$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft File: wTya41wnwxAw4CQoc7otWnNdeBE.mft (raw, json) Hash identifier: KOqc9ZR9exYqAtBCGYmLjDk6P466ksW1dTG51LiY7CQ= Subject key identifier: B4:87:CD:EE:7E:71:2B:1B:FE:9F:56:D8:E7:C0:D0:B1:07:69:2C:C0 Authority key identifier: C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 Certificate issuer: /CN=A9161F73/serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft Manifest number: A7 Signing time: Sat 31 May 2025 05:42:41 +0000 Manifest this update: Sat 31 May 2025 05:42:40 +0000 Manifest next update: Sat 07 Jun 2025 05:42:40 +0000 Files and hashes: 1: wTya41wnwxAw4CQoc7otWnNdeBE.crl (hash: Wj+PrfVaV+wV1n2SF2ik7VpmIxeWbA6ss8SrUAAKBEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Validity Not Before: May 31 05:42:40 2025 GMT Not After : Jun 7 05:42:40 2025 GMT Subject: CN=683a96d0-278e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6f:93:da:b0:32:eb:41:4e:bf:17:cf:be:fc: cc:81:2d:6c:6f:fb:ec:66:dd:c9:fc:b2:ec:b9:2d: d8:8c:45:21:81:5b:ad:c5:d6:f6:18:ae:41:1a:3e: e7:46:b8:91:56:76:51:5f:0e:0b:62:16:a3:6e:ed: c2:d5:d7:97:28:a2:20:70:a0:2a:d5:22:f0:43:e2: ad:7c:9a:c9:0a:92:e1:d4:99:bd:b7:de:8b:8b:72: 9e:f5:fd:1b:f0:7f:71:9d:81:f5:50:f7:e0:d8:73: e4:1d:74:9b:f8:54:65:17:65:0a:7f:22:a4:4a:7f: a2:94:ff:fd:a6:ae:a7:05:53:23:97:e4:24:07:34: 4c:aa:f2:db:a9:9b:3c:3f:45:0f:6e:e9:37:5f:f6: 3a:3e:ca:59:22:37:85:19:17:1f:15:e8:75:cc:24: c6:bb:4e:3f:b3:f3:17:cc:ad:36:a1:4a:85:fb:19: 97:1f:32:2b:8a:e7:0f:fa:17:c3:e8:da:1a:68:01: 1e:f7:fd:26:5e:39:f4:ea:2d:09:3f:66:db:b2:35: 15:48:3e:0e:b2:e7:eb:c7:bf:51:7f:9d:77:d8:0f: 70:d2:8a:ed:3c:4f:43:3a:04:18:42:89:6e:f2:ea: 5f:95:cf:b2:b6:90:af:c9:e6:37:7e:dd:c7:ca:d0: db:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:87:CD:EE:7E:71:2B:1B:FE:9F:56:D8:E7:C0:D0:B1:07:69:2C:C0 X509v3 Authority Key Identifier: keyid:C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c6:11:4c:15:75:6c:d0:84:b9:26:46:0e:1d:50:01:94:bc: 91:cd:46:75:d2:69:81:9a:01:d2:20:31:8a:99:5e:1b:9a:52: 23:c4:cc:d6:b6:ed:a4:d3:96:f6:e5:44:a0:91:c7:32:dd:3f: 87:59:09:17:ab:52:65:f5:be:0f:f8:7f:21:0a:5a:49:ae:5f: 3f:ee:ac:9c:89:59:77:f7:c2:f4:8f:61:f2:c1:2d:05:25:cf: dd:03:56:1e:11:13:32:92:ed:5e:3b:32:69:10:f1:e2:9d:7a: b6:e9:07:33:71:88:ef:95:70:8d:a1:c8:29:8c:80:6a:3b:79: 31:16:12:67:62:22:0d:24:a9:7d:5d:d5:5c:b7:0d:08:f7:0a: 9d:85:fc:03:be:96:bc:23:04:45:92:24:d9:ba:35:2d:f3:7f: 31:59:06:e0:6a:f7:ba:bd:45:2b:56:77:e2:b1:97:9f:0b:bb: 54:bb:ec:0b:60:f1:d8:3b:aa:45:42:df:ba:96:54:95:54:b8: de:35:30:cb:08:c1:e0:ea:03:73:cc:66:f9:a8:a8:88:af:b1: d1:8b:71:78:12:27:fd:3c:ad:ba:68:61:c6:ef:5a:75:db:28: da:a1:0c:18:e7:03:2b:01:ba:af:c3:f0:fb:b1:45:99:a4:44: c4:99:e8:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEMxM0M5QUUzNUMyN0MzMTAzMEUwMjQyODczQkEyRDVB NzM1RDc4MTEwHhcNMjUwNTMxMDU0MjQwWhcNMjUwNjA3MDU0MjQwWjAYMRYwFAYD VQQDEw02ODNhOTZkMC0yNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5m+T2rAy60FOvxfPvvzMgS1sb/vsZt3J/LLsuS3YjEUhgVutxdb2GK5BGj7n RriRVnZRXw4LYhajbu3C1deXKKIgcKAq1SLwQ+KtfJrJCpLh1Jm9t96Li3Ke9f0b 8H9xnYH1UPfg2HPkHXSb+FRlF2UKfyKkSn+ilP/9pq6nBVMjl+QkBzRMqvLbqZs8 P0UPbuk3X/Y6PspZIjeFGRcfFeh1zCTGu04/s/MXzK02oUqF+xmXHzIriucP+hfD 6NoaaAEe9/0mXjn06i0JP2bbsjUVSD4Osufrx79Rf5132A9w0ortPE9DOgQYQolu 8upflc+ytpCvyeY3ft3HytDbEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSHze5+ cSsb/p9W2OfA0LEHaSzAMB8GA1UdIwQYMBaAFME8muNcJ8MQMOAkKHO6LVpzXXgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My83NkRGNzZFRTNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4QXc0Q1FvYzdvdFduTmRl QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUeWE0MXdud3hBdzRDUW9jN290V25OZGVCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My83NkRGNzZFRTNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4 QXc0Q1FvYzdvdFduTmRlQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7xhFMFXVs0IS5JkYOHVABlLyRzUZ10mmBmgHSIDGKmV4bmlIjxMzW tu2k05b25USgkccy3T+HWQkXq1Jl9b4P+H8hClpJrl8/7qyciVl398L0j2HywS0F Jc/dA1YeERMyku1eOzJpEPHinXq26QczcYjvlXCNocgpjIBqO3kxFhJnYiINJKl9 XdVctw0I9wqdhfwDvpa8IwRFkiTZujUt838xWQbgave6vUUrVnfisZefC7tUu+wL YPHYO6pFQt+6llSVVLjeNTDLCMHg6gNzzGb5qKiIr7HRi3F4Eif9PK26aGHG71p1 2yjaoQwY5wMrAbqvw/D7sUWZpETEmeiJ -----END CERTIFICATE-----Generated at Sat May 31 16:38:09 2025 by rpki-client