$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json) Hash identifier: f0kGvBjcV0XvtyGS2XvJpAGdHE5YRjF2K033VHYqdsE= Subject key identifier: 61:10:E8:7D:C3:29:81:3C:4F:8A:D7:37:6A:35:F5:A2:E9:99:DC:25 Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft Manifest number: 01D0 Signing time: Sat 31 May 2025 02:42:57 +0000 Manifest this update: Sat 31 May 2025 02:42:57 +0000 Manifest next update: Sat 07 Jun 2025 02:42:57 +0000 Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: aZUg/1aZL3KZkdmbjv+j+VOHVQVnNChk1cv3N3qDHy4=) 2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: i5f17u0APuwWVrNQJwRvrSbhYIzk4h0SdlZzDluJdHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Validity Not Before: May 31 02:42:57 2025 GMT Not After : Jun 7 02:42:57 2025 GMT Subject: CN=683a6cb1-021c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:93:85:2f:ca:32:0f:3d:88:32:7e:fc:20: f9:9e:98:a2:d7:68:82:3c:93:06:e7:7f:f2:3e:dc: f9:ad:8b:78:b0:65:e8:55:84:fc:df:c5:41:58:ac: 7e:c7:90:1e:12:1c:7a:35:93:0e:71:2f:42:18:74: 20:2f:14:48:ec:f5:a6:46:56:dc:8d:29:34:53:7a: 19:7b:3f:0e:27:d8:c6:16:69:67:5f:3a:87:80:ec: 1c:9d:71:dd:f2:5d:58:c3:76:03:a1:ee:72:be:e5: e5:07:36:00:bd:fb:34:28:29:f2:bd:24:c9:7e:84: 6c:45:f6:05:ed:69:c7:79:b0:a2:a1:fa:ca:c3:96: 97:6b:29:1f:c7:58:0d:22:2a:e5:fe:f3:cd:33:ef: 0c:ae:c0:29:ed:fc:94:8f:89:7e:22:c6:0c:22:95: b5:87:2d:83:6f:38:9f:47:ac:09:47:53:a6:b3:c0: b7:41:d3:13:45:99:59:6f:25:dd:85:3c:7a:d5:47: 97:18:45:05:11:08:54:e1:f0:dc:ba:ea:b8:72:67: 2f:d8:a6:7c:a2:07:26:68:69:be:4d:62:98:61:96: ed:52:e9:8d:14:1d:ea:81:d4:bc:63:32:ec:8f:da: 75:6e:ae:e8:63:64:ac:29:af:e9:2e:5d:62:95:28: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:10:E8:7D:C3:29:81:3C:4F:8A:D7:37:6A:35:F5:A2:E9:99:DC:25 X509v3 Authority Key Identifier: keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2d:c3:1c:2c:4d:0e:58:a6:01:68:3f:49:7c:87:ac:97:c1: 93:4b:1b:d3:8b:20:95:ae:75:7d:69:f3:12:52:cd:9e:b7:44: e7:6b:2c:6c:15:bb:d8:c9:67:91:95:9d:0e:72:86:89:ee:25: e5:0c:b1:c0:b6:b8:f8:bc:79:25:ad:54:fc:bf:00:87:2e:7a: 4c:fa:5b:8e:0f:2a:94:dc:ae:c2:ad:64:2d:29:88:4b:a8:14: cd:ff:30:3b:df:bb:3a:67:92:00:2e:45:41:58:32:f8:4e:56: a9:ff:a8:6d:b9:73:97:ee:3d:88:c6:ee:64:21:85:1d:24:08: b1:f2:f5:a1:0e:4e:47:7b:c7:20:f0:fc:db:7a:2f:6e:59:e0: 0a:2f:d6:56:6f:5b:ed:07:18:02:5a:52:74:3a:1f:09:b3:b2: e7:16:02:14:f0:cb:87:1b:1f:a0:b5:9c:a3:61:c9:ed:4d:00: af:ed:7a:18:1e:f1:f0:af:ff:f3:66:3a:ea:33:03:e1:5b:46: c3:4a:ad:76:8d:d2:78:57:ce:ef:92:71:97:72:8c:08:b9:87: 72:39:68:5c:96:e4:41:ff:78:70:7e:8f:89:77:87:7a:31:5f: 5a:63:fc:44:1d:d3:a3:27:18:a3:cf:90:14:66:62:35:07:0b: 28:e2:e8:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MDMxMTAvBgNVBAUTKDQ1NkFGNUU1NjY3REUyNDhBOUNGMENFQjkwQzZEMUIz RDNFRDZGQTgwHhcNMjUwNTMxMDI0MjU3WhcNMjUwNjA3MDI0MjU3WjAYMRYwFAYD VQQDEw02ODNhNmNiMS0wMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2uThS/KMg89iDJ+/CD5npii12iCPJMG53/yPtz5rYt4sGXoVYT838VBWKx+ x5AeEhx6NZMOcS9CGHQgLxRI7PWmRlbcjSk0U3oZez8OJ9jGFmlnXzqHgOwcnXHd 8l1Yw3YDoe5yvuXlBzYAvfs0KCnyvSTJfoRsRfYF7WnHebCiofrKw5aXaykfx1gN Iirl/vPNM+8MrsAp7fyUj4l+IsYMIpW1hy2DbzifR6wJR1Oms8C3QdMTRZlZbyXd hTx61UeXGEUFEQhU4fDcuuq4cmcv2KZ8ogcmaGm+TWKYYZbtUumNFB3qgdS8YzLs j9p1bq7oY2SsKa/pLl1ilSin2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEQ6H3D KYE8T4rXN2o19aLpmdwlMB8GA1UdIwQYMBaAFEVq9eVmfeJIqc8M65DG0bPT7W+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkwMy9EODk4MjY1QThD MUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRraXB6d3pya01iUnM5UHRi NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXcjE1V1o5NGtpcHp3enJrTWJSczlQdGI2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkwMy9EODk4MjY1QThDMUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRr aXB6d3pya01iUnM5UHRiNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/LcMcLE0OWKYBaD9JfIesl8GTSxvTiyCVrnV9afMSUs2et0Tnayxs FbvYyWeRlZ0OcoaJ7iXlDLHAtrj4vHklrVT8vwCHLnpM+luODyqU3K7CrWQtKYhL qBTN/zA737s6Z5IALkVBWDL4Tlap/6htuXOX7j2Ixu5kIYUdJAix8vWhDk5He8cg 8Pzbei9uWeAKL9ZWb1vtBxgCWlJ0Oh8Js7LnFgIU8MuHGx+gtZyjYcntTQCv7XoY HvHwr//zZjrqMwPhW0bDSq12jdJ4V87vknGXcowIuYdyOWhcluRB/3hwfo+Jd4d6 MV9aY/xEHdOjJxijz5AUZmI1Bwso4uiX -----END CERTIFICATE-----Generated at Sat May 31 16:33:55 2025 by rpki-client