$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft File: W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json) Hash identifier: OoBnmniY1mrd+XIlQKgK6eskCiFWHXWdSXfu6KQzb80= Subject key identifier: DD:D1:56:E0:19:A2:A3:C7:85:17:1D:0A:3C:39:59:AF:AD:D9:C1:D7 Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A Certificate issuer: /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A Certificate serial: 08DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft Manifest number: 08CF Signing time: Fri 30 May 2025 20:41:00 +0000 Manifest this update: Fri 30 May 2025 20:40:59 +0000 Manifest next update: Fri 06 Jun 2025 20:40:59 +0000 Files and hashes: 1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: H0sePQNblu949FxDK3Pn6ah7kC+A4c4sTKC1sgwQKZw=) 2: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: glSctB67kcgRNgcA0b3/jW6A3plk8SZgtFK9qI9gKIo=) 3: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: NkR/nF+Vmt/Gcc86ZcEETph8N4g/HWKaL5fwvV3ReJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2268 (0x8dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A Validity Not Before: May 30 20:40:59 2025 GMT Not After : Jun 6 20:40:59 2025 GMT Subject: CN=683a17dc-1d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:97:40:ec:df:9b:2d:9f:15:32:36:10:b1: f5:22:cf:61:e2:e0:15:1d:95:35:60:7b:fc:4d:87: c9:30:3e:1e:42:1b:af:af:89:f6:75:43:aa:8f:92: 71:e7:07:ce:3c:b6:f1:32:78:6b:b2:8d:3c:4b:88: ea:6e:e5:e1:20:3e:a0:4e:c9:5d:d2:ed:7e:6a:f5: 3e:56:6c:2e:17:b2:ff:8d:de:bc:df:53:d4:65:c7: d6:c2:81:af:ca:1c:61:53:9f:60:0b:be:cb:0e:53: ef:09:c1:fc:3d:60:1e:d3:ba:8c:64:86:77:67:f0: b7:e4:0b:25:0c:6d:96:42:fc:3b:91:51:73:10:76: 94:e6:86:e8:5b:3a:31:83:92:02:db:cd:3e:8f:db: e6:b8:b4:5a:f7:7c:31:1a:4c:a4:9d:fd:cf:68:a3: 7c:8a:d0:ac:65:33:86:fe:ff:c4:e4:11:fb:ae:6d: 6a:f9:56:b9:dc:42:e5:b9:72:65:c4:a9:a6:45:e3: df:15:8e:9a:d1:17:8b:59:02:8d:9c:0e:0e:dc:16: f8:ed:db:de:61:f7:a9:e6:e4:4a:cb:a5:ff:47:dc: c7:5b:70:46:4e:f7:32:da:f3:a5:1f:26:f4:bf:13: 75:47:33:81:e2:df:8b:62:f3:34:6a:4d:cd:9b:b4: 5a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D1:56:E0:19:A2:A3:C7:85:17:1D:0A:3C:39:59:AF:AD:D9:C1:D7 X509v3 Authority Key Identifier: keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c9:1f:e4:dd:f0:b3:40:2f:34:21:4b:01:aa:02:d6:99:a6: d8:89:7c:20:0b:11:02:28:70:6d:02:d3:90:40:84:ea:e7:1e: f0:5e:43:06:45:a4:52:47:85:b7:50:8a:52:59:98:23:25:67: dc:b8:28:d4:af:00:e7:3d:42:9c:80:bb:a5:70:cd:7b:6f:ae: 23:c2:55:29:9b:c1:55:91:85:32:9d:a5:57:cb:53:9a:9e:b2: 40:18:71:4e:ce:22:89:7c:0c:95:c6:45:38:9a:ed:ad:d4:50: f1:83:3b:5d:7f:77:1b:76:ea:78:28:ed:14:44:60:5f:16:9b: 94:8a:ff:68:d0:0e:24:2d:80:6e:7b:bc:00:fb:91:83:95:de: c9:71:91:c5:0f:8f:2d:e4:27:9e:d9:4d:65:d3:92:ce:7a:b4: 8c:37:af:b4:a6:37:4e:3b:c0:df:80:4c:65:2a:70:47:fd:45: e4:f1:53:6e:b8:34:6a:bd:40:05:0e:01:00:50:29:1e:32:e3: cc:69:97:56:98:91:f8:b2:07:84:a5:13:ac:38:ca:ff:fa:e6: ca:a3:97:92:05:da:ea:07:96:59:db:b3:77:f4:96:cc:e6:f9: 77:1d:c5:ab:74:33:b2:fc:fb:bb:82:91:5a:7e:60:eb:95:0f: cc:9e:1c:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4MEUxMTAvBgNVBAUTKDVCQkQ2NkU4NjMzNEU5OTgxN0UyQzZENUJDRUI3REFE MDIwRkNBOEEwHhcNMjUwNTMwMjA0MDU5WhcNMjUwNjA2MjA0MDU5WjAYMRYwFAYD VQQDEw02ODNhMTdkYy0xZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44KXQOzfmy2fFTI2ELH1Is9h4uAVHZU1YHv8TYfJMD4eQhuvr4n2dUOqj5Jx 5wfOPLbxMnhrso08S4jqbuXhID6gTsld0u1+avU+VmwuF7L/jd6831PUZcfWwoGv yhxhU59gC77LDlPvCcH8PWAe07qMZIZ3Z/C35AslDG2WQvw7kVFzEHaU5oboWzox g5IC280+j9vmuLRa93wxGkyknf3PaKN8itCsZTOG/v/E5BH7rm1q+Va53ELluXJl xKmmRePfFY6a0ReLWQKNnA4O3Bb47dveYfep5uRKy6X/R9zHW3BGTvcy2vOlHyb0 vxN1RzOB4t+LYvM0ak3Nm7RaKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3RVuAZ oqPHhRcdCjw5Wa+t2cHXMB8GA1UdIwQYMBaAFFu9ZuhjNOmYF+LG1bzrfa0CD8qK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTgwRS8wMEU5MjUwNEIx Q0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZaZ1g0c2JWdk90OXJRSVB5 b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c3MW02R00wNlpnWDRzYlZ2T3Q5clFJUHlvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTgwRS8wMEU5MjUwNEIxQ0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZa Z1g0c2JWdk90OXJRSVB5b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKyR/k3fCzQC80IUsBqgLWmabYiXwgCxECKHBtAtOQQITq5x7wXkMG RaRSR4W3UIpSWZgjJWfcuCjUrwDnPUKcgLulcM17b64jwlUpm8FVkYUynaVXy1Oa nrJAGHFOziKJfAyVxkU4mu2t1FDxgztdf3cbdup4KO0URGBfFpuUiv9o0A4kLYBu e7wA+5GDld7JcZHFD48t5Cee2U1l05LOerSMN6+0pjdOO8DfgExlKnBH/UXk8VNu uDRqvUAFDgEAUCkeMuPMaZdWmJH4sgeEpROsOMr/+ubKo5eSBdrqB5ZZ27N39JbM 5vl3HcWrdDOy/Pu7gpFafmDrlQ/MnhwR -----END CERTIFICATE-----Generated at Sat May 31 17:49:39 2025 by rpki-client