$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft File: 1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json) Hash identifier: JkbeO+W5zJgzPfP75z0PqehQ+pgG2Q4k0Fv2RLRnAwk= Subject key identifier: A2:64:A1:F0:ED:62:C8:ED:DD:B0:6F:B4:20:BA:51:3C:E0:0F:92:82 Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 Certificate issuer: /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Certificate serial: 3473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft Manifest number: 3472 Signing time: Thu 24 Apr 2025 15:07:20 +0000 Manifest this update: Thu 24 Apr 2025 15:07:20 +0000 Manifest next update: Thu 01 May 2025 15:07:20 +0000 Files and hashes: 1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: F2NUQU0KahFUQCXTT+nTBFG9Xcz7Icpzeeu2gMNolfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13427 (0x3473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Validity Not Before: Apr 24 15:07:20 2025 GMT Not After : May 1 15:07:20 2025 GMT Subject: CN=680a53a8-cd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:ba:a6:9a:48:69:65:35:4e:ac:77:0d:97: 44:c6:06:86:db:a8:fd:ab:21:72:7f:9d:80:87:1a: 43:96:c3:52:da:17:f2:a3:81:ed:fb:e3:5b:fb:93: 35:b7:1c:47:8f:5f:f4:17:bb:a0:a7:f5:1e:9b:0f: 92:af:c2:fe:63:6b:dd:3b:6b:7a:86:64:41:e4:b6: 76:07:2b:1a:11:13:80:4a:de:a9:99:2e:4a:8c:53: 4d:64:30:2d:8b:e2:a2:16:36:8b:f3:43:0b:d4:e4: dc:95:e2:1c:9f:13:4b:e3:5e:20:f1:c7:33:64:60: 3b:65:01:d3:46:80:0d:8d:e4:c2:e3:60:04:49:49: f9:11:9f:76:17:42:55:d0:bd:3f:2e:3f:77:34:c8: d0:05:b9:33:fb:6c:21:83:a8:d0:6a:b5:cb:e1:0b: 1e:e2:5d:22:2c:0b:07:2a:66:81:fd:58:73:09:e8: 83:81:e5:a5:ea:a8:63:2c:66:16:a3:0e:73:b7:b7: f6:a2:c4:22:66:17:6e:84:65:de:88:99:2f:23:18: 3f:ef:48:07:85:c5:54:16:33:50:d4:25:7b:ad:ed: e1:b2:96:c1:72:dc:15:15:5c:7b:5c:ce:3a:f6:fb: 53:a1:13:a4:4c:52:e7:d9:27:ff:fd:ba:72:59:c6: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:64:A1:F0:ED:62:C8:ED:DD:B0:6F:B4:20:BA:51:3C:E0:0F:92:82 X509v3 Authority Key Identifier: keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c5:43:a2:25:8f:e6:16:94:b0:be:58:3f:99:40:9d:a8:51: 0c:06:e5:f4:f5:a5:32:d6:64:8e:71:10:d6:b7:28:f4:b8:05: b9:35:32:f9:1c:84:50:0f:8f:ed:66:e7:0e:09:df:d3:13:14: d3:48:1b:23:19:48:6e:df:dc:13:c3:a2:ff:3f:3b:46:1c:d4: fd:51:ad:99:e4:d4:a1:20:9e:86:c1:d8:f7:62:0c:c2:fa:d5: 09:f7:3c:b0:1d:a0:7f:3a:11:c9:b7:3d:ca:21:84:13:31:ef: 49:1f:c8:c6:89:2c:0d:6b:b4:cb:c6:52:4e:b1:91:a1:1d:a1: 29:8b:4f:e2:af:80:2f:15:69:ff:b0:ba:02:e6:5e:d4:c0:28: d5:45:91:d5:51:83:79:26:c1:d3:72:d5:a8:63:19:6d:b8:82: 90:b5:79:f9:02:1f:2b:09:68:e3:1b:d0:03:ca:8a:9a:58:3b: 61:ff:c1:cc:9b:dc:d7:a1:5b:e5:0a:30:2b:6b:1c:54:f3:d7: a2:9b:80:df:56:76:3f:70:52:cf:41:5a:27:9d:1b:1a:95:fa: 14:78:fc:3b:dc:92:80:22:f9:47:9e:b0:c8:ae:94:e2:96:e7: bd:b8:a9:ea:76:5f:fb:70:e6:48:e3:78:98:a8:01:f3:41:b4: 57:8d:80:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwODYxMTAvBgNVBAUTKEQ1NjhFMjU5QUVBOTVEMTM0OEM2NjNFMzk1RkNBNjZC RUMxMEMzMDkwHhcNMjUwNDI0MTUwNzIwWhcNMjUwNTAxMTUwNzIwWjAYMRYwFAYD VQQDEw02ODBhNTNhOC1jZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygi6pppIaWU1Tqx3DZdExgaG26j9qyFyf52AhxpDlsNS2hfyo4Ht++Nb+5M1 txxHj1/0F7ugp/Uemw+Sr8L+Y2vdO2t6hmRB5LZ2BysaEROASt6pmS5KjFNNZDAt i+KiFjaL80ML1OTcleIcnxNL414g8cczZGA7ZQHTRoANjeTC42AESUn5EZ92F0JV 0L0/Lj93NMjQBbkz+2whg6jQarXL4Qse4l0iLAsHKmaB/VhzCeiDgeWl6qhjLGYW ow5zt7f2osQiZhduhGXeiJkvIxg/70gHhcVUFjNQ1CV7re3hspbBctwVFVx7XM46 9vtToROkTFLn2Sf//bpyWcY/8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJkofDt Ysjt3bBvtCC6UTzgD5KCMB8GA1UdIwQYMBaAFNVo4lmuqV0TSMZj45X8pmvsEMMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzA4Ni9BODExNEY1ODFE QTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhSTkl4bVBqbGZ5bWEtd1F3 d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXamlXYTZwWFJOSXhtUGpsZnltYS13UXd3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzA4Ni9BODExNEY1ODFEQTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhS Tkl4bVBqbGZ5bWEtd1F3d2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNxUOiJY/mFpSwvlg/mUCdqFEMBuX09aUy1mSOcRDWtyj0uAW5NTL5 HIRQD4/tZucOCd/TExTTSBsjGUhu39wTw6L/PztGHNT9Ua2Z5NShIJ6Gwdj3YgzC +tUJ9zywHaB/OhHJtz3KIYQTMe9JH8jGiSwNa7TLxlJOsZGhHaEpi0/ir4AvFWn/ sLoC5l7UwCjVRZHVUYN5JsHTctWoYxltuIKQtXn5Ah8rCWjjG9ADyoqaWDth/8HM m9zXoVvlCjAraxxU89eim4DfVnY/cFLPQVonnRsalfoUePw73JKAIvlHnrDIrpTi lue9uKnqdl/7cOZI43iYqAHzQbRXjYBl -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:48 2025 by rpki-client