$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json) Hash identifier: H9TOuFiPnOU72c1YX2jlGKbIomkTPMZTpZ7Zg7MILDQ= Subject key identifier: 56:3C:28:EB:A0:71:24:AD:11:A3:FF:AA:73:1E:34:DF:98:29:E9:78 Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft Manifest number: C7 Signing time: Fri 25 Apr 2025 04:48:20 +0000 Manifest this update: Fri 25 Apr 2025 04:48:19 +0000 Manifest next update: Fri 02 May 2025 04:48:19 +0000 Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: pJ5L8GfsD5S4S/9pkfYSJfjX6+pxrLjPFDOQegpl7Gw=) 2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Validity Not Before: Apr 25 04:48:19 2025 GMT Not After : May 2 04:48:19 2025 GMT Subject: CN=680b1413-3582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:a7:a1:37:2e:36:d6:05:8e:a7:61:ef:e8: cf:83:fc:a2:d2:28:ea:c8:c0:21:dc:8f:9d:dc:32: 75:01:f2:c5:88:09:77:33:90:ff:5f:be:f9:cb:ca: 25:08:a1:8f:26:dd:1b:1f:0e:7a:b1:d8:fe:c8:55: 0e:fa:06:50:23:93:27:88:47:9d:21:e6:e7:15:0b: b9:42:83:ab:7d:93:da:c0:92:77:1d:74:9d:4f:b8: 92:2a:95:04:c6:8e:fd:ac:8d:8f:19:20:23:bb:e0: 75:20:46:c9:0a:b4:2e:13:39:14:60:af:8c:2e:e8: e9:66:a9:3c:45:7d:50:a5:66:f9:3f:e9:d6:c3:95: d1:e6:9c:00:df:b1:ac:b1:f3:42:7b:e9:c7:75:4a: a0:8f:05:29:7f:d9:eb:a3:2d:9b:c7:5a:63:99:64: e2:fc:3e:3f:ef:f4:71:22:cf:d8:bc:b7:49:4d:34: e1:d4:6a:29:18:3b:57:db:18:73:e9:ab:ef:32:bc: 29:8a:5c:c0:a2:23:eb:df:cd:91:13:d5:41:53:2b: a3:eb:38:c5:64:63:91:f5:53:04:9b:7d:20:b7:a0: 3b:da:eb:f7:f5:7d:0f:c8:c1:1f:48:32:3f:23:62: fd:9a:7c:7a:11:f1:e4:67:61:2e:6d:d5:86:78:c3: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3C:28:EB:A0:71:24:AD:11:A3:FF:AA:73:1E:34:DF:98:29:E9:78 X509v3 Authority Key Identifier: keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c5:62:07:f7:ff:4a:01:7c:84:b1:23:e6:f3:05:86:f2:1e: f6:ad:76:f4:b7:47:e3:ec:18:3f:70:ee:d9:40:55:b8:c1:b0: f1:d1:a8:43:50:56:35:a0:4f:72:56:92:97:25:bb:48:d0:45: d7:74:8e:32:62:c1:84:fc:b4:f6:1d:db:7e:33:c5:c6:22:40: 6f:bb:7d:f3:de:6a:9c:64:c5:1f:a1:ae:7f:a4:74:7b:7e:ea: 76:34:18:d6:8e:8d:d8:15:1a:67:5c:af:35:05:cc:a8:b0:1d: b2:e3:2c:66:59:4a:92:81:e4:48:2c:70:9c:3f:4e:d1:42:01: 48:0f:ed:05:c3:0e:68:10:94:b9:de:a7:d5:b9:f3:c0:6e:21: 2b:8f:19:c3:79:1e:8e:75:c9:52:37:82:60:0b:bd:88:e4:f7: 78:ad:7f:0a:bf:be:c6:00:d2:d3:88:d4:88:e5:b3:e6:04:9f: 44:b4:14:60:54:fd:56:1c:fd:e6:c8:18:9f:cc:5c:29:57:6b: a5:ca:8a:ec:4c:de:af:56:aa:13:2a:ab:76:90:9f:47:92:27: c4:6a:bb:60:f8:e6:ae:50:b7:2f:b8:25:49:75:35:ce:d3:28: 99:0c:28:5f:d6:86:a8:5b:ea:92:ca:82:9f:d6:30:3e:c1:0c: c1:ac:8a:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF REMwRkRFMkYwHhcNMjUwNDI1MDQ0ODE5WhcNMjUwNTAyMDQ0ODE5WjAYMRYwFAYD VQQDEw02ODBiMTQxMy0zNTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW2noTcuNtYFjqdh7+jPg/yi0ijqyMAh3I+d3DJ1AfLFiAl3M5D/X775y8ol CKGPJt0bHw56sdj+yFUO+gZQI5MniEedIebnFQu5QoOrfZPawJJ3HXSdT7iSKpUE xo79rI2PGSAju+B1IEbJCrQuEzkUYK+MLujpZqk8RX1QpWb5P+nWw5XR5pwA37Gs sfNCe+nHdUqgjwUpf9nroy2bx1pjmWTi/D4/7/RxIs/YvLdJTTTh1GopGDtX2xhz 6avvMrwpilzAoiPr382RE9VBUyuj6zjFZGOR9VMEm30gt6A72uv39X0PyMEfSDI/ I2L9mnx6EfHkZ2EubdWGeMN1cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFY8KOug cSStEaP/qnMeNN+YKel4MB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW VzFVbE5qMFNOY1h0d1AzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbxWIH9/9KAXyEsSPm8wWG8h72rXb0t0fj7Bg/cO7ZQFW4wbDx0ahD UFY1oE9yVpKXJbtI0EXXdI4yYsGE/LT2Hdt+M8XGIkBvu33z3mqcZMUfoa5/pHR7 fup2NBjWjo3YFRpnXK81BcyosB2y4yxmWUqSgeRILHCcP07RQgFID+0Fww5oEJS5 3qfVufPAbiErjxnDeR6OdclSN4JgC72I5Pd4rX8Kv77GANLTiNSI5bPmBJ9EtBRg VP1WHP3myBifzFwpV2ulyorsTN6vVqoTKqt2kJ9HkifEartg+OauULcvuCVJdTXO 0yiZDChf1oaoW+qSyoKf1jA+wQzBrIrF -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:30 2025 by rpki-client