$ rpki-client -vvf rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft File: RWxgg2WE6Qooop0Ci1snYBqT1EY.mft (raw, json) Hash identifier: o0QfT6ntlk39WoDwuXB4+qwpeTsaALO2ERtpxy/lZC8= Subject key identifier: 83:D8:6E:5D:C2:59:4A:CB:48:FF:13:BE:01:45:EA:68:0C:55:E3:FE Authority key identifier: 45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46 Certificate issuer: /CN=A918922D/serialNumber=456C60836584E90A28A29D028B5B27601A93D446 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft Manifest number: 33 Signing time: Thu 19 Jun 2025 07:01:08 +0000 Manifest this update: Thu 19 Jun 2025 07:01:08 +0000 Manifest next update: Thu 26 Jun 2025 07:01:08 +0000 Files and hashes: 1: RWxgg2WE6Qooop0Ci1snYBqT1EY.crl (hash: quIpG8VNsYpHxhvGVsaV6YKXNsx0FgYlgsiObKhS6BY=) 2: BF7A92E2FFC311EF9131D04AC4F9AE02.roa (hash: tVDbnB/oVjQqBCd2UeAI1BWWN7K0TVLfW0PjLHaDZvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918922D, serialNumber=456C60836584E90A28A29D028B5B27601A93D446 Validity Not Before: Jun 19 07:01:08 2025 GMT Not After : Jun 26 07:01:08 2025 GMT Subject: CN=6853b5b4-a261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:11:01:c0:ec:14:ba:c4:50:b5:05:42:56: 17:60:95:4f:d9:89:be:24:53:b3:b6:56:10:a9:e9: 80:75:4e:7d:a2:0d:2e:5b:2a:c0:1b:91:aa:e9:c6: b5:90:85:88:e7:ea:d1:df:1c:51:d1:e9:c7:1c:e1: 99:d5:9f:f2:c6:8d:4d:94:ae:7c:fe:43:db:4e:bd: 8d:a6:82:2e:8a:fa:04:2a:f6:3d:1a:1e:35:69:f8: 81:58:dd:21:52:40:04:aa:bd:1b:38:b0:10:6e:ea: b1:8b:63:d9:a9:70:3b:63:cb:84:40:4f:54:84:35: de:25:d2:3c:54:1f:4b:7e:ca:76:f2:0c:39:39:30: 59:db:e5:52:13:34:08:11:ad:f7:91:3a:30:65:63: c5:46:6a:8b:18:8f:be:07:11:b0:7f:bb:2e:a2:c6: 6b:fc:03:bb:3f:2a:21:dd:1e:e7:6a:b5:7a:26:08: 2f:03:b6:a7:5a:e2:39:14:29:88:1f:42:17:ba:2d: 01:ee:eb:c0:56:79:03:cf:6a:c7:06:b0:b4:c5:ca: 55:18:88:eb:10:21:3d:5a:d5:20:50:e7:63:6c:93: 30:78:a0:42:ae:48:ff:c4:b1:7b:2b:cc:81:e1:a9: 77:f2:a8:37:ef:d8:65:c0:fc:0e:c5:d1:3b:f0:7d: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D8:6E:5D:C2:59:4A:CB:48:FF:13:BE:01:45:EA:68:0C:55:E3:FE X509v3 Authority Key Identifier: keyid:45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:60:db:c3:19:90:0a:f6:f3:7a:05:f4:6b:50:f9:f3:08:d5: ab:7a:92:60:53:03:58:bc:57:b5:b5:86:7d:f0:20:ed:c8:43: 