$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json) Hash identifier: 81sd8p9BqO8kEmkUVJURmD09Uv4jPH4rws+0h7o8l38= Subject key identifier: 77:B6:70:29:36:28:31:00:BA:C7:7C:7A:06:0F:5B:33:71:96:C5:1E Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft Manifest number: 01D8 Signing time: Sun 15 Jun 2025 02:11:01 +0000 Manifest this update: Sun 15 Jun 2025 02:11:01 +0000 Manifest next update: Sun 22 Jun 2025 02:11:01 +0000 Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: YPCAe1XgS89SnAMKW2At1y22ngeCkIzrtz3/DyN5XxU=) 2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: i5f17u0APuwWVrNQJwRvrSbhYIzk4h0SdlZzDluJdHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Validity Not Before: Jun 15 02:11:01 2025 GMT Not After : Jun 22 02:11:01 2025 GMT Subject: CN=684e2bb5-944e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:2b:2b:6c:af:bc:af:c1:b1:48:9a:ed:bf: ba:af:4f:ab:2b:7c:25:ee:11:73:ef:17:d6:a8:02: 97:77:6b:41:a1:fb:c6:4d:06:91:cc:65:c9:43:85: 52:43:32:af:67:9c:76:d4:18:74:78:31:7e:c0:e7: 4b:f1:42:13:a2:0f:a8:d7:be:08:29:28:7a:d2:5c: c0:ce:ad:8e:53:f2:30:77:bb:b0:e1:b4:4e:d6:43: 01:8c:fe:c3:2b:e0:99:b9:7d:69:f6:1d:98:6e:4b: 94:1b:66:ff:fa:b1:4d:9b:26:ac:84:8a:6b:0c:e5: 72:85:f2:b4:0c:ae:83:69:6a:84:ac:39:86:3c:6b: 30:e9:54:3b:21:6d:ae:3d:3b:c6:44:d6:99:81:5c: 31:51:16:65:71:e8:32:a1:a3:b1:d5:2d:3c:8f:8b: a4:c8:73:63:7e:06:52:cc:6e:18:98:9a:ec:81:f4: 4d:6e:0c:4b:ec:2c:8c:94:8b:af:bf:c2:3d:f1:df: 48:f1:7e:28:bc:fb:a1:76:fb:88:c8:fd:7d:38:a8: 2a:b6:cc:b9:2d:4f:84:1f:b6:ec:d8:e0:cf:03:4b: 3b:8a:0e:cc:be:d4:2f:be:a5:86:5c:3f:de:2c:eb: 32:04:39:82:c7:13:8f:0f:f3:e3:44:62:4c:de:cb: 7c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B6:70:29:36:28:31:00:BA:C7:7C:7A:06:0F:5B:33:71:96:C5:1E X509v3 Authority Key Identifier: keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:33:59:18:f5:d0:04:cd:2c:8f:6c:7d:27:e4:42:ae:d6:3e: 67:5e:12:62:e0:3c:1a:f4:22:97:ff:88:1f:2a:bd:8e:88:c5: b8:5c:76:7e:d8:90:1a:40:72:c8:99:d6:70:66:d7:c0:68:60: 63:ce:d8:5b:bf:09:3e:78:48:77:97:01:b1:60:2f:e0:bf:0a: 9b:64:a7:32:75:ff:2c:4a:8f:08:31:b7:b8:c0:e1:ec:2d:08: ae:66:2d:75:b0:92:89:16:ff:b9:a7:ea:05:8a:ba:6e:76:2f: 5b:ef:25:44:2d:a6:27:da:51:df:e7:3f:e2:72:29:01:60:91: 4f:c2:e1:14:b8:23:17:67:58:9a:af:ff:9f:f0:f2:38:2b:4c: ef:39:cb:fe:13:56:b6:5b:7f:35:78:56:5e:6d:a4:cf:af:01: 2a:f0:58:2d:fe:e5:fa:11:89:92:48:de:f2:d6:9b:81:0c:1c: ac:5c:c4:61:42:1b:19:2c:03:9f:a2:b7:fd:a5:fa:28:02:b3: 4a:c1:47:3e:97:54:70:1f:8f:28:2f:da:d0:c8:8f:ad:26:21: 10:dd:ab:83:00:0b:bc:e0:33:52:da:cf:21:70:78:af:f0:5b: d6:78:bb:32:73:a5:4e:5f:d4:51:f4:77:d5:cd:ba:01:a9:85: ea:63:d9:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MDMxMTAvBgNVBAUTKDQ1NkFGNUU1NjY3REUyNDhBOUNGMENFQjkwQzZEMUIz RDNFRDZGQTgwHhcNMjUwNjE1MDIxMTAxWhcNMjUwNjIyMDIxMTAxWjAYMRYwFAYD VQQDEw02ODRlMmJiNS05NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHQrK2yvvK/BsUia7b+6r0+rK3wl7hFz7xfWqAKXd2tBofvGTQaRzGXJQ4VS QzKvZ5x21Bh0eDF+wOdL8UITog+o174IKSh60lzAzq2OU/Iwd7uw4bRO1kMBjP7D K+CZuX1p9h2YbkuUG2b/+rFNmyashIprDOVyhfK0DK6DaWqErDmGPGsw6VQ7IW2u PTvGRNaZgVwxURZlcegyoaOx1S08j4ukyHNjfgZSzG4YmJrsgfRNbgxL7CyMlIuv v8I98d9I8X4ovPuhdvuIyP19OKgqtsy5LU+EH7bs2ODPA0s7ig7MvtQvvqWGXD/e LOsyBDmCxxOPD/PjRGJM3st8aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe2cCk2 KDEAusd8egYPWzNxlsUeMB8GA1UdIwQYMBaAFEVq9eVmfeJIqc8M65DG0bPT7W+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkwMy9EODk4MjY1QThD MUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRraXB6d3pya01iUnM5UHRi NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXcjE1V1o5NGtpcHp3enJrTWJSczlQdGI2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkwMy9EODk4MjY1QThDMUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRr aXB6d3pya01iUnM5UHRiNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbM1kY9dAEzSyPbH0n5EKu1j5nXhJi4Dwa9CKX/4gfKr2OiMW4XHZ+ 2JAaQHLImdZwZtfAaGBjzthbvwk+eEh3lwGxYC/gvwqbZKcydf8sSo8IMbe4wOHs LQiuZi11sJKJFv+5p+oFirpudi9b7yVELaYn2lHf5z/icikBYJFPwuEUuCMXZ1ia r/+f8PI4K0zvOcv+E1a2W381eFZebaTPrwEq8Fgt/uX6EYmSSN7y1puBDBysXMRh QhsZLAOforf9pfooArNKwUc+l1RwH48oL9rQyI+tJiEQ3auDAAu84DNS2s8hcHiv 8FvWeLsyc6VOX9RR9HfVzboBqYXqY9k0 -----END CERTIFICATE-----Generated at Sun Jun 15 05:51:11 2025 by rpki-client