$ rpki-client -vvf rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft File: RWxgg2WE6Qooop0Ci1snYBqT1EY.mft (raw, json) Hash identifier: 2uUP1mZIxzZ8oCbjARrhJAV8uGrIBc19pL2Xgvx1bL4= Subject key identifier: C0:C6:24:68:FC:B3:D6:05:DF:E5:D1:37:FE:3A:BC:5F:8D:3F:FD:92 Authority key identifier: 45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46 Certificate issuer: /CN=A918922D/serialNumber=456C60836584E90A28A29D028B5B27601A93D446 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft Manifest number: 29 Signing time: Sat 31 May 2025 07:19:59 +0000 Manifest this update: Sat 31 May 2025 07:19:58 +0000 Manifest next update: Sat 07 Jun 2025 07:19:58 +0000 Files and hashes: 1: RWxgg2WE6Qooop0Ci1snYBqT1EY.crl (hash: LhwRvcqQ3+VvO1Wo9q4+yZ2xL0g16WwCmKGvC8ntyL0=) 2: BF7A92E2FFC311EF9131D04AC4F9AE02.roa (hash: tVDbnB/oVjQqBCd2UeAI1BWWN7K0TVLfW0PjLHaDZvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918922D, serialNumber=456C60836584E90A28A29D028B5B27601A93D446 Validity Not Before: May 31 07:19:58 2025 GMT Not After : Jun 7 07:19:58 2025 GMT Subject: CN=683aad9e-aa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dc:f2:3f:2d:c5:e9:0a:be:12:64:f8:c0:34: c1:ab:3c:06:eb:43:f1:f4:85:97:ae:4a:ad:fa:c7: b0:23:ad:4e:a2:fc:6f:69:75:10:c7:93:3a:21:dd: 29:17:60:0b:b2:ca:d8:e9:cc:80:d0:e7:0c:52:25: 4d:d0:0c:ae:2d:50:a7:a6:1f:e3:55:c1:a9:96:5f: 23:20:d6:f4:d4:aa:a4:45:96:02:02:e4:ee:5b:a1: 47:77:bd:8b:c5:59:ec:7b:38:78:9f:9e:7b:d7:ae: 3c:b7:7f:3d:f5:b0:8e:94:cd:d9:65:d0:24:bd:59: 59:9e:75:e2:03:2d:39:f2:00:fa:1e:44:ea:47:80: 41:6a:00:f5:6a:c2:4c:d1:7d:98:61:51:4a:85:67: 00:c5:2e:e7:7e:72:4a:54:00:29:e4:10:c8:8c:ba: 07:48:43:5d:55:21:59:0a:b7:29:9a:77:7d:63:24: 29:b2:60:20:65:96:d8:62:3c:43:2e:45:09:a7:0d: d2:c8:a5:b2:61:28:62:1c:b5:ed:68:13:63:71:33: d6:e3:bb:8f:cf:5d:35:92:67:7d:ca:0d:ca:d1:1b: e9:e0:a4:53:99:57:4d:d8:75:f4:e5:47:db:fe:5f: 1b:18:9f:76:d6:c1:c8:27:2a:f6:30:f4:f3:d0:b0: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C6:24:68:FC:B3:D6:05:DF:E5:D1:37:FE:3A:BC:5F:8D:3F:FD:92 X509v3 Authority Key Identifier: keyid:45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:58:63:a9:41:83:69:31:ba:50:c5:42:c3:31:08:f4:2e:1f: 36:3b:6d:b2:68:40:8c:c2:8a:0d:4f:7f:4e:9f:d9:fb:e5:ab: 