$ rpki-client -vvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft File: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft (raw, json) Hash identifier: fd9M3U6IAGE+QKGuL9OuWpY4qHDHfk1lTokNmAIlofM= Subject key identifier: CF:04:6C:F8:94:AE:F8:C7:79:FD:C3:8B:1D:D7:4C:00:DD:B4:7A:DA Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 Certificate issuer: /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54 Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft Manifest number: 0845 Signing time: Fri 30 May 2025 20:58:08 +0000 Manifest this update: Fri 30 May 2025 20:58:07 +0000 Manifest next update: Fri 06 Jun 2025 20:58:07 +0000 Files and hashes: 1: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl (hash: gqQleChhL7Qx7582JhEtWjihNQH4migW8h+jCSRh744=) 2: F011FBC4CBDF11EAB6162265C4F9AE02.roa (hash: Ec43C0Y3q4p+M8MX6lzreXmsuhfKAufm7Yw2BAr8btg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F7E7, serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54 Validity Not Before: May 30 20:58:07 2025 GMT Not After : Jun 6 20:58:07 2025 GMT Subject: CN=683a1bdf-5769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:57:7d:35:bb:ae:ea:c4:27:24:55:6d:94: a0:74:bf:01:51:e9:8e:ab:a5:a7:e0:ff:ee:c3:6a: a7:51:ce:cc:28:fd:28:9d:c4:82:31:c1:63:40:ad: 3b:95:9a:27:e0:72:a4:76:8a:e2:21:46:08:b2:40: 67:87:6c:c3:96:bf:1d:0e:e0:a4:69:6f:f7:bc:45: ea:5d:1e:65:11:5c:94:b4:50:31:cc:bc:f7:78:73: 3d:50:a0:7e:37:08:cf:5d:eb:25:d7:76:3e:8c:ba: 9c:a4:32:7c:3f:dc:e6:fb:91:90:8f:8d:8c:ab:02: 2a:8e:82:3d:9c:5e:7f:49:49:08:b4:b5:ad:47:5a: a7:eb:f8:7f:e1:28:8a:a5:4c:ff:a5:6a:d5:49:26: 35:8b:64:a3:89:ec:cb:26:d2:1c:59:bf:26:ca:6e: 2f:3e:7b:83:97:e8:33:07:a9:be:ef:94:e6:ae:d5: 27:4c:d6:8d:c2:5b:60:4a:20:97:91:69:ad:33:26: 6f:4c:7d:17:ea:4f:aa:cd:3a:4d:61:49:bc:1c:fc: cc:54:6a:a7:f7:2e:e2:bc:3c:fb:da:4a:2e:5b:a3: c7:98:6e:f0:b7:bb:38:50:cb:43:d4:cb:70:1d:0e: 10:48:e5:53:d2:a0:ef:f2:be:5a:6a:f2:49:a6:2a: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:04:6C:F8:94:AE:F8:C7:79:FD:C3:8B:1D:D7:4C:00:DD:B4:7A:DA X509v3 Authority Key Identifier: keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:98:4b:df:aa:78:5d:60:c5:1c:43:83:29:11:3b:a7:03:49: e5:d1:71:de:e3:15:28:d1:6d:7e:c1:39:6a:59:53:9f:69:f2: 0b:ea:fe:44:72:21:a3:d6:97:2b:64:e8:e0:91:76:f1:cc:46: c1:42:2d:fd:1d:4c:40:98:51:e4:72:7e:cc:26:20:94:f4:32: f1:42:01:7f:ef:8e:4f:82:7f:15:25:80:58:e0:79:6f:11:34: c2:7d:69:d2:24:43:8b:ab:13:cc:63:1e:70:30:ea:f5:29:ce: bb:04:3f:09:cb:35:13:c5:4a:2b:af:9b:e2:a1:ed:4b:07:54: d3:fd:72:d3:55:b8:f1:49:56:19:c7:91:6b:c8:8d:5a:cf:2e: 45:84:9d:ee:46:40:d7:3f:30:11:80:7e:a6:e4:55:a5:bf:ae: 13:18:78:6c:43:33:5e:f4:ff:5b:8d:b2:8b:21:05:c3:26:92: f6:a2:98:67:52:f4:51:53:35:f6:00:b4:12:1e:b4:67:71:fc: 38:7b:df:77:cd:23:4c:49:c3:6d:78:01:81:db:91:ff:94:b2: ba:89:47:a2:9b:c1:89:a8:16:03:b5:bf:f1:d3:5f:28:42:b0: 35:ec:1a:61:17:26:37:ff:cd:29:6e:73:94:2a:7c:53:49:5b: 87:97:77:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY3RTcxMTAvBgNVBAUTKDlCMDUxMERGMDY3MkU2Q0ZEQjcyNTRBOTlGNTI3NEY5 MERGMEVGNTQwHhcNMjUwNTMwMjA1ODA3WhcNMjUwNjA2MjA1ODA3WjAYMRYwFAYD VQQDEw02ODNhMWJkZi01NzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmFXfTW7rurEJyRVbZSgdL8BUemOq6Wn4P/uw2qnUc7MKP0oncSCMcFjQK07 lZon4HKkdoriIUYIskBnh2zDlr8dDuCkaW/3vEXqXR5lEVyUtFAxzLz3eHM9UKB+ NwjPXesl13Y+jLqcpDJ8P9zm+5GQj42MqwIqjoI9nF5/SUkItLWtR1qn6/h/4SiK pUz/pWrVSSY1i2SjiezLJtIcWb8mym4vPnuDl+gzB6m+75TmrtUnTNaNwltgSiCX kWmtMyZvTH0X6k+qzTpNYUm8HPzMVGqn9y7ivDz72kouW6PHmG7wt7s4UMtD1Mtw HQ4QSOVT0qDv8r5aavJJpiqBCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8EbPiU rvjHef3Dix3XTADdtHraMB8GA1UdIwQYMBaAFJsFEN8GcubP23JUqZ9SdPkN8O9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjdFNy9EQ0QwMzc4QUNC REQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVzX2JjbFNwbjFKMC1RM3c3 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213VVEzd1p5NXNfYmNsU3BuMUowLVEzdzcxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjdFNy9EQ0QwMzc4QUNCREQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVz X2JjbFNwbjFKMC1RM3c3MVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYmEvfqnhdYMUcQ4MpETunA0nl0XHe4xUo0W1+wTlqWVOfafIL6v5E ciGj1pcrZOjgkXbxzEbBQi39HUxAmFHkcn7MJiCU9DLxQgF/745Pgn8VJYBY4Hlv ETTCfWnSJEOLqxPMYx5wMOr1Kc67BD8JyzUTxUorr5vioe1LB1TT/XLTVbjxSVYZ x5FryI1azy5FhJ3uRkDXPzARgH6m5FWlv64TGHhsQzNe9P9bjbKLIQXDJpL2ophn UvRRUzX2ALQSHrRncfw4e993zSNMScNteAGB25H/lLK6iUeim8GJqBYDtb/x018o QrA17BphFyY3/80pbnOUKnxTSVuHl3d1 -----END CERTIFICATE-----Generated at Sat May 31 17:41:02 2025 by rpki-client