$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: xMBSo1Ai/vdOr69cqrw4LH1NIA/wBnRUHsE6WvWYBOE= Subject key identifier: 86:41:A4:71:75:A9:95:FA:D4:4F:87:67:8C:94:8C:5E:40:D4:C0:6E Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 03D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 03CB Signing time: Thu 24 Apr 2025 23:55:33 +0000 Manifest this update: Thu 24 Apr 2025 23:55:32 +0000 Manifest next update: Thu 01 May 2025 23:55:32 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: pGkMD0Mh95gSyLeGz9VLy7D1vVOe710am7qZrfVtZgs=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Validity Not Before: Apr 24 23:55:32 2025 GMT Not After : May 1 23:55:32 2025 GMT Subject: CN=680acf74-4f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:5a:df:02:2b:da:3f:a6:fd:d1:13:e2:9e: 42:c4:94:63:3e:dd:0f:22:90:df:73:06:1e:70:34: c9:b6:36:1c:cc:39:63:7c:10:fa:6f:10:53:30:fe: 8e:00:17:77:28:4d:03:a5:e0:34:e9:2f:de:9c:dc: b2:21:d8:30:54:fc:c7:e3:ee:0d:8b:51:c1:4e:60: a9:61:78:92:c4:7a:68:1e:bd:79:eb:7c:2f:3e:95: 70:8d:37:12:c2:22:18:8a:0a:9a:a4:68:35:ce:38: 71:59:69:ae:84:8a:bc:45:c5:4b:23:1b:62:fa:91: 85:aa:63:91:a6:f5:d8:2c:44:b7:87:64:57:b0:2f: e1:3c:40:ef:fd:51:cc:41:5c:ef:5a:72:00:aa:7d: 34:31:4d:9f:37:fa:da:90:d2:71:38:7e:00:17:1a: 5a:ec:11:43:88:56:07:a2:aa:97:dc:e4:d7:fa:13: 5a:5e:f5:88:88:93:1d:d2:67:16:da:53:a2:d3:36: 0e:6c:e1:26:f4:09:1d:57:0a:38:7f:c4:a1:c9:a1: fb:38:0f:85:1a:2a:bf:5a:a8:25:f5:f5:68:e2:2e: e2:69:24:31:6a:3d:22:0a:0d:07:15:f1:b9:f5:db: e0:59:14:62:d0:0f:62:78:02:c8:39:6a:39:cb:ab: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:41:A4:71:75:A9:95:FA:D4:4F:87:67:8C:94:8C:5E:40:D4:C0:6E X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b1:9c:a5:86:f6:ac:80:bf:e8:9d:b9:8e:75:c0:e5:23:42: df:46:a4:af:bf:32:7d:68:dc:d1:f6:63:de:fd:ba:3d:2f:0d: dd:ef:c5:32:c2:6d:e4:b1:ab:50:b8:f4:bd:37:17:9b:b3:21: 7f:94:95:74:5d:be:5a:b5:9f:e1:0d:bb:d9:dc:97:74:c1:99: 21:27:74:47:ae:f1:b4:ea:32:ab:7c:98:67:44:69:b0:d0:96: ae:1a:82:27:ee:32:ca:85:31:4b:36:25:b9:5d:9c:b1:22:76: 9c:1d:39:6f:17:18:92:91:d9:b4:cc:7e:2d:9d:af:01:18:4e: 4a:ad:dc:83:02:c4:06:0e:3d:2d:ce:f5:14:eb:33:c6:69:52: de:7c:72:18:69:74:70:b3:01:3b:5a:3b:85:08:1f:12:36:e2: c8:8e:64:aa:32:fb:b7:4a:f3:75:7e:68:89:1b:3f:53:b1:f5: 1e:5a:f3:cb:f4:d0:47:41:02:8a:50:7d:96:cf:e1:ea:68:09: 94:d7:9b:3b:81:34:e4:13:f5:a3:b2:db:bd:d5:2a:ea:8d:b3: af:a3:3a:d1:66:64:ae:28:22:8a:85:4a:ec:05:57:b4:5d:d5: a7:b8:40:b2:03:fd:72:54:f4:27:d2:85:dc:0a:45:c4:21:5e: 6a:20:1a:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjUwNDI0MjM1NTMyWhcNMjUwNTAxMjM1NTMyWjAYMRYwFAYD VQQDEw02ODBhY2Y3NC00ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZta3wIr2j+m/dET4p5CxJRjPt0PIpDfcwYecDTJtjYczDljfBD6bxBTMP6O ABd3KE0DpeA06S/enNyyIdgwVPzH4+4Ni1HBTmCpYXiSxHpoHr1563wvPpVwjTcS wiIYigqapGg1zjhxWWmuhIq8RcVLIxti+pGFqmORpvXYLES3h2RXsC/hPEDv/VHM QVzvWnIAqn00MU2fN/rakNJxOH4AFxpa7BFDiFYHoqqX3OTX+hNaXvWIiJMd0mcW 2lOi0zYObOEm9AkdVwo4f8ShyaH7OA+FGiq/Wqgl9fVo4i7iaSQxaj0iCg0HFfG5 9dvgWRRi0A9ieALIOWo5y6tSyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZBpHF1 qZX61E+HZ4yUjF5A1MBuMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCysZylhvasgL/onbmOdcDlI0LfRqSvvzJ9aNzR9mPe/bo9Lw3d78Uy wm3ksatQuPS9NxebsyF/lJV0Xb5atZ/hDbvZ3Jd0wZkhJ3RHrvG06jKrfJhnRGmw 0JauGoIn7jLKhTFLNiW5XZyxInacHTlvFxiSkdm0zH4tna8BGE5KrdyDAsQGDj0t zvUU6zPGaVLefHIYaXRwswE7WjuFCB8SNuLIjmSqMvu3SvN1fmiJGz9TsfUeWvPL 9NBHQQKKUH2Wz+HqaAmU15s7gTTkE/Wjstu91SrqjbOvozrRZmSuKCKKhUrsBVe0 XdWnuECyA/1yVPQn0oXcCkXEIV5qIBpK -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:45 2025 by rpki-client