$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: UA7NdJ+9Z3jJpnx0NGZ2nqquh2IExHnv8TltkudZJzA= Subject key identifier: CE:EF:F9:DA:8C:B2:C8:06:4E:7B:A0:D0:93:43:BC:3A:18:AA:7E:06 Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0E02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0DF6 Signing time: Fri 30 May 2025 18:01:24 +0000 Manifest this update: Fri 30 May 2025 18:01:23 +0000 Manifest next update: Fri 06 Jun 2025 18:01:23 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: KizDY1F5OtWFtYloAxUrba4qtk8fWh2iJI9IaPBaT5g=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: lZ3QbqPdh5gBg1rW+eMhPiAXrCRo4e2jYq5svVV45wI=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: jOwsth6DgagpPjpvgD+70DaYD4kKIMkvYMnC7TJ216E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3586 (0xe02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: May 30 18:01:23 2025 GMT Not After : Jun 6 18:01:23 2025 GMT Subject: CN=6839f274-693c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:a2:37:49:1e:be:38:08:5d:e6:2d:93:15: 32:a4:6f:34:9d:99:1d:5c:8c:b1:2f:d2:b8:ed:52: 2f:b2:a6:13:a4:aa:07:94:24:f1:07:88:41:c6:aa: 89:34:6e:32:3a:bd:34:12:84:6c:16:a2:13:0a:c7: 1a:35:33:f8:0f:be:15:44:ac:50:78:93:9c:3f:3c: cf:78:93:a6:e4:95:06:bd:79:e7:65:a2:d5:90:d0: bf:5c:0a:e5:ca:89:a1:ce:83:0d:de:47:c4:e4:b0: f5:df:45:61:f4:3f:d5:97:6f:47:7f:e0:1a:6c:c0: 0f:02:b1:ad:db:fd:a7:d1:85:9e:61:94:24:ea:37: 09:e3:c4:31:ad:fc:0f:ce:be:53:ea:8b:ca:a2:a2: 40:67:c4:9d:01:1b:0c:95:f1:87:44:5c:5a:1a:60: c1:ea:1f:e5:34:26:e8:bb:d4:03:95:cc:14:fd:e3: e7:d4:fc:10:d4:4c:d0:8d:4f:47:4c:72:e9:39:fc: f6:73:82:3f:34:27:69:95:ec:29:2b:2f:a4:a6:63: 22:a7:63:a7:86:ec:e4:2a:6e:8f:ce:05:31:d1:5b: 9d:34:7b:79:5e:b6:08:7a:ea:4a:6d:f5:78:d2:a2: 8e:5b:69:8b:9f:53:29:44:11:4e:3d:8e:4a:31:7d: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EF:F9:DA:8C:B2:C8:06:4E:7B:A0:D0:93:43:BC:3A:18:AA:7E:06 X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:52:1e:44:db:f0:a8:99:d1:8d:33:ac:cd:4b:4c:c1:23:77: b9:4b:84:11:58:48:3d:be:8e:53:2f:8f:9c:2b:38:a2:e2:00: c2:88:b6:9a:d8:c8:10:47:0b:4c:cc:44:01:e0:44:0c:58:31: c9:d9:8e:26:8a:46:1f:09:a9:de:d4:02:8f:39:31:f1:9e:47: 7e:25:0d:12:2b:d0:a2:5a:1c:fb:e4:b2:83:10:c7:75:61:ab: 92:c5:19:77:00:71:62:f7:43:7f:fe:80:6b:63:56:2a:79:98: 71:62:2c:34:db:b9:4d:0f:65:b2:3f:ed:0b:10:a5:a2:58:69: 03:5f:0c:69:b9:26:73:00:72:f2:ff:28:4d:ae:51:c8:6d:d5: e4:1a:47:40:f6:57:2a:6c:3f:6c:74:94:8d:54:01:a7:ee:4a: 9c:ed:35:96:43:81:e8:7e:aa:7b:dd:d0:d3:27:c9:b9:0e:99: 55:fa:c6:32:08:0a:08:21:2d:c5:10:a5:09:a8:9c:1d:66:2b: e7:c3:48:57:22:e9:ea:e7:e5:44:34:02:29:f4:fc:d3:49:ff: a0:bc:97:c6:f8:37:2d:f4:71:12:1b:e3:2f:26:15:88:fc:32: 45:e7:01:3b:ef:ab:e4:75:14:e9:1d:e5:ef:0a:fd:ee:ee:48: 94:4e:f6:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjUwNTMwMTgwMTIzWhcNMjUwNjA2MTgwMTIzWjAYMRYwFAYD VQQDEw02ODM5ZjI3NC02OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qiiN0kevjgIXeYtkxUypG80nZkdXIyxL9K47VIvsqYTpKoHlCTxB4hBxqqJ NG4yOr00EoRsFqITCscaNTP4D74VRKxQeJOcPzzPeJOm5JUGvXnnZaLVkNC/XArl yomhzoMN3kfE5LD130Vh9D/Vl29Hf+AabMAPArGt2/2n0YWeYZQk6jcJ48QxrfwP zr5T6ovKoqJAZ8SdARsMlfGHRFxaGmDB6h/lNCbou9QDlcwU/ePn1PwQ1EzQjU9H THLpOfz2c4I/NCdplewpKy+kpmMip2OnhuzkKm6PzgUx0VudNHt5XrYIeupKbfV4 0qKOW2mLn1MpRBFOPY5KMX0bNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7v+dqM ssgGTnug0JNDvDoYqn4GMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Uh5E2/ComdGNM6zNS0zBI3e5S4QRWEg9vo5TL4+cKzii4gDCiLaa 2MgQRwtMzEQB4EQMWDHJ2Y4mikYfCane1AKPOTHxnkd+JQ0SK9CiWhz75LKDEMd1 YauSxRl3AHFi90N//oBrY1YqeZhxYiw027lND2WyP+0LEKWiWGkDXwxpuSZzAHLy /yhNrlHIbdXkGkdA9lcqbD9sdJSNVAGn7kqc7TWWQ4Hofqp73dDTJ8m5DplV+sYy CAoIIS3FEKUJqJwdZivnw0hXIunq5+VENAIp9PzTSf+gvJfG+Dct9HESG+MvJhWI /DJF5wE776vkdRTpHeXvCv3u7kiUTvY4 -----END CERTIFICATE-----Generated at Sat May 31 17:14:42 2025 by rpki-client