$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: fBs03VNXjlfl+Ae6q9ivAOKIfgunB4I+fM2VeqEsU1I= Subject key identifier: D2:DC:6A:E2:B9:DC:35:36:CA:37:12:FD:9A:37:42:9C:3E:15:59:1A Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 03DD Signing time: Sun 01 Jun 2025 00:19:00 +0000 Manifest this update: Sun 01 Jun 2025 00:19:00 +0000 Manifest next update: Sun 08 Jun 2025 00:18:59 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: 8qMPLs0SNFZYN9T4CD+/OiPs+3C5w9rYNZR68aWFxm0=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Validity Not Before: Jun 1 00:19:00 2025 GMT Not After : Jun 8 00:18:59 2025 GMT Subject: CN=683b9c74-a1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:4d:a2:e1:71:1c:2a:74:14:43:6f:41:02: 1c:1e:c2:4f:26:22:26:c0:88:b1:c2:6d:76:fa:ad: 18:33:8f:61:20:c3:51:ad:b0:7c:ff:ba:d4:d3:73: 5b:58:f2:c8:b1:65:a3:87:e6:68:5c:8e:81:cb:02: e2:f9:f2:a9:85:09:17:e5:df:2d:31:4c:64:17:ef: 30:d9:6f:40:a3:03:8b:5d:3d:6c:51:79:e1:fb:f8: 0e:b5:30:60:52:e0:2a:72:d4:ed:20:e3:a2:41:5e: bc:83:ed:f2:34:ab:cb:96:10:1c:b5:eb:24:84:21: 1f:16:ef:a5:61:20:b1:75:34:d9:ac:40:b2:85:1e: 8a:cc:8a:90:80:7b:23:59:62:68:1e:5d:41:fe:b1: af:f5:93:b9:91:95:35:87:17:e5:a5:89:2b:a3:3e: b2:23:f8:7e:38:67:5e:4a:81:13:76:b0:1a:6f:1b: dc:ea:60:66:70:2e:22:41:7e:63:c0:3f:30:d6:58: 0b:5f:c3:7a:48:1c:fa:f1:28:56:46:3a:ed:f1:30: 91:b7:32:34:56:d4:4f:32:be:cf:a0:0e:dd:5d:14: 73:63:09:6d:9c:c0:62:fc:a6:74:1c:a9:10:c2:4c: b5:b8:6d:fd:43:14:67:87:87:96:25:eb:02:66:01: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DC:6A:E2:B9:DC:35:36:CA:37:12:FD:9A:37:42:9C:3E:15:59:1A X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:30:e9:48:19:20:5f:78:03:4a:e5:e5:57:f1:8d:5b:42:b4: c3:1e:4e:0d:fa:89:f2:4b:2a:3f:82:51:79:d5:52:53:85:86: 16:51:e1:ad:89:05:97:81:d7:79:a4:57:3c:6f:f9:59:59:c4: 96:6a:41:07:cb:29:e1:3e:8e:5f:9f:3f:bd:65:a3:80:9b:81: 53:0f:11:ca:c2:25:84:46:4f:b7:b7:e2:26:81:86:34:c1:96: 25:89:87:1b:ce:ff:72:b3:05:4b:75:4f:9b:c7:40:82:8c:c7: 90:91:92:21:1c:70:b1:b7:59:18:c8:11:03:7b:ab:cc:1f:db: 1f:5c:d0:4b:c4:f7:d4:7b:1f:07:9f:72:3e:1b:0a:98:b4:f1: 71:98:1d:3a:a3:d1:90:a9:4d:33:78:41:b7:5a:3c:4f:d3:1d: a3:d2:41:d6:a0:0d:66:d8:8c:4e:bf:30:96:04:6a:36:fc:13: 6f:e2:72:9b:b7:71:f4:9d:de:4d:6b:7d:d8:2e:f1:31:8e:5a: ce:61:8e:0f:9e:60:86:3e:b0:14:ab:d4:86:e9:f0:3a:2f:03: ee:01:73:e6:d6:b1:a1:5e:4b:34:03:14:07:cd:ef:c6:ab:ca: 95:58:a3:0d:d1:0f:9b:5b:de:e5:5d:ab:6e:e3:73:df:e5:91: f8:d6:1c:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjUwNjAxMDAxOTAwWhcNMjUwNjA4MDAxODU5WjAYMRYwFAYD VQQDEw02ODNiOWM3NC1hMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQVNouFxHCp0FENvQQIcHsJPJiImwIixwm12+q0YM49hIMNRrbB8/7rU03Nb WPLIsWWjh+ZoXI6BywLi+fKphQkX5d8tMUxkF+8w2W9AowOLXT1sUXnh+/gOtTBg UuAqctTtIOOiQV68g+3yNKvLlhActeskhCEfFu+lYSCxdTTZrECyhR6KzIqQgHsj WWJoHl1B/rGv9ZO5kZU1hxflpYkroz6yI/h+OGdeSoETdrAabxvc6mBmcC4iQX5j wD8w1lgLX8N6SBz68ShWRjrt8TCRtzI0VtRPMr7PoA7dXRRzYwltnMBi/KZ0HKkQ wky1uG39QxRnh4eWJesCZgGsMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLcauK5 3DU2yjcS/Zo3Qpw+FVkaMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgMOlIGSBfeANK5eVX8Y1bQrTDHk4N+onySyo/glF51VJThYYWUeGt iQWXgdd5pFc8b/lZWcSWakEHyynhPo5fnz+9ZaOAm4FTDxHKwiWERk+3t+ImgYY0 wZYliYcbzv9yswVLdU+bx0CCjMeQkZIhHHCxt1kYyBEDe6vMH9sfXNBLxPfUex8H n3I+GwqYtPFxmB06o9GQqU0zeEG3WjxP0x2j0kHWoA1m2IxOvzCWBGo2/BNv4nKb t3H0nd5Na33YLvExjlrOYY4PnmCGPrAUq9SG6fA6LwPuAXPm1rGhXks0AxQHze/G q8qVWKMN0Q+bW97lXatu43Pf5ZH41hxn -----END CERTIFICATE-----Generated at Mon Jun 2 21:09:25 2025 by rpki-client