$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft File: w7gqL3RR5pVsP6OTQNxzItDnjKY.mft (raw, json) Hash identifier: CWeN6HmH2+kwCDpX/0Z3ZHTjV5WsrZmEohEHOtDvFJg= Subject key identifier: 6C:7D:9F:06:A3:BC:21:CE:7B:D9:3C:E6:43:F2:0E:D5:1C:18:B6:9F Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 026F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft Manifest number: 0269 Signing time: Fri 25 Apr 2025 01:32:11 +0000 Manifest this update: Fri 25 Apr 2025 01:32:10 +0000 Manifest next update: Fri 02 May 2025 01:32:10 +0000 Files and hashes: 1: w7gqL3RR5pVsP6OTQNxzItDnjKY.crl (hash: kmzzVAz1Vyl0sj0VSbC4Y57yjUuZ6gZSgA+/N6dyobE=) 2: AA9183060FDC11ED9718606AC4F9AE02.roa (hash: esmrf2BFTjhprHyQQ5D38sZ0HfzZ4jtc/m9nB8i0g9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A, serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Validity Not Before: Apr 25 01:32:10 2025 GMT Not After : May 2 01:32:10 2025 GMT Subject: CN=680ae61a-1404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:e6:f5:6f:96:ec:4d:09:aa:e3:85:e8:68: ab:0b:95:f7:43:a9:51:33:67:f7:19:ad:be:a9:93: 1a:b9:e9:9f:20:a7:ae:45:93:e6:7e:a1:1a:89:92: 3d:3f:41:7e:11:09:c6:ba:78:8a:15:4f:73:46:2b: 30:91:84:a9:af:e3:ca:c5:e4:cc:f0:58:2d:cd:49: 65:81:50:1b:90:33:40:4a:28:8d:8e:27:15:b6:59: 35:73:77:dc:a1:2e:7d:9a:70:04:d1:60:3c:9d:bf: 59:71:5d:3e:a7:c8:6f:9e:0d:59:2f:54:6a:16:e7: 51:89:6a:9f:d8:6f:dd:b6:db:53:d3:82:f5:3f:3c: f2:63:e6:01:64:f0:72:19:17:2a:4b:9e:5f:d2:6d: 05:98:93:94:3a:7a:f5:e0:cc:26:64:8e:63:0d:be: 92:31:5d:67:0e:1d:03:31:82:a6:93:28:62:c5:ad: 1b:5f:43:61:3f:d9:ad:db:10:51:17:9a:5f:c8:76: c0:bc:14:57:b7:55:fd:14:05:ed:0b:1b:3e:9c:1c: cb:ca:c1:a1:fd:ec:b7:aa:5c:c5:7a:d7:9b:e3:96: 38:e6:2f:c5:3c:75:1c:2a:be:b0:6f:a6:5c:fc:dd: 2e:f3:36:f4:4b:34:05:ab:99:32:50:f2:a4:1e:d8: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7D:9F:06:A3:BC:21:CE:7B:D9:3C:E6:43:F2:0E:D5:1C:18:B6:9F X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:07:a5:b5:9d:24:54:7b:68:95:16:0c:61:2a:88:df:e3:73: b6:18:33:90:5b:2b:f0:7f:c8:3a:16:bc:af:63:4e:97:12:ee: 24:d0:67:aa:ef:30:0b:0a:73:77:a2:28:70:9b:84:fa:75:2d: 3a:74:2d:51:4e:40:26:99:dd:66:8a:a0:db:8e:56:8c:7e:cc: e3:a8:40:fd:c8:82:60:85:67:ae:9b:0c:16:71:ea:56:9e:2d: 3e:12:11:d6:47:c1:ae:4f:87:b4:20:df:eb:77:47:16:57:ce: 81:12:fd:d3:25:10:8d:38:ec:32:9e:9e:31:53:8e:eb:9b:5a: b0:62:5f:b5:7e:6d:08:dc:97:63:64:2f:50:a4:e9:ce:a8:4d: d4:5d:94:40:4a:6a:29:26:f9:b0:97:8d:6b:52:23:7e:43:0a: 81:75:51:da:64:bc:54:91:eb:26:eb:03:2e:3d:78:db:7d:7b: 54:0b:ef:d6:63:d9:c2:c0:44:a3:c5:7d:b9:b8:94:fc:64:74: df:00:47:cb:c3:10:0a:fe:d7:0c:c7:68:e1:fe:a2:d3:f3:01: ed:2d:79:cc:bc:ed:47:3b:62:08:97:ef:1f:03:b5:dc:e2:72: 9e:c6:52:94:a2:77:58:db:45:81:7d:41:66:64:ff:bf:78:a7: b3:09:9e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjUwNDI1MDEzMjEwWhcNMjUwNTAyMDEzMjEwWjAYMRYwFAYD VQQDEw02ODBhZTYxYS0xNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/7m9W+W7E0JquOF6GirC5X3Q6lRM2f3Ga2+qZMauemfIKeuRZPmfqEaiZI9 P0F+EQnGuniKFU9zRiswkYSpr+PKxeTM8FgtzUllgVAbkDNASiiNjicVtlk1c3fc oS59mnAE0WA8nb9ZcV0+p8hvng1ZL1RqFudRiWqf2G/dtttT04L1PzzyY+YBZPBy GRcqS55f0m0FmJOUOnr14MwmZI5jDb6SMV1nDh0DMYKmkyhixa0bX0NhP9mt2xBR F5pfyHbAvBRXt1X9FAXtCxs+nBzLysGh/ey3qlzFeteb45Y45i/FPHUcKr6wb6Zc /N0u8zb0SzQFq5kyUPKkHtg/OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx9nwaj vCHOe9k85kPyDtUcGLafMB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVw VnNQNk9UUU54ekl0RG5qS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkB6W1nSRUe2iVFgxhKojf43O2GDOQWyvwf8g6FryvY06XEu4k0Geq 7zALCnN3oihwm4T6dS06dC1RTkAmmd1miqDbjlaMfszjqED9yIJghWeumwwWcepW ni0+EhHWR8GuT4e0IN/rd0cWV86BEv3TJRCNOOwynp4xU47rm1qwYl+1fm0I3Jdj ZC9QpOnOqE3UXZRASmopJvmwl41rUiN+QwqBdVHaZLxUkesm6wMuPXjbfXtUC+/W Y9nCwESjxX25uJT8ZHTfAEfLwxAK/tcMx2jh/qLT8wHtLXnMvO1HO2IIl+8fA7Xc 4nKexlKUondY20WBfUFmZP+/eKezCZ7c -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:32 2025 by rpki-client