$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: yMW7UGeEueejm9PPnSeUgo/SiLDFeU/hHHioU9I6RqE= Subject key identifier: 1E:5E:4D:D8:C2:38:CE:00:64:CC:A2:28:52:BB:AE:87:1A:76:6A:26 Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 0122 Signing time: Fri 25 Apr 2025 04:15:41 +0000 Manifest this update: Fri 25 Apr 2025 04:15:40 +0000 Manifest next update: Fri 02 May 2025 04:15:40 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: etBsquVnmPki+IaEXHwxtPjljwe5eTituqoNLz3ODqo=) 2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: gez5Qlcfm6c6NA79ftuR/sN6GbAgowRygpjom7unUmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Validity Not Before: Apr 25 04:15:40 2025 GMT Not After : May 2 04:15:40 2025 GMT Subject: CN=680b0c6d-b447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:29:85:90:4c:69:29:2d:80:c9:04:67:64: 51:45:69:77:e1:4d:91:dc:38:1a:75:d6:27:ba:74: d6:fb:b8:4a:a9:f2:cb:08:0a:e2:29:37:a1:cc:f2: d5:f0:55:ac:1a:fe:48:a3:91:44:f0:6d:cb:05:e0: bc:2a:71:50:77:b3:f9:d0:5b:01:10:1a:f9:bf:46: a6:8d:d7:82:24:95:21:03:9d:82:76:d8:94:88:fc: 4f:27:1c:4d:28:29:5d:39:54:9c:60:a8:39:e2:c9: 22:78:08:06:a7:5a:a4:c6:71:cf:dc:2a:71:56:e0: e9:88:3f:07:54:f1:65:dc:cf:c0:84:f2:94:71:43: 9e:f5:81:cd:00:8d:bf:4a:cb:8e:45:a5:06:99:62: b6:7e:d7:1b:ec:fe:49:48:d5:14:4f:c9:c1:f4:26: 72:95:f2:5a:a5:c7:5e:4a:a5:69:e3:30:1e:6f:5f: 52:d9:c8:7b:62:1e:f5:92:44:55:78:80:da:90:af: 22:93:11:03:71:46:62:45:fe:1e:51:c8:b5:db:60: 93:a9:a8:40:86:77:79:11:43:a7:ae:21:12:0f:e4: 48:40:f1:20:4b:7b:46:94:d1:44:2e:4e:74:4a:ea: bd:a2:94:f1:e5:c4:73:43:8d:be:01:bc:01:19:b1: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5E:4D:D8:C2:38:CE:00:64:CC:A2:28:52:BB:AE:87:1A:76:6A:26 X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b5:9b:af:37:4e:b4:7b:8a:aa:a3:b1:49:dc:bc:9e:4c:16: bb:63:bb:07:9d:8c:29:31:4c:17:c4:8b:20:b2:03:49:82:91: 88:43:15:d3:99:ea:43:39:94:ff:8a:bb:0f:e5:ce:a5:f8:d3: 13:af:c6:85:64:60:34:8f:bc:b6:47:53:f1:d4:4d:40:3e:6b: e1:4b:fa:92:d7:65:d9:4b:3f:3d:91:a5:ee:1e:d3:c4:90:88: ae:bf:12:8d:d5:59:92:64:f0:b6:3a:54:df:c6:93:3e:fd:5e: 35:9a:c0:84:6f:b9:f7:d3:47:66:6c:bf:98:b1:95:26:37:82: a6:c0:65:9e:e1:d8:ba:80:1d:c8:55:3e:92:37:96:9c:e7:3d: a4:0c:d0:93:8a:37:be:42:5a:62:7e:c0:ae:19:14:3a:b3:2f: 3c:0c:8d:2b:4f:0d:c3:3f:94:42:06:02:b7:a5:9a:a5:0e:c5: 46:93:c1:0b:d2:92:d1:dd:92:e0:fe:df:c7:c4:b1:01:8e:ce: 57:ea:5e:f1:e6:fc:af:fb:43:12:82:7b:d8:84:86:64:12:64: 5f:f8:d6:41:89:de:96:14:75:a8:c5:2e:f6:71:86:a2:b8:e7: 64:6e:11:28:0b:14:44:cb:14:92:17:62:f5:b4:bf:56:41:ad: 35:8e:5a:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF MkNDQkIyNUEwHhcNMjUwNDI1MDQxNTQwWhcNMjUwNTAyMDQxNTQwWjAYMRYwFAYD VQQDEw02ODBiMGM2ZC1iNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzokphZBMaSktgMkEZ2RRRWl34U2R3DgaddYnunTW+7hKqfLLCAriKTehzPLV 8FWsGv5Io5FE8G3LBeC8KnFQd7P50FsBEBr5v0amjdeCJJUhA52CdtiUiPxPJxxN KCldOVScYKg54skieAgGp1qkxnHP3CpxVuDpiD8HVPFl3M/AhPKUcUOe9YHNAI2/ SsuORaUGmWK2ftcb7P5JSNUUT8nB9CZylfJapcdeSqVp4zAeb19S2ch7Yh71kkRV eIDakK8ikxEDcUZiRf4eUci122CTqahAhnd5EUOnriESD+RIQPEgS3tGlNFELk50 Suq9opTx5cRzQ42+AbwBGbFz6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5eTdjC OM4AZMyiKFK7rocadmomMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbtZuvN060e4qqo7FJ3LyeTBa7Y7sHnYwpMUwXxIsgsgNJgpGIQxXT mepDOZT/irsP5c6l+NMTr8aFZGA0j7y2R1Px1E1APmvhS/qS12XZSz89kaXuHtPE kIiuvxKN1VmSZPC2OlTfxpM+/V41msCEb7n300dmbL+YsZUmN4KmwGWe4di6gB3I VT6SN5ac5z2kDNCTije+QlpifsCuGRQ6sy88DI0rTw3DP5RCBgK3pZqlDsVGk8EL 0pLR3ZLg/t/HxLEBjs5X6l7x5vyv+0MSgnvYhIZkEmRf+NZBid6WFHWoxS72cYai uOdkbhEoCxREyxSSF2L1tL9WQa01jloD -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:38 2025 by rpki-client