$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json) Hash identifier: KaVIrny2Fa3XtvdlAzWnSRZTyAokr86Be5YaR2MlJGU= Subject key identifier: 02:3B:C6:BB:2B:F2:79:DE:EB:4B:AF:43:75:80:C0:E5:81:21:8A:F8 Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft Manifest number: 018A Signing time: Fri 25 Apr 2025 02:46:45 +0000 Manifest this update: Fri 25 Apr 2025 02:46:44 +0000 Manifest next update: Fri 02 May 2025 02:46:44 +0000 Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: M1rYn4qXdX0tPh6ruRyXXPDae2pV+XNO37s3qeSZ8nI=) 2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: e9UJAcJ07X5sik6oJ0l9nVp35GOCmRSlbj3wJmjgBrI=) 3: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: W+oeT9rREoYMeOrigBJ91wQkGtgMzcafqibSzxam1Bk=) 4: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: oqC6m15GvkoEhYAheA3+Yegw0Ae9mcHaCs/xuTvq3ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: Apr 25 02:46:44 2025 GMT Not After : May 2 02:46:44 2025 GMT Subject: CN=680af794-7f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c5:e4:e4:2d:28:ac:43:1d:18:41:fc:ed:e3: 48:39:61:78:c9:e3:69:43:69:17:dd:8d:b6:f8:8e: 88:40:7b:13:38:56:fa:c3:04:7a:06:d5:eb:65:e1: 06:b4:f4:e8:d3:b8:ea:10:3a:ab:f5:19:f9:ad:31: a3:ec:26:c3:a8:b2:d9:77:58:c5:54:8b:98:cb:28: 3f:3f:3f:53:06:07:85:64:65:50:e4:a5:4e:8b:c0: 67:33:db:61:42:f7:3b:03:35:35:ac:76:c6:95:14: a9:8c:3f:ed:6f:12:3a:13:45:43:2b:40:4b:74:86: 12:1f:d6:8a:42:e3:02:8c:5a:02:32:a4:3c:95:50: 4b:d8:c7:74:a3:79:fc:2f:70:ca:42:12:74:7b:c6: df:18:b1:61:21:80:af:c5:ea:19:4a:ce:e2:09:47: 37:74:ea:f0:fb:b3:19:15:66:aa:a6:fd:db:01:8c: ee:38:c2:4b:53:82:0a:90:98:4f:14:e3:03:24:f3: c1:d7:14:0f:4b:65:1e:06:d1:9f:2a:67:34:84:38: 78:2d:3e:6f:e7:44:fd:bb:93:7e:78:be:9d:cd:8f: 98:fb:ee:6a:fd:c3:aa:37:8c:9e:08:a0:8b:2e:75: 4f:55:23:52:2c:ce:54:c7:3a:7b:13:5d:74:a9:6c: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3B:C6:BB:2B:F2:79:DE:EB:4B:AF:43:75:80:C0:E5:81:21:8A:F8 X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:06:11:a2:c0:fc:df:79:fe:d7:49:e4:6d:c4:f3:1e:0a: a6:bb:21:53:4e:bd:02:e7:b2:02:c9:d4:b9:7f:88:5c:7c:9d: d3:8e:33:2a:dc:e8:9c:0d:c8:0d:0c:13:78:4e:08:66:86:db: c1:39:f1:dd:e2:50:cc:be:ea:cb:31:23:ab:80:a6:ca:72:42: 4f:51:56:94:2f:0a:42:31:ed:96:5e:aa:d7:6a:a6:d2:88:d2: e9:c1:14:dc:7a:c2:a5:03:75:02:db:91:53:88:62:c7:d8:05: e0:ab:0c:2d:64:42:83:d5:81:83:b6:a1:d4:78:d8:41:42:b5: 2d:83:32:9c:25:0c:fb:97:52:37:c7:ca:c5:a6:fb:34:ab:9f: ca:c6:cb:e9:d2:92:8f:75:4d:35:8c:5b:62:35:7b:b4:47:b3: 98:b8:08:d7:92:11:93:20:8b:7e:d1:9b:76:c2:d8:1e:49:cc: 21:fb:79:9a:c0:96:05:83:b7:e3:bf:e1:0c:f0:6b:5d:30:fa: e5:f8:b9:f5:c0:1f:2b:be:1f:13:82:d1:72:64:6f:b9:c2:08: b2:4b:96:05:b9:24:ba:4f:16:f8:ab:67:24:b0:c5:0f:3a:cf: 96:7a:2b:ae:f2:9c:60:78:e1:ac:50:23:50:57:29:fe:ae:3a: 4d:95:d2:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjUwNDI1MDI0NjQ0WhcNMjUwNTAyMDI0NjQ0WjAYMRYwFAYD VQQDEw02ODBhZjc5NC03ZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sXk5C0orEMdGEH87eNIOWF4yeNpQ2kX3Y22+I6IQHsTOFb6wwR6BtXrZeEG tPTo07jqEDqr9Rn5rTGj7CbDqLLZd1jFVIuYyyg/Pz9TBgeFZGVQ5KVOi8BnM9th Qvc7AzU1rHbGlRSpjD/tbxI6E0VDK0BLdIYSH9aKQuMCjFoCMqQ8lVBL2Md0o3n8 L3DKQhJ0e8bfGLFhIYCvxeoZSs7iCUc3dOrw+7MZFWaqpv3bAYzuOMJLU4IKkJhP FOMDJPPB1xQPS2UeBtGfKmc0hDh4LT5v50T9u5N+eL6dzY+Y++5q/cOqN4yeCKCL LnVPVSNSLM5Uxzp7E110qWw7+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAI7xrsr 8nne60uvQ3WAwOWBIYr4MB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0MxRC84Q0ZFMUQ5QUQxRTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZ Ym9RTDFpNkk3a0R0bGVsU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8GgYRosD833n+10nkbcTzHgqmuyFTTr0C57ICydS5f4hcfJ3TjjMq 3OicDcgNDBN4TghmhtvBOfHd4lDMvurLMSOrgKbKckJPUVaULwpCMe2WXqrXaqbS iNLpwRTcesKlA3UC25FTiGLH2AXgqwwtZEKD1YGDtqHUeNhBQrUtgzKcJQz7l1I3 x8rFpvs0q5/Kxsvp0pKPdU01jFtiNXu0R7OYuAjXkhGTIIt+0Zt2wtgeScwh+3ma wJYFg7fjv+EM8GtdMPrl+Ln1wB8rvh8TgtFyZG+5wgiyS5YFuSS6Txb4q2cksMUP Os+Weiuu8pxgeOGsUCNQVyn+rjpNldIw -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:39 2025 by rpki-client