$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json) Hash identifier: MMtNcwrte2IXTdoshWAh15fYk9LUKm+14jWWrQR/sXo= Subject key identifier: 8C:03:E1:65:CA:9A:D1:CF:BB:66:CB:FD:AA:BA:FB:3A:7A:9B:0E:59 Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft Manifest number: BC Signing time: Sat 31 May 2025 05:27:43 +0000 Manifest this update: Sat 31 May 2025 05:27:42 +0000 Manifest next update: Sat 07 Jun 2025 05:27:42 +0000 Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: LuX8ES/W9WvDqPuj9SDFKC6+rdu+yQBaHSOTkuyYjD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Validity Not Before: May 31 05:27:42 2025 GMT Not After : Jun 7 05:27:42 2025 GMT Subject: CN=683a934f-45be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:82:1f:e4:c0:97:87:67:9c:3e:fa:08:44: e1:32:29:8b:f5:be:bf:1b:73:c2:6f:d9:ff:c5:6c: 81:b7:a6:8c:e5:a2:99:3f:d8:e2:c4:61:a6:78:2a: 00:a9:78:ec:9b:99:c3:05:7b:96:79:23:66:90:5d: 7f:2d:1e:e2:b2:ef:b5:4a:e3:5a:62:8e:0e:22:2b: be:57:ef:e8:db:fe:89:81:7b:4c:ab:29:30:d3:ae: 1e:05:3d:be:f6:7b:89:90:8a:3c:8d:49:3c:55:19: 16:c2:65:03:27:e9:2b:70:bf:78:df:78:71:91:c3: ca:6b:5a:38:aa:93:b2:4f:1b:f2:f7:70:12:e2:bf: b3:b1:b3:86:82:a0:4b:e2:23:6c:e3:a4:af:4f:0e: 2f:ef:c3:6e:aa:a0:c3:94:bc:0e:04:a0:56:f9:f9: 31:2b:1b:e6:e4:9a:f8:71:23:01:5a:f0:c7:ce:f2: 26:2e:37:b4:45:b5:5b:97:9d:c9:3f:d6:3e:62:9b: 62:d8:c6:2e:f2:91:8c:98:d8:e0:ff:af:fd:dd:62: f9:48:7e:2c:51:f6:2e:83:1e:13:47:00:02:76:cb: ae:91:3a:61:61:45:0b:5b:4c:2f:7b:0f:2d:b7:6d: 27:2f:3f:e0:3f:3e:ab:c5:80:00:93:26:5f:4e:98: 18:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:03:E1:65:CA:9A:D1:CF:BB:66:CB:FD:AA:BA:FB:3A:7A:9B:0E:59 X509v3 Authority Key Identifier: keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a3:53:40:13:38:bb:4e:cc:0b:85:8a:4c:23:dd:c9:cf:ef: 06:f7:43:8a:2f:d1:b6:b9:04:c3:d8:14:35:ce:a3:25:7c:66: 6e:71:be:73:e7:1a:a7:25:04:b2:a2:c6:8d:ca:92:eb:d1:1d: e0:27:3b:7d:ed:47:ef:bf:fe:d2:71:10:23:8d:23:f5:9e:e6: 53:5b:47:a4:a3:07:14:71:7e:50:f5:2a:56:60:88:e7:e6:55: 1d:da:18:2f:7c:be:9b:2b:bd:18:09:8b:08:ab:72:b2:ba:a8: ff:1a:11:d5:41:45:03:47:2c:b3:79:52:fd:09:f8:b6:05:d7: 29:46:94:2b:8a:ec:7b:4d:36:f8:10:d5:bb:cf:e5:34:1b:35: cd:41:88:2e:77:68:ea:16:d1:c5:66:0e:93:e9:48:c4:08:f8: 44:a5:8a:ef:54:24:20:71:da:ea:16:be:29:94:e1:0d:14:ea: b7:e9:fb:c9:56:55:ca:2c:5d:b1:29:77:23:fb:77:97:2e:92: e1:59:b9:d2:bb:6d:77:44:3f:8a:93:e0:ee:74:4f:d6:f3:1c: 09:9d:7b:79:7a:3a:7a:c3:f4:c0:00:30:03:91:d8:fc:d1:8c: d5:cf:ec:25:67:fe:7e:12:f5:80:66:5c:f5:98:2d:b5:4a:c4: 1c:22:9d:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzRDMxMTAvBgNVBAUTKEMwRkYxRjMyNjdEOEFEOTgxMjhCM0UzOTdDQ0ZGNzk3 M0I3NTA4Q0QwHhcNMjUwNTMxMDUyNzQyWhcNMjUwNjA3MDUyNzQyWjAYMRYwFAYD VQQDEw02ODNhOTM0Zi00NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9KCH+TAl4dnnD76CEThMimL9b6/G3PCb9n/xWyBt6aM5aKZP9jixGGmeCoA qXjsm5nDBXuWeSNmkF1/LR7isu+1SuNaYo4OIiu+V+/o2/6JgXtMqykw064eBT2+ 9nuJkIo8jUk8VRkWwmUDJ+krcL9433hxkcPKa1o4qpOyTxvy93AS4r+zsbOGgqBL 4iNs46SvTw4v78NuqqDDlLwOBKBW+fkxKxvm5Jr4cSMBWvDHzvImLje0RbVbl53J P9Y+Ypti2MYu8pGMmNjg/6/93WL5SH4sUfYugx4TRwACdsuukTphYUULW0wvew8t t20nLz/gPz6rxYAAkyZfTpgYDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwD4WXK mtHPu2bL/aq6+zp6mw5ZMB8GA1UdIwQYMBaAFMD/HzJn2K2YEos+OXzP95c7dQjN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTNEMy80MjUyOUY5RTFE ODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJaZ1NpejQ1Zk1fM2x6dDFD TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQOGZNbWZZclpnU2l6NDVmTV8zbHp0MUNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTNEMy80MjUyOUY5RTFEODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJa Z1NpejQ1Zk1fM2x6dDFDTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVo1NAEzi7TswLhYpMI93Jz+8G90OKL9G2uQTD2BQ1zqMlfGZucb5z 5xqnJQSyosaNypLr0R3gJzt97Ufvv/7ScRAjjSP1nuZTW0ekowcUcX5Q9SpWYIjn 5lUd2hgvfL6bK70YCYsIq3Kyuqj/GhHVQUUDRyyzeVL9Cfi2BdcpRpQriux7TTb4 ENW7z+U0GzXNQYgud2jqFtHFZg6T6UjECPhEpYrvVCQgcdrqFr4plOENFOq36fvJ VlXKLF2xKXcj+3eXLpLhWbnSu213RD+Kk+DudE/W8xwJnXt5ejp6w/TAADADkdj8 0YzVz+wlZ/5+EvWAZlz1mC21SsQcIp1n -----END CERTIFICATE-----Generated at Sat May 31 17:50:45 2025 by rpki-client