$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json) Hash identifier: 3kM1u19BvhaTX0COcMnHKovsIutDHKPOFvHQkh/nvMg= Subject key identifier: 47:07:FB:1C:CD:E1:12:49:14:C4:25:3F:93:10:E9:CC:E9:8D:C6:D0 Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft Manifest number: E6 Signing time: Sat 31 May 2025 04:59:50 +0000 Manifest this update: Sat 31 May 2025 04:59:49 +0000 Manifest next update: Sat 07 Jun 2025 04:59:49 +0000 Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: S4fd1HPsrdH2Pltw6kVMklsj5mwE83QN4PRNIseB63g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Validity Not Before: May 31 04:59:49 2025 GMT Not After : Jun 7 04:59:49 2025 GMT Subject: CN=683a8cc5-f2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:77:2a:21:ce:c6:d6:c2:2d:e8:1f:a6:7b: 44:c6:2d:f0:37:38:ce:3b:de:81:84:e3:f0:5a:a2: 0c:21:3e:4f:98:43:16:e4:50:91:2f:49:90:b8:92: 35:da:e8:21:88:b3:b6:09:88:69:21:dd:77:a9:b8: 88:bb:8c:65:0c:de:db:77:86:4d:e8:6e:66:4f:c6: 33:e1:94:90:00:73:98:3c:69:4b:63:ce:a4:31:a6: 31:0e:b9:64:42:09:b4:2a:0c:76:3d:24:60:6c:67: e3:f6:44:a9:87:2c:4c:ad:f7:70:3b:87:96:fe:06: 65:af:bc:ee:7f:81:5e:3d:7e:fc:eb:7d:ff:b1:e4: 0a:e0:13:15:51:c2:0e:e8:11:49:40:36:1e:2d:48: 92:d8:18:8b:63:4a:7f:44:06:96:95:53:d9:5c:d9: 74:12:dd:46:04:36:a9:9d:f8:60:97:b7:41:03:22: 71:d5:8a:bc:5e:d5:13:7a:a1:0b:74:1b:58:80:6f: a1:31:f3:f9:57:84:55:e8:c5:36:6a:ad:b6:cd:3e: e0:5e:8b:11:fe:78:6e:64:3e:1b:d1:c8:6e:23:f7: 5f:90:d3:6c:cd:77:98:96:c2:7c:d4:bf:2d:5e:08: 92:5d:81:90:70:09:ba:83:61:c9:03:24:2e:0a:4a: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:FB:1C:CD:E1:12:49:14:C4:25:3F:93:10:E9:CC:E9:8D:C6:D0 X509v3 Authority Key Identifier: keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:fa:ee:15:1b:e9:19:0d:6e:b9:df:a0:ab:fe:65:03:ef:cb: 47:d5:3f:20:42:53:b1:23:4c:6c:da:eb:fd:a2:28:7f:32:0a: 69:09:bc:5d:d1:f2:66:67:f4:3b:91:3e:90:07:aa:ee:ef:6b: de:8f:0a:79:d2:48:7d:5f:65:78:60:65:b8:62:45:a1:ab:50: e3:d0:47:ee:bc:1d:20:f9:e6:84:81:d2:98:c5:96:c0:ad:1a: bf:e8:f3:eb:7b:15:49:0f:c4:be:56:9e:cf:0f:8e:69:83:ec: 62:17:f9:c8:d8:51:fd:fb:d4:6e:ee:a4:15:96:81:7e:70:82: 45:ca:fe:32:b9:43:7b:8c:b6:cb:4a:77:cb:58:90:7e:2c:f0: 37:a8:ee:68:ef:a0:36:cb:cb:63:c0:f9:87:d7:b3:6a:e1:b4: 27:1f:e6:a7:33:80:ea:c7:76:98:c5:f1:26:a1:61:34:b1:56: 69:d7:f1:eb:28:5d:2a:fd:38:0c:83:6f:0b:48:c0:08:9c:15: ae:78:1c:35:00:5f:11:ca:3c:29:09:2c:72:b8:41:69:7e:bb: b4:27:c1:67:c1:af:2b:c8:2d:6f:d9:a9:06:a7:f3:93:8b:c2: 38:78:f1:59:8c:34:a7:4a:f5:fb:07:33:a1:1c:25:e1:21:98: a7:20:eb:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKEMxOUQ2QjZERUIzQTFGOUMzOTg0N0UxNENBQTU1OTk3 QkM5Q0YyNzYwHhcNMjUwNTMxMDQ1OTQ5WhcNMjUwNjA3MDQ1OTQ5WjAYMRYwFAYD VQQDEw02ODNhOGNjNS1mMmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxP93KiHOxtbCLegfpntExi3wNzjOO96BhOPwWqIMIT5PmEMW5FCRL0mQuJI1 2ughiLO2CYhpId13qbiIu4xlDN7bd4ZN6G5mT8Yz4ZSQAHOYPGlLY86kMaYxDrlk Qgm0Kgx2PSRgbGfj9kSphyxMrfdwO4eW/gZlr7zuf4FePX78633/seQK4BMVUcIO 6BFJQDYeLUiS2BiLY0p/RAaWlVPZXNl0Et1GBDapnfhgl7dBAyJx1Yq8XtUTeqEL dBtYgG+hMfP5V4RV6MU2aq22zT7gXosR/nhuZD4b0chuI/dfkNNszXeYlsJ81L8t XgiSXYGQcAm6g2HJAyQuCko+7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcH+xzN 4RJJFMQlP5MQ6czpjcbQMB8GA1UdIwQYMBaAFMGda23rOh+cOYR+FMqlWZe8nPJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DRURBNTJDNEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1dzVoSDRVeXFWWmw3eWM4 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5YzhuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DRURBNTJDNEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1 dzVoSDRVeXFWWmw3eWM4blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm+u4VG+kZDW6536Cr/mUD78tH1T8gQlOxI0xs2uv9oih/MgppCbxd 0fJmZ/Q7kT6QB6ru72vejwp50kh9X2V4YGW4YkWhq1Dj0EfuvB0g+eaEgdKYxZbA rRq/6PPrexVJD8S+Vp7PD45pg+xiF/nI2FH9+9Ru7qQVloF+cIJFyv4yuUN7jLbL SnfLWJB+LPA3qO5o76A2y8tjwPmH17Nq4bQnH+anM4Dqx3aYxfEmoWE0sVZp1/Hr KF0q/TgMg28LSMAInBWueBw1AF8RyjwpCSxyuEFpfru0J8Fnwa8ryC1v2akGp/OT i8I4ePFZjDSnSvX7BzOhHCXhIZinIOtg -----END CERTIFICATE-----Generated at Sat May 31 17:56:24 2025 by rpki-client