$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft File: 8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json) Hash identifier: ACMX0O0cldjSMgx3zbMIWhFwN+gfM6GGAjsf/mhwE/g= Subject key identifier: B9:D8:DA:49:14:DE:04:8B:0F:7B:27:68:48:32:A7:D5:71:DB:D5:76 Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17 Certificate issuer: /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft Manifest number: 4C Signing time: Fri 25 Apr 2025 06:19:50 +0000 Manifest this update: Fri 25 Apr 2025 06:19:50 +0000 Manifest next update: Fri 02 May 2025 06:19:50 +0000 Files and hashes: 1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: MRW7BEbUYPfSKpjfBPbDSSksYDDzhBTSvCpMQjZpM0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D756, serialNumber=F309B493A92EE7C6295E0090630A251A1D136517 Validity Not Before: Apr 25 06:19:50 2025 GMT Not After : May 2 06:19:50 2025 GMT Subject: CN=680b2986-6b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:51:75:8d:1b:40:0c:0d:bd:af:16:d3:fd: 1d:a5:d9:30:dc:e6:bb:70:ae:cd:59:09:69:23:83: 27:99:ec:4f:e3:42:51:4e:de:62:90:6e:18:de:5e: 3e:66:80:fb:e1:c5:ab:9a:4f:b7:0e:5a:0f:f8:b4: d2:b1:a9:ea:99:93:08:5f:d6:41:e7:20:c3:78:2d: 92:23:e4:85:5a:ea:60:2c:38:87:70:15:c3:66:eb: 88:96:1e:33:4c:47:d0:59:5e:07:b9:28:ec:ed:f8: 50:e5:72:5c:b4:3c:6f:1d:d9:d5:df:67:42:fa:f9: bf:50:16:24:43:72:7b:8c:2f:36:c6:5f:43:67:00: 5e:a4:af:84:c7:64:a3:6b:0a:da:b8:9a:25:d5:22: e9:79:96:02:d6:35:39:1b:76:2c:fc:4b:9a:f3:10: 1b:7d:87:98:b2:a1:6e:c8:9e:f5:76:c9:55:92:cc: cd:5c:68:96:76:d4:cd:8b:4f:ff:50:3f:d0:5b:7a: ff:a1:3e:1a:63:ff:36:e8:66:7c:1f:28:aa:0a:1e: af:51:3e:e4:99:fd:04:a2:92:a0:ce:51:6b:24:80: e1:16:f1:b9:3c:8e:f5:1c:a9:67:21:3a:30:47:13: c3:74:15:88:11:e4:41:60:8c:6f:99:7d:7c:fa:d0: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D8:DA:49:14:DE:04:8B:0F:7B:27:68:48:32:A7:D5:71:DB:D5:76 X509v3 Authority Key Identifier: keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a8:be:01:f9:0c:b1:15:07:9d:34:57:ad:2c:1e:b1:b5:39: 21:3f:f2:96:b1:6d:22:ac:ff:69:bc:db:ec:07:60:c3:c0:35: 12:a5:f1:f6:30:1c:37:b3:8a:50:4c:10:27:24:aa:41:8b:b4: d8:00:31:34:7a:ac:30:7f:f7:b3:c9:88:55:13:b2:7a:57:86: ff:36:42:b8:ec:34:0d:6b:75:30:ea:f5:21:1d:5f:04:61:ea: 2d:83:4a:06:aa:f4:da:a9:29:30:e3:8a:f3:1a:c0:6e:42:71: 5f:a1:89:aa:5f:85:62:3c:12:11:68:69:85:61:17:7e:5c:96: 06:39:13:b2:9e:8b:4c:83:8f:d8:9d:df:b4:82:de:56:72:67: 5a:53:49:7b:56:cd:5f:a9:0a:cb:a6:7c:ad:6c:c3:91:c6:01: 21:a4:56:78:1e:b2:11:1b:78:7c:2d:5c:99:a7:99:4a:46:2a: 0e:78:8a:57:f3:2b:38:a9:7e:44:37:a9:ee:78:3c:0c:d3:4f: ef:4b:27:08:1d:71:11:16:01:51:c1:9b:b5:bb:55:d7:d9:bb: 65:e6:02:d4:0a:c0:c7:70:27:17:98:c7:d9:08:05:37:45:5c: 8d:b2:a1:c2:b5:96:7a:df:d9:80:a6:63:b7:9e:fc:ff:5b:40: 54:48:90:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDc1NjExMC8GA1UEBRMoRjMwOUI0OTNBOTJFRTdDNjI5NUUwMDkwNjMwQTI1MUEx RDEzNjUxNzAeFw0yNTA0MjUwNjE5NTBaFw0yNTA1MDIwNjE5NTBaMBgxFjAUBgNV BAMTDTY4MGIyOTg2LTZiMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEVlF1jRtADA29rxbT/R2l2TDc5rtwrs1ZCWkjgyeZ7E/jQlFO3mKQbhjeXj5m gPvhxauaT7cOWg/4tNKxqeqZkwhf1kHnIMN4LZIj5IVa6mAsOIdwFcNm64iWHjNM R9BZXge5KOzt+FDlcly0PG8d2dXfZ0L6+b9QFiRDcnuMLzbGX0NnAF6kr4THZKNr Ctq4miXVIul5lgLWNTkbdiz8S5rzEBt9h5iyoW7InvV2yVWSzM1caJZ21M2LT/9Q P9Bbev+hPhpj/zboZnwfKKoKHq9RPuSZ/QSikqDOUWskgOEW8bk8jvUcqWchOjBH E8N0FYgR5EFgjG+ZfXz60HUXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUudjaSRTe BIsPeydoSDKn1XHb1XYwHwYDVR0jBBgwFoAU8wm0k6ku58YpXgCQYwolGh0TZRcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNENzU2LzZBNDIxQTgwQjA2 NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZcFhnQ1FZd29sR2gwVFpS Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHdtMGs2a3U1OFlwWGdDUVl3b2xHaDBUWlJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE NzU2LzZBNDIxQTgwQjA2NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZ cFhnQ1FZd29sR2gwVFpSYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFiovgH5DLEVB500V60sHrG1OSE/8paxbSKs/2m82+wHYMPANRKl8fYw HDezilBMECckqkGLtNgAMTR6rDB/97PJiFUTsnpXhv82QrjsNA1rdTDq9SEdXwRh 6i2DSgaq9NqpKTDjivMawG5CcV+hiapfhWI8EhFoaYVhF35clgY5E7Kei0yDj9id 37SC3lZyZ1pTSXtWzV+pCsumfK1sw5HGASGkVngeshEbeHwtXJmnmUpGKg54ilfz KzipfkQ3qe54PAzTT+9LJwgdcREWAVHBm7W7VdfZu2XmAtQKwMdwJxeYx9kIBTdF XI2yocK1lnrf2YCmY7ee/P9bQFRIkJQ= -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:38 2025 by rpki-client