$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: IMtgWqKUK8QbzRCk9PZJhZd4hni5ojNfSysnsaDCiGs= Subject key identifier: 78:D9:D5:75:3F:B9:C8:70:2B:90:01:66:77:F7:C3:EA:63:82:26:B8 Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 0103 Signing time: Fri 25 Apr 2025 04:10:19 +0000 Manifest this update: Fri 25 Apr 2025 04:10:19 +0000 Manifest next update: Fri 02 May 2025 04:10:19 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: ZT/17alo/8RFSfG95iYpx8F4NOsPy+QE0RxIxRAoQBk=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: Apr 25 04:10:19 2025 GMT Not After : May 2 04:10:19 2025 GMT Subject: CN=680b0b2b-1540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:aa:bc:1e:6f:82:06:99:a3:dc:dd:06:b4: 27:8f:35:e1:4c:7c:3f:c9:54:0f:fc:e0:3a:90:49: fb:4f:88:4c:a0:3e:c7:0f:0c:4b:e0:3d:d3:e4:06: 26:31:e0:18:f6:b8:e0:0f:f3:56:4b:b3:d9:49:20: 37:da:95:93:b5:ad:0d:30:bc:d2:76:28:f2:1a:12: 2f:54:51:fc:8b:74:23:01:6b:47:d7:34:bc:7f:74: f4:33:f3:f3:37:53:53:8a:26:df:6d:f1:03:9b:5e: 57:a4:08:e5:23:07:aa:db:a5:38:b7:ff:af:3b:78: c5:8d:9d:30:c2:cd:60:3e:01:a3:c2:ec:0e:c8:3e: 50:00:a3:cf:11:1f:88:88:4f:85:eb:84:a8:d1:d4: 78:23:6e:6a:b5:fd:66:98:ed:c3:f2:7e:c8:09:8a: c0:55:2d:81:69:c7:8d:17:b3:e5:61:92:3b:eb:5b: 8b:4e:4a:cc:83:19:fc:ba:fc:e8:c5:e1:0b:03:f7: 4f:26:fc:9f:8a:e7:86:40:5f:8b:5a:e4:c0:bb:fa: ab:fc:00:06:ee:f1:24:52:71:33:7e:0e:90:60:69: 50:be:2b:65:a1:cb:33:bd:f0:cc:d1:00:e8:cd:ab: dd:8d:66:47:8e:81:27:12:10:7a:cc:8d:17:45:31: a7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D9:D5:75:3F:B9:C8:70:2B:90:01:66:77:F7:C3:EA:63:82:26:B8 X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:fd:62:8e:56:dc:69:9c:55:5c:5e:b4:f7:48:d0:1a:a6:5c: 1f:a3:94:c5:f4:7a:23:6c:5d:f7:f0:ca:ba:6b:4d:06:d5:dc: 6b:ed:37:ad:b0:47:0a:2d:a1:85:6f:7e:72:3b:40:0c:74:b6: ce:1a:5c:e4:4b:4f:87:d7:d8:6d:90:6b:62:d5:6b:06:41:c6: 16:87:d5:f8:a2:d8:84:28:ab:c0:80:31:d7:24:89:f6:61:d5: c3:16:bf:40:2a:9a:93:10:65:78:52:3f:de:dd:b1:c0:7a:da: c1:5e:d0:ad:f3:92:21:a0:86:90:81:97:e6:be:52:40:dd:67: 09:60:4b:e5:59:63:24:31:c6:13:bf:7e:04:cc:a3:ac:bd:e1: 4e:c4:da:8e:95:3d:9b:dc:1e:0a:bb:af:3c:01:c5:75:05:53: 8e:0d:d3:83:c9:ff:42:f0:f7:0c:b1:2e:a2:bd:65:cd:49:79: 74:1f:11:4c:84:3b:89:6e:38:9c:08:f3:18:bf:dd:04:c1:5b: b2:4a:73:89:05:dc:59:92:50:30:d0:41:85:45:4a:7c:42:dc: 94:2d:2b:bf:cf:ac:59:0d:c2:0c:48:7c:19:f5:6d:50:9d:2e: d3:73:a8:77:6a:9b:95:ac:b7:a5:fc:57:2d:f7:c9:2b:bd:1a: 99:3a:20:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjUwNDI1MDQxMDE5WhcNMjUwNTAyMDQxMDE5WjAYMRYwFAYD VQQDEw02ODBiMGIyYi0xNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3eqvB5vggaZo9zdBrQnjzXhTHw/yVQP/OA6kEn7T4hMoD7HDwxL4D3T5AYm MeAY9rjgD/NWS7PZSSA32pWTta0NMLzSdijyGhIvVFH8i3QjAWtH1zS8f3T0M/Pz N1NTiibfbfEDm15XpAjlIweq26U4t/+vO3jFjZ0wws1gPgGjwuwOyD5QAKPPER+I iE+F64So0dR4I25qtf1mmO3D8n7ICYrAVS2BaceNF7PlYZI761uLTkrMgxn8uvzo xeELA/dPJvyfiueGQF+LWuTAu/qr/AAG7vEkUnEzfg6QYGlQvitlocszvfDM0QDo zavdjWZHjoEnEhB6zI0XRTGnYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjZ1XU/ uchwK5ABZnf3w+pjgia4MB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy/WKOVtxpnFVcXrT3SNAaplwfo5TF9HojbF338Mq6a00G1dxr7Tet sEcKLaGFb35yO0AMdLbOGlzkS0+H19htkGti1WsGQcYWh9X4otiEKKvAgDHXJIn2 YdXDFr9AKpqTEGV4Uj/e3bHAetrBXtCt85IhoIaQgZfmvlJA3WcJYEvlWWMkMcYT v34EzKOsveFOxNqOlT2b3B4Ku688AcV1BVOODdODyf9C8PcMsS6ivWXNSXl0HxFM hDuJbjicCPMYv90EwVuySnOJBdxZklAw0EGFRUp8QtyULSu/z6xZDcIMSHwZ9W1Q nS7Tc6h3apuVrLel/Fct98krvRqZOiBf -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:06 2025 by rpki-client