$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json) Hash identifier: KpCGMvGzPGR4xRA3UaPIUt1Kpahs4OfEBZeONBfxdE0= Subject key identifier: D0:58:5E:12:D7:59:DA:FA:B8:F8:5C:8A:3E:7B:B0:3A:BC:B0:B4:80 Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft Manifest number: 0127 Signing time: Sat 31 May 2025 04:17:57 +0000 Manifest this update: Sat 31 May 2025 04:17:57 +0000 Manifest next update: Sat 07 Jun 2025 04:17:57 +0000 Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: GVFSBO5HghfyfYoh/twxFUMNlJ2OhPvWVQUEF1u5U0o=) 2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: l8sRE2YAPh1eQYlp9y5e6VCbUFJp+lvUI5lEd97/izs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Validity Not Before: May 31 04:17:57 2025 GMT Not After : Jun 7 04:17:57 2025 GMT Subject: CN=683a82f5-059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:ad:6e:75:58:0c:3b:41:79:97:ea:98:4d: f5:5e:b6:d5:09:dc:61:72:64:a9:c6:ee:02:86:ca: cf:85:8d:3f:e5:bc:7b:08:73:28:04:3f:28:2d:6a: bf:5d:31:44:87:51:46:63:ae:8a:9f:ac:58:d5:10: d8:12:a1:ad:fc:37:71:ad:b0:b0:b3:3d:d7:74:ef: 0a:e7:a8:06:3f:e9:ea:e7:a1:5d:cc:fa:f9:67:9f: e8:47:d6:93:c6:07:7d:8f:19:e6:b4:72:a0:60:ec: 62:45:f3:34:7a:62:58:99:36:a7:56:03:e3:f0:11: 46:17:ae:44:0a:43:76:d2:1f:1b:ba:3e:d8:9f:e5: e0:93:f6:bf:8c:65:80:18:6f:2f:bc:33:7f:d0:7e: 2f:9a:0a:89:b4:93:19:fc:b9:e7:69:87:9e:de:33: a4:f2:42:20:7e:b0:ae:71:2e:cc:aa:72:0b:74:06: 1c:91:c5:74:d0:33:dc:35:47:15:d2:bf:01:65:bc: 5b:8c:ef:d9:21:7c:2e:a1:34:2b:42:7d:bc:9a:47: 61:7e:f2:03:b8:48:da:fd:81:fd:4f:f8:2e:3e:c6: 0d:df:b1:a5:3a:d4:ad:55:48:37:ac:0c:9b:e8:42: b5:1d:b1:c6:ba:ab:44:dc:04:03:67:db:02:b9:d4: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:58:5E:12:D7:59:DA:FA:B8:F8:5C:8A:3E:7B:B0:3A:BC:B0:B4:80 X509v3 Authority Key Identifier: keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f4:2e:a7:2d:d5:a5:3c:8a:9e:0f:f0:78:6d:c4:45:dc:f9: e1:4a:17:b3:0d:f5:1b:27:08:3c:13:0c:87:92:74:d9:b4:b3: 94:4d:62:55:e3:ab:50:1e:7d:df:35:73:06:60:6d:5e:b6:da: e0:2c:3f:2a:25:62:8c:50:68:37:89:d6:c9:53:42:01:65:ac: 92:0d:a0:f9:15:91:72:0f:3a:31:3b:bd:b8:8e:cf:e5:1f:19: fd:6a:d2:1d:ce:5e:1d:8f:e1:b5:27:1e:a5:5c:af:9b:ef:89: f8:3d:2c:be:d5:ff:c3:df:77:37:3d:e0:78:7d:61:74:43:12: 43:05:0b:1c:dd:62:71:6b:13:86:b1:8e:6c:da:92:42:75:ee: 37:7c:64:04:54:59:9b:a8:c2:76:3e:dd:34:8f:96:cc:51:fc: d0:57:74:22:27:ff:f1:3a:e7:19:18:fd:c0:9a:4a:c1:a0:90: 7e:8d:79:63:15:bd:cd:13:fe:10:0d:31:55:3b:8d:3d:15:4b: 10:4e:e9:2a:e3:7a:1a:40:b8:91:76:36:e7:49:db:4a:69:ae: 93:87:2a:71:f2:ec:14:53:1c:9a:23:3b:19:ef:a3:b3:64:29: ce:70:60:1b:5b:15:32:26:bc:23:c7:06:69:1f:02:55:36:41: 29:83:4c:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3 NjFGREI1RDgwHhcNMjUwNTMxMDQxNzU3WhcNMjUwNjA3MDQxNzU3WjAYMRYwFAYD VQQDEw02ODNhODJmNS0wNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaStbnVYDDtBeZfqmE31XrbVCdxhcmSpxu4ChsrPhY0/5bx7CHMoBD8oLWq/ XTFEh1FGY66Kn6xY1RDYEqGt/DdxrbCwsz3XdO8K56gGP+nq56FdzPr5Z5/oR9aT xgd9jxnmtHKgYOxiRfM0emJYmTanVgPj8BFGF65ECkN20h8buj7Yn+Xgk/a/jGWA GG8vvDN/0H4vmgqJtJMZ/LnnaYee3jOk8kIgfrCucS7MqnILdAYckcV00DPcNUcV 0r8BZbxbjO/ZIXwuoTQrQn28mkdhfvIDuEja/YH9T/guPsYN37GlOtStVUg3rAyb 6EK1HbHGuqtE3AQDZ9sCudSsnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBYXhLX Wdr6uPhcij57sDq8sLSAMB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5 RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx RnU0UUdWWkxyWjkySDl0ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI9C6nLdWlPIqeD/B4bcRF3PnhShezDfUbJwg8EwyHknTZtLOUTWJV 46tQHn3fNXMGYG1ettrgLD8qJWKMUGg3idbJU0IBZaySDaD5FZFyDzoxO724js/l Hxn9atIdzl4dj+G1Jx6lXK+b74n4PSy+1f/D33c3PeB4fWF0QxJDBQsc3WJxaxOG sY5s2pJCde43fGQEVFmbqMJ2Pt00j5bMUfzQV3QiJ//xOucZGP3AmkrBoJB+jXlj Fb3NE/4QDTFVO409FUsQTukq43oaQLiRdjbnSdtKaa6Thypx8uwUUxyaIzsZ76Oz ZCnOcGAbWxUyJrwjxwZpHwJVNkEpg0zS -----END CERTIFICATE-----Generated at Sat May 31 17:16:10 2025 by rpki-client