$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json) Hash identifier: sCvY09H4mF2DuBxqpnWIE8h6BWxkJY6euzcyFajRApA= Subject key identifier: 6B:C6:24:ED:4D:1D:11:BB:7D:DA:A3:8F:CD:1F:AD:C1:3F:FA:B3:81 Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Certificate serial: 1308 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft Manifest number: 12F5 Signing time: Fri 30 May 2025 17:13:57 +0000 Manifest this update: Fri 30 May 2025 17:13:57 +0000 Manifest next update: Fri 06 Jun 2025 17:13:57 +0000 Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: PulM1XNm8fXqv8+TcQkq94K4CvKc1LpJmL8/LKZ2xBw=) 2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: mWJcvoB56xtTVL8jsG+OSQ9sF5v7r1+9ESUNzFxge8k=) 3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: 9g+f1SJF42ygeVyvheaF7ZLxnRH6Cv+HITF3QrrONoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4872 (0x1308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Validity Not Before: May 30 17:13:57 2025 GMT Not After : Jun 6 17:13:57 2025 GMT Subject: CN=6839e755-a016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:b5:6c:1d:a2:59:7f:b6:1f:4b:51:38:a5: 0e:83:62:d0:e7:8a:4a:b7:ed:25:0d:58:47:6b:da: df:d0:30:72:29:12:58:c8:99:bc:79:73:49:36:4c: cc:e9:55:e3:7d:9b:38:b2:ed:2a:73:fd:3d:b8:34: 86:f8:02:cd:bb:85:94:7d:ae:4d:30:47:cf:21:f8: 9a:fe:d3:46:1b:fa:35:61:30:07:7d:88:5b:24:74: 2d:a3:68:97:01:d5:b5:53:a6:fb:41:83:2d:06:ef: 93:24:87:3c:d9:d9:41:6f:d7:25:8f:48:27:bc:23: da:46:35:dd:03:60:48:6a:2e:70:c7:7c:50:11:94: 1d:f3:67:bc:2e:dd:e9:8d:2c:f9:10:c8:4a:43:df: ae:fe:fe:77:60:29:0a:c1:22:ff:f5:d0:8a:39:e8: 5a:84:6d:7d:1f:1b:8c:d5:0d:12:fc:7a:18:64:2a: c8:e0:dc:42:84:4e:31:dc:2a:77:a5:99:10:e0:66: 4e:c4:71:39:b4:1c:b9:82:a6:9d:98:b9:70:e2:a8: 3c:a7:c0:fb:1a:74:a3:85:5e:b3:59:ed:43:02:35: 20:a0:9d:c2:2a:3a:c8:b6:a0:92:9c:ec:3f:03:c6: 28:a2:1e:91:ca:1a:fa:48:fe:69:8c:d8:af:3c:5a: e1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C6:24:ED:4D:1D:11:BB:7D:DA:A3:8F:CD:1F:AD:C1:3F:FA:B3:81 X509v3 Authority Key Identifier: keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0b:24:25:95:18:e8:dc:62:bf:b1:52:cc:f2:99:9c:99:b8: 53:c3:46:c8:01:eb:57:b6:de:50:da:bd:8c:bb:e2:fb:58:83: 0c:42:ee:25:21:3a:7b:97:9a:f8:fa:d3:6c:7f:b1:e9:a8:88: c1:69:51:e1:44:4f:96:8a:f3:c3:f5:59:3b:eb:d0:ea:ec:92: ef:2e:b2:cc:8f:75:58:96:eb:9d:4e:6c:08:8f:17:15:8f:bc: f4:47:c8:49:76:ce:df:a4:dd:14:e3:51:05:10:57:7b:09:e1: dd:00:20:dc:4e:f3:8c:98:55:46:d4:7e:42:60:2a:da:c7:15: 8e:6f:aa:c2:43:67:07:45:81:b3:08:63:20:6b:50:b1:32:e5: 95:9d:ae:6c:9d:a2:cd:c6:24:45:f9:d0:eb:2b:b4:79:6f:34: aa:06:20:12:07:8c:c6:07:04:79:d2:63:a1:af:6a:05:2c:56: 44:63:d4:7a:40:b9:d0:f2:0e:f8:21:41:3d:8c:2b:1a:12:77: 25:61:21:76:ea:48:67:12:a1:1c:f0:b9:fd:57:d5:bf:bf:c2: c7:6e:ca:84:90:ff:79:4d:b9:69:d6:6c:9e:ec:c7:1c:05:23: dd:cd:fa:a9:1b:0b:0d:24:ff:c1:63:51:06:f7:e1:05:a3:1c: c7:85:13:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2 N0M2ODkyQjcwHhcNMjUwNTMwMTcxMzU3WhcNMjUwNjA2MTcxMzU3WjAYMRYwFAYD VQQDEw02ODM5ZTc1NS1hMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1K1bB2iWX+2H0tROKUOg2LQ54pKt+0lDVhHa9rf0DByKRJYyJm8eXNJNkzM 6VXjfZs4su0qc/09uDSG+ALNu4WUfa5NMEfPIfia/tNGG/o1YTAHfYhbJHQto2iX AdW1U6b7QYMtBu+TJIc82dlBb9clj0gnvCPaRjXdA2BIai5wx3xQEZQd82e8Lt3p jSz5EMhKQ9+u/v53YCkKwSL/9dCKOehahG19HxuM1Q0S/HoYZCrI4NxChE4x3Cp3 pZkQ4GZOxHE5tBy5gqadmLlw4qg8p8D7GnSjhV6zWe1DAjUgoJ3CKjrItqCSnOw/ A8Yooh6Ryhr6SP5pjNivPFrhswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvGJO1N HRG7fdqjj80frcE/+rOBMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1 QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA4Ri9BOEYyMDMwOEI1QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRt bzl5SG5qeWZ5eVpueG9rcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbCyQllRjo3GK/sVLM8pmcmbhTw0bIAetXtt5Q2r2Mu+L7WIMMQu4l ITp7l5r4+tNsf7HpqIjBaVHhRE+WivPD9Vk769Dq7JLvLrLMj3VYluudTmwIjxcV j7z0R8hJds7fpN0U41EFEFd7CeHdACDcTvOMmFVG1H5CYCraxxWOb6rCQ2cHRYGz CGMga1CxMuWVna5snaLNxiRF+dDrK7R5bzSqBiASB4zGBwR50mOhr2oFLFZEY9R6 QLnQ8g74IUE9jCsaEnclYSF26khnEqEc8Ln9V9W/v8LHbsqEkP95Tblp1mye7Mcc BSPdzfqpGwsNJP/BY1EG9+EFoxzHhRMj -----END CERTIFICATE-----Generated at Sat May 31 16:30:30 2025 by rpki-client