$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: wGfBD0NW93crw3EYZFM8Tb86D8f8B/xLRHvfJJ2trzM= Subject key identifier: A9:9D:27:54:F9:94:CD:22:3A:74:F4:F3:79:EE:EC:91:67:9B:F8:4C Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 07ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 07E8 Signing time: Thu 24 Apr 2025 20:48:46 +0000 Manifest this update: Thu 24 Apr 2025 20:48:45 +0000 Manifest next update: Thu 01 May 2025 20:48:45 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: qGj3ZgjvIkZJvVC6s7dXXM+OznYrWKw7MCvSQdwi12k=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2029 (0x7ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Apr 24 20:48:45 2025 GMT Not After : May 1 20:48:45 2025 GMT Subject: CN=680aa3ae-dc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:3d:97:ac:d9:b0:81:a1:47:10:7c:ad:2c: ff:8c:ac:93:2f:aa:80:25:9f:21:86:03:20:b1:c1: 96:25:99:17:95:07:85:5c:f5:7c:71:74:81:c6:0a: 11:a8:96:cd:3b:82:91:5e:9d:8c:7c:0d:ee:b3:4e: cc:8b:a6:87:dc:a1:5b:85:9f:d8:2e:a1:6e:b9:14: 62:58:fb:a8:ce:57:f5:52:e1:ee:31:41:06:4a:62: 5f:af:4c:71:0c:a2:bb:1f:12:21:7b:5d:d2:34:d1: 0d:2b:ef:66:a6:a3:a0:e1:03:9a:b7:79:cc:63:2d: 26:00:b5:72:39:d5:7e:e4:ed:18:4e:5c:71:b4:34: b8:ea:2a:e2:52:99:ac:b2:59:c1:9e:9a:13:90:f0: c6:2e:36:ad:23:6d:76:61:7b:e3:f1:d6:d2:5b:81: 9d:16:9d:a8:fd:3d:f3:2c:51:02:ed:87:38:0f:33: ac:a4:e3:15:9d:fe:80:78:47:b4:d0:be:3a:29:3b: f4:d5:63:66:ce:0f:1b:e0:f8:66:7f:fe:39:05:eb: 41:ad:d0:29:83:d9:e0:16:47:17:56:2f:01:9a:aa: 33:b0:4d:ed:e6:b0:db:06:3a:af:8e:2a:b7:1d:e1: 87:d2:24:ef:41:5f:a6:0a:69:9e:bd:59:5f:0c:d8: 01:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9D:27:54:F9:94:CD:22:3A:74:F4:F3:79:EE:EC:91:67:9B:F8:4C X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:67:27:3e:97:ee:65:5c:cf:28:6f:07:19:0a:28:eb:54:64: 16:39:86:da:e9:58:be:93:4f:3f:15:88:c0:22:9d:d7:47:0b: 1b:3d:6e:86:85:29:37:86:0e:dd:75:2f:b4:9c:fc:2a:1b:92: 92:67:03:c8:31:40:54:52:ab:38:2d:6c:ce:87:be:89:0b:f7: 68:63:da:cb:3b:a3:46:8a:e6:66:72:ae:84:8d:9e:65:7a:32: 25:c5:c3:57:97:63:0d:83:c2:57:84:a8:a4:7c:f4:a4:95:4b: fe:33:7c:2f:09:c8:af:a3:22:b0:7e:77:3c:57:c2:98:15:b2: 22:3d:25:35:8f:2f:df:d1:11:7f:52:e5:fe:c4:23:67:d0:aa: 40:5b:60:94:32:30:84:60:06:a8:d0:19:92:e2:02:a0:71:4a: 3f:09:a7:3c:a4:a4:58:91:9a:ab:3a:10:0b:1c:da:71:eb:78: 08:d2:bd:ee:b6:9a:8f:a2:4a:df:9e:94:f0:2e:c0:c6:d4:cd: ba:58:65:a9:53:66:f1:3a:4d:1d:97:27:3e:95:ba:dd:0f:e5: 36:1f:fe:20:0f:2b:41:a0:7b:7a:b2:be:26:bb:3b:28:00:62: cc:d0:09:2f:2f:ec:4a:96:b3:6b:f4:10:26:fa:4c:91:5b:86: 47:2c:f1:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUwNDI0MjA0ODQ1WhcNMjUwNTAxMjA0ODQ1WjAYMRYwFAYD VQQDEw02ODBhYTNhZS1kYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz109l6zZsIGhRxB8rSz/jKyTL6qAJZ8hhgMgscGWJZkXlQeFXPV8cXSBxgoR qJbNO4KRXp2MfA3us07Mi6aH3KFbhZ/YLqFuuRRiWPuozlf1UuHuMUEGSmJfr0xx DKK7HxIhe13SNNENK+9mpqOg4QOat3nMYy0mALVyOdV+5O0YTlxxtDS46iriUpms slnBnpoTkPDGLjatI212YXvj8dbSW4GdFp2o/T3zLFEC7Yc4DzOspOMVnf6AeEe0 0L46KTv01WNmzg8b4Phmf/45BetBrdApg9ngFkcXVi8BmqozsE3t5rDbBjqvjiq3 HeGH0iTvQV+mCmmevVlfDNgBAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmdJ1T5 lM0iOnT083nu7JFnm/hMMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Zyc+l+5lXM8obwcZCijrVGQWOYba6Vi+k08/FYjAIp3XRwsbPW6G hSk3hg7ddS+0nPwqG5KSZwPIMUBUUqs4LWzOh76JC/doY9rLO6NGiuZmcq6EjZ5l ejIlxcNXl2MNg8JXhKikfPSklUv+M3wvCcivoyKwfnc8V8KYFbIiPSU1jy/f0RF/ UuX+xCNn0KpAW2CUMjCEYAao0BmS4gKgcUo/Cac8pKRYkZqrOhALHNpx63gI0r3u tpqPokrfnpTwLsDG1M26WGWpU2bxOk0dlyc+lbrdD+U2H/4gDytBoHt6sr4muzso AGLM0AkvL+xKlrNr9BAm+kyRW4ZHLPEW -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:02 2025 by rpki-client