$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: oNXWVvR10QmHEReCO8GVkdvxd+1yRsK5Gv1ZgpZh3Eg= Subject key identifier: 80:65:8C:C7:B6:F4:D3:77:AB:8C:B4:1D:6E:06:B6:D9:73:41:F9:66 Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0D92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0D8A Signing time: Fri 30 May 2025 18:06:59 +0000 Manifest this update: Fri 30 May 2025 18:06:58 +0000 Manifest next update: Fri 06 Jun 2025 18:06:58 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: J2gfEidVWiFB42utNmb5J66sd9nUP1nkNsrYF0gpefM=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: Jn/++SfV1VdnkIlweTbZK1B7H5Xpb4S9KYcvJi/sW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3474 (0xd92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: May 30 18:06:58 2025 GMT Not After : Jun 6 18:06:58 2025 GMT Subject: CN=6839f3c2-cb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:ea:8c:be:fd:13:b8:bb:98:46:b0:ec:a1: 79:43:b4:4a:9e:56:b1:2e:e2:35:4d:3a:50:6e:64: 0b:e2:40:1d:25:70:fd:bd:2f:15:f8:51:c5:af:90: cc:3a:b4:e7:be:89:b2:c4:bf:a4:cc:42:6c:4f:5e: 2d:b5:27:e9:d8:37:f2:a4:77:b9:70:3a:e4:e5:76: 5b:b0:88:da:59:4e:2c:55:02:33:2c:0b:1b:cc:5a: f7:de:6c:d4:83:77:45:a7:cc:a3:2e:05:d5:79:6a: ea:3c:26:1e:40:d1:3c:bb:37:98:4f:56:e4:be:8a: f4:f8:41:b8:e4:13:cc:8d:06:c3:b2:34:91:e2:1a: e6:82:57:9d:fc:ee:28:e6:35:c9:0a:10:b0:f0:24: d3:d6:cf:ba:5d:f7:21:e0:6c:13:61:eb:4c:1e:03: 1d:57:35:57:25:41:8c:b9:ca:2c:5f:0b:b3:eb:60: 02:8a:9e:03:f3:15:4c:cc:c8:3c:16:6e:4a:86:b9: 54:b6:2e:3f:9e:f0:93:14:04:e2:72:68:a1:3f:5f: 30:4c:37:f1:7a:40:2a:b3:19:d7:80:75:07:15:71: 90:95:54:01:66:e2:1f:1b:28:d6:f8:f9:11:dd:88: 21:8b:17:7e:b2:d2:e3:3e:c0:62:87:c1:3a:43:de: 0a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:65:8C:C7:B6:F4:D3:77:AB:8C:B4:1D:6E:06:B6:D9:73:41:F9:66 X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2e:de:f7:59:7c:30:f8:26:c9:2e:1c:2e:75:55:80:83:39: dc:68:6e:d9:51:01:5d:1d:5e:23:2c:24:62:e1:1a:e0:d0:0f: 39:c8:60:aa:00:b8:52:69:92:33:e2:33:bb:c0:fc:10:eb:53: 09:a0:76:d6:d8:d5:05:6e:ce:c5:52:a4:f9:cc:80:93:dc:f1: f2:3f:84:3e:3e:03:a8:1c:f0:28:c6:8d:cb:aa:7d:a2:1f:aa: 64:75:93:a0:95:51:36:7d:c4:bc:78:97:66:34:fc:87:e9:eb: 0f:d1:9c:22:71:b4:ae:6a:b5:66:b5:5b:b4:b2:20:3f:6d:40: 3b:51:c9:de:7d:1f:84:7d:88:f7:39:38:c7:8a:78:fc:ca:08: 65:d6:8c:57:25:20:23:b9:c7:f5:28:ef:f4:3c:b3:7a:f0:8d: 19:d5:fe:1b:04:58:19:22:ee:16:c9:b2:00:93:c3:3e:96:99: 31:4c:6b:18:57:68:4c:9c:19:a2:ef:6a:1c:73:ad:69:2c:2c: 38:11:7c:e4:1c:a8:0b:78:10:6f:e4:2d:c0:8c:c9:f1:54:90: 97:df:5e:e8:1b:30:26:b3:4b:53:6e:71:6e:91:e9:f1:62:ce: 63:59:bf:51:70:13:be:f0:93:0a:f4:12:f7:89:9f:ee:aa:d1: 63:30:77:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjUwNTMwMTgwNjU4WhcNMjUwNjA2MTgwNjU4WjAYMRYwFAYD VQQDEw02ODM5ZjNjMi1jYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vDqjL79E7i7mEaw7KF5Q7RKnlaxLuI1TTpQbmQL4kAdJXD9vS8V+FHFr5DM OrTnvomyxL+kzEJsT14ttSfp2DfypHe5cDrk5XZbsIjaWU4sVQIzLAsbzFr33mzU g3dFp8yjLgXVeWrqPCYeQNE8uzeYT1bkvor0+EG45BPMjQbDsjSR4hrmgled/O4o 5jXJChCw8CTT1s+6Xfch4GwTYetMHgMdVzVXJUGMucosXwuz62ACip4D8xVMzMg8 Fm5KhrlUti4/nvCTFATicmihP18wTDfxekAqsxnXgHUHFXGQlVQBZuIfGyjW+PkR 3Yghixd+stLjPsBih8E6Q94KrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBljMe2 9NN3q4y0HW4GttlzQflmMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Lt73WXww+CbJLhwudVWAgzncaG7ZUQFdHV4jLCRi4Rrg0A85yGCq ALhSaZIz4jO7wPwQ61MJoHbW2NUFbs7FUqT5zICT3PHyP4Q+PgOoHPAoxo3Lqn2i H6pkdZOglVE2fcS8eJdmNPyH6esP0ZwicbSuarVmtVu0siA/bUA7UcnefR+EfYj3 OTjHinj8yghl1oxXJSAjucf1KO/0PLN68I0Z1f4bBFgZIu4WybIAk8M+lpkxTGsY V2hMnBmi72occ61pLCw4EXzkHKgLeBBv5C3AjMnxVJCX317oGzAms0tTbnFukenx Ys5jWb9RcBO+8JMK9BL3iZ/uqtFjMHc6 -----END CERTIFICATE-----Generated at Sat May 31 17:57:52 2025 by rpki-client