$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json) Hash identifier: T4Sbn3pFwM/FS1MVUfNcxgwbtk6iemKPmUDpaLxShJM= Subject key identifier: 2A:E1:18:48:22:51:48:8D:3B:27:EE:22:F0:5E:E5:DF:05:6B:82:44 Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Certificate serial: 28F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft Manifest number: 28C5 Signing time: Sat 26 Apr 2025 15:34:50 +0000 Manifest this update: Sat 26 Apr 2025 15:34:49 +0000 Manifest next update: Sat 03 May 2025 15:34:49 +0000 Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: 5BolOoHNeZJckDodrr/KJkZCgnaHVTSKw7jZY7/kBG8=) 2: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: AzW4aIQu3oC/RB4Ph7Oxui4fN9NO75Dymw0HBe9vHgA=) 3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: E9GpG8r2RS+wZVKx4VfWz8DtkWxY78qwYvbLbq0Wo/g=) 4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 3ffKspDDCMwFhMU04xxlteFDU4SgN8Gby605uNp3lZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10488 (0x28f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Validity Not Before: Apr 26 15:34:49 2025 GMT Not After : May 3 15:34:49 2025 GMT Subject: CN=680cfd19-e7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:06:df:38:d3:68:87:75:ab:90:bb:96:5e: 42:4f:35:68:79:88:8d:0f:3d:eb:6e:22:c9:8d:f3: 48:32:c8:dc:be:78:08:83:fb:76:dd:ea:be:42:4a: e4:85:eb:8f:a4:ec:99:c1:88:63:b6:5b:9d:b1:ca: ea:67:71:c2:c6:85:a3:a7:27:3f:b5:ea:1f:ec:17: dd:bd:fe:ee:37:a8:e0:7c:8b:42:76:93:36:9c:51: 62:07:a2:a8:72:db:a8:86:8e:5e:59:99:23:8f:04: 95:98:0f:6d:ae:b8:03:ee:1e:a8:7c:f8:42:fd:9d: d9:01:98:26:19:b4:2c:e6:5f:86:6b:8b:13:2d:d1: 0b:1b:2b:b6:f7:1a:50:be:d7:dd:b8:9a:41:ce:88: 46:0a:c8:20:65:42:7e:f6:1b:7f:0f:34:02:a6:4b: 25:f3:f8:93:af:f5:52:82:c7:8a:48:94:95:54:92: eb:6b:d9:45:6d:05:c5:df:3b:40:83:3b:9e:ae:b9: 97:cd:30:d9:e4:55:75:d3:f5:3e:20:84:1d:88:8e: 83:aa:3b:be:97:50:24:32:f9:ac:7b:3a:9a:fc:69: d6:4f:b5:aa:ee:34:9a:4f:27:bf:50:9a:e2:3e:56: 37:90:dc:7d:63:25:71:52:5b:ff:d4:5a:01:7e:01: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E1:18:48:22:51:48:8D:3B:27:EE:22:F0:5E:E5:DF:05:6B:82:44 X509v3 Authority Key Identifier: keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:eb:4c:35:5b:b2:67:32:ee:55:e9:cf:b9:06:e0:6e:73:83: af:35:68:39:34:02:90:e4:14:af:e3:00:86:26:41:5e:7e:bd: 1b:46:6b:b8:5c:cb:f9:ac:a9:b2:c2:22:9d:d8:e0:1c:38:ee: 04:a7:39:a7:29:fc:40:7a:1d:f0:17:c9:69:44:2a:cd:96:43: 54:26:c8:46:09:7f:c0:1c:5d:b4:c5:86:42:70:d9:19:14:f8: 71:da:47:74:f6:50:55:08:09:e8:47:e1:a9:16:81:f8:ee:5c: 30:d3:16:e3:56:94:ed:83:7c:01:38:8b:fa:72:56:2e:a5:a7: 27:77:bc:c2:54:e3:db:53:e4:10:35:65:d7:66:e5:29:f9:0f: e5:95:91:0e:fd:53:83:df:76:0c:65:6c:39:09:1d:b3:b4:66: b9:f5:9e:d9:ee:4e:64:d6:d8:62:9d:42:49:9c:44:6c:94:d4: b6:76:7f:80:d3:81:b3:a0:61:54:4c:1f:4a:43:49:ec:ff:77: 51:81:e8:56:f0:b1:74:41:8e:90:e1:32:d4:3b:bc:5e:8a:ea: 68:33:a0:63:61:22:bc:f5:22:66:30:94:63:ea:9e:bb:bc:76: b6:80:cf:09:d8:ea:79:e0:01:3f:06:5c:d5:27:31:f8:b2:a4: 04:9c:c3:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2 NzIzQjYwQUQwHhcNMjUwNDI2MTUzNDQ5WhcNMjUwNTAzMTUzNDQ5WjAYMRYwFAYD VQQDEw02ODBjZmQxOS1lN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSoG3zjTaId1q5C7ll5CTzVoeYiNDz3rbiLJjfNIMsjcvngIg/t23eq+Qkrk heuPpOyZwYhjtludscrqZ3HCxoWjpyc/teof7Bfdvf7uN6jgfItCdpM2nFFiB6Ko ctuoho5eWZkjjwSVmA9trrgD7h6ofPhC/Z3ZAZgmGbQs5l+Ga4sTLdELGyu29xpQ vtfduJpBzohGCsggZUJ+9ht/DzQCpksl8/iTr/VSgseKSJSVVJLra9lFbQXF3ztA gzuerrmXzTDZ5FV10/U+IIQdiI6Dqju+l1AkMvmsezqa/GnWT7Wq7jSaTye/UJri PlY3kNx9YyVxUlv/1FoBfgF2ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrhGEgi UUiNOyfuIvBe5d8Fa4JEMB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f dkJoM0d1eUxZQUpuSTdZSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC860w1W7JnMu5V6c+5BuBuc4OvNWg5NAKQ5BSv4wCGJkFefr0bRmu4 XMv5rKmywiKd2OAcOO4EpzmnKfxAeh3wF8lpRCrNlkNUJshGCX/AHF20xYZCcNkZ FPhx2kd09lBVCAnoR+GpFoH47lww0xbjVpTtg3wBOIv6clYupacnd7zCVOPbU+QQ NWXXZuUp+Q/llZEO/VOD33YMZWw5CR2ztGa59Z7Z7k5k1thinUJJnERslNS2dn+A 04GzoGFUTB9KQ0ns/3dRgehW8LF0QY6Q4TLUO7xeiupoM6BjYSK89SJmMJRj6p67 vHa2gM8J2Op54AE/BlzVJzH4sqQEnMPn -----END CERTIFICATE-----Generated at Sat Apr 26 21:03:18 2025 by rpki-client