42:5a:5f:27:0a:8d:3e:71:ee:8f:e9:06:89:04:98: 65:01:f4:4f:49:3a:20:0f:56:2f:a2:7f:6f:94:5e:51:49:17: f5:b3:fe:ff:22:20:b9:17:99:6c:fd:3c:8f:ac:7e:99:dc:78: 1a:d4:1d:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MDMxMTAvBgNVBAUTKDQ1NkFGNUU1NjY3REUyNDhBOUNGMENFQjkwQzZEMUIz RDNFRDZGQTgwHhcNMjUwNzAxMDMxMjQzWhcNMjUwNzA4MDMxMjQzWjAYMRYwFAYD VQQDEw02ODYzNTIyYi00N2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi5Wg5SemV085W6vO6fEP5Nw4n1TscknnRjGdOuWR+w0N1yPprA5zcky+8eY uuYxyLK5bABo1PdPCJio5ngb6yAor7/KU8LAFBDP1WWS930AwAPJnNQhxgUBAQ3r AkFjnWqWVR4zA8AVH9/4z41gRZqabY7mvIIvjbHXxd6/Jlqc5Lm/XZoCizBVj2OQ Hctp7+hGKj+HPqTkXsGx+2i5eAoezCt9hfjCyVrUEZ4Q0XjwKggZSyou3MQ2RCZ/ 7UUYvM8wamD9d02OLSzArTail+A8+x0xiyVAbIycplZtwNISXkSKniErwYQAVLB6 //outpg6skYvuhVbqFRZohV87wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGpnUF4 MY0KEfPTtSNzTeL2fvIqMB8GA1UdIwQYMBaAFEVq9eVmfeJIqc8M65DG0bPT7W+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkwMy9EODk4MjY1QThD MUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRraXB6d3pya01iUnM5UHRi NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXcjE1V1o5NGtpcHp3enJrTWJSczlQdGI2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkwMy9EODk4MjY1QThDMUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRr aXB6d3pya01iUnM5UHRiNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOJDlxWmqY/wHaDaHFKIge1zSV/LiPCKObhsaHlIdK8HIRht875/ag +ENuO28OubXnHgsI5ntJFv4QRxnbtMhRDHm0a5pINo3twhuJE5VyEV2+9YI5DYVz jcFRnB+spxxd+ettFmSXygCmOBVETQZTnhtm0WVmjl3J1xGltncuBccefD+KrTq0 02kQLb1WrBSV+lgt8ytf/6ZzpYH49+9iybDo9mrQ1KiGolWTuhUTsGrdo5hxyQZw GgsAF5fzgGcaEKVX9k1ehFlCWl8nCo0+ce6P6QaJBJhlAfRPSTogD1Yvon9vlF5R SRf1s/7/IiC5F5ls/TyPrH6Z3Hga1B2u -----END CERTIFICATE-----Generated at Tue Jul 1 19:49:37 2025 by rpki-client