$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json) Hash identifier: cDiKzBI81wHsRA9lofxCVzf68RC8NrgU8nYZWwYlw1E= Subject key identifier: 20:36:86:AE:C6:B4:B4:84:EF:0D:CB:77:37:E7:54:98:EB:30:DB:E1 Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft Manifest number: E1 Signing time: Sat 31 May 2025 05:14:47 +0000 Manifest this update: Sat 31 May 2025 05:14:46 +0000 Manifest next update: Sat 07 Jun 2025 05:14:46 +0000 Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: bXb52ltJD0Gn225ULzuH3wNAKyFcrEG1p5XFWKtE/8E=) 2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: 4VMmTh43Ie+WC2FsSYbscWpgEd2iZVkcSnXyHvFog5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: May 31 05:14:46 2025 GMT Not After : Jun 7 05:14:46 2025 GMT Subject: CN=683a9047-3c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:ad:98:6d:d6:48:e6:62:4c:37:ac:8c:56: 53:b6:63:4e:d0:0d:88:d4:f9:9f:c4:f3:16:96:b9: 4c:51:a0:49:16:6c:b8:8c:e6:bf:14:cf:e8:b2:10: 85:74:72:c5:17:25:35:8a:73:c0:21:16:6d:2b:a1: bb:30:97:7a:a5:b7:6f:df:ef:43:35:bc:fd:fa:25: 95:4c:ce:d6:ef:d1:65:05:97:d3:1a:b2:fa:0a:81: 7a:8a:e3:c0:df:b7:6e:38:2c:10:d6:e6:50:27:64: 56:5b:fe:42:f6:61:f8:6f:e2:69:d5:26:6a:59:80: 0c:fb:f5:52:50:25:11:0b:31:36:d5:87:9d:39:59: 17:b0:2e:6f:bb:2e:89:31:8a:7e:20:d9:f6:90:0a: f0:fb:cf:ef:fb:65:eb:07:de:ef:0a:65:06:09:12: 35:e1:8c:d8:41:0e:7b:ca:a6:4b:42:3b:11:43:e4: 04:a5:97:0f:7e:84:43:8c:3d:b0:4a:09:db:c6:50: d1:ba:c0:bb:f3:77:34:3e:17:9b:a7:1b:cb:97:25: 0f:26:a4:de:3b:e2:d9:13:95:11:5c:ca:df:60:bd: 0b:88:1e:13:74:a5:6f:59:ea:ec:ac:95:fb:95:1d: 5a:ab:0c:b7:a3:50:54:04:dd:54:7a:2a:1c:23:6d: f5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:36:86:AE:C6:B4:B4:84:EF:0D:CB:77:37:E7:54:98:EB:30:DB:E1 X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c9:0b:c3:4a:7e:15:52:5e:67:3b:cb:0a:99:63:9f:df:13: 6d:58:74:5b:93:a9:ff:2f:40:98:67:66:c9:72:21:15:de:4c: d4:fd:f3:ab:cc:bf:61:12:37:c0:03:6a:bb:c1:eb:13:2d:f0: c3:64:e7:58:60:91:7b:e6:86:70:a6:99:4e:18:08:73:5a:de: 25:47:32:b8:7a:0f:45:af:9d:76:8e:a8:1d:7e:99:60:a3:e3: f4:61:b5:09:56:bc:d7:39:18:6e:db:8a:17:a9:c9:99:13:99: 7e:f6:eb:d1:35:d2:96:f3:0c:37:3a:b5:dd:f0:c8:82:a1:df: b8:85:04:2e:a1:d5:a7:72:7d:c0:33:ed:c6:f6:2c:a5:7e:2a: fd:a3:46:2d:14:30:34:8b:1c:94:e2:f7:85:65:75:e0:59:26: 53:b5:51:97:41:7b:9e:b7:c7:64:48:b5:7e:7b:d2:b6:c9:82: 77:b4:33:5c:8c:06:4f:03:c2:c5:cd:37:08:3b:29:9a:02:23: dd:93:90:ea:ec:a1:b9:a2:c7:7d:34:39:54:c8:24:48:3f:f2: ec:98:f6:a7:96:fc:c9:b5:55:ad:9b:e8:e5:46:18:79:19:13: d0:d5:f7:ab:a1:ab:dd:c7:3c:b8:69:b9:4b:6c:e7:b8:6e:f7: bc:4b:90:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGN0MxMTAvBgNVBAUTKEMwRTMxQjVGNDVDRkU1MkJBQzVDRURCOERDQzZBMUEz MjJGNDcwNUQwHhcNMjUwNTMxMDUxNDQ2WhcNMjUwNjA3MDUxNDQ2WjAYMRYwFAYD VQQDEw02ODNhOTA0Ny0zYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NCtmG3WSOZiTDesjFZTtmNO0A2I1PmfxPMWlrlMUaBJFmy4jOa/FM/oshCF dHLFFyU1inPAIRZtK6G7MJd6pbdv3+9DNbz9+iWVTM7W79FlBZfTGrL6CoF6iuPA 37duOCwQ1uZQJ2RWW/5C9mH4b+Jp1SZqWYAM+/VSUCURCzE21YedOVkXsC5vuy6J MYp+INn2kArw+8/v+2XrB97vCmUGCRI14YzYQQ57yqZLQjsRQ+QEpZcPfoRDjD2w SgnbxlDRusC783c0PhebpxvLlyUPJqTeO+LZE5URXMrfYL0LiB4TdKVvWersrJX7 lR1aqwy3o1BUBN1UeiocI231OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA2hq7G tLSE7w3LdzfnVJjrMNvhMB8GA1UdIwQYMBaAFMDjG19Fz+UrrFztuNzGoaMi9HBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy84NkY5MTYxQ0ZD NUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVTdXNYTzI0M01haG95TDBj RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3Qy84NkY5MTYxQ0ZDNUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVT dXNYTzI0M01haG95TDBjRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZyQvDSn4VUl5nO8sKmWOf3xNtWHRbk6n/L0CYZ2bJciEV3kzU/fOr zL9hEjfAA2q7wesTLfDDZOdYYJF75oZwpplOGAhzWt4lRzK4eg9Fr512jqgdfplg o+P0YbUJVrzXORhu24oXqcmZE5l+9uvRNdKW8ww3OrXd8MiCod+4hQQuodWncn3A M+3G9iylfir9o0YtFDA0ixyU4veFZXXgWSZTtVGXQXuet8dkSLV+e9K2yYJ3tDNc jAZPA8LFzTcIOymaAiPdk5Dq7KG5osd9NDlUyCRIP/LsmPanlvzJtVWtm+jlRhh5 GRPQ1feroavdxzy4ablLbOe4bve8S5Aw -----END CERTIFICATE-----Generated at Sat May 31 17:44:05 2025 by rpki-client