$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft File: w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json) Hash identifier: MFrgMOb+q3tGIy1uML4/pSOg4CWWqul0KbU4NNkftZ8= Subject key identifier: 9D:3C:FA:74:C1:F3:EF:6E:6A:50:72:E4:16:50:AE:5C:D8:09:3E:EA Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D Certificate issuer: /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft Manifest number: EC Signing time: Fri 25 Apr 2025 04:25:56 +0000 Manifest this update: Fri 25 Apr 2025 04:25:55 +0000 Manifest next update: Fri 02 May 2025 04:25:55 +0000 Files and hashes: 1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: rdYWax+ivES6MmSdwgaJ4GXNeFEYnSfwcdt9KkQem6I=) 2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: ut259rkGij2B93AJ9ZMpQpFJu2cjgHFJdqE5QCl8kGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Validity Not Before: Apr 25 04:25:55 2025 GMT Not After : May 2 04:25:55 2025 GMT Subject: CN=680b0ed3-d36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:c4:f3:7a:a5:ea:cd:1c:ef:13:a9:92:31: ec:4a:ca:e3:9d:8a:7b:ff:78:0b:ee:d2:94:27:72: 70:ec:3c:fe:0a:ad:a3:c8:61:e9:d9:1d:62:af:26: 24:56:f3:4f:ab:b5:f5:cd:fe:f3:42:6d:42:08:1c: 77:7a:65:57:b2:25:df:30:6a:58:8a:68:77:fd:c7: 74:e0:06:a6:46:67:4d:c0:11:f6:51:08:61:95:59: 78:d3:d6:12:a4:c9:93:53:34:bc:f2:47:69:8d:f1: e9:5c:b9:f0:b2:20:d8:d5:37:c4:7c:25:a1:dc:1a: 0c:8f:de:61:fc:a3:65:c8:70:78:82:d9:7e:03:bb: a1:da:7c:21:18:60:3b:05:21:0a:81:bd:a6:d8:a5: 01:13:41:b6:7c:a4:8b:86:12:4d:f1:0f:0c:6d:74: 1f:e1:73:a1:e5:7d:c3:7d:8e:a2:cb:9e:d4:e7:c6: 03:5c:92:e3:dc:30:79:e7:d7:36:5c:fc:3c:8f:00: 4d:43:d8:86:f2:45:01:ae:97:34:8d:71:31:95:26: f7:05:b6:88:7f:63:bc:cf:ee:cf:aa:a1:27:a9:6e: a1:46:cf:ff:dd:0b:f7:62:c4:2d:16:ab:92:a6:d1: c7:87:3d:94:f7:a1:55:14:e6:09:4d:6e:b0:5b:db: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3C:FA:74:C1:F3:EF:6E:6A:50:72:E4:16:50:AE:5C:D8:09:3E:EA X509v3 Authority Key Identifier: keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5b:e5:d0:b5:8d:62:26:53:7b:36:3c:84:0c:40:ee:c9:2c: ad:de:bc:aa:51:12:40:9e:ed:5a:54:f1:04:0c:31:c8:6b:dd: 49:a0:f7:ed:42:98:e5:d8:39:c9:70:58:ae:01:29:ba:1d:20: ba:ea:a7:7f:00:20:f1:64:0d:0c:49:4e:c4:ff:91:ec:31:96: 24:25:c5:f3:55:1a:e0:8f:43:09:7c:6b:1e:96:94:2f:82:6e: 11:de:cf:54:71:ab:9f:e6:bf:e4:90:05:1d:7f:05:04:2c:91: fa:0d:a4:bf:c9:f9:34:fe:ad:1c:75:11:83:d5:9b:8d:26:55: 0a:33:52:38:78:48:32:dc:d7:54:c6:1d:b2:05:0b:54:ab:9a: 23:7b:23:c3:0f:cb:8a:56:bd:85:a0:bc:be:f1:b7:03:58:d2: ca:c0:e4:0f:01:a2:68:0c:d2:4f:4b:3e:4d:55:c1:0c:44:92: 85:a7:f9:ac:de:66:fa:4b:e9:db:b5:2c:95:22:67:9d:ed:c8: 93:bb:dc:75:5b:8b:00:50:24:80:75:82:39:c4:66:bf:7b:cc: 82:cc:59:3a:57:d9:8b:29:2a:23:59:05:39:19:02:ed:f6:4b: 9e:cd:8b:96:37:b5:a4:51:97:e9:f9:91:f1:80:c0:0f:ea:8b: 05:99:94:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwNzAxMTAvBgNVBAUTKEMzNkNGNURFMjUzMzlCOTE0NTZFNUNDMjMxNzI0OEIz NkVBNDVCN0QwHhcNMjUwNDI1MDQyNTU1WhcNMjUwNTAyMDQyNTU1WjAYMRYwFAYD VQQDEw02ODBiMGVkMy1kMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwXE83ql6s0c7xOpkjHsSsrjnYp7/3gL7tKUJ3Jw7Dz+Cq2jyGHp2R1iryYk VvNPq7X1zf7zQm1CCBx3emVXsiXfMGpYimh3/cd04AamRmdNwBH2UQhhlVl409YS pMmTUzS88kdpjfHpXLnwsiDY1TfEfCWh3BoMj95h/KNlyHB4gtl+A7uh2nwhGGA7 BSEKgb2m2KUBE0G2fKSLhhJN8Q8MbXQf4XOh5X3DfY6iy57U58YDXJLj3DB559c2 XPw8jwBNQ9iG8kUBrpc0jXExlSb3BbaIf2O8z+7PqqEnqW6hRs//3Qv3YsQtFquS ptHHhz2U96FVFOYJTW6wW9vawQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ08+nTB 8+9ualBy5BZQrlzYCT7qMB8GA1UdIwQYMBaAFMNs9d4lM5uRRW5cwjFySLNupFt9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84MDhCNEQ2Q0JD MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01RkZibHpDTVhKSXMyNmtX MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1czMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA3MC84MDhCNEQ2Q0JDMTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01 RkZibHpDTVhKSXMyNmtXMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIW+XQtY1iJlN7NjyEDEDuySyt3ryqURJAnu1aVPEEDDHIa91JoPft Qpjl2DnJcFiuASm6HSC66qd/ACDxZA0MSU7E/5HsMZYkJcXzVRrgj0MJfGselpQv gm4R3s9Ucauf5r/kkAUdfwUELJH6DaS/yfk0/q0cdRGD1ZuNJlUKM1I4eEgy3NdU xh2yBQtUq5ojeyPDD8uKVr2FoLy+8bcDWNLKwOQPAaJoDNJPSz5NVcEMRJKFp/ms 3mb6S+nbtSyVImed7ciTu9x1W4sAUCSAdYI5xGa/e8yCzFk6V9mLKSojWQU5GQLt 9kuezYuWN7WkUZfp+ZHxgMAP6osFmZSP -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:42 2025 by rpki-client