$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft File: _1wQCXXjaGJFyt5XnFdDO7_faBk.mft (raw, json) Hash identifier: XV7tbH3QmvFnTzxhFZX/KdqV29DMEbqfym5rpLVwulU= Subject key identifier: F3:D2:22:F9:DF:6A:43:5C:CE:BF:AD:18:6B:1C:04:FC:87:54:8B:B8 Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19 Certificate issuer: /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft Manifest number: 0106 Signing time: Fri 25 Apr 2025 04:05:55 +0000 Manifest this update: Fri 25 Apr 2025 04:05:54 +0000 Manifest next update: Fri 02 May 2025 04:05:54 +0000 Files and hashes: 1: _1wQCXXjaGJFyt5XnFdDO7_faBk.crl (hash: c008hEPYiGrJelfHbpFylCGZp1x0XoFshrc9z6EX1QI=) 2: 749936E290D511EE816E5C34C4F9AE02.roa (hash: LprFRa9DDPfl/3Qfhn6O1nEl8KrrEuPylvF2cGWjxe4=) 3: 740BB01A90D511EE816E5C34C4F9AE02.roa (hash: n+XeE9XCFt/q45U7WPv35bND6hFpIvrgPLf9ca2BNws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144913, serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819 Validity Not Before: Apr 25 04:05:54 2025 GMT Not After : May 2 04:05:54 2025 GMT Subject: CN=680b0a22-bea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2b:ec:a0:d5:c2:e6:2a:96:6e:55:9f:24:6d: 31:3f:73:7f:e9:b1:05:ee:0f:3e:9b:7c:6a:d4:9f: da:e6:a7:32:72:fe:30:4d:8f:93:08:8f:e5:4a:6f: bc:a4:8c:fd:02:89:00:9c:93:ab:60:61:11:49:f6: 89:e7:29:1c:15:46:67:c8:67:c5:50:eb:b7:f9:ae: 03:8d:af:a7:7d:f5:7b:a1:9d:e3:2a:9f:5e:96:fd: e1:0f:07:a6:24:27:e9:f7:bd:83:54:e0:45:96:ed: 03:43:87:0b:c5:ef:8d:83:4a:1a:24:6f:13:44:bb: 5b:31:c9:13:69:bf:2c:c8:6b:2b:42:61:ad:cf:0b: 36:f3:d0:c6:c5:f1:b9:09:15:d2:a4:a5:49:ff:b3: a4:27:c6:c5:d6:1b:52:e2:f9:e7:23:c7:cb:ed:00: 10:1d:94:5e:0d:c3:35:39:d4:bc:1e:ba:c6:21:c4: 7b:1f:1f:37:27:fc:e9:cf:4b:0e:cd:40:b3:40:6e: b7:5e:17:74:d7:c5:40:1d:8e:ca:bf:83:70:51:62: 3b:13:d6:54:00:1c:f2:6e:7a:c2:39:2f:74:8c:28: d3:75:95:2c:14:c2:ac:58:f8:cf:de:bb:22:de:83: 67:d6:ef:fa:92:df:b1:01:eb:89:32:8a:9f:a4:e3: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D2:22:F9:DF:6A:43:5C:CE:BF:AD:18:6B:1C:04:FC:87:54:8B:B8 X509v3 Authority Key Identifier: keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:98:c9:71:3b:de:a1:b0:ad:95:86:13:43:31:1a:56:ea:09: 77:e8:6b:fb:9f:bb:da:66:70:7f:2d:fd:1a:d4:b4:1d:a4:af: 