$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft File: RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json) Hash identifier: 7j9a+W/ch+RG6yh4AzZx3UNezLuz/HAPjsR9CHVZ3YQ= Subject key identifier: AD:9C:D8:8E:ED:45:41:E5:6A:A5:50:36:A5:83:27:1B:6A:9E:5E:C6 Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft Manifest number: 68 Signing time: Sun 15 Jun 2025 06:05:00 +0000 Manifest this update: Sun 15 Jun 2025 06:05:00 +0000 Manifest next update: Sun 22 Jun 2025 06:05:00 +0000 Files and hashes: 1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: hrPBfw205tvzGNdhA8gVJgetc6K3T0SWEIfFuEjqXfI=) 2: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (hash: ewpedKUZb61m1VLcsAn7GYfV7OReNryZEeFprMQVt3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Validity Not Before: Jun 15 06:05:00 2025 GMT Not After : Jun 22 06:05:00 2025 GMT Subject: CN=684e628c-5a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:fa:c9:7f:fb:e8:c7:27:1c:2e:c4:5b:d7: 19:45:cd:6b:94:5f:64:0f:c3:3b:b9:ae:c2:21:3f: 0c:65:42:e8:b2:d0:67:4c:6b:de:78:96:5f:44:64: f7:30:e9:c1:47:42:db:70:ed:52:0f:8b:f7:e8:ce: 33:5d:c6:3f:49:17:d2:f5:5d:25:a4:9a:81:fb:0c: e4:c6:7d:82:be:5e:b2:f0:6b:2c:77:cc:b1:bb:29: fd:9f:6e:f5:f2:f6:46:aa:7c:ce:8d:4f:79:56:8d: f4:1d:52:30:8d:ef:43:c9:44:68:ee:4e:b3:39:6b: 28:9b:64:71:42:49:36:55:ba:ec:b8:be:64:a2:ed: 87:bc:d9:f4:a7:d7:4d:1a:b9:54:91:4f:a6:19:16: 2d:40:ad:a6:20:a3:27:27:32:cd:66:b8:cb:c2:cd: 47:4b:b3:83:0b:80:9a:62:12:8a:03:5a:75:24:a3: ef:61:76:fd:6a:19:5a:73:f5:45:23:c4:ba:e4:66: ab:93:cb:c8:d1:ff:91:70:86:c5:9f:39:fe:58:db: f5:d4:04:52:3c:60:cf:c2:4e:5b:14:81:78:86:d4: 6d:75:8c:c6:57:03:5d:f9:f8:25:c0:1e:b1:f5:ea: 25:65:70:97:08:c7:4a:7d:fe:ea:21:d7:c6:07:be: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9C:D8:8E:ED:45:41:E5:6A:A5:50:36:A5:83:27:1B:6A:9E:5E:C6 X509v3 Authority Key Identifier: keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ac:2c:0a:31:ef:fd:58:13:cb:45:6d:9c:27:44:9a:75:f2: cc:30:1e:48:07:ca:e6:23:7f:a7:94:1d:9b:77:58:46:b1:53: ba:86:a1:30:5b:01:67:ff:5c:87:17:94:84:4e:8d:b1:ce:2f: 0d:74:d0:18:9e:7f:68:6a:1f:0b:34:d1:58:30:02:d5:c1:ca: 20:2c:9e:73:1f:00:58:57:03:1c:4a:70:de:9f:46:fc:a8:d6: 9d:2c:36:d3:75:59:98:60:b6:a2:1d:9c:32:b6:0b:c4:09:2a: f9:7f:a2:02:99:2e:7f:27:b1:00:9c:2e:c5:22:02:00:fc:2b: f2:0a:d6:4a:bf:e0:b4:ce:4f:4c:4e:cb:2d:1f:7a:5e:41:61: 61:b7:ce:f0:81:68:8e:10:f2:7d:c7:f4:f7:d0:77:c5:ae:58: 76:bb:95:fc:17:87:d3:1c:d7:28:1c:8e:e9:46:4a:97:6b:dc: 13:c6:a3:00:65:8e:ec:0c:95:2b:09:a5:10:20:1a:07:c9:7c: e6:5d:30:b7:84:05:55:04:d7:1f:6b:f0:f1:61:7a:66:2f:70: dc:53:a5:d3:a3:2f:54:7c:11:3d:2f:5b:27:42:f6:27:75:ef: 2c:23:5c:7c:9e:ac:91:df:85:48:5a:2d:f0:11:84:3a:e9:f1: 21:37:1f:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFDNTExMC8GA1UEBRMoNDcwMUNGMkQyODIwMDlENkM2RUFGNDU1NkZCMERDMUIw RDU1NTdFRjAeFw0yNTA2MTUwNjA1MDBaFw0yNTA2MjIwNjA1MDBaMBgxFjAUBgNV BAMTDTY4NGU2MjhjLTVhMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb5frJf/voxyccLsRb1xlFzWuUX2QPwzu5rsIhPwxlQuiy0GdMa954ll9EZPcw 6cFHQttw7VIPi/fozjNdxj9JF9L1XSWkmoH7DOTGfYK+XrLwayx3zLG7Kf2fbvXy 9kaqfM6NT3lWjfQdUjCN70PJRGjuTrM5ayibZHFCSTZVuuy4vmSi7Ye82fSn100a uVSRT6YZFi1AraYgoycnMs1muMvCzUdLs4MLgJpiEooDWnUko+9hdv1qGVpz9UUj xLrkZquTy8jR/5FwhsWfOf5Y2/XUBFI8YM/CTlsUgXiG1G11jMZXA135+CXAHrH1 6iVlcJcIx0p9/uoh18YHvmaTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrZzYju1F QeVqpVA2pYMnG2qeXsYwHwYDVR0jBBgwFoAURwHPLSggCdbG6vRVb7DcGw1VV+8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUM1L0MzOTU4MkMwQUJE QTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2RiRzZ2UlZiN0RjR3cxVlYt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUndIUExTZ2dDZGJHNnZSVmI3RGNHdzFWVi04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE QUM1L0MzOTU4MkMwQUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2Ri RzZ2UlZiN0RjR3cxVlYtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGesLAox7/1YE8tFbZwnRJp18swwHkgHyuYjf6eUHZt3WEaxU7qGoTBb AWf/XIcXlIROjbHOLw100Bief2hqHws00VgwAtXByiAsnnMfAFhXAxxKcN6fRvyo 1p0sNtN1WZhgtqIdnDK2C8QJKvl/ogKZLn8nsQCcLsUiAgD8K/IK1kq/4LTOT0xO yy0fel5BYWG3zvCBaI4Q8n3H9PfQd8WuWHa7lfwXh9Mc1ygcjulGSpdr3BPGowBl juwMlSsJpRAgGgfJfOZdMLeEBVUE1x9r8PFhemYvcNxTpdOjL1R8ET0vWydC9id1 7ywjXHyerJHfhUhaLfARhDrp8SE3H8I= -----END CERTIFICATE-----Generated at Tue Jun 17 01:32:17 2025 by rpki-client