75:08:8f:82:99:cb:05:c1:eb:fc:e8:1b:84:8e:08:f4:8c:de: ad:c9:f9:90:72:fa:8b:88:d7:b9:43:9d:fa:49:d5:4a:08:aa: 6a:55:ba:aa:d4:52:92:73:55:a9:52:b5:23:19:a3:21:c8:d6: 60:e3:fa:91:61:f8:9b:08:d0:65:b0:e2:08:de:dd:ac:19:b9: b3:36:ad:ff:95:05:7c:d8:fd:8e:a0:a5:01:46:b2:f0:db:03: 9b:84:c0:ac:c9:93:93:9d:bc:72:02:58:15:49:1a:42:e5:fd: 43:3c:b4:47:a0:8f:37:96:d1:5e:73:6d:fc:53:7f:a3:f9:26: 6f:2d:df:33:28:90:0b:a2:9a:ba:cd:3a:3e:00:51:80:e3:1e: 33:3c:4c:c0:74:05:20:58:72:38:ba:bc:3d:a9:76:b7:40:f4: 1f:7d:35:e7:85:9f:5f:6e:ac:7d:1f:41:b5:7a:18:85:3a:f8: d9:86:eb:d9:27:e8:9e:13:04:82:46:a7:3f:df:23:12:0d:27: 40:59:d7:93:1e:21:eb:9f:49:e7:56:8c:cf:36:7e:3a:51:7f: d4:5b:74:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTIyRDExMC8GA1UEBRMoNDU2QzYwODM2NTg0RTkwQTI4QTI5RDAyOEI1QjI3NjAx QTkzRDQ0NjAeFw0yNTA1MzEwNzE5NThaFw0yNTA2MDcwNzE5NThaMBgxFjAUBgNV BAMTDTY4M2FhZDllLWFhNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDk3PI/LcXpCr4SZPjANMGrPAbrQ/H0hZeuSq36x7AjrU6i/G9pdRDHkzoh3SkX YAuyytjpzIDQ5wxSJU3QDK4tUKemH+NVwamWXyMg1vTUqqRFlgIC5O5boUd3vYvF Wex7OHifnnvXrjy3fz31sI6Uzdll0CS9WVmedeIDLTnyAPoeROpHgEFqAPVqwkzR fZhhUUqFZwDFLud+ckpUACnkEMiMugdIQ11VIVkKtymad31jJCmyYCBllthiPEMu RQmnDdLIpbJhKGIcte1oE2NxM9bju4/PXTWSZ33KDcrRG+ngpFOZV03YdfTlR9v+ XxsYn3bWwcgnKvYw9PPQsMRXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwMYkaPyz 1gXf5dE3/jq8X40//ZIwHwYDVR0jBBgwFoAURWxgg2WE6Qooop0Ci1snYBqT1EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MjJEL0Y5MTE4RDdDRkZD MjExRUY5QjI5NUU0NkM0RjlBRTAyL1JXeGdnMldFNlFvb29wMENpMXNuWUJxVDFF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUld4Z2cyV0U2UW9vb3AwQ2kxc25ZQnFUMUVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 MjJEL0Y5MTE4RDdDRkZDMjExRUY5QjI5NUU0NkM0RjlBRTAyL1JXeGdnMldFNlFv b29wMENpMXNuWUJxVDFFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANtYY6lBg2kxulDFQsMxCPQuHzY7bbJoQIzCig1Pf06f2fvlq3UIj4KZ ywXB6/zoG4SOCPSM3q3J+ZBy+ouI17lDnfpJ1UoIqmpVuqrUUpJzValStSMZoyHI 1mDj+pFh+JsI0GWw4gje3awZubM2rf+VBXzY/Y6gpQFGsvDbA5uEwKzJk5OdvHIC WBVJGkLl/UM8tEegjzeW0V5zbfxTf6P5Jm8t3zMokAuimrrNOj4AUYDjHjM8TMB0 BSBYcji6vD2pdrdA9B99NeeFn19urH0fQbV6GIU6+NmG69kn6J4TBIJGpz/fIxIN J0BZ15MeIeufSedWjM82fjpRf9RbdK0= -----END CERTIFICATE-----Generated at Sat May 31 17:50:45 2025 by rpki-client