$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft File: w373yMNE0xhYKbwsuZbIlKqoDvM.mft (raw, json) Hash identifier: i3nrsRCKnchkSC4Vj+wDVpXlYI/GYqQG4xqdPbW1pBc= Subject key identifier: 57:EE:13:93:34:98:0C:22:17:20:8E:B5:18:D2:CB:4B:1F:42:99:8A Authority key identifier: C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3 Certificate issuer: /CN=A912756D/serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft Manifest number: 8B Signing time: Sun 01 Jun 2025 06:14:12 +0000 Manifest this update: Sun 01 Jun 2025 06:14:12 +0000 Manifest next update: Sun 08 Jun 2025 06:14:12 +0000 Files and hashes: 1: w373yMNE0xhYKbwsuZbIlKqoDvM.crl (hash: Am0MdIAVthrVqxYsj/AZQKhDtPy5zlpnK1INHDeRsIQ=) 2: 95CB7E0E6B5611EFA00DA92FC4F9AE02.roa (hash: duamzviBQYqtExZmA9rAc3mAR9sTDl7eoEu87aRFjpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3 Validity Not Before: Jun 1 06:14:12 2025 GMT Not After : Jun 8 06:14:12 2025 GMT Subject: CN=683befb4-9795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8d:c1:ba:4b:b1:48:00:7b:f4:e8:14:b5:98: 7a:d5:5c:2a:40:d2:ed:84:97:4e:4d:53:6c:8e:cd: 0f:99:4c:15:d1:c7:12:ee:ef:53:c5:35:e2:81:0f: a1:bf:e7:7b:7b:1c:5e:6f:b8:e7:66:13:ef:54:e0: 19:09:22:0e:b7:82:27:b7:d1:6f:95:57:80:72:27: dd:98:d1:f6:bd:6d:35:e0:8c:ad:85:d3:9b:ee:39: 49:6d:e5:08:e0:ac:31:19:40:de:4c:67:1b:a9:9a: 2d:c5:b9:d7:2e:e8:b4:02:08:cf:b8:3a:bb:05:ac: fb:b6:00:4c:15:18:69:c1:cd:d9:27:f3:93:74:3e: 40:2f:d8:ea:6b:f3:4c:48:b5:13:91:0d:e2:28:35: fe:e3:23:ab:2b:32:b5:dc:88:6c:00:21:9f:8a:1e: ba:a8:c4:8b:bf:f6:12:3e:ff:2e:d5:a1:c7:2d:c4: 09:10:c9:78:99:99:b5:64:42:fd:51:d6:74:b9:98: ea:cd:80:20:7c:dd:58:78:ea:c7:7d:21:2d:14:b0: 64:c0:5d:17:2f:fd:38:ec:20:24:4f:46:79:fb:40: 01:e9:f1:88:2d:ab:3f:fd:0e:d8:9f:e4:75:f8:45: be:80:7c:b1:ca:f2:dc:67:08:6d:55:ff:3b:a8:94: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EE:13:93:34:98:0C:22:17:20:8E:B5:18:D2:CB:4B:1F:42:99:8A X509v3 Authority Key Identifier: keyid:C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3f:95:45:4f:98:19:ec:07:3c:da:ed:63:33:e2:69:70:cf: 2d:87:f2:d6:27:1d:b6:5e:17:93:de:58:f5:ba:d0:28:e1:c8: 99:04:ae:4a:b7:2b:4b:7a:59:8c:ca:52:e9:4c:ba:71:05:89: a7:f9:b9:bb:6c:03:f5:eb:76:f9:a9:c6:1a:80:21:3f:aa:13: 8d:6d:8d:05:4c:ec:5d:8f:8d:69:a7:f4:de:c7:af:b9:08:b3: f6:2b:ce:a0:ff:e5:d1:14:a2:00:d5:fd:68:a0:77:fb:2c:49: 98:5f:a2:a0:4e:a0:45:fe:50:13:17:5a:a6:a6:de:c4:f1:4f: 6b:8a:52:11:27:f7:e4:b4:15:fc:6f:ed:1d:31:c6:3c:75:20: 2e:f0:63:10:b8:27:b9:bd:c4:c5:8f:f7:4c:2c:ee:27:48:fb: bb:45:9c:7a:fc:c0:69:6e:73:9a:84:ac:73:83:ea:7d:54:81: 5b:cb:0e:4f:bb:f4:12:81:0b:b3:2c:b4:8a:35:12:83:03:20: 33:73:b2:c8:b0:fe:21:bc:15:03:f0:7e:9f:26:a4:12:48:57: 8d:77:95:df:7d:e1:5d:28:bd:db:dc:77:1d:1e:88:ed:74:c9: 11:58:a2:01:2b:85:7a:4e:6d:80:b5:50:b8:59:29:b9:46:a4: 7f:30:55:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKEMzN0VGN0M4QzM0NEQzMTg1ODI5QkMyQ0I5OTZDODk0 QUFBODBFRjMwHhcNMjUwNjAxMDYxNDEyWhcNMjUwNjA4MDYxNDEyWjAYMRYwFAYD VQQDEw02ODNiZWZiNC05Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3o3BukuxSAB79OgUtZh61VwqQNLthJdOTVNsjs0PmUwV0ccS7u9TxTXigQ+h v+d7exxeb7jnZhPvVOAZCSIOt4Int9FvlVeAcifdmNH2vW014IythdOb7jlJbeUI 4KwxGUDeTGcbqZotxbnXLui0AgjPuDq7Baz7tgBMFRhpwc3ZJ/OTdD5AL9jqa/NM SLUTkQ3iKDX+4yOrKzK13IhsACGfih66qMSLv/YSPv8u1aHHLcQJEMl4mZm1ZEL9 UdZ0uZjqzYAgfN1YeOrHfSEtFLBkwF0XL/047CAkT0Z5+0AB6fGILas//Q7Yn+R1 +EW+gHyxyvLcZwhtVf87qJRRQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfuE5M0 mAwiFyCOtRjSy0sfQpmKMB8GA1UdIwQYMBaAFMN+98jDRNMYWCm8LLmWyJSqqA7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84NDIyMDZENDZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi93MzczeU1ORTB4aFlLYndzdVpiSWxLcW9E dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3czNzN5TU5FMHhoWUtid3N1WmJJbEtxb0R2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84NDIyMDZENDZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi93MzczeU1ORTB4 aFlLYndzdVpiSWxLcW9Edk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZP5VFT5gZ7Ac82u1jM+JpcM8th/LWJx22XheT3lj1utAo4ciZBK5K tytLelmMylLpTLpxBYmn+bm7bAP163b5qcYagCE/qhONbY0FTOxdj41pp/Tex6+5 CLP2K86g/+XRFKIA1f1ooHf7LEmYX6KgTqBF/lATF1qmpt7E8U9rilIRJ/fktBX8 b+0dMcY8dSAu8GMQuCe5vcTFj/dMLO4nSPu7RZx6/MBpbnOahKxzg+p9VIFbyw5P u/QSgQuzLLSKNRKDAyAzc7LIsP4hvBUD8H6fJqQSSFeNd5XffeFdKL3b3HcdHojt dMkRWKIBK4V6Tm2AtVC4WSm5RqR/MFUf -----END CERTIFICATE-----Generated at Mon Jun 2 22:15:09 2025 by rpki-client