$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: /MReDUDS/Vmvr1c4Ssgf0kGjF9CIuJVv0FIA0PVGvHY= Subject key identifier: CE:45:13:EB:88:61:18:2F:5D:3F:EF:09:57:36:66:48:57:D0:11:7E Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 0135 Signing time: Tue 03 Jun 2025 04:42:19 +0000 Manifest this update: Tue 03 Jun 2025 04:42:19 +0000 Manifest next update: Tue 10 Jun 2025 04:42:19 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: n2IsTubEHFWSYqdM+isjdWgmMAEykzQ0OG3p+M+YifM=) 2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: gez5Qlcfm6c6NA79ftuR/sN6GbAgowRygpjom7unUmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Validity Not Before: Jun 3 04:42:19 2025 GMT Not After : Jun 10 04:42:19 2025 GMT Subject: CN=683e7d2b-86e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:28:63:56:5f:10:37:2f:74:15:07:21:bd: 08:26:36:c1:b5:1c:3c:ff:6a:bd:ad:56:03:b7:35: 65:43:d8:c6:b1:64:a9:9c:47:7d:96:20:3e:38:b5: 87:a6:f9:5f:12:97:bf:00:d2:46:cf:21:93:26:ed: 18:ea:e2:71:9e:08:52:e3:e9:1e:35:6e:54:60:36: e4:a8:83:57:16:32:b2:9c:27:17:d8:df:91:b3:17: 4d:41:a6:12:8e:eb:cb:f6:d4:e5:25:cc:41:ac:13: a1:a0:ff:26:ff:ac:3e:90:d7:35:b3:1a:26:93:81: 24:b4:ed:7b:01:0c:4c:c6:ec:63:4f:e3:f3:4f:52: 9c:e9:ab:04:7c:19:f4:e3:bd:e4:8e:c3:e3:21:34: 3b:3c:b9:d6:a2:f9:8b:ee:1b:aa:d4:3c:26:9c:ab: 2d:96:00:a9:27:63:dc:26:41:c3:f1:86:a9:fb:73: 87:86:e4:5f:93:63:3d:19:d6:28:e7:8a:49:4f:ab: 2e:22:5b:ee:90:6a:ba:16:1d:46:a9:92:5b:f9:ed: 5a:be:dc:9d:d1:cc:e3:56:ae:f5:4c:cc:ca:da:f0: 02:81:6a:3a:7c:c6:62:0d:3c:28:12:29:f4:2a:32: 51:15:41:e0:7d:2c:63:a4:e9:62:c8:4c:87:42:20: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:45:13:EB:88:61:18:2F:5D:3F:EF:09:57:36:66:48:57:D0:11:7E X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:9a:31:a3:c8:0a:e6:bb:9a:9d:8d:4c:a6:87:00:18:b3: 6a:f1:0a:34:6d:b3:15:cf:64:85:2e:12:73:5e:d1:b6:8a:c5: a8:88:2a:f2:05:c7:61:31:fa:91:3c:63:88:32:d6:5e:fd:33: c9:72:9a:d5:47:0a:da:20:1a:79:70:7e:02:c1:55:a3:5a:83: f9:d2:31:1f:54:82:eb:c4:8f:60:63:1d:66:c9:22:2c:60:17: da:8f:df:de:17:27:fd:51:13:88:02:67:8b:50:76:98:a0:77: 76:13:58:8e:6e:92:35:e8:c8:f6:91:0a:70:ff:8a:7a:21:e0: 7a:64:a3:cf:08:f3:c3:c6:cf:e2:e7:a4:31:cf:37:fc:47:f3: d0:3d:59:aa:91:b1:71:5e:66:73:7b:24:e9:17:65:fd:21:d7: 8a:ad:f8:0e:c0:0f:5b:53:53:6d:73:61:85:c0:36:c0:73:b1: 34:37:85:ba:30:05:a9:1b:30:2e:80:e0:99:c8:c1:b6:83:81: 09:ab:ad:b4:45:55:ac:ee:76:57:94:d4:5c:7c:82:59:93:5b: 20:f8:67:11:97:9e:40:17:41:ea:86:fc:13:ea:52:69:11:91: 01:a2:e0:b0:49:f1:b7:e3:61:32:2e:70:a8:af:74:09:0e:4b: 25:ba:a1:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF MkNDQkIyNUEwHhcNMjUwNjAzMDQ0MjE5WhcNMjUwNjEwMDQ0MjE5WjAYMRYwFAYD VQQDEw02ODNlN2QyYi04NmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv70oY1ZfEDcvdBUHIb0IJjbBtRw8/2q9rVYDtzVlQ9jGsWSpnEd9liA+OLWH pvlfEpe/ANJGzyGTJu0Y6uJxnghS4+keNW5UYDbkqINXFjKynCcX2N+RsxdNQaYS juvL9tTlJcxBrBOhoP8m/6w+kNc1sxomk4EktO17AQxMxuxjT+PzT1Kc6asEfBn0 473kjsPjITQ7PLnWovmL7huq1DwmnKstlgCpJ2PcJkHD8Yap+3OHhuRfk2M9GdYo 54pJT6suIlvukGq6Fh1GqZJb+e1avtyd0czjVq71TMzK2vACgWo6fMZiDTwoEin0 KjJRFUHgfSxjpOliyEyHQiDDywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5FE+uI YRgvXT/vCVc2ZkhX0BF+MB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXepoxo8gK5ruanY1MpocAGLNq8Qo0bbMVz2SFLhJzXtG2isWoiCry BcdhMfqRPGOIMtZe/TPJcprVRwraIBp5cH4CwVWjWoP50jEfVILrxI9gYx1mySIs YBfaj9/eFyf9UROIAmeLUHaYoHd2E1iObpI16Mj2kQpw/4p6IeB6ZKPPCPPDxs/i 56Qxzzf8R/PQPVmqkbFxXmZzeyTpF2X9IdeKrfgOwA9bU1Ntc2GFwDbAc7E0N4W6 MAWpGzAugOCZyMG2g4EJq620RVWs7nZXlNRcfIJZk1sg+GcRl55AF0HqhvwT6lJp EZEBouCwSfG342EyLnCor3QJDksluqFJ -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:35 2025 by rpki-client