$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft File: wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft (raw, json) Hash identifier: oMGxDGsb3uSqAxrYE4X2FlqEO6QsOTdS7qDAKBps4vk= Subject key identifier: 76:FB:2C:10:AA:51:CF:09:8E:13:62:95:21:A1:47:B7:86:05:F7:31 Authority key identifier: C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D Certificate issuer: /CN=A913DA3E/serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft Manifest number: 0673 Signing time: Thu 24 Apr 2025 22:06:28 +0000 Manifest this update: Thu 24 Apr 2025 22:06:27 +0000 Manifest next update: Thu 01 May 2025 22:06:27 +0000 Files and hashes: 1: wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl (hash: 4/l1gBtiKc/aQ9Mr2HUW9zqkyg8T1BRtrhADteQxQiw=) 2: 19AB8E92734611EB816DB064C4F9AE02.roa (hash: qtAk8oTZDrgTWNBm9Xz8I2B3TKuJD5JEiZtJXgjDA28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA3E, serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Validity Not Before: Apr 24 22:06:27 2025 GMT Not After : May 1 22:06:27 2025 GMT Subject: CN=680ab5e3-5375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:7c:04:d3:13:d3:5d:7b:f4:ec:5a:95:30: 28:fc:8f:d0:d6:f2:0d:ca:d3:0e:dd:f3:cc:84:10: 48:bf:ee:e3:8a:9b:ba:70:1d:25:7e:0b:39:5f:f5: 6f:90:54:a5:91:87:43:14:3c:8f:2a:e8:84:65:5e: 6a:12:a9:96:84:1d:de:78:97:e0:69:c5:68:dc:cd: 93:4a:5c:0f:2f:fd:75:46:04:ae:27:e9:b9:4b:8c: a0:bb:36:1d:0f:cc:8a:fc:5c:90:6e:90:a7:d3:72: eb:fb:95:09:b2:75:e6:68:b1:b6:73:d8:5c:52:7e: 13:b4:d0:b6:5b:4c:40:d9:ab:99:5c:42:2c:5d:76: 04:69:a9:0d:9d:a6:47:b0:be:8f:3b:8e:fa:4a:23: 91:f8:fb:22:70:e2:91:35:97:54:e5:d4:8f:bd:8a: 5f:d1:d6:5e:05:62:6c:30:48:e0:5d:b6:92:db:e9: dc:93:3f:24:8e:fd:2a:ad:b8:c5:58:8e:15:5b:d5: 86:36:d7:a9:82:69:fc:6c:37:00:77:b3:10:6a:8c: 00:a3:a0:81:82:90:73:13:7f:16:70:3e:5c:d3:94: 33:01:c2:db:18:e0:9b:fc:49:4a:39:96:ff:3b:6a: eb:ec:16:89:43:8b:21:fb:e0:dd:6d:44:56:e2:66: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FB:2C:10:AA:51:CF:09:8E:13:62:95:21:A1:47:B7:86:05:F7:31 X509v3 Authority Key Identifier: keyid:C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:44:a9:fe:da:05:59:59:42:5f:58:96:8d:5b:f5:c9:dd:9d: 42:c7:5a:d3:9e:e5:85:9b:9d:ce:85:05:b6:c1:4a:90:a3:67: cd:9b:99:7c:93:12:01:41:e3:20:8f:25:39:7f:ee:49:4d:1f: 0a:d8:91:03:ac:ca:12:87:2b:2d:b6:72:33:60:4c:ac:5d:bd: 29:a6:7a:c6:85:da:8e:17:79:16:a0:86:4d:ae:64:73:80:be: 0f:06:df:13:c6:5f:84:b2:55:ba:c3:0a:6a:cc:a8:98:43:46: d6:3c:f9:78:47:00:6c:49:04:ba:ec:4f:d4:b7:ad:73:0d:ef: 30:43:fd:e5:e6:49:1d:f3:b8:28:4a:bd:91:49:4a:79:93:19: ac:fa:31:df:3c:3a:86:6c:9f:49:44:80:b1:f1:29:2f:8e:9e: cb:6c:bc:e0:82:bd:17:97:37:d9:cd:34:84:2b:9b:52:79:95: 52:4b:fb:77:e5:9a:49:ac:14:52:36:3a:9f:43:f3:7d:1d:1b: 8c:4b:08:44:0e:02:14:c3:8a:b1:da:bc:66:5e:e1:fb:c0:62: 5f:6f:f9:3c:f2:e9:19:c4:1d:18:3e:f8:75:a0:6d:df:2d:a4: 57:a9:66:bd:bc:f2:3b:19:14:fa:6e:03:6a:45:13:db:89:da: 62:b7:c2:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBM0UxMTAvBgNVBAUTKEMxM0Q4RjgyQjNEM0NFNDc0NjUzNTQwRTUzNjVDNEM5 MDg5NEMwM0QwHhcNMjUwNDI0MjIwNjI3WhcNMjUwNTAxMjIwNjI3WjAYMRYwFAYD VQQDEw02ODBhYjVlMy01Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXl8BNMT01179OxalTAo/I/Q1vINytMO3fPMhBBIv+7jipu6cB0lfgs5X/Vv kFSlkYdDFDyPKuiEZV5qEqmWhB3eeJfgacVo3M2TSlwPL/11RgSuJ+m5S4yguzYd D8yK/FyQbpCn03Lr+5UJsnXmaLG2c9hcUn4TtNC2W0xA2auZXEIsXXYEaakNnaZH sL6PO476SiOR+PsicOKRNZdU5dSPvYpf0dZeBWJsMEjgXbaS2+nckz8kjv0qrbjF WI4VW9WGNtepgmn8bDcAd7MQaowAo6CBgpBzE38WcD5c05QzAcLbGOCb/ElKOZb/ O2rr7BaJQ4sh++DdbURW4mbfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb7LBCq Uc8JjhNilSGhR7eGBfcxMB8GA1UdIwQYMBaAFME9j4Kz085HRlNUDlNlxMkIlMA9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREEzRS80MjI2ODc0ODcz NDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHprZEdVMVFPVTJYRXlRaVV3 RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUMlBnclBUemtkR1UxUU9VMlhFeVFpVXdEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REEzRS80MjI2ODc0ODczNDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHpr ZEdVMVFPVTJYRXlRaVV3RDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/RKn+2gVZWUJfWJaNW/XJ3Z1Cx1rTnuWFm53OhQW2wUqQo2fNm5l8 kxIBQeMgjyU5f+5JTR8K2JEDrMoShysttnIzYEysXb0ppnrGhdqOF3kWoIZNrmRz gL4PBt8Txl+EslW6wwpqzKiYQ0bWPPl4RwBsSQS67E/Ut61zDe8wQ/3l5kkd87go Sr2RSUp5kxms+jHfPDqGbJ9JRICx8Skvjp7LbLzggr0XlzfZzTSEK5tSeZVSS/t3 5ZpJrBRSNjqfQ/N9HRuMSwhEDgIUw4qx2rxmXuH7wGJfb/k88ukZxB0YPvh1oG3f LaRXqWa9vPI7GRT6bgNqRRPbidpit8Kl -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:54 2025 by rpki-client