$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: yzrfvK6rMGnhlusLfEhf6XtI/VCKjgo9slGEdxvDNOE= Subject key identifier: D8:B1:A5:1F:5A:29:5F:2D:7A:1F:55:C0:64:66:A4:E9:57:4C:65:0C Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 19C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 19B9 Signing time: Fri 30 May 2025 16:34:21 +0000 Manifest this update: Fri 30 May 2025 16:34:20 +0000 Manifest next update: Fri 06 Jun 2025 16:34:20 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: YGUdaucYWchpPeCXq7d4o6zRzzoMxf4QdH7Ii0okdy0=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: QtE9Adpom4Nm5iw3CCvblvKPpzJSJvhQFoud1x1FLEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6596 (0x19c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: May 30 16:34:20 2025 GMT Not After : Jun 6 16:34:20 2025 GMT Subject: CN=6839de0d-31d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:56:95:fb:7c:43:a6:83:89:3c:cf:3f:2c: b7:fe:83:b7:17:2d:bf:79:66:bc:71:36:a1:a1:c0: 46:a4:22:68:44:11:11:eb:3a:81:1a:f7:e0:86:3f: 99:d7:d2:cc:f5:08:bc:22:f4:62:7a:ef:1b:4f:33: 7a:5f:1a:ea:81:f9:42:cd:b5:aa:85:67:36:73:15: 43:0c:7e:e2:86:45:85:79:e3:1d:cc:9d:79:ef:76: 57:8b:53:e9:3d:94:74:30:86:60:18:1e:f2:3a:e4: 67:46:27:b1:7e:00:37:ba:60:b3:8f:81:a9:1a:13: 5a:51:b7:4b:9e:04:29:55:48:fe:d8:41:91:83:04: 28:3d:db:34:9c:03:47:ef:65:ec:42:93:aa:03:39: 64:d9:69:5c:30:5f:99:79:7b:03:f9:bf:2a:51:d6: 33:ee:a5:0e:82:61:b2:7f:5d:6a:d2:c3:8b:cb:d0: 3e:1e:82:c7:fd:d6:37:96:59:01:28:23:a7:cf:4f: 46:bf:61:1b:21:55:f9:68:3c:5a:80:52:24:5b:c7: 58:a8:2b:a0:6d:7a:43:3b:6c:b7:23:92:a1:bf:d9: 13:a3:92:52:fb:21:a8:72:03:22:74:ba:64:0c:6b: b9:b2:56:83:88:26:29:af:b1:c3:d7:61:2b:85:44: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B1:A5:1F:5A:29:5F:2D:7A:1F:55:C0:64:66:A4:E9:57:4C:65:0C X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:00:2c:5b:5f:94:51:20:99:23:5b:3a:46:63:4b:f3:c5:bf: e2:a0:ec:18:0f:6d:79:80:7d:07:35:b1:98:13:3a:6f:9d:85: f7:e4:8d:04:87:d9:6b:fd:da:10:8d:61:59:9f:39:6e:1b:5f: 5c:8f:b5:b7:a7:3f:8a:a1:02:e9:4d:77:f6:ae:13:ca:e5:ef: 4a:01:61:89:07:ee:c9:7a:b3:b0:a3:61:3d:dd:64:f7:0d:c5: f6:2e:e9:1f:db:c1:b6:ed:ae:89:db:16:f8:46:80:39:fc:37: c3:5a:a5:1d:78:9c:1d:ae:48:90:aa:7b:59:02:1c:86:e9:d4: fe:50:b9:44:09:ce:f3:1d:3c:ba:91:fc:c8:6d:ba:c6:30:1b: 6a:78:b2:a2:79:7b:9f:65:4b:e5:bb:b4:2d:e6:9b:23:73:5c: ec:fe:f3:4a:24:98:33:9b:7f:03:b8:39:fb:ee:fa:8f:39:49: 56:86:3e:72:e7:c4:67:af:8a:54:20:44:eb:17:21:85:ad:19: ee:c7:1d:90:3b:80:a7:f7:d3:28:f0:a0:1f:83:b4:fb:41:da: 65:75:95:e3:df:0c:25:d0:47:87:a2:ae:c1:0d:68:52:94:e3: 76:81:4d:8c:12:39:fd:7d:da:0d:10:bf:48:5e:9a:de:36:16: 11:ea:e2:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjUwNTMwMTYzNDIwWhcNMjUwNjA2MTYzNDIwWjAYMRYwFAYD VQQDEw02ODM5ZGUwZC0zMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydxWlft8Q6aDiTzPPyy3/oO3Fy2/eWa8cTahocBGpCJoRBER6zqBGvfghj+Z 19LM9Qi8IvRieu8bTzN6XxrqgflCzbWqhWc2cxVDDH7ihkWFeeMdzJ1573ZXi1Pp PZR0MIZgGB7yOuRnRiexfgA3umCzj4GpGhNaUbdLngQpVUj+2EGRgwQoPds0nANH 72XsQpOqAzlk2WlcMF+ZeXsD+b8qUdYz7qUOgmGyf11q0sOLy9A+HoLH/dY3llkB KCOnz09Gv2EbIVX5aDxagFIkW8dYqCugbXpDO2y3I5Khv9kTo5JS+yGocgMidLpk DGu5slaDiCYpr7HD12ErhURVJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNixpR9a KV8teh9VwGRmpOlXTGUMMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9ACxbX5RRIJkjWzpGY0vzxb/ioOwYD215gH0HNbGYEzpvnYX35I0E h9lr/doQjWFZnzluG19cj7W3pz+KoQLpTXf2rhPK5e9KAWGJB+7JerOwo2E93WT3 DcX2Lukf28G27a6J2xb4RoA5/DfDWqUdeJwdrkiQqntZAhyG6dT+ULlECc7zHTy6 kfzIbbrGMBtqeLKieXufZUvlu7Qt5psjc1zs/vNKJJgzm38DuDn77vqPOUlWhj5y 58Rnr4pUIETrFyGFrRnuxx2QO4Cn99Mo8KAfg7T7QdpldZXj3wwl0EeHoq7BDWhS lON2gU2MEjn9fdoNEL9IXpreNhYR6uIL -----END CERTIFICATE-----Generated at Sat May 31 17:27:45 2025 by rpki-client