$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft File: W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft (raw, json) Hash identifier: zDq/hDyusq9cZKKql6Ug4f2Jf04VQ73rgIWAKM6qVag= Subject key identifier: 2F:DD:9F:DA:A5:B3:1E:AD:33:5E:4E:F2:D4:92:1C:34:6B:2D:28:B3 Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF Certificate issuer: /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft Manifest number: 0528 Signing time: Thu 24 Apr 2025 23:18:25 +0000 Manifest this update: Thu 24 Apr 2025 23:18:25 +0000 Manifest next update: Thu 01 May 2025 23:18:25 +0000 Files and hashes: 1: W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl (hash: +GEIgWRbHT9/mSmHnQfv/R5D8XbVIguvz75E4YvtvUI=) 2: 4A4C8CD0F67311EBA0F18818C4F9AE02.roa (hash: 3gaCcI2B39Ypqww+a42sCy+UnmO00x0eV5GOdvcimLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B714, serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF Validity Not Before: Apr 24 23:18:25 2025 GMT Not After : May 1 23:18:25 2025 GMT Subject: CN=680ac6c1-7782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:da:d2:5b:4d:fa:c8:e4:32:2f:cd:7e:e3:57: 0e:96:ad:41:32:16:49:c5:bb:8a:5a:01:c1:4a:2e: cf:da:b2:e8:b3:1b:9d:0b:28:fb:6b:8b:9f:f7:e8: 0f:1b:5c:9d:b6:52:85:a0:f9:99:ab:ab:4d:ca:63: 44:1b:5b:d7:ea:ec:76:64:31:2e:46:ad:f4:b3:ed: 55:52:4b:f7:61:56:a8:bd:16:06:b2:9a:d6:d6:22: e1:45:f1:b6:73:c6:fb:61:51:83:17:43:6b:18:f2: b6:b3:7c:f5:c9:91:22:0f:fa:b1:1d:80:96:cc:cc: c4:57:91:66:b8:15:d2:5b:fa:47:fb:36:2a:d5:5e: 8a:98:88:39:4e:a8:bb:aa:f2:ec:61:fd:4f:a1:98: 5f:bf:e2:fe:2c:98:e1:ab:b2:0b:fd:2b:89:53:f8: bf:91:d3:4a:59:5e:b4:ac:3a:c9:e8:c6:f3:7d:eb: 20:40:9c:7d:36:4d:f1:e2:3b:dd:b2:5c:02:f9:a8: 01:2d:dc:f4:6f:06:86:25:a9:0e:51:8d:c2:38:7d: 83:6a:80:95:f9:9b:d1:d6:e3:1e:62:a5:c0:de:67: eb:e9:ae:ad:f5:99:62:f9:d1:2a:91:ef:90:74:6b: 40:e3:e0:7e:fa:31:1c:d1:fd:33:b4:de:77:9c:64: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DD:9F:DA:A5:B3:1E:AD:33:5E:4E:F2:D4:92:1C:34:6B:2D:28:B3 X509v3 Authority Key Identifier: keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:77:f3:1c:5e:ef:af:4b:f1:c7:52:43:18:5e:35:fa:a0:1a: 74:1e:c8:6f:b7:db:35:a2:cf:0c:b4:60:91:8d:51:16:d7:92: 9f:10:ed:97:7b:9a:82:e7:f8:6c:0b:2a:cd:7c:ee:7c:12:a9: e3:e0:65:3d:91:24:40:bf:5e:46:fb:4d:7d:7d:c0:96:25:bd: 7d:24:d7:16:3c:96:df:56:56:37:14:f2:9b:86:f6:e5:01:25: 05:1a:b6:e8:db:c2:f4:d8:ac:d3:9d:90:58:c2:24:8e:6f:59: 24:b6:f0:84:ea:d2:fc:29:a0:77:f3:98:58:0f:bb:9c:c0:84: 75:df:25:d5:fa:81:67:0f:fa:82:f9:78:88:ac:71:e0:57:cd: b0:d0:b7:d4:da:f8:08:a7:62:7a:3a:42:9c:d3:8a:39:c1:b8: bb:24:42:12:93:7d:a6:59:bf:fe:f5:28:fe:5c:ea:88:60:92: fc:35:4e:7a:2e:b5:8a:2d:4a:e8:bc:3b:36:e0:2c:4d:2a:ef: f9:cb:76:af:fa:24:09:97:23:6c:b0:b5:17:b4:ce:ff:3c:1a: 27:d0:51:6c:63:b9:a3:a6:19:00:3f:78:ce:ad:3d:e6:7b:95: 20:ab:26:7b:8d:c9:e0:e7:b3:9a:82:3e:5e:2e:59:ec:0d:23: 42:9e:d4:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3MTQxMTAvBgNVBAUTKDVCRTk3RkE0RDM0QjNFRDMxREJENjQ4NjBFMTgwMDkz RkVBMTExREYwHhcNMjUwNDI0MjMxODI1WhcNMjUwNTAxMjMxODI1WjAYMRYwFAYD VQQDEw02ODBhYzZjMS03NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9NrSW036yOQyL81+41cOlq1BMhZJxbuKWgHBSi7P2rLosxudCyj7a4uf9+gP G1ydtlKFoPmZq6tNymNEG1vX6ux2ZDEuRq30s+1VUkv3YVaovRYGsprW1iLhRfG2 c8b7YVGDF0NrGPK2s3z1yZEiD/qxHYCWzMzEV5FmuBXSW/pH+zYq1V6KmIg5Tqi7 qvLsYf1PoZhfv+L+LJjhq7IL/SuJU/i/kdNKWV60rDrJ6MbzfesgQJx9Nk3x4jvd slwC+agBLdz0bwaGJakOUY3COH2DaoCV+ZvR1uMeYqXA3mfr6a6t9Zli+dEqke+Q dGtA4+B++jEc0f0ztN53nGSVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/dn9ql sx6tM15O8tSSHDRrLSizMB8GA1UdIwQYMBaAFFvpf6TTSz7THb1khg4YAJP+oRHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjcxNC82NDA0QzAxOEY2 NzExMUVCOEI2M0ExMTdDNEY5QUUwMi9XLWxfcE5OTFB0TWR2V1NHRGhnQWtfNmhF ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ctbF9wTk5MUHRNZHZXU0dEaGdBa182aEVkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjcxNC82NDA0QzAxOEY2NzExMUVCOEI2M0ExMTdDNEY5QUUwMi9XLWxfcE5OTFB0 TWR2V1NHRGhnQWtfNmhFZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5d/McXu+vS/HHUkMYXjX6oBp0Hshvt9s1os8MtGCRjVEW15KfEO2X e5qC5/hsCyrNfO58Eqnj4GU9kSRAv15G+019fcCWJb19JNcWPJbfVlY3FPKbhvbl ASUFGrbo28L02KzTnZBYwiSOb1kktvCE6tL8KaB385hYD7ucwIR13yXV+oFnD/qC +XiIrHHgV82w0LfU2vgIp2J6OkKc04o5wbi7JEISk32mWb/+9Sj+XOqIYJL8NU56 LrWKLUrovDs24CxNKu/5y3av+iQJlyNssLUXtM7/PBon0FFsY7mjphkAP3jOrT3m e5UgqyZ7jcng57Oagj5eLlnsDSNCntQE -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:02 2025 by rpki-client