$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json) Hash identifier: lUp7nPkl9soSoJEHQnTOkOtiTKJ9g8vVDpwWkWFddtk= Subject key identifier: AB:D3:8A:36:EF:99:92:F8:44:67:5D:33:6D:D3:98:D9:AA:86:20:37 Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft Manifest number: 0125 Signing time: Sat 31 May 2025 04:18:21 +0000 Manifest this update: Sat 31 May 2025 04:18:20 +0000 Manifest next update: Sat 07 Jun 2025 04:18:20 +0000 Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: fAuGn06VXu04hg43wkxx3e0hd6Z9vjMPK9lJNizi/3A=) 2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: 2gzrMjXP4Am0pQ80O9+rI75KjzU6RpDqcXF/j3n7Tn0=) 3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: +PmKxO27F3AHIJ3oHg1od1w1E6envfjFt6OCrfWbtQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Validity Not Before: May 31 04:18:20 2025 GMT Not After : Jun 7 04:18:20 2025 GMT Subject: CN=683a830c-724f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:94:34:bf:73:9a:50:19:5d:a8:70:1c:07: fd:2b:f7:6a:7c:58:a8:8a:4d:a2:f3:30:9c:1c:79: d3:c7:28:0f:36:80:35:6b:31:27:67:97:6a:b4:df: b9:df:3e:6d:6f:91:f0:7b:a4:c5:8c:0e:06:9b:c3: a9:a6:7c:9c:43:a8:31:cb:02:3a:55:37:b5:97:4d: a2:44:88:34:6c:be:12:63:fa:76:68:6d:e0:5e:24: 09:7d:e7:74:96:ce:41:57:d9:16:b9:bc:93:32:ad: 1a:a0:30:83:57:24:f2:1c:78:48:2c:cf:5d:b5:d1: c9:24:8f:00:8f:ae:48:f8:a4:68:12:c6:a7:d0:9a: a4:1c:c8:77:ba:ce:50:41:ca:4e:cf:bc:c3:7f:1a: 15:f8:5b:70:77:b6:9a:75:df:61:83:c3:11:a6:9f: 31:95:36:b7:82:2f:be:15:03:e6:81:45:ac:9b:f0: f6:41:56:e7:52:1a:50:52:6a:b3:ee:47:b2:33:c2: 36:96:c4:01:17:61:70:dd:0e:09:b0:cb:21:7e:75: 09:f4:09:4b:a8:d2:4f:b4:e4:6f:33:bb:67:60:b5: af:f2:57:4f:1b:77:d9:26:9f:de:9b:42:ce:ac:4a: c3:45:2c:d2:21:19:dd:c8:29:1d:0a:da:20:84:48: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D3:8A:36:EF:99:92:F8:44:67:5D:33:6D:D3:98:D9:AA:86:20:37 X509v3 Authority Key Identifier: keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9b:27:54:be:dd:99:cb:70:b0:45:31:7e:aa:72:92:1a:db: 38:d8:ba:ea:db:b3:0a:f7:bf:b1:82:e0:e8:4f:c5:d9:61:c5: 4d:49:9e:b4:73:4b:d5:5d:c6:71:4f:fd:47:ee:d4:9f:9d:95: a5:33:6c:c8:7d:a5:89:22:89:3f:6d:d5:95:36:ae:ae:8e:27: 2b:62:57:74:17:88:60:d0:95:57:19:c8:5c:51:11:e2:97:2f: b0:fe:fd:1c:28:21:57:91:2a:0d:42:86:2e:47:a1:9f:0c:a8: 64:e6:74:52:6f:2f:0a:3c:7d:2d:44:ca:27:09:76:ac:d2:8b: db:f9:46:af:93:c5:ce:c8:de:7d:16:c6:85:32:e8:25:13:c3: 29:8e:e5:2d:ae:e1:77:a2:b4:73:ba:37:70:12:17:95:f3:51: 57:97:57:65:54:cb:bd:82:70:df:ec:4e:e8:3f:97:98:c1:21: 6a:f3:33:7f:ba:2b:ce:26:30:b7:fa:b1:44:84:ff:b2:a0:35: 8f:7c:4e:73:5c:66:3c:96:c7:44:b0:2f:b9:bc:26:8c:05:33: 75:ce:f9:82:87:51:89:50:ca:42:f0:29:65:0d:d0:9e:71:85: 20:bf:1f:1e:eb:ee:b9:ae:71:9b:dc:db:52:2e:fa:dd:b1:13: 9b:3b:e3:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwRjYxMTAvBgNVBAUTKEMwQUVGNzA3N0Y1MjYyMjU2NzE3OUFDRTU2QUQ1RUU4 Q0Q2NDYwNEUwHhcNMjUwNTMxMDQxODIwWhcNMjUwNjA3MDQxODIwWjAYMRYwFAYD VQQDEw02ODNhODMwYy03MjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2OUNL9zmlAZXahwHAf9K/dqfFioik2i8zCcHHnTxygPNoA1azEnZ5dqtN+5 3z5tb5Hwe6TFjA4Gm8OppnycQ6gxywI6VTe1l02iRIg0bL4SY/p2aG3gXiQJfed0 ls5BV9kWubyTMq0aoDCDVyTyHHhILM9dtdHJJI8Aj65I+KRoEsan0JqkHMh3us5Q QcpOz7zDfxoV+Ftwd7aadd9hg8MRpp8xlTa3gi++FQPmgUWsm/D2QVbnUhpQUmqz 7keyM8I2lsQBF2Fw3Q4JsMshfnUJ9AlLqNJPtORvM7tnYLWv8ldPG3fZJp/em0LO rErDRSzSIRndyCkdCtoghEhb4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvTijbv mZL4RGddM23TmNmqhiA3MB8GA1UdIwQYMBaAFMCu9wd/UmIlZxeazlatXujNZGBO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjBGNi9GRUUwNUJFQzdD QUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lpVm5GNXJPVnExZTZNMWtZ RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzNCMzlTWWlWbkY1ck9WcTFlNk0xa1lFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjBGNi9GRUUwNUJFQzdDQUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lp Vm5GNXJPVnExZTZNMWtZRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhmydUvt2Zy3CwRTF+qnKSGts42Lrq27MK97+xguDoT8XZYcVNSZ60 c0vVXcZxT/1H7tSfnZWlM2zIfaWJIok/bdWVNq6ujicrYld0F4hg0JVXGchcURHi ly+w/v0cKCFXkSoNQoYuR6GfDKhk5nRSby8KPH0tRMonCXas0ovb+Uavk8XOyN59 FsaFMuglE8MpjuUtruF3orRzujdwEheV81FXl1dlVMu9gnDf7E7oP5eYwSFq8zN/ uivOJjC3+rFEhP+yoDWPfE5zXGY8lsdEsC+5vCaMBTN1zvmCh1GJUMpC8CllDdCe cYUgvx8e6+65rnGb3NtSLvrdsRObO+Ps -----END CERTIFICATE-----Generated at Sat May 31 17:01:15 2025 by rpki-client