$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: LLLmDvqphh9LAAMOhkArQrNlDRa9sNmedwkgn5I7YMI= Subject key identifier: D6:7C:66:D3:CC:A2:24:43:21:BA:2D:59:69:D7:30:69:FD:15:6D:D0 Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: F6 Signing time: Sun 01 Jun 2025 04:36:38 +0000 Manifest this update: Sun 01 Jun 2025 04:36:38 +0000 Manifest next update: Sun 08 Jun 2025 04:36:38 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: XYCo4xfNCgS6xN25rSvky0g9oKy+BcYHD0k2GRcmjfY=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: VHJTWsm4wzJziIer/htU6hv3gqL/KMd1K2nOD3+RJsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: Jun 1 04:36:38 2025 GMT Not After : Jun 8 04:36:38 2025 GMT Subject: CN=683bd8d6-308b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:fa:c7:83:12:78:01:ca:28:f1:a1:c9:c2: fe:c4:75:53:23:a5:f7:fb:4d:ff:23:ea:e9:c5:b3: 49:0d:95:ef:a8:4c:2f:93:e3:4a:db:ca:77:ac:62: dc:21:9b:30:65:1a:3e:fe:de:de:47:35:27:c4:f8: 89:5f:ad:5d:c6:06:e5:99:f7:6e:45:39:11:af:79: 2a:cf:71:57:80:06:50:06:eb:6b:c8:7f:5f:b6:62: e0:27:6f:36:79:32:9f:85:97:a5:a2:40:9f:25:f1: a7:36:c5:f7:f3:77:b9:81:47:f2:f2:f0:4f:03:ce: f3:6c:af:33:66:2a:1a:09:53:65:dd:19:63:6e:ce: f3:59:77:70:8a:4f:4e:fb:bf:6b:3c:8d:38:d7:6d: ad:cb:66:d6:6b:6c:22:79:d2:5a:ea:c8:72:4b:60: d2:1d:a1:e7:92:0b:1d:fe:07:f0:04:1b:76:79:8b: d6:bf:cb:da:8d:05:c9:9a:b5:45:04:69:26:2f:dc: 7a:d8:18:c2:67:e9:f5:35:2c:80:23:fb:e0:1e:41: 15:f7:af:ba:a0:d0:ae:b6:a5:f2:1c:14:43:2f:c3: dc:b4:f0:04:5b:48:c9:fd:b9:83:92:00:36:5e:87: 6e:8a:e1:07:04:c2:7a:67:38:c3:ac:0f:68:ea:62: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7C:66:D3:CC:A2:24:43:21:BA:2D:59:69:D7:30:69:FD:15:6D:D0 X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:78:06:1a:e7:3d:18:d1:c5:0a:cd:89:d6:d5:2b:9f:41:a3: a6:d1:19:2f:be:ef:d3:1a:09:06:56:fd:5b:1e:ed:0f:0e:70: 19:86:a3:75:63:e8:0f:8b:bc:20:a3:d3:3d:53:37:81:d0:9c: 2a:6c:d5:54:8c:0b:cc:cf:e4:27:9c:67:b2:01:3d:34:42:19: 01:6e:62:51:87:a7:21:a0:b5:62:fd:ff:cb:d0:ed:d8:6c:4e: 33:16:09:61:bd:7d:62:70:d7:e9:b9:cc:8e:31:7c:9c:b7:5c: a3:7d:df:53:b3:c5:73:3f:3a:2a:89:27:0e:02:70:02:2a:25: 60:52:40:1c:5e:22:4d:1f:08:84:77:11:48:d3:35:10:d4:f5: 42:4b:9a:27:10:02:8d:99:bc:3a:0c:05:a7:73:de:74:7c:5a: 24:2d:af:9f:58:71:e3:2a:d4:e1:b4:ee:fc:53:5b:e9:6d:b8: 96:8c:dd:3d:40:f7:d5:c9:f1:74:03:c2:aa:b5:30:65:0e:8a: c2:d4:a6:37:27:72:1b:b2:9d:aa:9f:f8:eb:6d:d0:80:6e:ef: e0:8d:ee:3d:b0:72:56:2d:66:83:18:55:47:c7:75:27:b6:47: e3:3e:3e:4f:e7:29:5c:f1:13:99:68:6d:55:d5:8d:ea:1d:fc: 82:b4:39:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjUwNjAxMDQzNjM4WhcNMjUwNjA4MDQzNjM4WjAYMRYwFAYD VQQDEw02ODNiZDhkNi0zMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySX6x4MSeAHKKPGhycL+xHVTI6X3+03/I+rpxbNJDZXvqEwvk+NK28p3rGLc IZswZRo+/t7eRzUnxPiJX61dxgblmfduRTkRr3kqz3FXgAZQButryH9ftmLgJ282 eTKfhZelokCfJfGnNsX383e5gUfy8vBPA87zbK8zZioaCVNl3Rljbs7zWXdwik9O +79rPI04122ty2bWa2wiedJa6shyS2DSHaHnkgsd/gfwBBt2eYvWv8vajQXJmrVF BGkmL9x62BjCZ+n1NSyAI/vgHkEV96+6oNCutqXyHBRDL8PctPAEW0jJ/bmDkgA2 XoduiuEHBMJ6ZzjDrA9o6mKxtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ8ZtPM oiRDIbotWWnXMGn9FW3QMB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCeAYa5z0Y0cUKzYnW1SufQaOm0Rkvvu/TGgkGVv1bHu0PDnAZhqN1 Y+gPi7wgo9M9UzeB0JwqbNVUjAvMz+QnnGeyAT00QhkBbmJRh6choLVi/f/L0O3Y bE4zFglhvX1icNfpucyOMXyct1yjfd9Ts8VzPzoqiScOAnACKiVgUkAcXiJNHwiE dxFI0zUQ1PVCS5onEAKNmbw6DAWnc950fFokLa+fWHHjKtThtO78U1vpbbiWjN09 QPfVyfF0A8KqtTBlDorC1KY3J3Ibsp2qn/jrbdCAbu/gje49sHJWLWaDGFVHx3Un tkfjPj5P5ylc8ROZaG1V1Y3qHfyCtDlP -----END CERTIFICATE-----Generated at Mon Jun 2 20:15:17 2025 by rpki-client