$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft File: RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json) Hash identifier: utKZcAJ4io5c7xrwEMfW6TVks9zK3ROINUvwgno3O2U= Subject key identifier: E6:56:D9:EB:15:29:42:94:41:17:91:0C:68:87:B1:D3:43:EE:33:53 Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 Certificate issuer: /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75 Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft Manifest number: 02B0 Signing time: Fri 25 Apr 2025 01:14:15 +0000 Manifest this update: Fri 25 Apr 2025 01:14:15 +0000 Manifest next update: Fri 02 May 2025 01:14:15 +0000 Files and hashes: 1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: +1yB1Wap9Des941DOj6NewLZXv1fW8ErWp3kwhbIvNg=) 2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: cDpvh3Uhyb1LJHdjMZekAyyaNaYh9ET+ttEg2FAl8DY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BD68, serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75 Validity Not Before: Apr 25 01:14:15 2025 GMT Not After : May 2 01:14:15 2025 GMT Subject: CN=680ae1e7-366a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:a0:30:aa:bb:3d:58:08:c9:c0:eb:e5:a8: 8f:a0:77:19:26:10:8f:3e:9d:54:4f:9d:99:6a:07: 3d:e2:27:2b:14:91:90:50:2d:fb:7e:41:26:7e:59: 1d:ce:ec:af:f2:89:1d:ce:94:eb:37:e1:c0:a9:ce: d5:50:0c:e9:34:d8:6e:64:d0:f2:46:27:7e:c9:59: 09:bd:7d:4c:47:69:83:65:b9:8d:ef:4c:8d:79:06: ad:98:de:31:a2:db:e4:0c:80:23:cf:0d:d7:bb:48: 31:57:1e:77:fc:fc:7b:1b:af:1c:b8:ee:80:52:b3: bb:16:f8:0c:6f:61:52:4c:89:50:0e:eb:b8:ef:35: dd:47:1e:08:61:4f:3e:32:6d:c0:ff:eb:aa:b8:ab: 50:fe:75:01:7f:2e:32:51:0f:5e:c8:67:e0:4a:d9: a8:f1:b5:25:82:86:03:0e:dd:28:05:99:f8:b4:20: d2:90:48:73:88:96:0b:33:c1:53:fc:ca:8e:b0:8c: e5:c1:91:a1:c9:a3:ad:23:70:e0:01:0a:d3:72:6a: fa:40:51:7b:69:b1:f0:be:19:e7:f9:71:42:29:83: 50:7f:f8:be:b8:e7:fc:2e:60:05:58:30:a1:3a:08: 05:59:f3:0e:99:e7:31:2a:d3:25:57:9a:d9:05:fe: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:56:D9:EB:15:29:42:94:41:17:91:0C:68:87:B1:D3:43:EE:33:53 X509v3 Authority Key Identifier: keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:10:0e:f2:e5:7c:02:1d:24:0b:87:40:19:f8:2b:81:29:84: 8b:03:54:1c:f6:b9:21:3d:a6:2e:66:33:23:5d:6f:8d:48:ce: ed:37:03:a9:10:54:39:1a:f6:bc:c6:f4:81:aa:0a:0c:d6:b0: 26:ad:22:54:78:c1:12:4e:23:b4:41:38:66:a7:99:02:08:8e: ac:a0:09:62:d2:2c:05:97:20:d3:ac:2e:28:a2:01:5f:9e:5a: 86:44:27:8f:a3:10:60:b1:11:1a:80:e6:b7:c1:53:fa:87:7a: aa:6b:83:84:ac:29:73:5b:4d:6b:fb:70:c1:7c:e6:b1:40:3b: 21:60:5b:d9:0e:9b:64:b9:f4:69:1a:2e:7e:f6:da:12:c8:c1: 7a:a9:ef:5a:44:37:93:e1:c5:b3:28:a7:89:73:fd:4b:23:96: 65:be:d4:d2:35:3b:da:cc:64:a3:e3:72:42:37:b3:a2:d0:5b: b1:94:96:49:cb:cb:5e:85:0b:22:dd:5f:06:1a:03:0a:b2:0c: b5:42:39:97:af:ae:5b:5c:59:97:77:92:c3:34:53:09:b5:20: ef:b5:11:fc:4a:f9:a4:60:88:d4:ff:10:8e:dc:37:22:d8:db: 87:ab:e2:89:26:84:e6:65:0b:fa:37:f3:58:fa:bd:89:df:da: 53:8a:68:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JENjgxMTAvBgNVBAUTKDQ1NjMyMEZFOTcwRjVDQTRCRkQ3NzU2RkMzRTI3RTA2 QjMwOEJFNzUwHhcNMjUwNDI1MDExNDE1WhcNMjUwNTAyMDExNDE1WjAYMRYwFAYD VQQDEw02ODBhZTFlNy0zNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuKgMKq7PVgIycDr5aiPoHcZJhCPPp1UT52Zagc94icrFJGQUC37fkEmflkd zuyv8okdzpTrN+HAqc7VUAzpNNhuZNDyRid+yVkJvX1MR2mDZbmN70yNeQatmN4x otvkDIAjzw3Xu0gxVx53/Px7G68cuO6AUrO7FvgMb2FSTIlQDuu47zXdRx4IYU8+ Mm3A/+uquKtQ/nUBfy4yUQ9eyGfgStmo8bUlgoYDDt0oBZn4tCDSkEhziJYLM8FT /MqOsIzlwZGhyaOtI3DgAQrTcmr6QFF7abHwvhnn+XFCKYNQf/i+uOf8LmAFWDCh OggFWfMOmecxKtMlV5rZBf69JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZW2esV KUKUQReRDGiHsdND7jNTMB8GA1UdIwQYMBaAFEVjIP6XD1ykv9d1b8PifgazCL51 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkQ2OC8wNEQ3NEI1MEYx NTMxMUVDQjA3QzlGMjZDNEY5QUUwMi9SV01nX3BjUFhLU18xM1Z2dy1KLUJyTUl2 blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXTWdfcGNQWEtTXzEzVnZ3LUotQnJNSXZuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkQ2OC8wNEQ3NEI1MEYxNTMxMUVDQjA3QzlGMjZDNEY5QUUwMi9SV01nX3BjUFhL U18xM1Z2dy1KLUJyTUl2blUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqEA7y5XwCHSQLh0AZ+CuBKYSLA1Qc9rkhPaYuZjMjXW+NSM7tNwOp EFQ5Gva8xvSBqgoM1rAmrSJUeMESTiO0QThmp5kCCI6soAli0iwFlyDTrC4oogFf nlqGRCePoxBgsREagOa3wVP6h3qqa4OErClzW01r+3DBfOaxQDshYFvZDptkufRp Gi5+9toSyMF6qe9aRDeT4cWzKKeJc/1LI5ZlvtTSNTvazGSj43JCN7Oi0FuxlJZJ y8tehQsi3V8GGgMKsgy1QjmXr65bXFmXd5LDNFMJtSDvtRH8SvmkYIjU/xCO3Dci 2NuHq+KJJoTmZQv6N/NY+r2J39pTimg7 -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:38 2025 by rpki-client