$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json) Hash identifier: 51AojfwC2RpHbQHMPBRXR2L/5IXPKEH7rXTbnpjOtqc= Subject key identifier: 79:69:68:B3:14:CB:FD:84:90:97:22:87:FA:FB:23:C0:E2:18:85:B4 Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft Manifest number: 92 Signing time: Fri 25 Apr 2025 05:25:38 +0000 Manifest this update: Fri 25 Apr 2025 05:25:38 +0000 Manifest next update: Fri 02 May 2025 05:25:38 +0000 Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: X56g4XS5OcJXTJu/kQhvEdXFOtzKE334rIZpLxLYz3M=) 2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Validity Not Before: Apr 25 05:25:38 2025 GMT Not After : May 2 05:25:38 2025 GMT Subject: CN=680b1cd2-a6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0c:b7:d5:70:03:53:2b:f0:2e:9e:78:73:50: 46:45:b5:21:41:0c:14:c8:a8:86:24:0a:53:95:13: ea:e6:94:70:39:8a:09:c0:71:1d:f5:28:ca:ce:cb: 50:c8:84:51:97:f0:86:41:85:2a:d9:5d:cc:3f:34: 2b:30:b3:99:63:7d:01:69:5b:83:e3:06:1f:4f:42: 5b:83:10:23:f3:fb:bc:4e:de:68:62:5a:18:82:95: 9b:48:27:54:8c:32:c1:fb:8e:5e:9e:e5:79:e2:a4: 24:59:a7:28:94:bb:1b:d4:6a:58:d3:54:6e:7c:9c: bf:55:9a:1a:a3:4c:04:ee:3a:4a:19:31:c8:2d:c7: 1a:8a:13:8b:19:78:bf:f6:1a:ce:7e:47:17:1a:88: 0e:2c:2b:ec:78:21:a9:a2:fb:ca:cc:92:da:db:e1: d5:8a:30:b3:4d:43:08:6b:9b:94:b2:35:59:7e:3a: 0a:b7:f8:ab:39:d6:4a:c9:98:e5:45:05:84:fb:33: 56:d4:a1:f7:2f:d5:0b:f3:8a:9d:ff:c6:1b:1d:d1: e6:af:6e:08:de:17:8d:4e:a2:d1:9b:1f:2c:84:77: 92:a4:ca:89:bd:bd:e7:da:c1:6e:97:57:10:13:15: 79:c1:10:3f:fb:c5:19:5d:6f:a4:39:17:74:b1:2d: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:69:68:B3:14:CB:FD:84:90:97:22:87:FA:FB:23:C0:E2:18:85:B4 X509v3 Authority Key Identifier: keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e9:4e:0e:13:24:a1:8a:6a:a6:88:44:d0:47:80:24:f2:16: b6:42:c6:16:f9:92:70:33:73:44:f2:ad:04:e5:44:e9:d3:e5: c9:77:a6:71:63:6c:0c:6d:06:28:21:5f:6c:61:37:35:6b:d7: 13:a8:54:e9:e8:7a:af:58:78:ad:0c:24:b3:e3:51:99:07:cd: 6b:d8:b3:7a:89:1f:00:e1:2e:da:fa:4f:fc:a3:04:95:cf:7c: 45:9f:7a:cd:2a:0e:23:e1:26:d4:84:c0:c5:38:24:59:10:bd: 19:5f:fc:24:a9:aa:29:67:91:91:14:aa:26:35:f2:93:98:76: 16:77:07:be:3f:08:07:c3:7f:71:ca:4c:c9:73:28:7b:42:3d: 92:06:ad:2e:34:3c:1b:12:0e:6d:4a:a2:1e:f2:ae:95:0d:77: 41:ba:80:67:2a:b2:43:03:61:c7:b6:42:cc:e4:f5:a4:92:31: d9:7f:21:1a:3d:d1:75:26:74:c4:93:50:c2:1b:4b:0b:21:5c: 2e:df:db:5f:ef:85:12:5a:a3:8e:23:6b:ec:72:78:51:2e:58: 2a:a5:9e:90:e6:ab:9b:70:83:c7:7f:ff:77:1d:fe:d0:49:ff: f5:67:43:6a:62:17:37:5a:f2:30:c0:b2:ba:2d:c9:f2:d0:e4: d3:bc:a5:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKEMzOTNCQ0RGN0Q0NUE3MTk2RkYzQ0Q2RDMwRDYyMzBE RjRGREM1N0QwHhcNMjUwNDI1MDUyNTM4WhcNMjUwNTAyMDUyNTM4WjAYMRYwFAYD VQQDEw02ODBiMWNkMi1hNmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Qy31XADUyvwLp54c1BGRbUhQQwUyKiGJApTlRPq5pRwOYoJwHEd9SjKzstQ yIRRl/CGQYUq2V3MPzQrMLOZY30BaVuD4wYfT0JbgxAj8/u8Tt5oYloYgpWbSCdU jDLB+45enuV54qQkWacolLsb1GpY01RufJy/VZoao0wE7jpKGTHILccaihOLGXi/ 9hrOfkcXGogOLCvseCGpovvKzJLa2+HVijCzTUMIa5uUsjVZfjoKt/irOdZKyZjl RQWE+zNW1KH3L9UL84qd/8YbHdHmr24I3heNTqLRmx8shHeSpMqJvb3n2sFul1cQ ExV5wRA/+8UZXW+kORd0sS17GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlpaLMU y/2EkJcih/r7I8DiGIW0MB8GA1UdIwQYMBaAFMOTvN99RacZb/PNbTDWIw30/cV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi9GQzExQkZEMjQ1 QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4bHY4ODF0TU5ZakRmVDl4 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi9GQzExQkZEMjQ1QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4 bHY4ODF0TU5ZakRmVDl4WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC16U4OEyShimqmiETQR4Ak8ha2QsYW+ZJwM3NE8q0E5UTp0+XJd6Zx Y2wMbQYoIV9sYTc1a9cTqFTp6HqvWHitDCSz41GZB81r2LN6iR8A4S7a+k/8owSV z3xFn3rNKg4j4SbUhMDFOCRZEL0ZX/wkqaopZ5GRFKomNfKTmHYWdwe+PwgHw39x ykzJcyh7Qj2SBq0uNDwbEg5tSqIe8q6VDXdBuoBnKrJDA2HHtkLM5PWkkjHZfyEa PdF1JnTEk1DCG0sLIVwu39tf74USWqOOI2vscnhRLlgqpZ6Q5qubcIPHf/93Hf7Q Sf/1Z0NqYhc3WvIwwLK6Lcny0OTTvKUb -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:34 2025 by rpki-client