$ rpki-client -vvf rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft File: wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft (raw, json) Hash identifier: jS7iFNieaf4tzpA5nJPK46ddeNEZlUiZMFjFv6ksOqc= Subject key identifier: 48:86:FC:D1:79:E0:12:CA:57:B6:2B:CD:B2:F8:B7:5C:38:A7:54:52 Authority key identifier: C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A Certificate issuer: /CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft Manifest number: 0162 Signing time: Sat 31 May 2025 03:39:38 +0000 Manifest this update: Sat 31 May 2025 03:39:38 +0000 Manifest next update: Sat 07 Jun 2025 03:39:38 +0000 Files and hashes: 1: wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl (hash: R52D9bVZTso4wfQ8u7Nz/7LvqyTVkE+eysfjgJ86pCU=) 2: 32503D0625FC11EE9A575E36C4F9AE02.roa (hash: AlPEcyEIDBXADdQ7LcHDoET2vUI4PMePKSIHLdjtTsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FED9, serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Validity Not Before: May 31 03:39:38 2025 GMT Not After : Jun 7 03:39:38 2025 GMT Subject: CN=683a79fa-8c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:e1:29:a2:f9:b0:24:0e:63:44:0e:33:05: da:aa:5c:7c:0c:6f:cf:d1:fd:16:64:d5:be:34:4c: 8b:f1:f4:d3:07:61:84:e3:e6:71:e5:1d:75:66:e7: b9:85:f9:32:12:90:58:46:7a:bf:28:37:75:59:5d: 78:b0:29:30:5b:c2:96:29:b6:19:75:f5:30:82:58: dc:dc:55:2a:4b:bc:26:22:3e:c9:7c:3f:1e:da:60: e7:a1:d0:df:a5:96:eb:3e:84:99:d5:cc:c2:c6:81: e5:ac:1d:aa:c6:ce:dc:e5:98:1e:41:df:02:d6:97: 6a:36:5f:9a:11:52:a5:b2:b7:33:a7:e0:17:33:8f: 57:92:f6:9c:9b:69:f5:4f:d2:db:c9:cd:c2:1e:4f: 21:44:07:bb:38:c3:98:35:62:00:99:30:f6:b7:20: 31:09:e9:2d:0e:ae:f5:29:04:6f:43:97:50:df:d2: 79:89:f0:24:d7:32:d6:d9:e5:87:5b:1a:19:6b:7a: ec:b9:dd:5a:3a:41:c4:94:df:68:74:00:1a:a3:08: 55:52:49:c5:ee:97:24:6a:4c:c7:d6:66:89:a1:e6: 8a:b8:6e:87:27:12:a2:37:08:93:09:f9:f0:5a:c8: 21:2b:c0:a5:0e:15:1c:24:4b:e8:9b:f7:28:9d:33: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:86:FC:D1:79:E0:12:CA:57:B6:2B:CD:B2:F8:B7:5C:38:A7:54:52 X509v3 Authority Key Identifier: keyid:C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:25:a9:fe:2a:89:ba:da:97:20:9a:9b:9f:16:b7:47:be:e1: ff:65:d8:c3:2f:8f:b4:29:4e:df:7a:d2:92:3f:88:92:2e:02: e2:48:0d:51:17:26:74:cf:1b:fe:df:4c:34:07:6d:3c:e3:27: 4a:00:37:53:37:f9:e2:f6:4d:90:e5:cd:8a:19:e3:fd:5b:5b: 30:79:26:ca:d5:9c:8f:2e:b9:47:34:b9:7f:96:e4:bb:84:d7: 7d:e4:87:c9:56:6c:7b:40:3d:31:94:bd:16:f7:49:a2:82:4c: 7a:18:16:53:53:61:da:c4:ca:40:4c:b6:86:b4:ce:3f:c4:3f: cf:ae:db:65:8c:2f:fe:b6:62:12:5e:91:dd:ed:29:eb:84:d2: d4:44:56:be:37:7b:b2:5e:a4:69:f4:94:45:83:17:34:af:ea: 36:85:ed:16:92:d9:92:03:32:95:08:79:b7:d2:6e:b7:83:63: 72:49:88:fa:a0:82:43:b0:31:16:96:84:8e:b9:d4:f0:4d:2b: 24:4c:52:74:1b:6c:5d:2a:f1:ee:71:bb:88:8d:31:10:f2:77: 69:bd:8e:af:d5:df:65:ce:58:52:75:21:da:8f:0d:ef:e2:93: 3e:55:2a:ba:23:5d:c8:80:85:23:1e:f7:15:07:3b:85:db:0a: fa:e6:b5:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRDkxMTAvBgNVBAUTKEMxM0E5RjYyQTE0QjA1MTAzQzVBQzU3NTZGOTc2NTky ODg4QTQ5NUEwHhcNMjUwNTMxMDMzOTM4WhcNMjUwNjA3MDMzOTM4WjAYMRYwFAYD VQQDEw02ODNhNzlmYS04YzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjnhKaL5sCQOY0QOMwXaqlx8DG/P0f0WZNW+NEyL8fTTB2GE4+Zx5R11Zue5 hfkyEpBYRnq/KDd1WV14sCkwW8KWKbYZdfUwgljc3FUqS7wmIj7JfD8e2mDnodDf pZbrPoSZ1czCxoHlrB2qxs7c5ZgeQd8C1pdqNl+aEVKlsrczp+AXM49Xkvacm2n1 T9Lbyc3CHk8hRAe7OMOYNWIAmTD2tyAxCektDq71KQRvQ5dQ39J5ifAk1zLW2eWH WxoZa3rsud1aOkHElN9odAAaowhVUknF7pckakzH1maJoeaKuG6HJxKiNwiTCfnw WsghK8ClDhUcJEvom/conTOmDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiG/NF5 4BLKV7YrzbL4t1w4p1RSMB8GA1UdIwQYMBaAFME6n2KhSwUQPFrFdW+XZZKIikla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVEOS9DMEJBOEFBRTIy MUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJSQThXc1YxYjVkbGtvaUtT Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUcWZZcUZMQlJBOFdzVjFiNWRsa29pS1NWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVEOS9DMEJBOEFBRTIyMUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJS QThXc1YxYjVkbGtvaUtTVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbJan+Kom62pcgmpufFrdHvuH/ZdjDL4+0KU7fetKSP4iSLgLiSA1R FyZ0zxv+30w0B2084ydKADdTN/ni9k2Q5c2KGeP9W1sweSbK1ZyPLrlHNLl/luS7 hNd95IfJVmx7QD0xlL0W90migkx6GBZTU2HaxMpATLaGtM4/xD/PrttljC/+tmIS XpHd7SnrhNLURFa+N3uyXqRp9JRFgxc0r+o2he0WktmSAzKVCHm30m63g2NySYj6 oIJDsDEWloSOudTwTSskTFJ0G2xdKvHucbuIjTEQ8ndpvY6v1d9lzlhSdSHajw3v 4pM+VSq6I13IgIUjHvcVBzuF2wr65rVM -----END CERTIFICATE-----Generated at Sat May 31 16:43:51 2025 by rpki-client