$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft File: fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json) Hash identifier: fw0lh8LA9sDRzgK4zuvNTPr3ahj3QQKWI3i89q/8FoE= Subject key identifier: D3:63:D2:2D:65:73:A7:9A:BC:F3:35:71:2C:6B:CF:21:9D:E3:23:2A Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Certificate serial: 1C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft Manifest number: 1C3B Signing time: Fri 30 May 2025 16:22:53 +0000 Manifest this update: Fri 30 May 2025 16:22:52 +0000 Manifest next update: Fri 06 Jun 2025 16:22:52 +0000 Files and hashes: 1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: TBHCm2P2zuDlvxn8Un8sYGzwbz+/UkxFJo+jMhtdMOA=) 2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 3Dm5ElwPB3NMJf/bLLX77VdgpNnL/LPrpw6YAX3+x3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7244 (0x1c4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Validity Not Before: May 30 16:22:52 2025 GMT Not After : Jun 6 16:22:52 2025 GMT Subject: CN=6839db5d-0546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:a7:7c:56:78:f3:66:c7:0e:cf:e5:15:cb: 6b:76:fa:d2:ef:92:a6:9e:f1:c9:db:df:05:c6:22: 28:b8:3f:d2:39:13:92:3d:7c:50:d1:a0:bb:b3:07: 6b:fb:62:21:56:34:60:60:a5:86:1c:e1:c3:3d:99: ee:33:55:5c:57:b1:32:d0:86:9b:be:e7:5b:4f:64: cb:ea:09:ba:84:6d:bb:89:20:4e:c6:ed:cd:b1:41: 22:56:4a:09:12:a4:7b:f9:7f:6b:da:c0:a4:d1:e0: 32:7b:e1:97:29:13:ee:80:17:18:c5:37:33:95:da: 2f:0c:48:71:40:b9:9d:12:17:60:f7:18:db:16:27: dc:df:5b:5f:77:52:6e:88:9d:f0:4d:ce:76:87:e5: eb:58:60:86:46:1d:11:81:cf:e9:f8:32:bb:c4:37: 35:a3:ba:e8:25:8e:21:58:fa:7c:73:ba:9d:ac:ae: 39:34:2d:8f:38:22:60:7b:8b:3b:95:c5:75:11:01: d3:ee:21:1f:1f:70:3f:44:fe:4d:5d:f8:e2:77:f0: c3:65:5d:2b:b7:49:70:b7:66:5e:12:32:4b:35:47: 87:a9:6f:ac:3e:1e:ff:aa:08:93:0e:c5:18:94:7e: 9c:bf:ae:ca:b5:ce:2c:01:c2:bd:0c:98:b9:c5:f0: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:63:D2:2D:65:73:A7:9A:BC:F3:35:71:2C:6B:CF:21:9D:E3:23:2A X509v3 Authority Key Identifier: keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:4c:4c:85:41:ed:44:b1:28:15:37:42:bc:10:21:b7:cd:3d: bb:38:7f:68:41:50:c1:d4:e6:54:c3:b8:b3:da:e0:9e:fa:60: 51:ef:38:4d:34:4e:4d:54:26:07:0e:b1:57:cd:7e:5d:82:6d: c5:33:44:4d:b9:e0:d9:e7:f5:e7:63:3f:67:62:41:01:79:f5: ab:ca:c9:be:b7:c1:95:a2:1f:8f:0e:a1:61:8d:96:cf:a3:26: 85:b4:7e:66:d2:7b:e1:11:7b:5f:fd:a3:48:71:c5:d8:35:f9: 13:32:97:f3:e9:7a:f9:bc:e6:47:32:a6:f7:c0:f2:6d:9c:ef: 9f:98:86:98:07:3a:2c:f5:ea:62:3a:83:50:2a:8e:c6:bc:b2: 4d:27:44:79:84:9c:b3:6d:e7:08:c8:24:29:4b:1c:da:da:cd: 6c:0d:4f:e7:bd:1d:ad:cd:0a:1e:2e:79:ef:f4:a0:21:cb:77: ec:7d:5f:3e:e4:4b:df:b3:56:51:4e:4f:97:22:5c:54:01:52: fa:3f:b4:d3:5c:43:48:b7:68:4c:15:49:02:29:45:84:cf:74: 36:a0:62:50:96:ff:21:3b:7a:44:51:5d:d8:e5:bd:e9:1c:4e: 84:5b:c8:24:5a:d6:25:f1:45:13:b9:f6:2c:d1:ec:3b:b6:b9: 87:44:da:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDdENkEzMzBGMEQwMTI0OTQyN0M3RkM5RERERENGNEE4 Mjg3NjBCMDYwHhcNMjUwNTMwMTYyMjUyWhcNMjUwNjA2MTYyMjUyWjAYMRYwFAYD VQQDEw02ODM5ZGI1ZC0wNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvKnfFZ482bHDs/lFctrdvrS75KmnvHJ298FxiIouD/SOROSPXxQ0aC7swdr +2IhVjRgYKWGHOHDPZnuM1VcV7Ey0IabvudbT2TL6gm6hG27iSBOxu3NsUEiVkoJ EqR7+X9r2sCk0eAye+GXKRPugBcYxTczldovDEhxQLmdEhdg9xjbFifc31tfd1Ju iJ3wTc52h+XrWGCGRh0Rgc/p+DK7xDc1o7roJY4hWPp8c7qdrK45NC2POCJge4s7 lcV1EQHT7iEfH3A/RP5NXfjid/DDZV0rt0lwt2ZeEjJLNUeHqW+sPh7/qgiTDsUY lH6cv67Ktc4sAcK9DJi5xfB/lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNj0i1l c6eavPM1cSxrzyGd4yMqMB8GA1UdIwQYMBaAFH1qMw8NASSUJ8f8nd3c9KgodgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BRDA4QUYyNkU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpKUW54X3lkM2R6MHFDaDJD d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXb3pEdzBCSkpRbnhfeWQzZHowcUNoMkN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BRDA4QUYyNkU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpK UW54X3lkM2R6MHFDaDJDd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmTEyFQe1EsSgVN0K8ECG3zT27OH9oQVDB1OZUw7iz2uCe+mBR7zhN NE5NVCYHDrFXzX5dgm3FM0RNueDZ5/XnYz9nYkEBefWrysm+t8GVoh+PDqFhjZbP oyaFtH5m0nvhEXtf/aNIccXYNfkTMpfz6Xr5vOZHMqb3wPJtnO+fmIaYBzos9epi OoNQKo7GvLJNJ0R5hJyzbecIyCQpSxza2s1sDU/nvR2tzQoeLnnv9KAhy3fsfV8+ 5Evfs1ZRTk+XIlxUAVL6P7TTXENIt2hMFUkCKUWEz3Q2oGJQlv8hO3pEUV3Y5b3p HE6EW8gkWtYl8UUTufYs0ew7trmHRNol -----END CERTIFICATE-----Generated at Sat May 31 16:46:53 2025 by rpki-client