32:0c:79:b2:2d:93:0a:ae:1d:84:fd:76:ef:25:a2:cf:da:2b: 89:2e:3f:37:87:49:91:d4:a1:cf:ab:cf:90:2d:e9:0d:01:99: 67:35:bd:d1:74:c4:dd:78:a8:88:c5:1d:c9:fa:3c:4d:34:15: 6e:58:ff:71:ba:28:71:c0:4f:55:64:c4:64:e3:2b:75:cb:c5: 35:74:67:af:d2:c7:6c:1a:2f:22:8a:40:7f:25:83:54:5e:c7: d1:dc:4f:7a:a2:95:d0:dc:c6:66:09:73:87:c3:f4:ab:7d:13: a0:a6:bb:29:8b:31:9c:5e:1f:72:17:55:31:c0:66:45:72:e5: cb:0f:d8:87:e3:c1:0d:a6:4a:5c:01:8f:1b:4e:0e:17:0c:2f: 98:c3:38:35:c7:bf:39:5c:2e:c8:e7:9f:97:0f:c7:7b:0d:ba: fd:1a:92:bc:cd:6a:23:60:78:d3:0a:f8:3d:41:87:89:4a:85: 5f:2c:23:a0:ae:87:d5:21:19:60:0f:59:4f:d0:3b:9a:74:c3: 33:77:81:f5:33:db:7f:f9:1e:e6:35:de:98:9e:f3:14:4b:b7: 45:04:6d:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTIyRDExMC8GA1UEBRMoNDU2QzYwODM2NTg0RTkwQTI4QTI5RDAyOEI1QjI3NjAx QTkzRDQ0NjAeFw0yNTA2MTkwNzAxMDhaFw0yNTA2MjYwNzAxMDhaMBgxFjAUBgNV BAMTDTY4NTNiNWI0LWEyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC2xEBwOwUusRQtQVCVhdglU/Zib4kU7O2VhCp6YB1Tn2iDS5bKsAbkarpxrWQ hYjn6tHfHFHR6ccc4ZnVn/LGjU2Urnz+Q9tOvY2mgi6K+gQq9j0aHjVp+IFY3SFS QASqvRs4sBBu6rGLY9mpcDtjy4RAT1SENd4l0jxUH0t+ynbyDDk5MFnb5VITNAgR rfeROjBlY8VGaosYj74HEbB/uy6ixmv8A7s/KiHdHudqtXomCC8Dtqda4jkUKYgf Qhe6LQHu68BWeQPPascGsLTFylUYiOsQIT1a1SBQ52NskzB4oEKuSP/EsXsrzIHh qXfyqDfv2GXA/A7F0TvwfUqvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg9huXcJZ SstI/xO+AUXqaAxV4/4wHwYDVR0jBBgwFoAURWxgg2WE6Qooop0Ci1snYBqT1EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MjJEL0Y5MTE4RDdDRkZD MjExRUY5QjI5NUU0NkM0RjlBRTAyL1JXeGdnMldFNlFvb29wMENpMXNuWUJxVDFF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUld4Z2cyV0U2UW9vb3AwQ2kxc25ZQnFUMUVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 MjJEL0Y5MTE4RDdDRkZDMjExRUY5QjI5NUU0NkM0RjlBRTAyL1JXeGdnMldFNlFv b29wMENpMXNuWUJxVDFFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAONg28MZkAr283oF9GtQ+fMI1at6kmBTA1i8V7W1hn3wIO3IQzIMebIt kwquHYT9du8los/aK4kuPzeHSZHUoc+rz5At6Q0BmWc1vdF0xN14qIjFHcn6PE00 FW5Y/3G6KHHAT1VkxGTjK3XLxTV0Z6/Sx2waLyKKQH8lg1Rex9HcT3qildDcxmYJ c4fD9Kt9E6CmuymLMZxeH3IXVTHAZkVy5csP2IfjwQ2mSlwBjxtODhcML5jDODXH vzlcLsjnn5cPx3sNuv0akrzNaiNgeNMK+D1Bh4lKhV8sI6Cuh9UhGWAPWU/QO5p0 wzN3gfUz23/5HuY13pie8xRLt0UEbQ0= -----END CERTIFICATE-----Generated at Fri Jun 20 18:13:47 2025 by rpki-client