$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft File: pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json) Hash identifier: EOGIma7/FiFcThIzFxXJu1KQg8Vsged+zt2vE27fWvg= Subject key identifier: 82:CB:66:E1:74:8C:9B:F3:09:BD:1E:FF:AE:55:99:2B:2D:0B:03:68 Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft Manifest number: 01F9 Signing time: Fri 13 Jun 2025 01:35:45 +0000 Manifest this update: Fri 13 Jun 2025 01:35:45 +0000 Manifest next update: Fri 20 Jun 2025 01:35:45 +0000 Files and hashes: 1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: BiUc5r5TnIIzq1rF2c+mjTHhvyGXEKPFuiwpbPQ335o=) 2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: AKQfVSoyvedil4fBrswJw8Fk2im5oq9KA2WJlwXE+SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Validity Not Before: Jun 13 01:35:45 2025 GMT Not After : Jun 20 01:35:45 2025 GMT Subject: CN=684b8071-71e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:e3:b2:22:df:8e:2f:bb:cd:0c:93:92:55: 0e:04:00:a5:08:87:59:14:8c:89:3d:c8:f2:39:4f: f3:49:d5:0a:57:d1:83:9f:7a:9b:43:53:ef:e5:5d: 12:30:61:d7:f5:fa:e3:06:dd:b4:44:03:63:48:23: c8:ea:94:78:93:20:91:b2:cc:60:1b:14:6c:86:ee: 7f:31:34:4e:29:58:89:2e:dc:26:21:dd:bd:31:53: ba:11:fa:1c:70:fe:c1:4d:fa:19:fa:32:6d:e6:12: 37:ce:4a:b0:9f:58:8d:51:a7:0e:70:a5:7e:c8:f3: 84:9f:6f:42:86:62:03:82:ce:da:cd:e4:80:df:59: e6:95:af:a7:1a:a7:ac:65:7d:00:f7:5a:db:3a:ef: 8c:b5:f4:52:50:26:f0:d0:4d:8d:75:56:5c:b6:1a: c1:57:99:f5:42:fc:f8:07:ec:80:46:e8:9a:e9:84: e8:4b:da:5e:83:1a:f8:9b:a6:30:62:e4:37:e5:55: 19:91:85:bf:e0:88:80:90:ee:ce:bd:2a:53:8c:22: d1:99:e6:78:e8:77:79:98:9d:e6:1b:4b:c7:37:16: c3:68:75:ed:91:d8:5d:35:da:0f:e2:21:fa:3a:5d: 8f:08:22:3e:c7:b4:e0:72:4e:1d:75:20:5b:33:24: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CB:66:E1:74:8C:9B:F3:09:BD:1E:FF:AE:55:99:2B:2D:0B:03:68 X509v3 Authority Key Identifier: keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:92:15:07:61:3f:4d:a0:dc:4d:12:b7:c7:c7:ae:21:92:2b: 7f:20:30:72:4d:8a:2d:12:3a:74:76:30:15:bd:3e:93:36:e7: 33:13:a1:79:5e:15:13:b4:b3:0e:4d:7c:5a:69:53:3f:08:14: a7:8b:f4:d9:d0:48:45:4a:2b:30:e5:5a:66:e9:40:8f:3d:5e: 1b:a5:c8:d9:fd:3c:e5:15:83:ec:76:49:f7:86:37:9b:02:9c: 83:c6:42:6a:f3:37:42:2b:59:eb:80:66:2a:57:8a:cc:47:4e: 8e:e1:0e:b9:bc:2c:1a:e2:ed:20:09:96:9c:91:68:33:fb:91: 22:8a:7c:18:b7:5c:01:0a:68:8b:64:c2:f0:56:11:4e:76:ed: d9:bb:5b:87:10:a2:fd:00:51:1a:05:13:e2:e1:1d:2c:47:50: 0d:ff:86:d1:30:3c:45:1a:5b:a7:50:34:e7:2e:9c:f6:f2:38: 9e:b2:99:17:a3:d4:b0:19:60:58:87:9e:27:08:09:fb:39:79: 0b:dc:e7:df:35:cc:07:5d:68:25:01:88:11:93:ab:0b:6d:24: 2b:25:1e:81:1e:d2:72:49:b5:a0:8a:13:16:07:d9:78:2b:e9: 54:ea:d9:12:80:f3:2c:29:e5:cd:07:f5:cc:c5:b8:50:b7:f6: 40:ea:c6:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTQxMTAvBgNVBAUTKEE3MDdFOEVENkM3NEJBRjM2MURENDA3MjcxQzZBMzRE NDQwMjIyQUMwHhcNMjUwNjEzMDEzNTQ1WhcNMjUwNjIwMDEzNTQ1WjAYMRYwFAYD VQQDEw02ODRiODA3MS03MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4njsiLfji+7zQyTklUOBAClCIdZFIyJPcjyOU/zSdUKV9GDn3qbQ1Pv5V0S MGHX9frjBt20RANjSCPI6pR4kyCRssxgGxRshu5/MTROKViJLtwmId29MVO6Efoc cP7BTfoZ+jJt5hI3zkqwn1iNUacOcKV+yPOEn29ChmIDgs7azeSA31nmla+nGqes ZX0A91rbOu+MtfRSUCbw0E2NdVZcthrBV5n1Qvz4B+yARuia6YToS9pegxr4m6Yw YuQ35VUZkYW/4IiAkO7OvSpTjCLRmeZ46Hd5mJ3mG0vHNxbDaHXtkdhdNdoP4iH6 Ol2PCCI+x7Tgck4ddSBbMyQWLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILLZuF0 jJvzCb0e/65VmSstCwNoMB8GA1UdIwQYMBaAFKcH6O1sdLrzYd1AcnHGo01EAiKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxNC8xODhDMUMyNjRF MTMxMUVEQjEyRjNDNkZDNEY5QUUwMi9wd2ZvN1d4MHV2TmgzVUJ5Y2NhalRVUUNJ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B3Zm83V3gwdXZOaDNVQnljY2FqVFVRQ0lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxNC8xODhDMUMyNjRFMTMxMUVEQjEyRjNDNkZDNEY5QUUwMi9wd2ZvN1d4MHV2 TmgzVUJ5Y2NhalRVUUNJcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAkhUHYT9NoNxNErfHx64hkit/IDByTYotEjp0djAVvT6TNuczE6F5 XhUTtLMOTXxaaVM/CBSni/TZ0EhFSisw5Vpm6UCPPV4bpcjZ/TzlFYPsdkn3hjeb ApyDxkJq8zdCK1nrgGYqV4rMR06O4Q65vCwa4u0gCZackWgz+5EiinwYt1wBCmiL ZMLwVhFOdu3Zu1uHEKL9AFEaBRPi4R0sR1AN/4bRMDxFGlunUDTnLpz28jiespkX o9SwGWBYh54nCAn7OXkL3OffNcwHXWglAYgRk6sLbSQrJR6BHtJySbWgihMWB9l4 K+lU6tkSgPMsKeXNB/XMxbhQt/ZA6sZg -----END CERTIFICATE-----Generated at Sat Jun 14 17:45:38 2025 by rpki-client