$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft File: W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json) Hash identifier: 0tW+dMODQbcvOOzG1UK3bMP6W1L4f/NFNf4HAQQ5opI= Subject key identifier: BD:77:F5:11:B5:4B:DD:D1:B6:90:12:92:66:9F:CE:0C:D7:F6:B8:BC Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A Certificate issuer: /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft Manifest number: 08BD Signing time: Thu 24 Apr 2025 20:22:07 +0000 Manifest this update: Thu 24 Apr 2025 20:22:07 +0000 Manifest next update: Thu 01 May 2025 20:22:07 +0000 Files and hashes: 1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: h0sw5AO+36RUJErTmeKlwzhcyrgV1hTE9AT10QzYi74=) 2: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: glSctB67kcgRNgcA0b3/jW6A3plk8SZgtFK9qI9gKIo=) 3: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: NkR/nF+Vmt/Gcc86ZcEETph8N4g/HWKaL5fwvV3ReJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A Validity Not Before: Apr 24 20:22:07 2025 GMT Not After : May 1 20:22:07 2025 GMT Subject: CN=680a9d6f-9bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:d1:cb:7b:d6:aa:a4:08:a1:85:d5:02:bd: 09:c7:8b:33:0a:30:16:3d:be:37:31:38:84:5e:d6: e0:d0:ac:27:d7:ed:bb:e0:26:00:89:60:2f:33:32: b7:8f:70:4b:57:5c:1e:71:0e:e0:3a:c5:6b:b2:22: c1:eb:44:f9:40:6b:b7:00:b2:e3:86:87:36:40:21: c4:57:5a:4d:27:5f:2d:ba:ab:db:07:cf:81:14:d5: 6b:49:08:4a:10:0e:b6:d1:86:c3:f7:77:74:38:c0: d1:60:49:ff:b7:74:30:ba:d1:59:9e:a2:71:7a:8d: ae:e0:e6:d5:be:61:e3:2f:78:27:35:be:03:ff:45: 8a:57:80:fd:ce:28:dd:34:b8:86:18:c6:8c:a7:d2: 30:21:71:1c:8f:3e:5f:29:33:21:66:dc:4d:76:e3: be:bb:01:c4:3d:48:9c:2b:4e:38:b6:e2:67:c2:86: a5:2d:2c:71:3b:33:6b:dd:9b:6e:fb:0b:81:8a:79: e8:21:dd:00:29:79:09:46:9d:1f:74:e4:ec:30:3c: e3:1f:12:cf:86:58:0c:38:bb:7a:c4:65:91:af:d2: 0f:52:a3:37:77:ae:fd:6d:db:10:70:85:a6:07:ce: 17:ae:c1:9b:9e:0e:63:1a:f3:4f:00:64:42:10:fb: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:77:F5:11:B5:4B:DD:D1:B6:90:12:92:66:9F:CE:0C:D7:F6:B8:BC X509v3 Authority Key Identifier: keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:af:53:c0:61:e0:c7:6f:3b:6a:55:c4:49:dd:7d:85:bf:ce: a1:c3:81:e2:86:c6:9c:e9:86:f6:67:29:71:a6:84:45:3d:ce: 63:09:be:ad:f2:44:ff:48:75:b4:15:ef:64:89:36:e0:bf:46: ac:b4:55:b7:4b:8c:ed:bd:de:15:3e:28:fa:79:9c:46:04:7e: 02:67:4a:07:87:6a:aa:61:d4:37:bf:b5:68:da:33:87:6d:70: 0e:f4:ce:7c:17:e8:a4:bd:38:89:a3:7b:e5:98:bc:dc:c4:f5: 9e:88:45:d4:c7:ad:23:d9:e6:1c:52:cd:1f:63:17:92:50:a0: 32:71:3f:c8:13:dd:6e:bc:2d:28:72:3c:e9:8b:11:87:29:65: 29:d2:e2:0f:8d:8e:43:4f:92:4c:f3:f8:70:38:13:49:b7:e8: 43:41:fe:06:d0:44:52:99:02:59:01:5a:98:ce:c4:59:95:e4: 03:74:d0:18:d2:89:41:49:30:f1:d7:9a:86:24:ae:df:47:24: 1e:82:db:77:7e:96:17:cd:10:8c:71:a5:b7:e6:7c:4a:52:7c: a4:0c:e7:95:68:e7:f2:32:0b:a2:85:cf:20:2b:59:52:7f:fc: 85:24:c1:bd:81:17:87:a2:e4:8c:8c:9f:d4:09:78:05:cf:0e: c4:ca:5c:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4MEUxMTAvBgNVBAUTKDVCQkQ2NkU4NjMzNEU5OTgxN0UyQzZENUJDRUI3REFE MDIwRkNBOEEwHhcNMjUwNDI0MjAyMjA3WhcNMjUwNTAxMjAyMjA3WjAYMRYwFAYD VQQDEw02ODBhOWQ2Zi05YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsPRy3vWqqQIoYXVAr0Jx4szCjAWPb43MTiEXtbg0Kwn1+274CYAiWAvMzK3 j3BLV1wecQ7gOsVrsiLB60T5QGu3ALLjhoc2QCHEV1pNJ18tuqvbB8+BFNVrSQhK EA620YbD93d0OMDRYEn/t3QwutFZnqJxeo2u4ObVvmHjL3gnNb4D/0WKV4D9zijd NLiGGMaMp9IwIXEcjz5fKTMhZtxNduO+uwHEPUicK044tuJnwoalLSxxOzNr3Ztu +wuBinnoId0AKXkJRp0fdOTsMDzjHxLPhlgMOLt6xGWRr9IPUqM3d679bdsQcIWm B84XrsGbng5jGvNPAGRCEPvZXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL139RG1 S93RtpASkmafzgzX9ri8MB8GA1UdIwQYMBaAFFu9ZuhjNOmYF+LG1bzrfa0CD8qK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTgwRS8wMEU5MjUwNEIx Q0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZaZ1g0c2JWdk90OXJRSVB5 b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c3MW02R00wNlpnWDRzYlZ2T3Q5clFJUHlvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTgwRS8wMEU5MjUwNEIxQ0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZa Z1g0c2JWdk90OXJRSVB5b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATr1PAYeDHbztqVcRJ3X2Fv86hw4Hihsac6Yb2ZylxpoRFPc5jCb6t 8kT/SHW0Fe9kiTbgv0astFW3S4ztvd4VPij6eZxGBH4CZ0oHh2qqYdQ3v7Vo2jOH bXAO9M58F+ikvTiJo3vlmLzcxPWeiEXUx60j2eYcUs0fYxeSUKAycT/IE91uvC0o cjzpixGHKWUp0uIPjY5DT5JM8/hwOBNJt+hDQf4G0ERSmQJZAVqYzsRZleQDdNAY 0olBSTDx15qGJK7fRyQegtt3fpYXzRCMcaW35nxKUnykDOeVaOfyMguihc8gK1lS f/yFJMG9gReHouSMjJ/UCXgFzw7Eylxx -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:40 2025 by rpki-client