$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: KgLVJErzcVDkvsgcLVuYYnfFy5UqxjcfFmtHPWaNpeQ= Subject key identifier: 25:EA:CD:F4:AF:36:77:18:E2:D0:35:53:10:53:F3:5B:24:1A:62:0A Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: F7 Signing time: Fri 25 Apr 2025 04:19:48 +0000 Manifest this update: Fri 25 Apr 2025 04:19:47 +0000 Manifest next update: Fri 02 May 2025 04:19:47 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: s3xL6JBY65h3+q/NZw5pTVDFG9RPV8BrcyGinRFgqaQ=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: Apr 25 04:19:47 2025 GMT Not After : May 2 04:19:47 2025 GMT Subject: CN=680b0d63-1ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:bd:fe:fc:0d:b8:b1:b1:2f:49:e8:c2:c4: 45:e5:5a:b7:6a:f1:b8:c3:9a:6f:75:18:ff:dc:47: eb:bb:20:89:e2:81:6f:02:d7:5c:b7:bf:42:b7:14: ca:c7:c1:95:38:b2:d4:49:f7:b8:96:2a:71:f7:1e: 64:8a:a3:17:6e:6a:c8:8b:21:79:da:89:19:30:df: a9:fc:3c:6c:97:24:61:79:be:83:1e:21:90:6d:00: f5:19:57:f6:e3:fa:2f:e3:4f:3f:db:b1:45:0a:2d: 1d:fc:3f:0b:96:ec:db:26:29:a2:f5:da:a7:f4:96: 17:27:16:19:09:6d:14:53:21:88:7d:e8:eb:36:22: 32:61:f4:a9:6c:f2:16:26:8c:0c:6a:05:9b:d6:07: 9d:fc:e7:71:b1:5d:2c:3c:5c:ed:c6:09:ab:18:c9: 52:21:d9:3b:61:bc:88:e6:b7:74:c9:02:40:a3:95: ee:ab:13:f7:48:29:39:94:15:66:03:05:d8:c2:b7: c6:b5:d2:ec:db:67:b5:43:16:0e:42:6a:bb:a6:d8: b0:c9:d4:a3:b3:59:9e:11:17:bd:0c:25:51:2f:27: 29:ba:ce:26:1c:1c:4e:db:5a:39:d5:d6:d1:a9:70: cd:75:71:0d:ff:35:3a:78:90:99:ba:03:6d:e8:a1: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EA:CD:F4:AF:36:77:18:E2:D0:35:53:10:53:F3:5B:24:1A:62:0A X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:58:40:3e:08:f4:00:76:73:da:e3:13:7e:13:3a:e1:91:d8: 6d:0f:89:c5:c3:09:68:29:43:69:56:7f:0a:f7:6b:a5:3d:66: ab:2d:be:55:d8:2e:ab:9d:71:a2:59:fd:4b:c9:70:95:c2:e9: 01:65:00:09:42:e3:d0:b0:be:1a:aa:4a:d1:db:c5:d5:5e:14: aa:54:f0:c3:1f:f7:41:51:c6:a6:8d:ce:c8:2d:6a:39:82:fa: d6:4d:2e:62:87:a6:6e:68:65:4b:30:18:91:00:86:59:58:9e: 88:14:41:d2:b1:d8:5b:35:b7:cd:f2:f9:f0:fd:af:08:7e:e8: 50:c9:56:cf:0b:0f:b2:5c:2e:f6:dc:43:98:03:71:a7:2d:ef: 4c:06:63:b7:d2:c6:2f:68:ad:9c:4b:b1:3e:77:9a:02:e2:64: f6:a6:d6:96:86:22:f4:35:db:19:02:cc:a5:d8:af:54:ac:35: a4:39:60:b7:eb:20:8a:97:7f:28:84:58:57:08:41:0e:ef:1b: b0:c0:79:89:88:11:7a:2b:ac:06:75:aa:69:aa:19:3f:74:31: 7b:df:9a:92:8b:ac:25:b3:48:53:4c:bd:8d:91:f7:27:ab:ae: 1c:25:4a:a3:c3:cf:fa:54:83:7a:19:14:9a:d5:d2:9b:92:48: d5:27:60:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx NjQwREQzM0EwHhcNMjUwNDI1MDQxOTQ3WhcNMjUwNTAyMDQxOTQ3WjAYMRYwFAYD VQQDEw02ODBiMGQ2My0xYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+C9/vwNuLGxL0nowsRF5Vq3avG4w5pvdRj/3EfruyCJ4oFvAtdct79CtxTK x8GVOLLUSfe4lipx9x5kiqMXbmrIiyF52okZMN+p/DxslyRheb6DHiGQbQD1GVf2 4/ov408/27FFCi0d/D8LluzbJimi9dqn9JYXJxYZCW0UUyGIfejrNiIyYfSpbPIW JowMagWb1ged/OdxsV0sPFztxgmrGMlSIdk7YbyI5rd0yQJAo5XuqxP3SCk5lBVm AwXYwrfGtdLs22e1QxYOQmq7ptiwydSjs1meERe9DCVRLycpus4mHBxO21o51dbR qXDNdXEN/zU6eJCZugNt6KFeaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXqzfSv NncY4tA1UxBT81skGmIKMB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1 Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXWEA+CPQAdnPa4xN+EzrhkdhtD4nFwwloKUNpVn8K92ulPWarLb5V 2C6rnXGiWf1LyXCVwukBZQAJQuPQsL4aqkrR28XVXhSqVPDDH/dBUcamjc7ILWo5 gvrWTS5ih6ZuaGVLMBiRAIZZWJ6IFEHSsdhbNbfN8vnw/a8IfuhQyVbPCw+yXC72 3EOYA3GnLe9MBmO30sYvaK2cS7E+d5oC4mT2ptaWhiL0NdsZAsyl2K9UrDWkOWC3 6yCKl38ohFhXCEEO7xuwwHmJiBF6K6wGdappqhk/dDF735qSi6wls0hTTL2Nkfcn q64cJUqjw8/6VIN6GRSa1dKbkkjVJ2AO -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:21 2025 by rpki-client