$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json) Hash identifier: DDmLSIh8T9SvQFa0WDs2n0hKqyHgRjXk8EL2rZ8eF6I= Subject key identifier: 8E:2C:2E:93:17:38:B4:4A:2B:BA:F0:39:CD:7B:E8:8C:44:6C:29:D1 Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft Manifest number: A4 Signing time: Sun 01 Jun 2025 05:54:15 +0000 Manifest this update: Sun 01 Jun 2025 05:54:14 +0000 Manifest next update: Sun 08 Jun 2025 05:54:14 +0000 Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: e1zM6U1++8jyjtevsI1o5YPLewsVnvnCrQZE8NaanU0=) 2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Validity Not Before: Jun 1 05:54:14 2025 GMT Not After : Jun 8 05:54:14 2025 GMT Subject: CN=683beb06-79ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:06:43:0a:ed:28:ea:12:79:56:2d:d5:bc: 06:d0:a1:bc:00:51:ff:75:70:ae:3a:46:84:7a:d3: 2a:55:89:e1:9a:9d:fa:96:25:33:e0:bb:c5:3a:eb: fc:1a:b4:ba:20:12:57:3d:42:71:c7:89:f1:70:2a: c8:ec:bf:c9:7f:5e:fb:04:5a:be:e9:13:4b:37:be: 7b:14:c5:4f:73:04:9e:6a:f3:ba:1f:71:a9:0b:dd: 30:39:c5:aa:0f:ec:2c:05:63:58:ac:f7:4b:2b:de: a4:79:a2:97:0a:7a:d5:dd:4a:40:1a:47:88:9a:69: 20:3f:3b:9c:70:e9:35:2a:66:4d:e6:c8:0f:17:56: 00:2d:af:0b:46:5e:0d:e4:ab:d6:f0:d0:80:5a:7f: 87:6b:2e:5b:b0:a6:e0:8c:a6:58:df:c6:25:47:24: 61:a4:68:71:ee:51:5e:be:62:d0:de:b1:f4:bc:58: 41:5b:9a:9b:25:c5:df:1e:cb:95:b4:c0:f6:07:97: e4:fb:12:02:ea:a9:7a:7e:1d:95:83:ac:04:e6:43: fc:0a:81:38:6d:55:1d:3d:60:c5:37:19:07:67:b7: 50:dc:5d:a9:76:68:b9:82:af:a5:53:e3:fa:89:5f: 50:7a:18:57:ab:da:11:81:7f:5f:5c:62:cc:31:36: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2C:2E:93:17:38:B4:4A:2B:BA:F0:39:CD:7B:E8:8C:44:6C:29:D1 X509v3 Authority Key Identifier: keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:22:c9:ee:16:eb:b5:ea:be:7f:0c:c1:eb:29:46:f3:28:62: 05:58:04:a8:ba:68:d3:3e:bc:dc:fd:83:fc:74:38:0f:46:d6: 06:1d:b7:de:e1:72:b9:bb:5d:04:0f:30:29:9a:b1:a5:81:7e: 9f:f2:fc:3b:9f:a2:57:ed:bd:2e:f9:65:01:50:0f:5f:55:0c: ef:50:ca:35:35:f1:78:7d:4b:ed:68:2d:16:93:4c:a8:22:e7: 6b:f6:16:e9:e9:f1:fd:dc:15:a3:34:56:80:24:05:12:6d:e8: 0b:41:e9:d2:06:ca:0b:3a:02:62:7d:ba:3b:9d:04:51:f6:83: 3d:15:d1:75:25:71:35:77:49:1b:39:13:e6:60:cf:22:cb:e3: 96:90:3c:42:25:d3:78:5c:b2:d7:e6:80:73:f1:84:06:08:10: 66:0a:0d:1e:f4:a6:14:6c:00:f2:92:fd:46:28:2b:4d:8d:ba: 09:ad:90:e9:97:84:6f:5d:1d:2b:65:b6:42:15:ce:3e:b7:85: 61:d7:fb:38:b1:72:b6:6f:83:63:40:69:9f:67:c5:19:1b:bd: df:01:e8:b2:47:5a:3d:d2:8f:74:71:f1:e9:8e:05:cb:fd:8f: 72:d7:b6:ad:bd:b3:d1:52:17:0e:4b:6a:1a:49:07:7d:a5:26: 6d:fa:a0:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKEMzOTNCQ0RGN0Q0NUE3MTk2RkYzQ0Q2RDMwRDYyMzBE RjRGREM1N0QwHhcNMjUwNjAxMDU1NDE0WhcNMjUwNjA4MDU1NDE0WjAYMRYwFAYD VQQDEw02ODNiZWIwNi03OWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfEGQwrtKOoSeVYt1bwG0KG8AFH/dXCuOkaEetMqVYnhmp36liUz4LvFOuv8 GrS6IBJXPUJxx4nxcCrI7L/Jf177BFq+6RNLN757FMVPcwSeavO6H3GpC90wOcWq D+wsBWNYrPdLK96keaKXCnrV3UpAGkeImmkgPzuccOk1KmZN5sgPF1YALa8LRl4N 5KvW8NCAWn+Hay5bsKbgjKZY38YlRyRhpGhx7lFevmLQ3rH0vFhBW5qbJcXfHsuV tMD2B5fk+xIC6ql6fh2Vg6wE5kP8CoE4bVUdPWDFNxkHZ7dQ3F2pdmi5gq+lU+P6 iV9QehhXq9oRgX9fXGLMMTZgBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4sLpMX OLRKK7rwOc176IxEbCnRMB8GA1UdIwQYMBaAFMOTvN99RacZb/PNbTDWIw30/cV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi9GQzExQkZEMjQ1 QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4bHY4ODF0TU5ZakRmVDl4 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi9GQzExQkZEMjQ1QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4 bHY4ODF0TU5ZakRmVDl4WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5IsnuFuu16r5/DMHrKUbzKGIFWASoumjTPrzc/YP8dDgPRtYGHbfe 4XK5u10EDzApmrGlgX6f8vw7n6JX7b0u+WUBUA9fVQzvUMo1NfF4fUvtaC0Wk0yo Iudr9hbp6fH93BWjNFaAJAUSbegLQenSBsoLOgJifbo7nQRR9oM9FdF1JXE1d0kb ORPmYM8iy+OWkDxCJdN4XLLX5oBz8YQGCBBmCg0e9KYUbADykv1GKCtNjboJrZDp l4RvXR0rZbZCFc4+t4Vh1/s4sXK2b4NjQGmfZ8UZG73fAeiyR1o90o90cfHpjgXL /Y9y17atvbPRUhcOS2oaSQd9pSZt+qB5 -----END CERTIFICATE-----Generated at Mon Jun 2 20:01:22 2025 by rpki-client