$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft File: wEyBplFeUCbiG-aMudUdQTmoWpI.mft (raw, json) Hash identifier: MGKB9R3OHrfTUvkvb2vQ+VSnWd7Cf69GdSRU19C9R78= Subject key identifier: E1:C2:19:71:FC:5D:17:A1:80:C0:F1:85:0C:5D:62:60:97:86:E7:9A Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 Certificate issuer: /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft Manifest number: 04B9 Signing time: Sat 31 May 2025 00:04:32 +0000 Manifest this update: Sat 31 May 2025 00:04:32 +0000 Manifest next update: Sat 07 Jun 2025 00:04:32 +0000 Files and hashes: 1: wEyBplFeUCbiG-aMudUdQTmoWpI.crl (hash: YccXlVO+2zr0gFj/2d7LThcHvW3sN4M9RloRxY5qsss=) 2: 861D1DB82C4411EC9539C124C4F9AE02.roa (hash: L7nlhQmvIweH/CDk6Porr52Om6tp3xqWvQb2+9BsORw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150984, serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Validity Not Before: May 31 00:04:32 2025 GMT Not After : Jun 7 00:04:32 2025 GMT Subject: CN=683a4790-9bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:e3:12:ad:a3:56:ab:ff:a8:fa:78:11:77: 73:4b:07:86:5a:db:b0:56:50:fa:89:d7:5b:6d:db: 1d:51:a3:cb:69:be:45:ad:0d:5e:7e:83:79:78:c1: 8b:15:1c:ab:84:d3:56:e7:38:d6:68:0a:55:99:63: 4a:0c:75:7b:e9:50:be:cd:98:9a:dd:d4:f1:d9:cd: cb:9a:f7:90:ff:cc:44:7b:7e:03:1c:e2:86:3a:6a: f1:0d:3d:98:99:04:09:f7:92:bf:f1:a7:de:6f:96: bd:b5:16:47:88:6a:9c:b5:a4:b0:e6:e7:44:4c:f2: 7f:c8:9b:c5:da:95:95:1b:a5:90:ec:b7:5b:b8:c9: d7:85:3d:6a:72:ef:d3:c5:02:44:e4:ea:f8:32:ad: 42:7d:e0:29:ba:a8:b4:dd:2a:9a:1d:2d:bc:e4:d5: 23:e9:c7:bd:02:8e:00:ff:96:af:52:c0:fe:bc:33: 7f:43:85:17:ed:1d:e6:a4:11:e2:01:7f:87:a8:f3: 50:45:62:f1:49:61:50:c4:19:76:3c:94:a4:b1:3c: a3:c2:c8:08:56:9e:3d:a9:ee:84:2e:49:09:53:e8: 27:c4:9e:ce:3e:86:df:d6:02:c5:00:69:22:f8:c5: a1:b9:0d:65:8d:78:d9:44:88:ed:21:a8:8a:97:08: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C2:19:71:FC:5D:17:A1:80:C0:F1:85:0C:5D:62:60:97:86:E7:9A X509v3 Authority Key Identifier: keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a2:cb:8e:19:51:0f:47:7e:11:4e:f8:d7:9f:0f:33:a4:e6: cc:97:cf:a1:74:2c:4e:74:de:c8:38:29:20:63:84:46:7c:ca: 25:a6:45:b0:70:12:9a:7e:9c:61:92:8a:9a:6d:8e:2e:ec:18: 03:06:b9:84:f9:4f:90:87:53:c0:16:95:33:3d:7a:ce:ba:1b: 5d:0a:f7:57:f0:af:f6:a3:20:33:1f:12:fc:18:ac:f7:a5:d3: 57:3c:27:0a:78:c2:df:7e:7c:9c:58:f1:d9:1e:c3:db:f7:11: 73:57:39:c7:d7:ad:92:60:93:7b:73:d5:e0:d2:41:1f:c4:6b: 65:78:ea:b6:20:fa:0c:ee:f3:18:ef:77:da:63:a2:8b:a4:8e: 31:8c:ee:0d:19:b2:44:b1:cf:93:a4:72:26:73:a6:ae:ec:ab: 54:d4:ea:2e:c3:90:ee:1a:80:00:5c:ec:23:45:4f:dd:de:b9: 4d:eb:5c:08:39:6e:30:ad:47:ab:f9:6d:83:85:4b:c5:cf:dc: 90:f2:8c:4c:e0:ae:34:e1:c8:be:b4:89:d1:b0:75:81:c3:d1: cb:e3:ee:e9:24:ef:70:70:d9:93:67:d9:59:5d:39:c3:1a:96: df:bb:e6:5c:29:32:c0:f3:af:26:81:39:af:ad:4d:be:f4:df: 73:6d:ec:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5ODQxMTAvBgNVBAUTKEMwNEM4MUE2NTE1RTUwMjZFMjFCRTY4Q0I5RDUxRDQx MzlBODVBOTIwHhcNMjUwNTMxMDAwNDMyWhcNMjUwNjA3MDAwNDMyWjAYMRYwFAYD VQQDEw02ODNhNDc5MC05YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0szjEq2jVqv/qPp4EXdzSweGWtuwVlD6iddbbdsdUaPLab5FrQ1efoN5eMGL FRyrhNNW5zjWaApVmWNKDHV76VC+zZia3dTx2c3LmveQ/8xEe34DHOKGOmrxDT2Y mQQJ95K/8afeb5a9tRZHiGqctaSw5udETPJ/yJvF2pWVG6WQ7LdbuMnXhT1qcu/T xQJE5Or4Mq1CfeApuqi03SqaHS285NUj6ce9Ao4A/5avUsD+vDN/Q4UX7R3mpBHi AX+HqPNQRWLxSWFQxBl2PJSksTyjwsgIVp49qe6ELkkJU+gnxJ7OPobf1gLFAGki +MWhuQ1ljXjZRIjtIaiKlwjdnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHCGXH8 XRehgMDxhQxdYmCXhueaMB8GA1UdIwQYMBaAFMBMgaZRXlAm4hvmjLnVHUE5qFqS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDk4NC80MEU4MjY2QTJD M0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVDYmlHLWFNdWRVZFFUbW9X cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dFeUJwbEZlVUNiaUctYU11ZFVkUVRtb1dwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDk4NC80MEU4MjY2QTJDM0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVD YmlHLWFNdWRVZFFUbW9XcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBosuOGVEPR34RTvjXnw8zpObMl8+hdCxOdN7IOCkgY4RGfMolpkWw cBKafpxhkoqabY4u7BgDBrmE+U+Qh1PAFpUzPXrOuhtdCvdX8K/2oyAzHxL8GKz3 pdNXPCcKeMLffnycWPHZHsPb9xFzVznH162SYJN7c9Xg0kEfxGtleOq2IPoM7vMY 73faY6KLpI4xjO4NGbJEsc+TpHImc6au7KtU1Oouw5DuGoAAXOwjRU/d3rlN61wI OW4wrUer+W2DhUvFz9yQ8oxM4K404ci+tInRsHWBw9HL4+7pJO9wcNmTZ9lZXTnD Gpbfu+ZcKTLA868mgTmvrU2+9N9zbewE -----END CERTIFICATE-----Generated at Sat May 31 16:39:47 2025 by rpki-client