$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft File: WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json) Hash identifier: F73EVcALpnNYkZIx0ypMaq31PeSIG3OvM04E675h7ag= Subject key identifier: FF:32:96:15:49:4F:8E:82:20:82:35:F2:7C:6B:9E:34:57:E0:9B:49 Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft Manifest number: 9C Signing time: Sat 31 May 2025 05:51:11 +0000 Manifest this update: Sat 31 May 2025 05:51:11 +0000 Manifest next update: Sat 07 Jun 2025 05:51:11 +0000 Files and hashes: 1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: zGPy0Gbnz82c7xl3XoT5jSpQaqzFa7a+2Mw7UZc+LBk=) 2: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: 5XjH5jYQNGqgzAYgO3kN1PD7Sd1lEpbAQIK2Gn00Jgc=) 3: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: Bt9vGqi9TgbZdaX+9C2xi9dkPbVYKmUnDkvJSbxIGtE=) 4: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: HHG06rbqXUGTVwCC0t+f2pu30l3PoUzNu4BfvZ/sQwE=) 5: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: tOqCLeToyx3OlovnhW3Ug6iPrFYH9Umb6yvHYh2Zk9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Validity Not Before: May 31 05:51:11 2025 GMT Not After : Jun 7 05:51:11 2025 GMT Subject: CN=683a98cf-8efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:0b:9c:e3:4d:70:05:88:eb:c3:c1:76:27: cd:d9:3a:0f:44:14:61:11:f3:bd:e9:d8:a0:30:a3: e6:98:e0:8e:e6:ac:99:40:e1:e1:75:a6:da:89:2a: 86:fb:61:ae:92:d8:e2:94:f5:fd:02:8d:22:1e:e5: d8:8d:1b:2a:16:80:b2:37:91:bf:a8:e2:9b:26:47: f9:1b:bd:a3:e4:47:0d:49:63:33:b3:f0:d2:4f:2a: 29:69:af:05:8b:08:c2:e4:7d:3c:34:65:eb:aa:b1: db:cd:74:d4:ca:8a:c4:8a:c1:30:f6:4b:ec:38:a2: e2:34:b0:05:9a:db:68:05:1f:a2:b2:92:17:f3:40: da:77:cf:1c:0f:ed:92:2c:63:d5:ef:db:e0:8c:0d: da:99:c0:ac:b9:3c:b1:55:3e:08:dd:74:77:8c:03: 7f:42:5b:c9:b7:ed:96:00:7a:59:20:06:03:2d:f1: d5:be:85:c8:02:7b:4c:fa:ff:c6:49:04:ab:fd:b4: 72:78:4e:b2:3b:27:b0:92:fb:95:41:77:ff:ef:55: 7b:60:13:a7:c6:e4:f6:81:fb:5c:5c:98:a8:7c:6e: 95:13:78:81:bd:dd:83:45:a0:e9:9e:6c:78:62:85: fa:14:6b:ee:9b:62:04:3b:35:d0:da:6c:8c:b2:2d: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:32:96:15:49:4F:8E:82:20:82:35:F2:7C:6B:9E:34:57:E0:9B:49 X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:30:8d:d0:0f:30:48:99:e8:d7:65:b7:0e:33:1e:95:80:3c: 8d:dd:23:e4:31:5c:47:a4:41:72:1e:7a:c4:37:7f:67:b2:b2: db:54:2c:ee:a6:74:7c:68:ee:07:3f:9f:98:92:86:78:d5:05: 2b:9d:52:ff:f9:02:57:2c:af:32:77:9e:e9:92:0c:31:b7:a4: f3:54:b3:0b:9e:f6:9a:8e:45:5f:0c:f2:da:52:5d:32:cc:aa: 7b:a7:42:df:a4:9d:8c:c5:bc:00:44:66:36:36:f5:e6:78:d0: 5e:9c:14:e1:d6:e5:7d:53:a7:a9:7b:ee:89:48:86:7b:c9:ea: 6b:34:93:50:06:90:07:b5:92:ea:87:93:ac:c9:10:4d:75:57: 24:df:50:48:63:e8:e5:65:b6:1e:dd:30:c0:b0:2c:79:6e:c5: f5:44:35:0c:b2:c5:e4:4e:87:54:e3:2b:10:35:ca:53:9d:fe: 94:11:5d:00:5b:7b:93:0b:a2:07:b1:72:f1:44:f9:f3:c1:2d: 43:2c:0f:90:fd:a1:0c:89:f5:41:4b:b9:34:5c:69:28:2f:df: 3f:0c:4f:3b:9e:62:87:88:a5:9e:32:b8:34:29:ef:06:9b:56: 53:7e:e0:20:2e:45:26:2e:09:2d:25:56:0b:7e:ff:8e:94:d8: 19:38:bd:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF QzJBMzM1RDIwHhcNMjUwNTMxMDU1MTExWhcNMjUwNjA3MDU1MTExWjAYMRYwFAYD VQQDEw02ODNhOThjZi04ZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznoLnONNcAWI68PBdifN2ToPRBRhEfO96digMKPmmOCO5qyZQOHhdabaiSqG +2GuktjilPX9Ao0iHuXYjRsqFoCyN5G/qOKbJkf5G72j5EcNSWMzs/DSTyopaa8F iwjC5H08NGXrqrHbzXTUyorEisEw9kvsOKLiNLAFmttoBR+ispIX80Dad88cD+2S LGPV79vgjA3amcCsuTyxVT4I3XR3jAN/QlvJt+2WAHpZIAYDLfHVvoXIAntM+v/G SQSr/bRyeE6yOyewkvuVQXf/71V7YBOnxuT2gftcXJiofG6VE3iBvd2DRaDpnmx4 YoX6FGvum2IEOzXQ2myMsi3IkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8ylhVJ T46CIII18nxrnjRX4JtJMB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0QxMi9BQjg5MzRGMjUyQzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpO ZWl0UFFWUFFkMGJzS2pOZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGMI3QDzBImejXZbcOMx6VgDyN3SPkMVxHpEFyHnrEN39nsrLbVCzu pnR8aO4HP5+YkoZ41QUrnVL/+QJXLK8yd57pkgwxt6TzVLMLnvaajkVfDPLaUl0y zKp7p0LfpJ2MxbwARGY2NvXmeNBenBTh1uV9U6epe+6JSIZ7yeprNJNQBpAHtZLq h5OsyRBNdVck31BIY+jlZbYe3TDAsCx5bsX1RDUMssXkTodU4ysQNcpTnf6UEV0A W3uTC6IHsXLxRPnzwS1DLA+Q/aEMifVBS7k0XGkoL98/DE87nmKHiKWeMrg0Ke8G m1ZTfuAgLkUmLgktJVYLfv+OlNgZOL3S -----END CERTIFICATE-----Generated at Sat May 31 16:34:04 2025 by rpki-client