$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: V3x+XTAQJlpRaecYy8OqrTcoXgA1DD6F0HpgeLdDitM= Subject key identifier: 50:11:6F:BD:7A:6C:98:FC:0E:17:C4:52:3C:51:2F:9B:DF:5A:BE:C2 Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: A7 Signing time: Fri 25 Apr 2025 05:09:30 +0000 Manifest this update: Fri 25 Apr 2025 05:09:29 +0000 Manifest next update: Fri 02 May 2025 05:09:29 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: UBnovDPv2ZWhW9tURIs0QLg4XSvxav5QN4SR/aeB+JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Apr 25 05:09:29 2025 GMT Not After : May 2 05:09:29 2025 GMT Subject: CN=680b1909-ef62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:23:12:42:fb:ca:81:d7:f8:0d:ad:2c:b0:ca: e1:a7:58:e8:db:8e:a0:32:d5:de:1e:e8:51:25:b4: 89:e9:d8:18:5a:84:bc:43:9f:34:f6:b8:44:73:e2: 5b:b4:1e:3b:5b:a4:8d:fe:dd:a5:cf:76:12:63:a3: 95:9b:8b:a4:47:6b:fe:e8:56:4c:68:34:87:ab:bb: 77:10:a6:a7:3f:6e:3c:38:93:58:11:38:31:87:3f: eb:6e:ec:d2:eb:75:74:c0:a8:0d:ab:4a:73:86:9a: d5:03:16:7e:09:3c:bf:1f:5a:d1:bd:28:e3:90:8d: 8a:9d:ef:2d:7a:46:1f:76:6c:4c:8f:16:79:b9:3b: e4:11:d5:a0:55:40:57:a8:c3:4e:f4:2a:19:88:fe: 15:82:a4:1f:a6:f6:86:bd:82:1e:45:d6:c1:3d:5b: f5:82:76:47:be:90:39:16:53:5b:4f:99:4f:85:07: d5:47:61:72:79:ef:53:51:22:13:ad:59:76:9c:4f: 85:10:cf:9a:09:b6:5e:ed:c2:8b:ff:4f:65:2d:a8: f4:5c:10:60:8a:5c:d1:87:e7:37:de:11:35:e7:e2: 5b:67:33:0b:96:ae:90:ec:f0:0e:71:df:66:68:e3: 5a:01:35:5f:72:5e:e9:a6:9e:fe:12:bc:33:4b:82: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:11:6F:BD:7A:6C:98:FC:0E:17:C4:52:3C:51:2F:9B:DF:5A:BE:C2 X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:65:c4:2b:6a:89:86:5c:45:d9:bc:b5:0e:78:ae:92:2a:32: c7:fe:dc:24:51:6b:1e:39:a8:c6:66:f6:ea:1a:be:dc:7f:45: af:5d:56:9b:e5:15:b7:d6:ff:6c:0a:80:83:c5:47:27:36:60: be:55:6e:a2:28:14:68:5b:f5:14:86:34:f4:da:82:38:0b:f4: d1:b3:40:2d:ef:82:7e:dc:14:e2:fe:c2:54:10:51:83:53:42: b6:a6:d1:16:f2:ae:02:ca:77:38:46:c3:05:c9:15:69:ae:4a: c6:e6:0e:8a:e5:94:13:b7:c3:eb:fa:02:87:41:56:25:ea:53: 40:43:12:9c:44:32:f0:0f:55:c7:42:9f:cb:bd:14:4c:29:d0: 6e:b1:b2:21:69:dc:0e:23:7a:19:63:d9:9b:99:74:0f:b5:7b: a7:00:3d:ad:20:77:27:b8:93:e7:f9:a2:2e:e3:6d:ae:20:36: fc:40:76:e2:f9:f5:77:e1:50:be:19:e5:8c:3e:82:8e:56:69: 29:06:d2:8c:f5:4d:b7:b2:ec:cd:ac:0e:c4:11:b5:56:2d:dc: c0:31:b6:e1:8b:3d:55:19:63:d0:fe:e9:ec:81:d7:d4:7d:88: c3:4d:13:59:01:98:db:6b:e2:92:f9:bf:60:70:1d:0a:dd:ba: 0d:54:49:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC Nzc0QTQ0OUEwHhcNMjUwNDI1MDUwOTI5WhcNMjUwNTAyMDUwOTI5WjAYMRYwFAYD VQQDEw02ODBiMTkwOS1lZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CMSQvvKgdf4Da0ssMrhp1jo246gMtXeHuhRJbSJ6dgYWoS8Q5809rhEc+Jb tB47W6SN/t2lz3YSY6OVm4ukR2v+6FZMaDSHq7t3EKanP248OJNYETgxhz/rbuzS 63V0wKgNq0pzhprVAxZ+CTy/H1rRvSjjkI2Kne8tekYfdmxMjxZ5uTvkEdWgVUBX qMNO9CoZiP4VgqQfpvaGvYIeRdbBPVv1gnZHvpA5FlNbT5lPhQfVR2Fyee9TUSIT rVl2nE+FEM+aCbZe7cKL/09lLaj0XBBgilzRh+c33hE15+JbZzMLlq6Q7PAOcd9m aONaATVfcl7ppp7+ErwzS4K1RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFARb716 bJj8DhfEUjxRL5vfWr7CMB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB aGtKS20xOFVadUczZEtSSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQZcQraomGXEXZvLUOeK6SKjLH/twkUWseOajGZvbqGr7cf0WvXVab 5RW31v9sCoCDxUcnNmC+VW6iKBRoW/UUhjT02oI4C/TRs0At74J+3BTi/sJUEFGD U0K2ptEW8q4Cync4RsMFyRVprkrG5g6K5ZQTt8Pr+gKHQVYl6lNAQxKcRDLwD1XH Qp/LvRRMKdBusbIhadwOI3oZY9mbmXQPtXunAD2tIHcnuJPn+aIu422uIDb8QHbi +fV34VC+GeWMPoKOVmkpBtKM9U23suzNrA7EEbVWLdzAMbbhiz1VGWPQ/unsgdfU fYjDTRNZAZjba+KS+b9gcB0K3boNVEmg -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:55 2025 by rpki-client