$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft File: w7gqL3RR5pVsP6OTQNxzItDnjKY.mft (raw, json) Hash identifier: athwGJl06zZG/hh8vIkx/KznGocaK6p5VFF2A7FRZQ4= Subject key identifier: 03:9B:CB:76:F2:88:D5:C4:62:C8:6E:82:AA:3F:A5:D3:63:C6:75:9A Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft Manifest number: 0286 Signing time: Thu 19 Jun 2025 01:31:05 +0000 Manifest this update: Thu 19 Jun 2025 01:31:04 +0000 Manifest next update: Thu 26 Jun 2025 01:31:04 +0000 Files and hashes: 1: w7gqL3RR5pVsP6OTQNxzItDnjKY.crl (hash: 36UJhfX1DA0y9uVDT9t6F0LxXqab1XcZJE3KfBoiu8k=) 2: AA9183060FDC11ED9718606AC4F9AE02.roa (hash: Pomp25euWUzW6bLzCINDqzM6FpJj6K+BUv6uncbVybw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A, serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Validity Not Before: Jun 19 01:31:04 2025 GMT Not After : Jun 26 01:31:04 2025 GMT Subject: CN=68536859-8a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:aa:b5:70:35:e3:41:60:d5:83:80:37:5d:ac: 1b:23:da:e9:17:f5:49:33:d6:0f:fe:dd:e3:f6:59: 68:6d:a0:7b:3e:b6:e7:65:af:99:cb:20:af:d8:4f: 8e:c2:a7:ad:fe:01:cf:41:ed:c1:4e:45:17:ef:ee: 43:47:5d:04:dc:aa:1f:88:af:b1:b0:f6:a0:f6:6d: f4:ee:30:48:b8:27:12:ad:53:46:5f:3a:27:a5:05: f1:9d:04:80:59:a1:e9:56:f1:0e:46:10:db:bc:e4: 26:aa:5c:e7:0f:86:40:dd:bd:58:59:0b:5c:99:ac: 8e:83:7c:05:6c:c4:04:70:18:25:63:e0:a7:5d:4e: 1a:f8:74:95:44:ce:89:ec:c1:13:89:c6:24:9b:20: 87:c3:8d:e3:ec:28:25:f8:fb:c1:f8:9b:90:38:e5: f1:53:7a:41:49:57:2b:47:37:c7:db:be:67:4b:ca: 7e:89:81:ab:b2:1c:bc:a8:e1:af:52:39:a8:8f:96: f2:bb:8f:e1:e0:ae:02:2d:2c:89:7e:16:38:45:53: 9a:02:cc:94:5c:ce:bf:fa:f3:7f:88:5c:86:05:be: f0:c1:76:48:ec:15:7b:f7:2e:49:cb:e3:84:00:e9: 18:eb:92:e1:5c:66:9d:e7:a0:d7:11:cb:96:ef:dd: 4e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9B:CB:76:F2:88:D5:C4:62:C8:6E:82:AA:3F:A5:D3:63:C6:75:9A X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:7d:47:5d:b2:53:e3:77:fa:ff:e1:62:ea:8f:8d:9a:d2:43: b0:eb:ea:0f:a4:d2:40:03:57:e3:fa:0b:0a:b4:57:2b:2e:c3: f4:e9:4d:6c:e3:fc:2a:95:f1:71:35:5c:df:cd:5a:ff:00:18: 2d:3b:a0:93:d8:17:76:79:9b:f4:87:88:03:fa:12:f8:c1:6e: dc:70:e6:7d:17:0e:8c:ad:ab:b3:e9:52:0a:0f:da:9e:72:cd: f0:1b:aa:4d:0e:98:76:8a:26:66:ae:b7:32:14:6b:3b:ae:51: 87:c0:b6:14:65:e8:d9:a3:c3:17:9c:98:e9:b7:30:e8:fb:e0: f0:1a:d8:6a:a0:52:f0:eb:f3:4c:f7:6c:4c:99:84:98:6d:95: 78:5f:64:1b:55:c3:53:ce:b4:41:75:31:5d:25:38:62:6e:4c: 1f:d7:71:a6:44:3c:8d:f9:eb:ad:0b:74:28:33:70:ca:62:d3: 88:8a:da:b4:dc:c0:ed:83:60:5e:a5:62:41:89:34:b6:d0:bd: 31:0b:9f:02:9e:c5:53:9f:a7:7a:8f:66:86:4f:a9:de:d4:7f: 4d:18:0a:49:dd:02:0c:24:ca:5e:6f:b6:cd:35:f6:2a:5a:30: 76:32:b4:fe:63:2f:0b:d0:89:68:10:1e:83:b8:2d:53:ac:39: df:5f:64:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjUwNjE5MDEzMTA0WhcNMjUwNjI2MDEzMTA0WjAYMRYwFAYD VQQDEw02ODUzNjg1OS04YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Kq1cDXjQWDVg4A3XawbI9rpF/VJM9YP/t3j9llobaB7PrbnZa+ZyyCv2E+O wqet/gHPQe3BTkUX7+5DR10E3KofiK+xsPag9m307jBIuCcSrVNGXzonpQXxnQSA WaHpVvEORhDbvOQmqlznD4ZA3b1YWQtcmayOg3wFbMQEcBglY+CnXU4a+HSVRM6J 7METicYkmyCHw43j7Cgl+PvB+JuQOOXxU3pBSVcrRzfH275nS8p+iYGrshy8qOGv Ujmoj5byu4/h4K4CLSyJfhY4RVOaAsyUXM6/+vN/iFyGBb7wwXZI7BV79y5Jy+OE AOkY65LhXGad56DXEcuW791O0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOby3by iNXEYshugqo/pdNjxnWaMB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVw VnNQNk9UUU54ekl0RG5qS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpfUddslPjd/r/4WLqj42a0kOw6+oPpNJAA1fj+gsKtFcrLsP06U1s 4/wqlfFxNVzfzVr/ABgtO6CT2Bd2eZv0h4gD+hL4wW7ccOZ9Fw6Mrauz6VIKD9qe cs3wG6pNDph2iiZmrrcyFGs7rlGHwLYUZejZo8MXnJjptzDo++DwGthqoFLw6/NM 92xMmYSYbZV4X2QbVcNTzrRBdTFdJThibkwf13GmRDyN+eutC3QoM3DKYtOIitq0 3MDtg2BepWJBiTS20L0xC58CnsVTn6d6j2aGT6ne1H9NGApJ3QIMJMpeb7bNNfYq WjB2MrT+Yy8L0IloEB6DuC1TrDnfX2T9 -----END CERTIFICATE-----Generated at Fri Jun 20 11:34:43 2025 by rpki-client