$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: QcFcVP4KFfMR4m+lOPYKiGuzjHEjwniziEtMA85FpIc= Subject key identifier: 6C:94:18:9E:5E:9E:E7:54:76:3E:5D:4F:B5:2B:61:AB:15:11:71:81 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 263C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 253E Signing time: Sat 31 May 2025 15:44:59 +0000 Manifest this update: Sat 31 May 2025 15:44:58 +0000 Manifest next update: Sat 07 Jun 2025 15:44:58 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: Z7qIqnQ4sp1igFPkN8EMVILb6WO/gIblRgCB/1dHOY0=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: ZeH6ECuQSQ7jbEvsw/ti8Ne5hW6qGOm2ObSN2ziSRtc=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: 1dZ/PYF2y/rA4g03VyVZaVZy6CLwb/t5eX6QNNHBKU4=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: /OIV93XTmaqNcQdoy+u+KBTNCx5sq1KiAVNHrTFDsPk=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Iw9+JOdav50YSnSQXp9Mgjc+tFnSJTCmgJVv03j+03E=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: a8WMRrKXqOWpbHlU3tbV4FzyKQszu4zB5F1ouGdfBCA=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: 3xgwAlFAD++SNOBnqBO1zaeR1ssuXDrrYrvWI6Sll60=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: ffEWhmrNXjBc0Nb4WuWVQZiVVzyHTO8bmJ3skIR6GwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9788 (0x263c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: May 31 15:44:58 2025 GMT Not After : Jun 7 15:44:58 2025 GMT Subject: CN=683b23fb-7abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:0e:8a:03:6e:6e:a3:55:47:a8:d7:b1:fb: 4a:98:03:d7:aa:bc:b0:15:c9:77:c9:8b:3c:a6:75: 93:43:b8:3a:5f:17:33:f6:85:54:b9:b3:b1:ba:dc: 0b:e1:71:21:88:6e:bd:1c:c8:3c:a7:b9:cd:80:9c: 78:0d:e7:cb:5e:41:88:c1:6b:a2:f6:84:3f:f4:67: b7:93:48:8c:98:14:ac:57:83:92:42:f4:97:7e:6e: cd:db:dc:75:c3:e5:90:7d:9a:04:bf:24:97:fb:b0: 03:a3:f7:c1:2e:a8:05:40:bc:aa:29:32:78:74:14: f3:35:c8:e8:43:49:b3:b2:5d:f1:6c:e1:b7:3a:27: 51:cf:46:2d:24:be:cb:d6:0f:19:44:8e:83:be:f1: 40:2a:c4:4c:99:90:28:4d:f0:28:d0:d5:e3:1b:72: f9:82:0e:27:de:29:8c:01:cf:fd:62:14:62:cb:93: e2:1f:c4:6d:23:d9:a6:87:bd:dc:88:99:0c:94:36: 3c:c7:ae:9b:e5:19:08:13:c8:21:ea:48:92:2e:df: d7:73:e8:0f:66:1e:21:30:81:10:29:f2:df:9e:3b: c2:08:89:a0:ef:9e:bc:f3:a2:04:79:ed:27:0b:f4: 58:47:b2:bc:50:68:80:65:87:0c:de:32:c7:05:93: 72:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:94:18:9E:5E:9E:E7:54:76:3E:5D:4F:B5:2B:61:AB:15:11:71:81 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e3:ae:ea:b2:4a:96:fb:54:25:14:a6:84:1e:b3:9a:8d:21: 66:79:26:7e:b4:32:5b:50:2b:f3:27:ee:1f:4b:5b:12:0c:3a: 2d:bc:65:2a:15:b3:d9:58:1f:21:9c:a9:49:7f:a7:21:0c:99: da:b2:dc:97:fe:2c:3a:09:19:28:6b:b9:94:29:71:33:a0:6b: 07:1b:92:5e:fd:92:d2:0b:71:fc:c1:26:12:cc:15:30:2c:fe: b1:01:27:f3:fe:a3:14:21:16:1f:57:1a:b3:6b:f0:7c:7b:36: 27:7a:56:77:72:cb:57:dd:38:6f:f8:26:3c:5a:8e:02:22:b7: 9d:b8:1e:bd:8d:8f:77:7d:fd:6c:43:7a:3a:fe:91:b0:bf:22: 52:ff:32:98:1b:d4:b6:08:ff:19:da:30:8f:02:f5:5c:c7:d2: d0:f6:a4:b8:e4:94:0f:e3:8f:d7:ec:49:a1:a3:03:51:79:db: d0:a8:45:88:38:fb:62:55:18:89:d0:91:25:62:60:12:9b:f1: ed:c8:f1:2b:3c:b5:b9:36:41:0a:55:c5:1a:f7:fe:b3:65:be: 0a:04:53:a3:af:fa:3d:45:ac:4d:bf:6e:69:9a:a2:b5:3a:66: b8:54:46:af:5a:57:54:ba:1d:ba:06:08:9b:a1:c2:aa:a5:33: 50:87:a3:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNTMxMTU0NDU4WhcNMjUwNjA3MTU0NDU4WjAYMRYwFAYD VQQDEw02ODNiMjNmYi03YWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyggOigNubqNVR6jXsftKmAPXqrywFcl3yYs8pnWTQ7g6Xxcz9oVUubOxutwL 4XEhiG69HMg8p7nNgJx4DefLXkGIwWui9oQ/9Ge3k0iMmBSsV4OSQvSXfm7N29x1 w+WQfZoEvySX+7ADo/fBLqgFQLyqKTJ4dBTzNcjoQ0mzsl3xbOG3OidRz0YtJL7L 1g8ZRI6DvvFAKsRMmZAoTfAo0NXjG3L5gg4n3imMAc/9YhRiy5PiH8RtI9mmh73c iJkMlDY8x66b5RkIE8gh6kiSLt/Xc+gPZh4hMIEQKfLfnjvCCImg756886IEee0n C/RYR7K8UGiAZYcM3jLHBZNyFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyUGJ5e nudUdj5dT7UrYasVEXGBMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC467qskqW+1QlFKaEHrOajSFmeSZ+tDJbUCvzJ+4fS1sSDDotvGUq FbPZWB8hnKlJf6chDJnastyX/iw6CRkoa7mUKXEzoGsHG5Je/ZLSC3H8wSYSzBUw LP6xASfz/qMUIRYfVxqza/B8ezYnelZ3cstX3Thv+CY8Wo4CIreduB69jY93ff1s Q3o6/pGwvyJS/zKYG9S2CP8Z2jCPAvVcx9LQ9qS45JQP44/X7EmhowNRedvQqEWI OPtiVRiJ0JElYmASm/HtyPErPLW5NkEKVcUa9/6zZb4KBFOjr/o9RaxNv25pmqK1 Oma4VEavWldUuh26BgibocKqpTNQh6Oz -----END CERTIFICATE-----Generated at Sat May 31 17:58:49 2025 by rpki-client