$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft File: pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json) Hash identifier: fLnJ1MJK9hJLg1trx+6KzuOj6QWRNjhK9ODIRBbcnT4= Subject key identifier: 79:BB:E8:72:F0:B9:89:55:F0:A7:97:44:8E:84:FE:1F:45:B8:99:1C Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 Certificate issuer: /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft Manifest number: 0127 Signing time: Tue 01 Jul 2025 05:07:43 +0000 Manifest this update: Tue 01 Jul 2025 05:07:43 +0000 Manifest next update: Tue 08 Jul 2025 05:07:43 +0000 Files and hashes: 1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: QoUpSewP6QT0ZYk5xj1hbT2jSPzUek+pGRAmzlQ+KbM=) 2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: xTZDs1cESf1SGEobV9O/GqTj36xfVMlMR7VudfYRv7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Validity Not Before: Jul 1 05:07:43 2025 GMT Not After : Jul 8 05:07:43 2025 GMT Subject: CN=68636d1f-0b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:d8:d8:44:f2:5d:df:47:c5:55:15:f4:93: e8:79:c1:ff:4c:be:b0:c7:fe:04:d8:1f:a3:c2:82: a9:4f:ea:fd:1a:fb:62:ba:7b:5a:93:2f:79:b6:2c: ff:37:f9:e9:d8:38:eb:91:52:c8:e9:82:00:48:a1: d1:72:f1:33:76:c9:b8:95:05:9a:88:53:53:ba:99: 50:47:05:de:bc:82:82:b5:42:53:8c:0c:87:21:e9: ac:26:96:2d:d0:a7:65:3a:49:fc:66:e5:27:78:f8: d9:c8:58:05:8b:16:56:89:cd:f9:a7:2f:4a:33:3c: e7:10:4b:7c:31:1b:91:6b:c5:a4:ab:69:6e:1d:83: d3:ea:59:da:5a:c6:42:8d:b2:ad:d9:7b:e7:32:b8: d5:43:98:7a:97:8c:7b:8a:1b:f4:0e:f2:28:c4:0f: 8a:73:ab:e2:93:af:c7:5b:12:af:e4:81:1c:c4:92: 68:52:cf:62:b7:09:f3:91:77:59:86:69:bd:1c:d7: 1b:20:85:5c:53:87:82:5f:60:b5:73:ad:0e:8c:30: ca:e4:61:5c:05:fb:ae:3d:fb:d3:c8:c6:26:1b:63: d5:71:97:20:8b:6b:39:db:01:73:da:a2:47:43:57: b5:aa:02:a0:ee:d5:82:b9:82:bd:c2:e2:03:8f:1c: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BB:E8:72:F0:B9:89:55:F0:A7:97:44:8E:84:FE:1F:45:B8:99:1C X509v3 Authority Key Identifier: keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:74:31:05:99:74:0e:4f:c8:e9:81:75:0c:3a:21:b4:31:db: 23:45:b0:01:85:92:77:67:d1:27:d2:7d:38:09:aa:c3:e9:3e: 80:54:4d:a0:b1:cf:cd:3b:e5:9c:dd:cb:60:2d:d2:83:4f:07: eb:a8:3a:de:d9:14:4c:ba:8a:c5:7f:38:96:c3:ad:a5:b8:b8: 23:f1:7f:cc:72:74:54:73:8c:fe:48:56:eb:6a:0c:ac:2b:99: 9a:3d:03:9d:2f:11:cf:b3:ee:1f:01:ef:7b:2c:c7:e0:35:03: bf:05:22:db:4a:c5:f4:ef:e4:93:67:c0:a3:f1:53:37:e8:ce: e8:6f:76:84:55:61:e9:41:c7:33:98:f5:28:d7:d7:dc:4b:0f: b9:12:77:6d:c4:27:96:8f:29:33:a3:bc:cd:ab:67:23:94:1b: 76:4c:c6:30:50:5c:56:ad:b0:94:43:08:66:c4:0f:5e:6a:9b: 55:84:7b:02:25:91:01:7e:2f:d8:47:34:b3:95:dd:a9:d2:1b: a9:44:c5:17:68:b7:66:c1:8f:42:af:89:80:83:ff:6a:a7:84: b7:b0:25:60:9b:d4:48:58:23:62:de:65:6e:ed:d3:6e:da:c5: b1:00:95:b2:12:fa:fe:7f:d3:68:5f:65:26:5e:ec:9f:e2:69: 75:5c:a6:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NzExMTAvBgNVBAUTKEE1NkFFNzJDNjZBNjRFNjI3OUM4Q0M5QzBFRkU0RjM2 MzY5MDI3ODAwHhcNMjUwNzAxMDUwNzQzWhcNMjUwNzA4MDUwNzQzWjAYMRYwFAYD VQQDEw02ODYzNmQxZi0wYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM/Y2ETyXd9HxVUV9JPoecH/TL6wx/4E2B+jwoKpT+r9Gvtiuntaky95tiz/ N/np2DjrkVLI6YIASKHRcvEzdsm4lQWaiFNTuplQRwXevIKCtUJTjAyHIemsJpYt 0KdlOkn8ZuUnePjZyFgFixZWic35py9KMzznEEt8MRuRa8Wkq2luHYPT6lnaWsZC jbKt2XvnMrjVQ5h6l4x7ihv0DvIoxA+Kc6vik6/HWxKv5IEcxJJoUs9itwnzkXdZ hmm9HNcbIIVcU4eCX2C1c60OjDDK5GFcBfuuPfvTyMYmG2PVcZcgi2s52wFz2qJH Q1e1qgKg7tWCuYK9wuIDjxwcxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm76HLw uYlV8KeXRI6E/h9FuJkcMB8GA1UdIwQYMBaAFKVq5yxmpk5iecjMnA7+TzY2kCeA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ3MS82RkU4QTJFRTky M0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRtSjV5TXljRHY1UE5qYVFK NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXcm5MR2FtVG1KNXlNeWNEdjVQTmphUUo0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ3MS82RkU4QTJFRTkyM0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRt SjV5TXljRHY1UE5qYVFKNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8dDEFmXQOT8jpgXUMOiG0MdsjRbABhZJ3Z9En0n04CarD6T6AVE2g sc/NO+Wc3ctgLdKDTwfrqDre2RRMuorFfziWw62luLgj8X/McnRUc4z+SFbragys K5maPQOdLxHPs+4fAe97LMfgNQO/BSLbSsX07+STZ8Cj8VM36M7ob3aEVWHpQccz mPUo19fcSw+5EndtxCeWjykzo7zNq2cjlBt2TMYwUFxWrbCUQwhmxA9eaptVhHsC JZEBfi/YRzSzld2p0hupRMUXaLdmwY9Cr4mAg/9qp4S3sCVgm9RIWCNi3mVu7dNu 2sWxAJWyEvr+f9NoX2UmXuyf4ml1XKaU -----END CERTIFICATE-----Generated at Wed Jul 2 01:40:49 2025 by rpki-client