$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: J/kFtTqqLD0e9kSeeep+2v7g/t1Ud1ir0/9UL2JAdHg= Subject key identifier: 6F:3C:CA:81:4A:B9:7E:95:B3:47:AF:A2:BB:F2:58:1E:2E:76:13:3D Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 011B Signing time: Sat 31 May 2025 04:41:37 +0000 Manifest this update: Sat 31 May 2025 04:41:37 +0000 Manifest next update: Sat 07 Jun 2025 04:41:37 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: olYe1t4DRaRxHDxBxgdEx1OYM2O0ct36xUFcGRO5YBM=) 2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: 5Uer3p+UX/po6o30wmY0vuoN+A26JLu6gVA8EPsZ9Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: May 31 04:41:37 2025 GMT Not After : Jun 7 04:41:37 2025 GMT Subject: CN=683a8881-e5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:f1:f9:7c:58:94:10:f0:c7:63:31:9b:8f: c8:9e:12:a7:11:98:2c:d3:d3:15:27:fc:77:c6:c8: 7b:84:ae:2e:aa:ca:dc:fa:2f:84:8b:84:89:df:1a: 61:ca:12:cb:bf:06:e4:69:0c:38:16:31:f2:6a:81: 83:f1:f6:f2:55:db:f2:f5:4c:b3:c3:03:b0:46:08: 19:6a:19:3e:7a:d7:47:fc:69:1c:10:2c:03:3d:c8: ac:17:17:07:b4:b9:84:48:48:e6:f1:86:6b:b6:df: a2:ef:ac:9b:3f:fc:9f:64:8b:f1:c0:f8:05:64:6e: 0e:f7:02:f3:ea:a9:83:18:93:d4:82:9a:e1:c9:7c: 9c:44:ce:0b:a4:cb:74:c7:9f:d7:5e:30:2b:68:a6: d1:ca:6d:b6:8c:79:be:95:c2:2e:33:67:45:fb:d9: 82:65:aa:bc:58:90:0a:34:07:6e:15:01:10:c3:84: 13:85:16:f8:30:fd:b0:55:e1:ed:07:e2:90:09:13: 79:b9:1d:3b:19:84:01:ee:6a:9e:52:2b:44:84:8d: 6c:c7:7d:5b:d0:01:91:6c:ac:88:b3:f5:68:7c:00: 80:fa:f7:0f:09:69:49:12:93:58:dc:38:33:fa:5c: e6:d6:c7:7b:68:dc:e2:e4:f6:1f:02:b7:5b:3e:4c: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3C:CA:81:4A:B9:7E:95:B3:47:AF:A2:BB:F2:58:1E:2E:76:13:3D X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:98:27:b3:82:ec:7d:1f:28:3e:bc:b6:05:e9:8b:1c:06:b8: e6:d8:c6:15:da:1b:ee:da:50:cb:a1:e2:bb:a1:71:9e:92:f6: 98:7c:d0:59:91:e7:39:1e:fe:11:13:b2:36:be:94:d8:1e:e1: ef:cd:74:04:23:f1:8e:05:13:7d:ba:29:0a:1f:33:bb:58:dc: 72:3d:f4:be:11:f6:aa:81:95:d8:4d:b3:30:e3:2e:70:69:78: 62:c3:d8:59:23:e6:66:25:87:7d:bf:17:60:d7:d2:9b:3e:c5: ee:5c:48:f2:bf:df:5f:49:8c:09:f6:39:1b:0a:55:fe:16:1d: e5:6f:90:37:ef:05:ff:87:03:33:11:bc:d6:dd:27:07:74:42: cf:3b:c0:61:e1:c7:6e:b9:0e:c0:d2:e1:47:03:e6:05:96:aa: 17:3d:e5:ca:59:b8:c0:9a:e1:e3:38:18:4e:50:dc:fb:e3:16: 97:b1:d0:ef:bd:32:9d:1c:8e:fd:00:b6:23:a0:72:c4:21:1f: 6b:7a:cc:81:ca:28:82:11:16:4d:a5:d5:14:0b:f4:96:a0:19: c0:e1:b4:e7:9a:9c:1f:07:de:ef:c5:80:04:aa:cb:ac:28:f2: e7:3d:92:4d:73:21:77:1b:25:0f:d5:b9:ec:56:47:f3:b0:15: d3:b6:37:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjUwNTMxMDQ0MTM3WhcNMjUwNjA3MDQ0MTM3WjAYMRYwFAYD VQQDEw02ODNhODg4MS1lNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV/x+XxYlBDwx2Mxm4/InhKnEZgs09MVJ/x3xsh7hK4uqsrc+i+Ei4SJ3xph yhLLvwbkaQw4FjHyaoGD8fbyVdvy9UyzwwOwRggZahk+etdH/GkcECwDPcisFxcH tLmESEjm8YZrtt+i76ybP/yfZIvxwPgFZG4O9wLz6qmDGJPUgprhyXycRM4LpMt0 x5/XXjAraKbRym22jHm+lcIuM2dF+9mCZaq8WJAKNAduFQEQw4QThRb4MP2wVeHt B+KQCRN5uR07GYQB7mqeUitEhI1sx31b0AGRbKyIs/VofACA+vcPCWlJEpNY3Dgz +lzm1sd7aNzi5PYfArdbPkx1zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG88yoFK uX6Vs0evorvyWB4udhM9MB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgmCezgux9Hyg+vLYF6YscBrjm2MYV2hvu2lDLoeK7oXGekvaYfNBZ kec5Hv4RE7I2vpTYHuHvzXQEI/GOBRN9uikKHzO7WNxyPfS+EfaqgZXYTbMw4y5w aXhiw9hZI+ZmJYd9vxdg19KbPsXuXEjyv99fSYwJ9jkbClX+Fh3lb5A37wX/hwMz EbzW3ScHdELPO8Bh4cduuQ7A0uFHA+YFlqoXPeXKWbjAmuHjOBhOUNz74xaXsdDv vTKdHI79ALYjoHLEIR9resyByiiCERZNpdUUC/SWoBnA4bTnmpwfB97vxYAEqsus KPLnPZJNcyF3GyUP1bnsVkfzsBXTtje0 -----END CERTIFICATE-----Generated at Sat May 31 17:42:39 2025 by rpki-client