7f:61:81:02:89:1b:f2:b8:bf:2a:cf:db:18:05:d3:be:b9:60: 44:f1:8c:f4:8b:7e:ab:73:9c:09:ac:b0:6c:6d:45:c4:db:dc: 89:ae:00:f3:1d:e6:a3:e0:1d:4c:e6:25:4b:15:e4:49:b1:95: 5a:0a:9b:fb:44:c5:fa:73:51:92:ce:2f:88:60:2d:a2:e6:92: e2:0a:55:3c:e3:e6:2b:6e:22:31:43:ef:ad:92:05:ef:15:ad: 24:96:51:9e:e3:cb:c2:51:e4:2e:0a:c2:fa:b1:9a:24:ad:c5: 32:05:c1:8c:b6:47:4e:fc:7a:86:b6:65:c4:b3:ef:5e:10:ab: 14:9f:c2:02:bd:ee:a2:eb:ac:f8:8b:a7:3d:f3:cb:0b:11:63: a8:ff:a9:ab:66:25:04:fc:45:c8:c5:3e:b0:a6:85:5a:f0:e8: 75:3c:2c:29:b9:af:18:67:8e:28:35:aa:7d:4c:76:3d:cb:f4: e9:92:e9:75:e8:55:e4:8d:be:fa:61:a6:ea:e2:1e:17:be:58: d0:87:2c:18:a5:d5:a8:da:01:55:3d:0f:8e:ca:b2:c4:0b:d1: 31:77:17:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5MTMxMTAvBgNVBAUTKEZGNUMxMDA5NzVFMzY4NjI0NUNBREU1NzlDNTc0MzNC QkZERjY4MTkwHhcNMjUwNDI1MDQwNTU0WhcNMjUwNTAyMDQwNTU0WjAYMRYwFAYD VQQDEw02ODBiMGEyMi1iZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCvsoNXC5iqWblWfJG0xP3N/6bEF7g8+m3xq1J/a5qcycv4wTY+TCI/lSm+8 pIz9AokAnJOrYGERSfaJ5ykcFUZnyGfFUOu3+a4Dja+nffV7oZ3jKp9elv3hDwem JCfp972DVOBFlu0DQ4cLxe+Ng0oaJG8TRLtbMckTab8syGsrQmGtzws289DGxfG5 CRXSpKVJ/7OkJ8bF1htS4vnnI8fL7QAQHZReDcM1OdS8HrrGIcR7Hx83J/zpz0sO zUCzQG63Xhd018VAHY7Kv4NwUWI7E9ZUABzybnrCOS90jCjTdZUsFMKsWPjP3rsi 3oNn1u/6kt+xAeuJMoqfpOMZZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPSIvnf akNczr+tGGscBPyHVIu4MB8GA1UdIwQYMBaAFP9cEAl142hiRcreV5xXQzu/32gZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDkxMy8wNkY1QjVDQTkw RDUxMUVFQkQ1Nzk4MzNDNEY5QUUwMi9fMXdRQ1hYamFHSkZ5dDVYbkZkRE83X2Zh QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xd1FDWFhqYUdKRnl0NVhuRmRETzdfZmFCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDkxMy8wNkY1QjVDQTkwRDUxMUVFQkQ1Nzk4MzNDNEY5QUUwMi9fMXdRQ1hYamFH SkZ5dDVYbkZkRE83X2ZhQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTmMlxO96hsK2VhhNDMRpW6gl36Gv7n7vaZnB/Lf0a1LQdpK9/YYEC iRvyuL8qz9sYBdO+uWBE8Yz0i36rc5wJrLBsbUXE29yJrgDzHeaj4B1M5iVLFeRJ sZVaCpv7RMX6c1GSzi+IYC2i5pLiClU84+YrbiIxQ++tkgXvFa0kllGe48vCUeQu CsL6sZokrcUyBcGMtkdO/HqGtmXEs+9eEKsUn8ICve6i66z4i6c988sLEWOo/6mr ZiUE/EXIxT6wpoVa8Oh1PCwpua8YZ44oNap9THY9y/Tpkul16FXkjb76Yabq4h4X vljQhywYpdWo2gFVPQ+OyrLEC9Exdxdk -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:48 2025 by rpki-client