$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json) Hash identifier: TaS85bTlmdLfqExJrM7gmcY9X2U0/B0d5UwN/A7wVp0= Subject key identifier: 42:16:67:9E:4B:C8:72:AE:CD:4E:D1:04:64:27:28:82:B5:D8:1E:96 Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft Manifest number: 0117 Signing time: Thu 01 May 2025 03:47:20 +0000 Manifest this update: Thu 01 May 2025 03:47:19 +0000 Manifest next update: Thu 08 May 2025 03:47:19 +0000 Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: Z0iWW3bo1DyJbarOswRvvqzAamaToioi8nog1RXh2Aw=) 2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: 2gzrMjXP4Am0pQ80O9+rI75KjzU6RpDqcXF/j3n7Tn0=) 3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: +PmKxO27F3AHIJ3oHg1od1w1E6envfjFt6OCrfWbtQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 03:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Validity Not Before: May 1 03:47:19 2025 GMT Not After : May 8 03:47:19 2025 GMT Subject: CN=6812eec7-00e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:30:29:b2:83:50:30:3b:7a:4b:40:61:e9: e1:0e:fb:e8:b8:70:b1:d6:23:5b:03:c4:56:43:63: d8:fe:f0:e4:eb:80:aa:c2:a2:ec:e5:b4:5a:6d:7a: 03:b0:dd:70:03:c2:24:68:89:19:f0:01:9a:a8:af: f3:49:34:ab:17:8d:2a:7c:1e:19:1a:ef:82:e9:2c: 86:5b:e9:dc:79:09:a0:5f:48:16:a2:0c:fe:67:9f: c8:04:80:1f:df:e9:8d:ff:3d:bf:23:d3:b7:4a:87: dc:4a:83:d0:aa:1a:5d:dd:54:12:3c:79:53:d2:f0: b7:d7:2b:fc:6a:10:f7:79:75:5e:8f:28:de:8e:1d: fe:21:15:d3:b6:f8:b0:ce:95:d2:1c:55:04:7f:5d: 1a:f7:52:5a:7a:d2:bc:7b:96:55:4f:59:a7:bd:74: 66:dc:df:98:4e:c2:da:9a:9a:07:b3:8e:60:3d:bb: 60:36:cb:ba:da:73:ad:6d:e2:65:45:68:57:a7:cd: f6:1f:65:a4:14:25:3a:b6:31:e7:00:38:a3:04:09: 5b:9a:01:91:fd:89:0d:6d:1b:55:c5:0b:c5:0b:1f: 34:48:bd:57:c7:ee:6d:c6:c9:17:d2:82:44:c3:ab: 7a:bb:38:11:1a:e2:06:89:d8:c3:ce:fc:f6:01:5e: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:16:67:9E:4B:C8:72:AE:CD:4E:D1:04:64:27:28:82:B5:D8:1E:96 X509v3 Authority Key Identifier: keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:53:85:b7:36:41:ee:77:d1:79:38:b5:c3:ac:a9:2b:f3:69: c2:f2:35:1f:25:ee:10:ab:32:62:36:01:17:0c:5c:a8:72:1e: ca:f5:d9:65:90:bf:44:f7:01:56:76:b4:3d:3c:d5:99:a2:26: a4:2e:6a:bd:f3:f3:2e:87:4b:e1:3f:b6:e1:de:11:16:24:87: a8:3b:95:c8:f8:bc:93:27:d4:5c:8d:23:8c:2b:ac:1d:0e:e2: 31:fd:64:55:25:73:73:d1:bf:a9:16:dc:29:da:64:5e:50:1f: c7:40:3d:9e:8c:91:b9:f8:ed:6f:83:66:39:50:22:b5:fd:ac: 9d:0e:ca:0a:b0:7e:6e:f2:8a:34:ef:4a:8b:ba:39:97:9f:79: ba:7a:44:e4:29:d5:cc:8c:58:27:ba:ed:2b:43:29:28:29:4b: 44:08:48:48:fa:18:f6:1f:a1:56:e8:13:1f:9e:01:84:f4:c6: 8f:99:aa:59:40:81:eb:68:44:90:65:b6:35:93:2e:07:48:f7: 4b:3a:d4:67:55:4b:03:13:9f:5d:b9:7d:11:6a:99:14:d1:94: 2e:42:b8:f0:54:32:67:29:d7:94:97:5c:ef:10:9d:03:c4:1b: 59:73:fd:73:4f:be:b6:c9:d3:43:6d:ae:59:67:87:7e:f4:fe: 40:80:4a:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwRjYxMTAvBgNVBAUTKEMwQUVGNzA3N0Y1MjYyMjU2NzE3OUFDRTU2QUQ1RUU4 Q0Q2NDYwNEUwHhcNMjUwNTAxMDM0NzE5WhcNMjUwNTA4MDM0NzE5WjAYMRYwFAYD VQQDEw02ODEyZWVjNy0wMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnywwKbKDUDA7ektAYenhDvvouHCx1iNbA8RWQ2PY/vDk64CqwqLs5bRabXoD sN1wA8IkaIkZ8AGaqK/zSTSrF40qfB4ZGu+C6SyGW+nceQmgX0gWogz+Z5/IBIAf 3+mN/z2/I9O3SofcSoPQqhpd3VQSPHlT0vC31yv8ahD3eXVejyjejh3+IRXTtviw zpXSHFUEf10a91JaetK8e5ZVT1mnvXRm3N+YTsLampoHs45gPbtgNsu62nOtbeJl RWhXp832H2WkFCU6tjHnADijBAlbmgGR/YkNbRtVxQvFCx80SL1Xx+5txskX0oJE w6t6uzgRGuIGidjDzvz2AV7lvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIWZ55L yHKuzU7RBGQnKIK12B6WMB8GA1UdIwQYMBaAFMCu9wd/UmIlZxeazlatXujNZGBO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjBGNi9GRUUwNUJFQzdD QUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lpVm5GNXJPVnExZTZNMWtZ RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzNCMzlTWWlWbkY1ck9WcTFlNk0xa1lFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjBGNi9GRUUwNUJFQzdDQUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lp Vm5GNXJPVnExZTZNMWtZRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJU4W3NkHud9F5OLXDrKkr82nC8jUfJe4QqzJiNgEXDFyoch7K9dll kL9E9wFWdrQ9PNWZoiakLmq98/Muh0vhP7bh3hEWJIeoO5XI+LyTJ9RcjSOMK6wd DuIx/WRVJXNz0b+pFtwp2mReUB/HQD2ejJG5+O1vg2Y5UCK1/aydDsoKsH5u8oo0 70qLujmXn3m6ekTkKdXMjFgnuu0rQykoKUtECEhI+hj2H6FW6BMfngGE9MaPmapZ QIHraESQZbY1ky4HSPdLOtRnVUsDE59duX0RapkU0ZQuQrjwVDJnKdeUl1zvEJ0D xBtZc/1zT762ydNDba5ZZ4d+9P5AgEru -----END CERTIFICATE-----Generated at Fri May 2 06:43:48 2025 by rpki-client