$ rpki-client -vvf rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft File: 74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft (raw, json) Hash identifier: QqktdSUjgDg7ro7tRvnxSD5saAoPAZsRViNLLU3NJAo= Subject key identifier: 0F:49:6A:D9:EF:B2:2D:22:40:C6:38:46:12:59:1A:4B:12:78:B7:89 Authority key identifier: EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3 Certificate issuer: /CN=A9189396/serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft Manifest number: 0D Signing time: Fri 25 Apr 2025 07:05:33 +0000 Manifest this update: Fri 25 Apr 2025 07:05:32 +0000 Manifest next update: Fri 02 May 2025 07:05:32 +0000 Files and hashes: 1: 74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl (hash: TYd/YAvzJlk0K539ZM+nOMpyMpDcys/azJXEHlW0dJ4=) 2: 7CBE8274103011F08606D714C4F9AE02.roa (hash: IuWisIzOrWuJ3prCFTYRSnmT2eAgA9CS8sTrUTpGkp0=) 3: 7D2C0290103011F08606D714C4F9AE02.roa (hash: YeIsqC2yZDriIQzhHfDUg79mV40ujoQQFn6HZz5y+Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189396, serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3 Validity Not Before: Apr 25 07:05:32 2025 GMT Not After : May 2 07:05:32 2025 GMT Subject: CN=680b343d-e45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:53:54:30:7a:3e:9e:5c:fc:74:25:60:86: e3:a0:d7:f1:db:2d:0d:74:ba:5f:3a:40:c6:64:7f: fa:5c:9a:ee:a4:54:eb:8f:8a:b2:1d:cf:6c:ea:ad: 46:79:7f:31:07:c4:a2:19:8b:6d:9e:65:eb:e5:c8: 10:94:02:06:72:0b:1e:a9:e6:eb:5a:76:a5:80:25: 8e:2a:c3:ed:0a:46:cc:6e:ab:73:1f:46:ad:ad:85: f2:6f:d7:d7:cf:b0:43:b1:d1:43:b8:57:50:8d:d4: 20:d5:7a:1d:9e:c1:5f:38:2e:35:f8:46:27:7c:94: 32:6a:1e:2f:25:08:e2:49:3e:fd:c5:26:46:2a:6f: cc:83:6f:dc:78:59:79:b0:1e:95:5e:9d:a3:aa:21: 89:a9:6f:90:fb:95:4d:67:1b:92:6b:65:17:b4:47: d4:e0:21:dc:eb:28:e4:ac:cc:31:0d:cc:4f:22:29: 5e:14:0a:3f:b1:a9:42:8e:d1:1c:8a:0a:8a:a3:8b: 94:f0:23:00:9c:8a:da:71:10:b3:08:af:aa:a9:f6: e1:57:36:b0:52:4f:b8:20:37:7c:30:81:a6:50:01: b5:ed:10:8d:48:9b:cb:18:b9:48:a5:3f:e6:f3:ad: 70:89:81:99:aa:5e:23:6b:4e:21:de:a2:5c:99:4f: a8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:49:6A:D9:EF:B2:2D:22:40:C6:38:46:12:59:1A:4B:12:78:B7:89 X509v3 Authority Key Identifier: keyid:EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:49:71:c0:b9:d3:9d:46:e3:10:d9:cf:80:b7:f2:0d:55:fa: d0:e2:8d:ef:5b:d3:59:e9:5c:a6:05:cd:56:09:c0:4f:1a:89: 1a:57:a4:85:1a:b9:e1:63:21:67:29:62:63:1a:e1:bf:8e:b2: d1:c2:32:a2:34:f4:95:12:ee:15:23:ad:ea:71:5e:cb:6c:6c: 85:12:eb:ad:81:39:70:31:75:77:8f:0c:7d:4b:d3:83:cf:d6: 59:18:94:00:df:27:0b:23:0c:69:e4:5a:8b:77:b4:09:c7:2f: 4a:d5:06:88:ad:26:77:e4:e9:ac:ba:23:e4:7a:9a:6e:e5:37: 3b:2b:ec:21:06:c0:c2:37:de:fa:2f:f0:a9:76:ee:77:44:d9: 44:44:5d:71:0b:dd:ae:0f:cc:38:a8:41:24:a3:13:ad:f5:f7: 68:34:a6:40:9a:7e:c2:60:1d:bb:57:46:9e:21:2e:36:67:29: 29:f6:7a:09:aa:3a:33:84:c1:87:b1:bc:b8:bc:a4:4a:bb:cd: 65:22:6d:14:1e:51:a1:8f:8a:dc:a4:a0:8b:ff:f5:f5:60:88: 11:b7:86:df:02:fd:48:65:15:25:63:a6:86:ba:8a:ea:c9:5b: 26:ec:db:66:48:a5:6b:1f:3a:1a:4e:fe:54:b9:ce:94:6e:04: bd:95:cc:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTM5NjExMC8GA1UEBRMoRUY4NUFFRkM3QjA4MTRERjNGNDEwREEwMUNBMzRCRTRE NjZCQjFBMzAeFw0yNTA0MjUwNzA1MzJaFw0yNTA1MDIwNzA1MzJaMBgxFjAUBgNV BAMTDTY4MGIzNDNkLWU0NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6c1NUMHo+nlz8dCVghuOg1/HbLQ10ul86QMZkf/pcmu6kVOuPirIdz2zqrUZ5 fzEHxKIZi22eZevlyBCUAgZyCx6p5utadqWAJY4qw+0KRsxuq3MfRq2thfJv19fP sEOx0UO4V1CN1CDVeh2ewV84LjX4Rid8lDJqHi8lCOJJPv3FJkYqb8yDb9x4WXmw HpVenaOqIYmpb5D7lU1nG5JrZRe0R9TgIdzrKOSszDENzE8iKV4UCj+xqUKO0RyK Coqji5TwIwCcitpxELMIr6qp9uFXNrBST7ggN3wwgaZQAbXtEI1Im8sYuUilP+bz rXCJgZmqXiNrTiHeolyZT6jTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD0lq2e+y LSJAxjhGElkaSxJ4t4kwHwYDVR0jBBgwFoAU74Wu/HsIFN8/QQ2gHKNL5NZrsaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5Mzk2LzNCOEQ3NDg4MTAy OTExRjA5MDIyMjYzREM0RjlBRTAyLzc0V3VfSHNJRk44X1FRMmdIS05MNU5acnNh TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNzRXdV9Ic0lGTjhfUVEyZ0hLTkw1Tlpyc2FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 Mzk2LzNCOEQ3NDg4MTAyOTExRjA5MDIyMjYzREM0RjlBRTAyLzc0V3VfSHNJRk44 X1FRMmdIS05MNU5acnNhTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFhJccC5051G4xDZz4C38g1V+tDije9b01npXKYFzVYJwE8aiRpXpIUa ueFjIWcpYmMa4b+OstHCMqI09JUS7hUjrepxXstsbIUS662BOXAxdXePDH1L04PP 1lkYlADfJwsjDGnkWot3tAnHL0rVBoitJnfk6ay6I+R6mm7lNzsr7CEGwMI33vov 8Kl27ndE2UREXXEL3a4PzDioQSSjE63192g0pkCafsJgHbtXRp4hLjZnKSn2egmq OjOEwYexvLi8pEq7zWUibRQeUaGPitykoIv/9fVgiBG3ht8C/UhlFSVjpoa6iurJ Wybs22ZIpWsfOhpO/lS5zpRuBL2VzNA= -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:09 2025 by rpki-client