$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json) Hash identifier: 1rQRI1nzOp5B3s8jkJW/gfZ0puiSXGWi9uEDA8eE1H0= Subject key identifier: 3F:00:2F:6B:E6:5B:94:7C:A5:5A:3D:E5:01:21:F2:72:10:6D:3A:03 Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft Manifest number: 03DE Signing time: Sun 27 Apr 2025 00:14:56 +0000 Manifest this update: Sun 27 Apr 2025 00:14:56 +0000 Manifest next update: Sun 04 May 2025 00:14:56 +0000 Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: UvyQfVJbgBamGaQ/yizZL+YHsmfilZMXGYE0Q8VTTdk=) 2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: n7VFHzeUDeBuyUWNvkox2wNIAXMws0upgX8rIok/ab4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Validity Not Before: Apr 27 00:14:56 2025 GMT Not After : May 4 00:14:56 2025 GMT Subject: CN=680d7700-fbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:43:65:1f:02:e1:61:6a:70:e9:8e:31:24: 7f:36:f9:7e:e4:e6:0a:46:20:70:ae:7b:c5:58:58: 04:27:82:ef:07:2d:04:a0:a5:d4:75:e0:ed:77:0c: 7b:d3:fd:64:86:70:98:d0:ca:25:36:b5:b6:79:31: 7e:ef:a1:ff:f5:14:d7:d3:ae:e1:d1:28:95:01:f3: b4:a4:98:eb:10:44:e3:dc:fc:30:b3:d2:42:be:2e: 78:9e:f9:e1:8d:ff:e7:43:7d:b2:f2:e9:0d:5d:ec: 68:9c:eb:d3:70:01:82:3d:ea:cf:aa:73:bd:f5:bc: dd:8b:32:ed:9f:0f:fc:19:a2:72:40:bb:7a:4a:31: 61:94:37:9c:54:37:e2:7d:58:25:85:bc:e7:c4:3a: 75:f6:d6:17:fd:39:b8:4f:a7:3f:c8:29:4e:a4:98: 09:e8:4e:19:71:f8:cb:b7:27:5a:76:9a:75:d8:e8: 0a:a5:49:16:6e:1c:3f:e3:fb:a4:a4:9b:2a:8c:2c: 96:7d:f5:5a:e9:93:8c:f3:e6:08:be:9e:b3:df:43: 51:e2:97:55:26:ad:a9:b3:ce:f8:f4:c6:a0:ab:90: b1:5c:b5:44:33:31:e5:dd:22:7c:e4:4d:6e:d5:45: c5:b3:e9:3d:44:b5:99:a0:21:e5:3f:a7:db:93:ca: 31:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:2F:6B:E6:5B:94:7C:A5:5A:3D:E5:01:21:F2:72:10:6D:3A:03 X509v3 Authority Key Identifier: keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e4:8f:79:ec:bc:4f:7c:ba:da:26:51:25:24:94:ae:00:a2: c0:53:31:95:8f:8b:7f:e8:3f:06:98:af:7b:51:2b:85:bd:bc: 47:31:10:62:c4:d2:a3:bd:40:bf:ce:7c:f1:08:6d:b4:97:4c: 9e:1b:e3:d9:1e:76:92:15:2b:be:33:b6:02:05:3e:4e:12:80: 33:7a:06:26:b5:73:e0:71:1f:3a:0b:76:cc:66:e8:d5:e2:5d: a9:e5:88:ee:62:be:55:e4:8e:10:59:7d:28:38:cd:49:50:70: b5:d3:0f:a1:6f:8d:75:c2:69:05:99:aa:cd:aa:7f:1d:8a:85: c4:e7:71:52:4c:79:7b:c6:d3:a2:aa:86:00:be:30:dd:34:2f: 69:12:31:77:1e:df:07:fb:d1:fa:98:0d:e0:1e:74:97:73:37: 3e:9b:de:46:aa:78:62:52:67:3c:7e:82:b6:1e:73:66:4a:43: 21:af:f7:8d:3e:ff:86:cf:f3:3c:c9:f3:b7:e1:86:da:30:54: e8:04:bd:20:da:3d:cc:eb:86:8f:75:30:63:28:88:7a:9e:25: f6:71:8e:f3:4f:df:24:9c:56:02:97:2d:e6:e0:7b:e6:73:57: a5:e1:39:cf:34:3b:ce:f1:42:7a:b8:f7:d8:be:60:a2:89:00: 97:29:d8:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBNjIxMTAvBgNVBAUTKDg5RjU5NjExMDAzMEJEQzlCM0JBRDc2Q0ZEMDVDMzEy NDYxN0M5NTIwHhcNMjUwNDI3MDAxNDU2WhcNMjUwNTA0MDAxNDU2WjAYMRYwFAYD VQQDEw02ODBkNzcwMC1mYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyJDZR8C4WFqcOmOMSR/Nvl+5OYKRiBwrnvFWFgEJ4LvBy0EoKXUdeDtdwx7 0/1khnCY0MolNrW2eTF+76H/9RTX067h0SiVAfO0pJjrEETj3Pwws9JCvi54nvnh jf/nQ32y8ukNXexonOvTcAGCPerPqnO99bzdizLtnw/8GaJyQLt6SjFhlDecVDfi fVglhbznxDp19tYX/Tm4T6c/yClOpJgJ6E4ZcfjLtydadpp12OgKpUkWbhw/4/uk pJsqjCyWffVa6ZOM8+YIvp6z30NR4pdVJq2ps8749Magq5CxXLVEMzHl3SJ85E1u 1UXFs+k9RLWZoCHlP6fbk8oxFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8AL2vm W5R8pVo95QEh8nIQbToDMB8GA1UdIwQYMBaAFIn1lhEAML3Js7rXbP0FwxJGF8lS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE2Mi8xMTY4MjExQzgw NkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3ZjbXp1dGRzX1FYREVrWVh5 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmV1dFUUF3dmNtenV0ZHNfUVhERWtZWHlWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUE2Mi8xMTY4MjExQzgwNkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3Zj bXp1dGRzX1FYREVrWVh5VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ5I957LxPfLraJlElJJSuAKLAUzGVj4t/6D8GmK97USuFvbxHMRBi xNKjvUC/znzxCG20l0yeG+PZHnaSFSu+M7YCBT5OEoAzegYmtXPgcR86C3bMZujV 4l2p5YjuYr5V5I4QWX0oOM1JUHC10w+hb411wmkFmarNqn8dioXE53FSTHl7xtOi qoYAvjDdNC9pEjF3Ht8H+9H6mA3gHnSXczc+m95GqnhiUmc8foK2HnNmSkMhr/eN Pv+Gz/M8yfO34YbaMFToBL0g2j3M64aPdTBjKIh6niX2cY7zT98knFYCly3m4Hvm c1el4TnPNDvO8UJ6uPfYvmCiiQCXKdin -----END CERTIFICATE-----Generated at Sun Apr 27 12:48:32 2025 by rpki-client