$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json) Hash identifier: ggrKUIKqK5pg4imdeBYqTojvE4N11ckMQQMrRoZaFa0= Subject key identifier: 50:35:99:AD:61:C6:6D:7E:62:F0:55:24:51:EB:87:A3:D5:F0:D1:D2 Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft Manifest number: 0168 Signing time: Sat 31 May 2025 03:35:11 +0000 Manifest this update: Sat 31 May 2025 03:35:10 +0000 Manifest next update: Sat 07 Jun 2025 03:35:10 +0000 Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: dcEMrU9nbOHhBxtnEomYcjIeLupHfmC/63DCwgkT4yc=) 2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: Y/z+QgJxgPtT6JyUNYql0fBvgzOIBrxa3aegmRUI5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BA1, serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Validity Not Before: May 31 03:35:10 2025 GMT Not After : Jun 7 03:35:10 2025 GMT Subject: CN=683a78ee-01a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:08:ee:c0:dc:d6:f3:26:79:09:6f:48:99: 6e:fb:39:5c:67:0c:c6:f0:2f:f3:a5:0a:2d:7d:dc: 08:df:e2:ad:5e:6c:65:fe:d8:dd:e5:a3:84:01:e5: 9d:7b:fd:fe:5a:02:f6:07:8c:3f:a8:ee:31:be:d2: 04:32:fc:b7:80:25:de:55:cf:98:62:73:af:d2:c1: 15:35:c7:2c:07:c7:83:97:28:01:39:b2:f9:7b:ce: 94:77:42:e7:43:54:c8:f5:45:25:7f:9e:97:b2:38: 83:ad:8e:b3:4b:c6:65:21:f7:84:2f:24:ff:70:e4: 05:12:38:d3:75:e7:19:06:bf:cd:fa:0c:d4:c6:a2: 5f:28:b8:60:13:7c:13:a1:ad:65:2f:98:4d:36:73: 60:ab:58:a2:0e:3e:76:db:21:6f:7d:42:fc:b8:74: f0:de:96:83:c6:3a:54:5e:9e:2b:a3:6a:21:02:70: c1:88:0c:50:e4:6e:04:c0:db:5d:30:3b:ff:95:7a: 03:c5:3a:c2:97:63:d8:44:bb:44:4c:95:93:79:5f: 0d:91:5f:e2:35:86:c2:6b:b6:14:ad:31:19:68:93: 85:c1:01:ad:2b:ad:eb:f3:e9:71:97:db:76:a1:1e: 79:90:56:1c:8f:74:05:cf:90:86:c4:98:94:5c:1b: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:35:99:AD:61:C6:6D:7E:62:F0:55:24:51:EB:87:A3:D5:F0:D1:D2 X509v3 Authority Key Identifier: keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:98:6e:84:6b:d4:9f:3f:af:11:d6:d4:c8:77:e9:1b:d6:82: 58:97:0a:be:2f:2c:5a:35:2a:4c:9f:b1:2a:33:81:6e:23:d5: 6e:fa:c2:94:28:76:27:e8:7a:69:18:31:7c:bf:6f:92:71:03: 65:2b:c2:ea:c7:32:46:4e:13:bc:a2:a5:5e:09:f2:af:e1:59: 35:0f:2a:10:38:63:a4:db:68:39:31:4b:49:b6:81:93:35:74: aa:31:34:aa:5f:a5:4f:bb:c4:7f:50:ba:f1:ea:b9:22:00:a4: 14:55:3e:9f:60:ec:63:16:7f:04:f5:3a:47:4b:47:0f:fb:74: 6f:5b:06:41:2a:a5:54:f9:69:e3:88:5f:1e:80:71:dc:a0:16: 6e:7d:78:f0:e6:29:49:fb:81:53:15:c2:e5:70:f2:19:4f:c0: 24:58:76:58:ae:b2:38:5f:7c:63:77:7e:70:e4:96:82:22:23: e1:bf:f4:1a:d6:fc:03:82:05:a9:c5:41:0a:6d:a4:1a:d6:d7: 67:00:a7:4b:5b:20:bf:69:a8:fa:6f:72:73:27:b1:8e:af:6c: 04:36:05:4d:e7:69:44:11:87:41:33:28:7a:33:a7:8a:dd:76: a7:56:fe:0f:3b:37:87:c5:55:1a:ec:7c:cc:1d:11:11:56:48: dc:08:b9:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQTExMTAvBgNVBAUTKEMxQ0IwOEFEM0VCODY2RDNDRDY0N0MxMzVEMEY1MkZB RUQyNTQ2QzQwHhcNMjUwNTMxMDMzNTEwWhcNMjUwNjA3MDMzNTEwWjAYMRYwFAYD VQQDEw02ODNhNzhlZS0wMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHwI7sDc1vMmeQlvSJlu+zlcZwzG8C/zpQotfdwI3+KtXmxl/tjd5aOEAeWd e/3+WgL2B4w/qO4xvtIEMvy3gCXeVc+YYnOv0sEVNccsB8eDlygBObL5e86Ud0Ln Q1TI9UUlf56XsjiDrY6zS8ZlIfeELyT/cOQFEjjTdecZBr/N+gzUxqJfKLhgE3wT oa1lL5hNNnNgq1iiDj522yFvfUL8uHTw3paDxjpUXp4ro2ohAnDBiAxQ5G4EwNtd MDv/lXoDxTrCl2PYRLtETJWTeV8NkV/iNYbCa7YUrTEZaJOFwQGtK63r8+lxl9t2 oR55kFYcj3QFz5CGxJiUXBszNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA1ma1h xm1+YvBVJFHrh6PV8NHSMB8GA1UdIwQYMBaAFMHLCK0+uGbTzWR8E10PUvrtJUbE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBMS84Q0NFM0VEQTE3 NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0UE5aSHdUWFE5Uy11MGxS c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djc0lyVDY0WnRQTlpId1RYUTlTLXUwbFJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBMS84Q0NFM0VEQTE3NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0 UE5aSHdUWFE5Uy11MGxSc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAimG6Ea9SfP68R1tTId+kb1oJYlwq+LyxaNSpMn7EqM4FuI9Vu+sKU KHYn6HppGDF8v2+ScQNlK8LqxzJGThO8oqVeCfKv4Vk1DyoQOGOk22g5MUtJtoGT NXSqMTSqX6VPu8R/ULrx6rkiAKQUVT6fYOxjFn8E9TpHS0cP+3RvWwZBKqVU+Wnj iF8egHHcoBZufXjw5ilJ+4FTFcLlcPIZT8AkWHZYrrI4X3xjd35w5JaCIiPhv/Qa 1vwDggWpxUEKbaQa1tdnAKdLWyC/aaj6b3JzJ7GOr2wENgVN52lEEYdBMyh6M6eK 3XanVv4POzeHxVUa7HzMHRERVkjcCLlI -----END CERTIFICATE-----Generated at Sat May 31 16:26:57 2025 by rpki-client