$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: WRKfX7l5g9PgriZiUYFZwmk0625irdyj/1X51bsLvlE= Subject key identifier: FA:EC:FF:D4:D7:E5:54:95:56:24:FA:A2:40:6D:CF:6A:E5:B8:88:1A Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 043F Signing time: Fri 25 Apr 2025 00:06:30 +0000 Manifest this update: Fri 25 Apr 2025 00:06:29 +0000 Manifest next update: Fri 02 May 2025 00:06:29 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: Y/isO7mHT1jhNqY8eyq1IPxT/KO0qKfvEg0wR1gTqtM=) 2: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: 264WZ0f5FSYRLcE55bzQKj/lfReOWZZQL9W6/+XrL50=) 3: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: vRD5gvetOl4M72g0Ox/17wn2gRRkZ+MKIO7MmLjvLgg=) 4: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: K/T3wX+b6EJFTbJdX5T/49+xTnSJoc5fKtBw2NmgoBw=) 5: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: MrOehOXflQUhc9W+FdP7kViEOIm0zhC3RKvz9jpM7pY=) 6: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 9hr8e6Q+evY4tAAVgrktH6R5E0K57yFV9RXeFdQNtLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Apr 25 00:06:29 2025 GMT Not After : May 2 00:06:29 2025 GMT Subject: CN=680ad206-eb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:3e:73:88:c9:b1:09:41:44:75:e2:29:37: 3e:6e:d3:25:e1:54:06:45:59:69:79:5e:65:c5:62: 9b:39:c4:d9:9b:13:0f:e0:ab:75:c4:2a:21:4c:59: 09:6f:f0:0d:57:26:60:e5:4b:33:96:17:06:c0:be: 65:f6:5a:1b:b6:ac:7d:03:30:6d:1a:8e:3e:d6:22: 2c:a0:1c:c1:8d:ef:7d:a0:15:aa:b0:0b:b3:4d:09: 3e:0d:59:53:ca:c9:fd:af:f8:a4:23:28:e5:27:89: 6c:8d:53:d5:3f:07:01:24:66:b3:76:83:35:63:e1: 85:4d:c4:69:17:22:b5:97:ff:b3:85:26:f8:d0:bd: f8:d7:68:dc:ef:18:0c:29:fb:12:f2:75:57:a1:85: 61:e8:84:04:61:b6:ec:b7:ad:66:48:b8:3c:8c:39: 98:41:96:5a:bc:b2:88:16:29:a4:00:ed:bf:85:32: 94:6d:80:cf:b9:db:7e:be:45:a6:85:68:e3:4d:44: 6a:e3:c6:95:a0:80:67:89:92:cf:06:bf:6c:e3:3e: 8d:ee:00:c4:b5:27:3f:a5:b0:13:9a:c4:f4:15:12: cd:b5:b2:b3:10:22:86:99:10:50:22:04:aa:d9:33: 80:0a:67:96:7e:8b:97:54:21:71:e7:f3:84:45:bb: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EC:FF:D4:D7:E5:54:95:56:24:FA:A2:40:6D:CF:6A:E5:B8:88:1A X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:d2:72:ba:82:a6:9f:b0:aa:2b:cd:15:fa:83:dc:c5:ac:f0: 32:0f:51:9f:fa:1d:0c:ea:b4:0e:8c:aa:27:7a:e6:2f:12:e7: b8:7c:c3:87:2e:9a:b9:77:98:59:49:97:f1:2a:d0:21:a3:ba: 5b:17:eb:8b:9f:27:b8:15:b0:1d:79:c2:04:c1:ab:9d:0c:14: 8e:80:56:ef:5c:b7:5e:26:1c:c3:35:e9:ba:51:58:ac:06:79: 58:fc:4d:ea:3b:61:fa:08:48:0c:0d:e0:52:33:ad:b5:b7:01: 23:4b:66:2e:66:49:78:46:95:29:5e:81:9d:96:ea:4a:d8:23: 86:30:ff:27:4a:bc:5d:d8:d3:1e:d2:7a:1f:2b:31:98:f5:7f: 4a:db:5e:2b:d3:bd:37:db:36:ef:c4:f0:9d:66:d9:18:16:c9: ed:c2:54:07:b6:aa:d3:88:34:0d:a0:bc:a6:64:27:37:4f:be: b6:4d:35:47:21:ea:9a:af:31:47:7a:45:fd:d0:e7:4a:71:d1: e7:5f:10:a9:31:7f:37:5e:fc:03:a3:12:b0:a0:a9:d9:d1:a7: af:54:d3:db:8c:23:e2:33:ef:9b:77:ce:2a:02:40:ad:96:a9: 58:b1:ba:93:05:14:c2:31:04:7c:fc:37:7f:50:00:38:9b:dc: 00:c0:12:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjUwNDI1MDAwNjI5WhcNMjUwNTAyMDAwNjI5WjAYMRYwFAYD VQQDEw02ODBhZDIwNi1lYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOw+c4jJsQlBRHXiKTc+btMl4VQGRVlpeV5lxWKbOcTZmxMP4Kt1xCohTFkJ b/ANVyZg5UszlhcGwL5l9lobtqx9AzBtGo4+1iIsoBzBje99oBWqsAuzTQk+DVlT ysn9r/ikIyjlJ4lsjVPVPwcBJGazdoM1Y+GFTcRpFyK1l/+zhSb40L3412jc7xgM KfsS8nVXoYVh6IQEYbbst61mSLg8jDmYQZZavLKIFimkAO2/hTKUbYDPudt+vkWm hWjjTURq48aVoIBniZLPBr9s4z6N7gDEtSc/pbATmsT0FRLNtbKzECKGmRBQIgSq 2TOACmeWfouXVCFx5/OERbsEXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrs/9TX 5VSVViT6okBtz2rluIgaMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB0nK6gqafsKorzRX6g9zFrPAyD1Gf+h0M6rQOjKoneuYvEue4fMOH Lpq5d5hZSZfxKtAho7pbF+uLnye4FbAdecIEwaudDBSOgFbvXLdeJhzDNem6UVis BnlY/E3qO2H6CEgMDeBSM621twEjS2YuZkl4RpUpXoGdlupK2COGMP8nSrxd2NMe 0nofKzGY9X9K214r07032zbvxPCdZtkYFsntwlQHtqrTiDQNoLymZCc3T762TTVH IeqarzFHekX90OdKcdHnXxCpMX83XvwDoxKwoKnZ0aevVNPbjCPiM++bd84qAkCt lqlYsbqTBRTCMQR8/Dd/UAA4m9wAwBLI -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:49 2025 by rpki-client