$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft File: w373yMNE0xhYKbwsuZbIlKqoDvM.mft (raw, json) Hash identifier: CTE/qlik5LgjNO/1Haxcl/IHrnLV4flmQH1xIp5lML0= Subject key identifier: 39:7A:F7:BA:87:FF:18:60:9F:88:4B:32:BA:CF:70:B5:88:FF:D8:43 Authority key identifier: C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3 Certificate issuer: /CN=A912756D/serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft Manifest number: 79 Signing time: Fri 25 Apr 2025 05:44:24 +0000 Manifest this update: Fri 25 Apr 2025 05:44:23 +0000 Manifest next update: Fri 02 May 2025 05:44:23 +0000 Files and hashes: 1: w373yMNE0xhYKbwsuZbIlKqoDvM.crl (hash: TN8cmboW4zGf8jomj+AITqX8IoimjGQHGy56/ij8+og=) 2: 95CB7E0E6B5611EFA00DA92FC4F9AE02.roa (hash: duamzviBQYqtExZmA9rAc3mAR9sTDl7eoEu87aRFjpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3 Validity Not Before: Apr 25 05:44:23 2025 GMT Not After : May 2 05:44:23 2025 GMT Subject: CN=680b2138-981d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:1c:17:71:23:cd:f3:bc:e5:6a:bd:69:cf: 55:9b:55:27:90:0c:9b:71:80:2f:cf:ff:62:b9:3c: e2:e7:37:6c:6f:5b:61:3c:d6:c5:f5:f5:0f:d1:f5: da:50:e6:96:55:49:e2:7f:79:bd:ce:a1:28:71:76: 70:93:36:1c:71:06:63:c1:4c:ae:66:87:af:62:a4: 54:6c:99:58:55:45:49:a5:b5:42:60:56:9b:b4:79: 24:39:ac:4f:96:f2:70:f7:26:44:d8:0b:b3:3d:fa: e0:7b:fb:e6:df:61:b3:d6:18:dd:53:4a:ab:61:ac: ea:1d:e4:dc:a4:c4:1d:3d:3b:64:ee:78:c0:b2:f5: d1:77:1b:18:1b:fa:af:bc:8c:03:81:3c:91:76:82: 87:d2:29:ae:42:97:54:e1:7b:b5:e7:af:e1:c5:fa: 5b:1a:7d:e5:32:01:b9:fc:55:f1:80:64:58:6e:a6: 24:9f:9d:50:77:81:b6:de:57:5b:85:1f:0c:0f:92: 87:75:6f:4e:46:07:90:69:75:2b:a5:c1:aa:bb:1c: 00:48:3b:e2:c9:c5:eb:b9:b0:4f:82:10:07:f7:af: 7d:9f:08:f0:56:70:36:c8:9f:d0:c8:44:d7:ca:8a: 23:79:22:34:d4:7f:3d:da:bb:33:49:02:fc:87:a7: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7A:F7:BA:87:FF:18:60:9F:88:4B:32:BA:CF:70:B5:88:FF:D8:43 X509v3 Authority Key Identifier: keyid:C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ae:0f:ae:4c:87:5c:79:c0:18:95:fe:c5:bd:0e:ca:8a:d1: 97:6c:7e:c6:85:2f:14:bf:ef:91:02:9a:5b:0d:b9:8d:35:bb: 04:88:12:3b:91:cc:a7:27:1e:aa:9d:6a:d3:50:7c:47:72:a8: a1:d1:3a:49:48:24:bf:97:fb:07:69:76:f1:55:20:40:48:2f: 0a:ec:4d:05:c6:33:29:e9:46:41:43:b3:8e:ee:0a:9d:3e:46: df:f5:75:39:e9:39:5f:1b:f1:f2:35:11:bc:9c:27:0e:0a:a6: 3c:60:84:f3:45:12:d0:9c:54:52:35:89:7e:c1:07:22:76:82: 1e:36:8f:9e:b1:e4:5c:69:4a:e0:ac:46:f1:5b:0a:59:24:08: cb:11:e4:2b:11:2f:40:7e:5e:81:9e:bd:41:55:20:79:83:a7: 18:34:40:5b:b5:4f:7a:e1:cf:a3:ff:6c:40:e5:e4:0d:3a:a3: c2:d5:b1:bf:27:1d:1c:31:12:ad:56:f6:73:56:83:45:9c:0a: fe:9b:89:80:d5:8a:64:d2:3e:ea:7c:ac:1a:12:21:89:99:3e: e3:b3:19:08:35:6f:f6:5a:1f:8f:2c:77:23:07:af:b7:73:c7: 40:37:45:f2:0a:8b:98:38:fd:08:a6:dd:19:2c:e8:e2:21:46: 7c:3c:7e:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzU2RDExMC8GA1UEBRMoQzM3RUY3QzhDMzQ0RDMxODU4MjlCQzJDQjk5NkM4OTRB QUE4MEVGMzAeFw0yNTA0MjUwNTQ0MjNaFw0yNTA1MDIwNTQ0MjNaMBgxFjAUBgNV BAMTDTY4MGIyMTM4LTk4MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwjhwXcSPN87zlar1pz1WbVSeQDJtxgC/P/2K5POLnN2xvW2E81sX19Q/R9dpQ 5pZVSeJ/eb3OoShxdnCTNhxxBmPBTK5mh69ipFRsmVhVRUmltUJgVpu0eSQ5rE+W 8nD3JkTYC7M9+uB7++bfYbPWGN1TSqthrOod5NykxB09O2TueMCy9dF3Gxgb+q+8 jAOBPJF2gofSKa5Cl1The7Xnr+HF+lsafeUyAbn8VfGAZFhupiSfnVB3gbbeV1uF HwwPkod1b05GB5BpdSulwaq7HABIO+LJxeu5sE+CEAf3r32fCPBWcDbIn9DIRNfK iiN5IjTUfz3auzNJAvyHp3j5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOXr3uof/ GGCfiEsyus9wtYj/2EMwHwYDVR0jBBgwFoAUw373yMNE0xhYKbwsuZbIlKqoDvMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NTZELzg0MjIwNkQ0NkI1 NDExRUZCOEE4QTYxQUM0RjlBRTAyL3czNzN5TU5FMHhoWUtid3N1WmJJbEtxb0R2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdzM3M3lNTkUweGhZS2J3c3VaYklsS3FvRHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NTZELzg0MjIwNkQ0NkI1NDExRUZCOEE4QTYxQUM0RjlBRTAyL3czNzN5TU5FMHho WUtid3N1WmJJbEtxb0R2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEGuD65Mh1x5wBiV/sW9DsqK0ZdsfsaFLxS/75ECmlsNuY01uwSIEjuR zKcnHqqdatNQfEdyqKHROklIJL+X+wdpdvFVIEBILwrsTQXGMynpRkFDs47uCp0+ Rt/1dTnpOV8b8fI1EbycJw4KpjxghPNFEtCcVFI1iX7BByJ2gh42j56x5FxpSuCs RvFbClkkCMsR5CsRL0B+XoGevUFVIHmDpxg0QFu1T3rhz6P/bEDl5A06o8LVsb8n HRwxEq1W9nNWg0WcCv6biYDVimTSPup8rBoSIYmZPuOzGQg1b/ZaH48sdyMHr7dz x0A3RfIKi5g4/Qim3Rks6OIhRnw8fsU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:57 2025 by rpki-client