$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: +blPKmnLcA4C8CbUSb74BLvYS37bNYpUKUjkSvd3+ic= Subject key identifier: CC:3E:9E:32:F2:D2:00:EA:CA:29:D5:86:D8:5E:23:03:50:BA:59:34 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 2545 Signing time: Sat 14 Jun 2025 15:45:08 +0000 Manifest this update: Sat 14 Jun 2025 15:45:08 +0000 Manifest next update: Sat 21 Jun 2025 15:45:08 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: 8HQma9j7RI9aiY9M43nSnHV2zfzPj1c40pY1G/ZV1iU=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: ZeH6ECuQSQ7jbEvsw/ti8Ne5hW6qGOm2ObSN2ziSRtc=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: 1dZ/PYF2y/rA4g03VyVZaVZy6CLwb/t5eX6QNNHBKU4=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: /OIV93XTmaqNcQdoy+u+KBTNCx5sq1KiAVNHrTFDsPk=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Iw9+JOdav50YSnSQXp9Mgjc+tFnSJTCmgJVv03j+03E=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: a8WMRrKXqOWpbHlU3tbV4FzyKQszu4zB5F1ouGdfBCA=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: 3xgwAlFAD++SNOBnqBO1zaeR1ssuXDrrYrvWI6Sll60=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: ffEWhmrNXjBc0Nb4WuWVQZiVVzyHTO8bmJ3skIR6GwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9795 (0x2643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jun 14 15:45:08 2025 GMT Not After : Jun 21 15:45:08 2025 GMT Subject: CN=684d9904-c18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d9:2b:7d:17:93:8e:b8:33:eb:5b:6f:13:16: 43:87:29:ac:12:98:b2:45:45:ad:d4:9b:f9:e4:1b: a6:0e:24:95:f6:ad:bc:9f:1d:e8:53:f0:6a:e1:82: 88:89:c6:cc:f1:6e:ef:d1:56:2c:22:78:a0:5b:9c: c9:36:ef:35:55:fe:67:8b:81:f1:76:c0:03:f4:10: d2:10:44:89:62:71:2f:b6:2f:93:15:b5:3d:56:9c: c1:21:ae:3c:1a:4a:8f:c3:e3:63:7b:c0:27:44:12: 3a:33:01:5f:b0:d1:df:68:32:7a:b6:d8:ce:17:d0: 77:c5:42:9d:56:b2:ec:04:43:04:4f:eb:92:48:be: f5:12:a0:3b:db:33:3d:b5:c9:18:e6:62:97:02:ce: c8:1f:90:0e:f8:00:c5:c7:bd:2c:a1:8e:0a:fd:2d: db:51:de:cb:a7:90:f1:be:a3:f1:12:de:f8:fe:b9: ba:32:2a:82:9d:ab:55:91:3a:6f:a2:81:5b:24:fc: 57:8e:c3:c6:fd:b9:85:65:dd:0c:86:0b:21:ab:10: f6:1e:53:bb:8b:80:2d:13:69:11:bc:3a:7f:f4:14: 1f:86:64:48:d6:94:02:ea:ce:ea:55:4a:06:b0:f2: 10:0a:a5:77:98:d6:65:bc:5d:ad:3a:aa:45:4e:f5: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3E:9E:32:F2:D2:00:EA:CA:29:D5:86:D8:5E:23:03:50:BA:59:34 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:5a:fe:c2:52:ec:d6:5d:31:c2:42:b0:2e:52:20:8b:02:4e: a9:fb:24:14:44:0c:ba:66:12:55:b0:9c:96:40:46:08:0d:38: 2a:36:c6:2a:46:de:75:aa:72:25:7f:20:58:36:49:fa:26:bd: 13:65:63:28:01:08:4c:ee:7a:ba:3a:7e:a3:63:cf:1b:e5:81: 78:43:6d:25:42:fd:78:68:6e:28:a9:b1:f8:cc:e7:0e:b5:f4: a9:9a:6a:88:9a:3d:6e:5d:c0:f3:6d:de:9f:d6:9e:60:90:a0: 33:fd:95:a4:72:30:c1:75:0c:f0:d7:18:0f:03:12:7e:26:ff: ae:d2:68:b1:07:4f:02:07:bc:14:4b:dc:b7:cf:57:20:43:59: 25:e1:1b:70:b5:6d:8c:7d:8e:a2:63:47:85:9d:f6:83:89:0e: 7d:fb:c7:28:c6:f4:10:c9:af:6c:3d:f4:d7:09:4c:d7:9a:26: 03:66:fc:72:64:1c:77:4b:b5:96:a2:e5:f6:3d:d3:d0:2e:7b: 54:3f:3a:77:ad:59:26:2c:c6:ff:ef:7e:fd:5a:41:3b:c6:18: f5:5e:13:77:16:54:81:04:8f:eb:63:2c:49:02:83:ee:a8:5a: d0:71:eb:7c:a7:3a:a4:f0:cc:3d:9a:ce:f1:72:d5:b7:1a:fa: 94:c8:ed:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNjE0MTU0NTA4WhcNMjUwNjIxMTU0NTA4WjAYMRYwFAYD VQQDEw02ODRkOTkwNC1jMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NkrfReTjrgz61tvExZDhymsEpiyRUWt1Jv55BumDiSV9q28nx3oU/Bq4YKI icbM8W7v0VYsInigW5zJNu81Vf5ni4HxdsAD9BDSEESJYnEvti+TFbU9VpzBIa48 GkqPw+Nje8AnRBI6MwFfsNHfaDJ6ttjOF9B3xUKdVrLsBEMET+uSSL71EqA72zM9 tckY5mKXAs7IH5AO+ADFx70soY4K/S3bUd7Lp5DxvqPxEt74/rm6MiqCnatVkTpv ooFbJPxXjsPG/bmFZd0MhgshqxD2HlO7i4AtE2kRvDp/9BQfhmRI1pQC6s7qVUoG sPIQCqV3mNZlvF2tOqpFTvWT4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw+njLy 0gDqyinVhtheIwNQulk0MB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRWv7CUuzWXTHCQrAuUiCLAk6p+yQURAy6ZhJVsJyWQEYIDTgqNsYq Rt51qnIlfyBYNkn6Jr0TZWMoAQhM7nq6On6jY88b5YF4Q20lQv14aG4oqbH4zOcO tfSpmmqImj1uXcDzbd6f1p5gkKAz/ZWkcjDBdQzw1xgPAxJ+Jv+u0mixB08CB7wU S9y3z1cgQ1kl4RtwtW2MfY6iY0eFnfaDiQ59+8coxvQQya9sPfTXCUzXmiYDZvxy ZBx3S7WWouX2PdPQLntUPzp3rVkmLMb/7379WkE7xhj1XhN3FlSBBI/rYyxJAoPu qFrQcet8pzqk8Mw9ms7xctW3GvqUyO3/ -----END CERTIFICATE-----Generated at Sat Jun 14 19:41:13 2025 by rpki-client