$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: 0Q3LZBgDdI/t/4KHtFRuqH9zHKaV5Vtg2YHdfWdatNo= Subject key identifier: FE:DC:8B:18:6D:F0:E4:B0:21:78:43:74:9C:BF:BB:61:FC:DA:D7:A8 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 0515 Signing time: Fri 30 May 2025 23:51:27 +0000 Manifest this update: Fri 30 May 2025 23:51:26 +0000 Manifest next update: Fri 06 Jun 2025 23:51:26 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: dDdE/FGG2R/ENnt/WvOpObfZRGWTpHj/liEq3HYbJKg=) 2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: PT6HAQnCKQ1h24wBLOcqnEqZNrhbuPQnC+z2D3m/yIA=) 3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: f0BT/JmpOI0SlXzNJeEFPNEtCO/vruTdpVAOpvR5vus=) 4: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: mYVTb3naQfgNMS7fIevSh0fymgDfaPtpkRpDdX0Fp/8=) 5: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: dwJddnm1ntnsj4XMzYCHtwqdcwWHva5rTpsA08hxqqs=) 6: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: MO49isUUPsGusvTLu+FzYvw0dmt/wp8R4ivnpq1F0WA=) 7: BCE8827C4EB011ECA708A867C4F9AE02.roa (hash: qtOiVk2etZ3P5B2OTlSoKzmwTGa0QrEwPTimKLmKA7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: May 30 23:51:26 2025 GMT Not After : Jun 6 23:51:26 2025 GMT Subject: CN=683a447f-5522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:a7:52:6a:27:01:86:28:f2:62:3b:60:90: b0:86:61:00:5d:6a:f5:35:68:fb:ad:ac:5a:fe:03: a2:56:c3:bc:1e:38:91:ee:78:20:2e:a5:ed:eb:22: 2f:0a:1d:69:52:df:7f:56:64:b4:1e:c7:78:d2:00: a6:2a:d0:89:58:d9:53:0b:bd:1c:12:62:58:18:68: 20:ed:53:e6:4c:b8:0d:f8:49:49:fb:49:f8:bc:32: e6:48:b2:ae:87:d2:28:83:5c:e0:9a:49:a2:2d:ee: 73:17:55:c4:cf:1e:b6:dc:b2:26:d9:f8:60:e3:42: 1f:23:7f:b1:58:23:ca:26:33:a5:46:55:8c:97:bd: a3:22:8d:c7:9f:ee:5f:aa:2c:aa:73:47:7a:58:9c: 1c:7d:f8:9e:13:c5:e3:93:e1:18:53:db:26:e2:20: 73:1a:85:1b:fc:d8:0d:f9:72:44:79:49:bb:7f:06: 0c:ed:aa:e5:b7:39:18:3e:a7:b5:f2:73:05:b9:1e: 86:ae:8a:c1:65:a5:a4:29:61:ed:25:61:87:f8:2e: 22:f5:ae:2e:a9:5a:c3:7e:a2:1e:d9:2c:15:ef:8f: 4f:6c:ab:21:4b:7f:cb:6a:4b:21:b3:10:ba:69:b7: f7:74:ed:ee:1c:89:32:5f:ef:e5:7d:58:94:97:35: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DC:8B:18:6D:F0:E4:B0:21:78:43:74:9C:BF:BB:61:FC:DA:D7:A8 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:12:ff:a9:9b:c9:df:1f:33:d2:4c:ba:86:93:93:dd:30:46: d9:f0:61:00:d7:7e:6e:74:80:b5:d9:0b:c5:d5:b2:7a:56:53: 03:6a:ff:1f:2a:33:13:82:d3:9c:0e:05:8e:8c:1a:ec:78:57: 05:74:24:a7:78:80:c7:cf:ff:dd:e2:97:49:ed:65:a8:ac:f5: 4a:99:b2:47:95:b3:9b:79:d0:13:34:b8:6c:92:54:fa:75:24: a6:21:3b:b2:5e:4e:e6:82:8d:b4:cf:31:77:0a:c8:78:43:6c: 8a:07:13:43:da:3c:7c:f5:20:a1:7d:9a:15:ef:29:97:95:0d: e5:7d:6d:da:f9:00:6e:b3:43:60:84:4e:bf:21:99:92:23:c4: b1:3c:1e:34:d9:a0:0b:31:06:e5:4e:3d:79:ef:36:d8:59:df: b1:9c:2d:48:3b:eb:46:12:a6:c9:f4:e0:44:e3:16:9c:be:95: ed:a1:e3:58:7d:aa:d6:76:ac:30:12:47:fa:00:3b:27:09:25: 11:73:6b:6b:fa:4c:6b:3b:3f:45:bc:4b:62:0e:0d:6d:5d:44: 3d:66:56:cc:a5:c9:05:f7:89:a0:74:a1:74:33:26:7a:8b:e4: a7:08:f1:b2:1c:61:49:69:42:29:77:d5:09:54:75:cb:8e:50: c6:69:66:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUwNTMwMjM1MTI2WhcNMjUwNjA2MjM1MTI2WjAYMRYwFAYD VQQDEw02ODNhNDQ3Zi01NTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsqnUmonAYYo8mI7YJCwhmEAXWr1NWj7raxa/gOiVsO8HjiR7nggLqXt6yIv Ch1pUt9/VmS0Hsd40gCmKtCJWNlTC70cEmJYGGgg7VPmTLgN+ElJ+0n4vDLmSLKu h9Iog1zgmkmiLe5zF1XEzx623LIm2fhg40IfI3+xWCPKJjOlRlWMl72jIo3Hn+5f qiyqc0d6WJwcffieE8Xjk+EYU9sm4iBzGoUb/NgN+XJEeUm7fwYM7arltzkYPqe1 8nMFuR6GrorBZaWkKWHtJWGH+C4i9a4uqVrDfqIe2SwV749PbKshS3/LakshsxC6 abf3dO3uHIkyX+/lfViUlzXdeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7cixht 8OSwIXhDdJy/u2H82teoMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEEv+pm8nfHzPSTLqGk5PdMEbZ8GEA135udIC12QvF1bJ6VlMDav8f KjMTgtOcDgWOjBrseFcFdCSneIDHz//d4pdJ7WWorPVKmbJHlbObedATNLhsklT6 dSSmITuyXk7mgo20zzF3Csh4Q2yKBxND2jx89SChfZoV7ymXlQ3lfW3a+QBus0Ng hE6/IZmSI8SxPB402aALMQblTj157zbYWd+xnC1IO+tGEqbJ9OBE4xacvpXtoeNY farWdqwwEkf6ADsnCSURc2tr+kxrOz9FvEtiDg1tXUQ9ZlbMpckF94mgdKF0MyZ6 i+SnCPGyHGFJaUIpd9UJVHXLjlDGaWa1 -----END CERTIFICATE-----Generated at Sat May 31 16:42:58 2025 by rpki-client