$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json) Hash identifier: nKYrAnQniDovbRjgCip+Vvd5FLdSFeUuQG3LvyMratc= Subject key identifier: DF:91:D5:EA:95:3B:28:AC:36:C5:58:A7:A8:B1:D1:FC:68:51:64:03 Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft Manifest number: 019B Signing time: Sat 31 May 2025 03:08:59 +0000 Manifest this update: Sat 31 May 2025 03:08:58 +0000 Manifest next update: Sat 07 Jun 2025 03:08:58 +0000 Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: CGECSzlSD6qUNQMLHRjO73ofiaKtyjq7IEspyUkz1zA=) 2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: e9UJAcJ07X5sik6oJ0l9nVp35GOCmRSlbj3wJmjgBrI=) 3: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: W+oeT9rREoYMeOrigBJ91wQkGtgMzcafqibSzxam1Bk=) 4: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: oqC6m15GvkoEhYAheA3+Yegw0Ae9mcHaCs/xuTvq3ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: May 31 03:08:58 2025 GMT Not After : Jun 7 03:08:58 2025 GMT Subject: CN=683a72cb-cdd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:cd:bd:a1:16:ec:fb:d7:28:86:e4:7e:65: f4:fc:3b:23:97:9f:f6:da:73:e4:d0:9c:e0:60:4a: cf:bf:6c:52:87:0e:7a:d1:3d:b0:94:bc:09:db:01: c6:ad:d3:f3:e7:f5:1e:00:0c:44:52:95:ea:2c:22: 12:8c:0b:fa:5f:9a:43:f1:78:26:09:f8:e8:36:c0: 23:3d:35:f2:5d:75:54:86:23:57:06:00:6d:0c:fc: 42:d8:69:2f:20:22:74:14:c8:93:27:a5:87:e7:b4: 35:3f:32:7b:f7:ea:7e:93:4b:38:11:4f:93:b7:aa: f8:f8:ee:23:5f:54:e3:45:19:88:13:71:27:9c:fa: df:34:c8:c7:a5:15:2a:0c:33:a5:43:a5:72:a7:ff: 27:34:27:59:93:fc:2d:25:55:9c:f2:7b:a8:68:fa: d0:af:db:d8:c8:81:21:01:08:53:f2:78:9f:57:40: 0c:d2:c4:31:5f:13:44:b1:f7:30:c1:13:d2:7f:99: 0b:96:a7:ec:a8:37:94:4b:a5:d5:a2:8d:03:a8:4b: 99:f1:fc:2c:09:f3:81:e1:86:7a:23:74:23:24:f4: 44:2e:a4:35:67:b7:6c:84:b7:2d:c1:ac:90:51:92: e6:57:b4:27:7a:2f:3f:b4:a5:40:f2:6f:d1:c9:a2: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:91:D5:EA:95:3B:28:AC:36:C5:58:A7:A8:B1:D1:FC:68:51:64:03 X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:be:5d:4c:bd:44:57:21:f0:ce:22:ea:65:b1:56:c9:db:7b: ec:0b:16:23:01:1e:ef:5d:67:24:cc:b7:57:58:27:9b:25:87: 8d:2f:1d:ac:d1:11:75:03:ef:2d:8c:c1:bb:ce:e2:68:25:71: 58:1e:79:4a:ff:98:03:39:7d:19:f3:c3:e4:3b:42:13:93:6d: e8:7b:7d:e7:64:2a:b5:9e:7b:ce:b2:af:95:5e:ec:3b:e6:e1: 22:86:7f:2c:83:d0:6c:76:4b:a6:5e:47:78:6a:73:45:b6:47: d7:85:bc:89:d2:b0:cf:18:6a:71:8a:fa:98:e0:4a:a7:cb:f1: 17:e8:d2:29:a2:0d:16:b6:3a:69:c6:c8:ce:15:9b:5e:94:4a: 9c:2a:f2:d8:c2:d3:a7:79:bf:48:21:e7:50:df:ca:1b:d9:ea: 5a:f7:42:33:f1:ca:92:59:a9:3f:e5:dc:38:77:ea:84:82:04: b5:d0:26:80:b7:8e:2e:c0:2a:9c:4e:ab:e8:ff:0f:9e:5c:8e: 45:dd:b9:a2:c4:46:0e:50:15:a7:f2:43:fd:5d:3b:44:f4:71: 61:92:59:ed:eb:92:4c:79:b6:31:31:ac:84:ca:92:95:e7:ee: 0e:d2:5b:7a:76:ea:ba:91:46:ad:bb:3c:a4:4d:f8:26:90:5c: 1d:81:61:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjUwNTMxMDMwODU4WhcNMjUwNjA3MDMwODU4WjAYMRYwFAYD VQQDEw02ODNhNzJjYi1jZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEXNvaEW7PvXKIbkfmX0/Dsjl5/22nPk0JzgYErPv2xShw560T2wlLwJ2wHG rdPz5/UeAAxEUpXqLCISjAv6X5pD8XgmCfjoNsAjPTXyXXVUhiNXBgBtDPxC2Gkv ICJ0FMiTJ6WH57Q1PzJ79+p+k0s4EU+Tt6r4+O4jX1TjRRmIE3EnnPrfNMjHpRUq DDOlQ6Vyp/8nNCdZk/wtJVWc8nuoaPrQr9vYyIEhAQhT8nifV0AM0sQxXxNEsfcw wRPSf5kLlqfsqDeUS6XVoo0DqEuZ8fwsCfOB4YZ6I3QjJPRELqQ1Z7dshLctwayQ UZLmV7Qnei8/tKVA8m/RyaKBWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+R1eqV OyisNsVYp6ix0fxoUWQDMB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0MxRC84Q0ZFMUQ5QUQxRTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZ Ym9RTDFpNkk3a0R0bGVsU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIvl1MvURXIfDOIuplsVbJ23vsCxYjAR7vXWckzLdXWCebJYeNLx2s 0RF1A+8tjMG7zuJoJXFYHnlK/5gDOX0Z88PkO0ITk23oe33nZCq1nnvOsq+VXuw7 5uEihn8sg9BsdkumXkd4anNFtkfXhbyJ0rDPGGpxivqY4Eqny/EX6NIpog0Wtjpp xsjOFZtelEqcKvLYwtOneb9IIedQ38ob2epa90Iz8cqSWak/5dw4d+qEggS10CaA t44uwCqcTqvo/w+eXI5F3bmixEYOUBWn8kP9XTtE9HFhklnt65JMebYxMayEypKV 5+4O0lt6duq6kUatuzykTfgmkFwdgWEc -----END CERTIFICATE-----Generated at Sat May 31 16:42:08 2025 by rpki-client