$ rpki-client -vvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft File: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft (raw, json) Hash identifier: z1KnJHyTbCEYFyZ4NkmSYPUvSJ1Mv4a/Bh/o0YoIs2c= Subject key identifier: 7E:72:FA:47:5E:38:D8:D6:8E:6C:95:9B:79:10:D6:71:74:FB:11:E9 Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 Certificate issuer: /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54 Certificate serial: 083A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft Manifest number: 0834 Signing time: Thu 24 Apr 2025 20:38:32 +0000 Manifest this update: Thu 24 Apr 2025 20:38:32 +0000 Manifest next update: Thu 01 May 2025 20:38:32 +0000 Files and hashes: 1: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl (hash: 8yYUgiH1eEMIyHsE0qCdJ5s+kGhiA4G883vu+r4v46k=) 2: F011FBC4CBDF11EAB6162265C4F9AE02.roa (hash: Ec43C0Y3q4p+M8MX6lzreXmsuhfKAufm7Yw2BAr8btg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2106 (0x83a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F7E7, serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54 Validity Not Before: Apr 24 20:38:32 2025 GMT Not After : May 1 20:38:32 2025 GMT Subject: CN=680aa148-f653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:23:f6:af:85:66:bc:81:91:87:48:a4:74:50: 6d:e0:ab:4a:b8:da:85:77:0f:2b:3c:de:84:16:66: 2f:24:5f:75:37:cb:13:a6:4e:33:97:31:05:c5:9e: 16:d1:7e:67:9b:71:e6:dd:75:2b:0f:0a:50:a6:0d: 07:03:58:eb:7b:bf:c4:28:3c:ad:13:f8:0c:41:4f: 86:01:55:86:a7:4c:59:2e:3d:c1:6f:b6:ac:ef:c9: 2d:15:c2:ee:d7:3a:d3:bf:70:df:3d:02:ed:24:f7: a8:2c:06:39:f7:7b:0f:f9:01:28:50:b4:06:64:95: db:18:47:5a:ba:3a:13:fc:9c:d5:2d:91:46:44:52: 10:c7:58:c5:0f:d1:10:f7:11:4f:2d:41:2a:51:dc: c5:65:be:c1:80:d2:d0:3c:5e:fa:3a:f4:8c:f0:4a: c2:5f:6c:36:ac:4e:63:8c:dc:c8:30:ba:f0:5f:e3: e7:09:e5:8a:cd:43:84:bf:84:4d:c5:90:fb:61:43: 03:d3:04:6b:02:ef:a6:fc:5f:f5:75:ee:6e:39:d8: bc:13:6b:96:3f:3d:86:4c:97:53:f0:57:2c:32:ec: 7f:21:8c:8a:7c:51:fb:6a:c1:90:19:8e:93:10:f9: ae:41:59:71:c0:a1:68:88:f4:a3:c6:f1:d8:67:11: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:72:FA:47:5E:38:D8:D6:8E:6C:95:9B:79:10:D6:71:74:FB:11:E9 X509v3 Authority Key Identifier: keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:18:19:b3:20:42:d1:b6:0e:cc:f7:a6:7f:90:aa:06:3c:d8: 9f:61:fc:e7:ff:11:15:af:87:f5:54:28:a2:8c:04:fb:81:bd: 44:51:d3:80:2d:44:92:4c:39:ab:bb:40:a9:f9:9e:0b:7c:ae: 47:f1:65:9c:62:cd:01:b0:fd:93:03:4d:e3:e9:4f:1c:07:12: 47:0f:ff:54:e1:38:52:68:e3:be:1f:1a:ed:3d:bb:5c:83:93: dd:a7:fe:28:9c:61:35:a4:09:7b:f5:b5:c0:85:ab:b0:b8:73: da:36:ff:b9:fb:cc:09:02:de:f8:6a:c0:57:70:ba:6c:a2:bb: 3a:dc:65:2a:b7:12:88:3b:d1:ed:20:0c:fc:ab:ee:d8:2b:39: 4e:c4:be:c2:05:94:6e:a7:00:c3:af:81:65:ed:82:66:b4:2b: 13:b4:c8:10:49:ae:6e:96:08:ff:b2:ca:c0:1e:05:0e:3f:b2: 7d:d6:3c:f6:83:ab:02:03:5f:f6:49:cb:d4:39:7e:fc:ac:38: 34:7e:a1:f5:8b:c6:dc:7b:e1:c7:c9:07:4a:0d:fe:e0:3e:61: 44:45:62:45:b5:6a:3d:c8:eb:3b:ca:32:7c:ab:6c:3d:49:e1: db:36:56:d1:ac:78:39:b1:5d:9a:28:c3:f6:aa:36:51:bb:df: 6a:c2:b0:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY3RTcxMTAvBgNVBAUTKDlCMDUxMERGMDY3MkU2Q0ZEQjcyNTRBOTlGNTI3NEY5 MERGMEVGNTQwHhcNMjUwNDI0MjAzODMyWhcNMjUwNTAxMjAzODMyWjAYMRYwFAYD VQQDEw02ODBhYTE0OC1mNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SP2r4VmvIGRh0ikdFBt4KtKuNqFdw8rPN6EFmYvJF91N8sTpk4zlzEFxZ4W 0X5nm3Hm3XUrDwpQpg0HA1jre7/EKDytE/gMQU+GAVWGp0xZLj3Bb7as78ktFcLu 1zrTv3DfPQLtJPeoLAY593sP+QEoULQGZJXbGEdaujoT/JzVLZFGRFIQx1jFD9EQ 9xFPLUEqUdzFZb7BgNLQPF76OvSM8ErCX2w2rE5jjNzIMLrwX+PnCeWKzUOEv4RN xZD7YUMD0wRrAu+m/F/1de5uOdi8E2uWPz2GTJdT8FcsMux/IYyKfFH7asGQGY6T EPmuQVlxwKFoiPSjxvHYZxGuFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5y+kde ONjWjmyVm3kQ1nF0+xHpMB8GA1UdIwQYMBaAFJsFEN8GcubP23JUqZ9SdPkN8O9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjdFNy9EQ0QwMzc4QUNC REQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVzX2JjbFNwbjFKMC1RM3c3 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213VVEzd1p5NXNfYmNsU3BuMUowLVEzdzcxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjdFNy9EQ0QwMzc4QUNCREQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVz X2JjbFNwbjFKMC1RM3c3MVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1GBmzIELRtg7M96Z/kKoGPNifYfzn/xEVr4f1VCiijAT7gb1EUdOA LUSSTDmru0Cp+Z4LfK5H8WWcYs0BsP2TA03j6U8cBxJHD/9U4ThSaOO+HxrtPbtc g5Pdp/4onGE1pAl79bXAhauwuHPaNv+5+8wJAt74asBXcLpsors63GUqtxKIO9Ht IAz8q+7YKzlOxL7CBZRupwDDr4Fl7YJmtCsTtMgQSa5ulgj/ssrAHgUOP7J91jz2 g6sCA1/2ScvUOX78rDg0fqH1i8bce+HHyQdKDf7gPmFERWJFtWo9yOs7yjJ8q2w9 SeHbNlbRrHg5sV2aKMP2qjZRu99qwrCx -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:02 2025 by rpki-client