$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: bdrMuh7cw85UflQToJDq7K/KFf8WG43C2NLa3s//ah0= Subject key identifier: 63:67:A2:01:E4:88:3D:87:ED:4D:66:5B:AE:A9:40:33:FA:D6:4C:46 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 252B Signing time: Thu 24 Apr 2025 15:48:14 +0000 Manifest this update: Thu 24 Apr 2025 15:48:14 +0000 Manifest next update: Thu 01 May 2025 15:48:14 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: edxWwn2OaLfNMqzvZkkfbu7yvWYtarYfvN+IHbLGOJE=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: ZeH6ECuQSQ7jbEvsw/ti8Ne5hW6qGOm2ObSN2ziSRtc=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: 1dZ/PYF2y/rA4g03VyVZaVZy6CLwb/t5eX6QNNHBKU4=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: /OIV93XTmaqNcQdoy+u+KBTNCx5sq1KiAVNHrTFDsPk=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Iw9+JOdav50YSnSQXp9Mgjc+tFnSJTCmgJVv03j+03E=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: a8WMRrKXqOWpbHlU3tbV4FzyKQszu4zB5F1ouGdfBCA=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: 3xgwAlFAD++SNOBnqBO1zaeR1ssuXDrrYrvWI6Sll60=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: ffEWhmrNXjBc0Nb4WuWVQZiVVzyHTO8bmJ3skIR6GwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9769 (0x2629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Apr 24 15:48:14 2025 GMT Not After : May 1 15:48:14 2025 GMT Subject: CN=680a5d3e-8c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:f8:cc:65:93:68:4c:d4:cf:16:f9:75:36: c0:7e:47:b7:57:9e:47:5c:17:57:27:69:0d:47:01: 51:7d:dc:ca:75:40:41:f8:0d:9e:f7:66:73:be:af: 8d:f3:90:83:de:9c:b1:f7:57:89:64:8e:08:e4:ea: 92:94:d4:ed:d4:16:8a:4d:06:d2:db:62:6b:c0:1b: 72:9d:da:89:b6:b6:dc:37:87:01:d5:5e:77:10:d9: 49:cc:f8:a2:d6:d4:8b:b8:51:96:2e:35:f1:6f:dd: 31:4b:9d:67:77:8f:82:c8:d8:e5:69:8d:9a:8d:65: 0c:87:5c:2a:78:9d:3e:ed:3c:c8:0a:0e:93:b2:d0: cf:d9:dc:6c:d5:da:8e:ec:d1:84:5f:88:18:b1:a1: 55:c9:d2:68:c1:9a:8e:3a:d2:66:e4:a2:44:a8:c5: 2c:62:f6:08:7c:59:53:8f:7b:b0:06:87:68:23:99: 92:c5:dc:de:d0:1c:cb:c2:ba:2c:20:d3:75:67:0f: e5:7d:a9:d4:98:78:f2:cb:c6:4b:38:f9:75:4c:4c: 48:e7:d2:54:5b:74:26:ef:76:22:d0:9b:20:74:84: 02:c7:b2:8e:6c:42:21:bd:5d:79:b9:b7:8c:b9:7a: bd:0d:23:3e:92:11:fa:ca:81:c6:7c:fc:a9:3c:83: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:67:A2:01:E4:88:3D:87:ED:4D:66:5B:AE:A9:40:33:FA:D6:4C:46 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:8d:f6:79:81:81:8f:02:8b:16:23:88:e9:10:ec:a1:42:0a: 01:f8:06:9e:ea:ee:0c:9d:6b:0f:38:e2:4f:15:59:3b:0e:e7: cb:04:cb:4d:15:af:e3:4e:a7:cd:e9:8c:9a:36:cc:9d:3d:c5: 41:c1:57:9e:91:c3:ac:89:a7:25:d4:a9:8e:06:ba:a6:fa:0d: f8:a3:2e:9c:90:20:75:3e:04:9f:46:db:37:00:88:13:00:69: 0a:82:c7:d9:a7:bb:ca:cb:d1:31:a9:95:40:de:7a:81:77:54: c5:0a:ed:b3:09:71:4b:8f:d7:80:1c:97:ab:8a:04:6a:79:4a: 7b:67:ce:32:3e:46:f8:d5:6f:11:22:61:89:5a:16:0a:2a:44: a2:9a:7b:6e:1c:4b:3c:c3:33:c8:5f:05:fb:18:ac:0e:bc:2b: e3:41:18:90:24:b3:64:86:6c:30:b3:89:4c:27:71:a5:a8:f0: a1:88:7b:86:e9:6d:70:8c:26:75:0d:8d:8a:3e:ae:6f:65:28: 6f:f1:59:d3:58:22:33:82:ed:90:90:85:14:09:0c:82:db:c6: 47:ae:ac:36:27:11:46:aa:85:27:3c:83:d6:c1:92:a7:6f:fd: 7f:5d:fa:2e:ee:26:70:9d:48:f7:36:81:34:e3:11:97:93:a9: a8:07:51:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNDI0MTU0ODE0WhcNMjUwNTAxMTU0ODE0WjAYMRYwFAYD VQQDEw02ODBhNWQzZS04YzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIf4zGWTaEzUzxb5dTbAfke3V55HXBdXJ2kNRwFRfdzKdUBB+A2e92Zzvq+N 85CD3pyx91eJZI4I5OqSlNTt1BaKTQbS22JrwBtyndqJtrbcN4cB1V53ENlJzPii 1tSLuFGWLjXxb90xS51nd4+CyNjlaY2ajWUMh1wqeJ0+7TzICg6TstDP2dxs1dqO 7NGEX4gYsaFVydJowZqOOtJm5KJEqMUsYvYIfFlTj3uwBodoI5mSxdze0BzLwros INN1Zw/lfanUmHjyy8ZLOPl1TExI59JUW3Qm73Yi0JsgdIQCx7KObEIhvV15ubeM uXq9DSM+khH6yoHGfPypPIOm6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNnogHk iD2H7U1mW66pQDP61kxGMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3jfZ5gYGPAosWI4jpEOyhQgoB+Aae6u4MnWsPOOJPFVk7DufLBMtN Fa/jTqfN6YyaNsydPcVBwVeekcOsiacl1KmOBrqm+g34oy6ckCB1PgSfRts3AIgT AGkKgsfZp7vKy9ExqZVA3nqBd1TFCu2zCXFLj9eAHJerigRqeUp7Z84yPkb41W8R ImGJWhYKKkSimntuHEs8wzPIXwX7GKwOvCvjQRiQJLNkhmwws4lMJ3GlqPChiHuG 6W1wjCZ1DY2KPq5vZShv8VnTWCIzgu2QkIUUCQyC28ZHrqw2JxFGqoUnPIPWwZKn b/1/Xfou7iZwnUj3NoE04xGXk6moB1H1 -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:44 2025 by rpki-client