$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json) Hash identifier: QyAywSThIvv+hk3PQUlneCWyHIKSHq40ZPrLKr8qGpQ= Subject key identifier: 61:12:98:40:B9:B9:5F:C0:D4:4C:CC:DC:80:A5:C2:16:C1:48:37:35 Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft Manifest number: 039B Signing time: Fri 25 Apr 2025 00:33:02 +0000 Manifest this update: Fri 25 Apr 2025 00:33:02 +0000 Manifest next update: Fri 02 May 2025 00:33:02 +0000 Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: mh3GIpKDxWA9bEASKrP4Q3SE5Hyc5/bCEeILs2RrPos=) 2: D9AD698C961211ECB515C474C4F9AE02.roa (hash: qw+A+BnLOmGwGidGoi7dHOK2xbb/S+TCMScy/km8BDQ=) 3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: n+2sXe4f0iVt9C4wbyP1cXDc9FlPGl6NGcrzJRe+w7U=) 4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: u6+Gbtl2iv9JRXTumN5Ye5SMQrPpCaTXinSOYRqNVkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Validity Not Before: Apr 25 00:33:02 2025 GMT Not After : May 2 00:33:02 2025 GMT Subject: CN=680ad83e-437a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:96:fa:4a:02:0a:82:4c:04:31:af:27:60: c8:bb:fc:56:73:6d:f9:73:5b:f7:68:48:76:b1:24: 66:c0:68:58:24:d6:6e:eb:95:44:91:08:02:b8:02: d2:31:62:d1:4b:d0:c8:6c:59:6a:50:1b:d0:44:3e: 0f:31:34:c8:7e:19:10:0f:9d:6d:f8:e4:f9:98:b4: dd:7f:c6:2d:1a:73:27:0d:db:ad:24:34:08:e2:57: 18:0b:43:0b:51:c5:b7:6d:8b:eb:43:03:b1:7a:0b: 36:58:5d:01:e2:d7:ea:e6:ac:19:c6:49:fc:ed:bc: 33:d5:6d:c1:a6:74:f3:76:5e:d9:12:ef:1a:66:6b: 3b:ac:5e:bc:da:e8:8a:8b:85:1d:e4:7c:1b:e5:3b: ad:01:e8:dd:22:6d:fa:b8:68:89:27:92:77:1c:98: 33:0a:af:31:ad:77:ec:e1:9e:c8:0b:6f:b7:2a:14: ae:70:05:39:f9:8b:ec:e6:3d:f8:83:e2:44:de:71: e5:34:3a:8a:46:9e:e1:8e:3e:5c:1e:47:13:62:e4: c9:8a:3f:2d:ed:17:79:fe:ae:c0:a3:73:73:77:f5: c5:ca:55:96:78:15:67:fc:f9:ff:cc:53:61:aa:db: e9:9c:09:ad:6d:ea:25:ee:1e:8a:5e:4d:55:01:8b: ef:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:12:98:40:B9:B9:5F:C0:D4:4C:CC:DC:80:A5:C2:16:C1:48:37:35 X509v3 Authority Key Identifier: keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a3:be:00:1c:dc:6d:23:29:31:b1:39:bb:1a:e4:c0:e8:33: 9b:c1:a0:01:fc:05:49:10:db:83:9d:3c:f4:62:19:be:5e:df: d3:de:4c:d3:09:3c:9c:a1:c8:b0:93:da:41:a6:e3:72:01:42: a5:c7:99:11:b3:3b:16:99:6b:1f:d9:3b:ab:02:12:0d:ae:09: c9:61:d1:8a:1c:4b:a1:98:bc:46:d2:da:2e:41:9e:90:8f:55: 48:76:3f:ee:56:e2:7e:0f:64:c4:0e:e4:d6:cf:8c:11:24:a8: f1:c9:4a:a1:d2:e0:0e:fb:65:19:14:96:46:10:93:a2:03:15: 75:f2:da:a7:71:e9:bb:42:1b:e0:46:fc:8f:b7:ed:d7:e4:ef: e2:d6:60:40:d5:7b:bf:82:8f:dc:5e:cf:3a:45:9e:54:3e:f8: 04:ae:aa:a9:b0:8f:bd:ca:22:e5:42:77:6a:62:2f:d8:7e:25: d0:40:19:2c:7f:3e:2a:ed:07:b8:70:de:70:7b:ce:c2:cb:cf: 8d:53:b5:4e:7e:e0:b2:69:98:20:4e:cf:b1:6e:23:a0:7b:d8: ce:6d:25:4f:be:3b:5a:a3:5a:32:40:79:38:50:5d:69:3b:ae: 8c:4a:56:21:3a:8a:5e:a0:3c:ad:38:ba:4f:04:ee:a7:49:2e: b3:14:32:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx N0VENTZBRTUwHhcNMjUwNDI1MDAzMzAyWhcNMjUwNTAyMDAzMzAyWjAYMRYwFAYD VQQDEw02ODBhZDgzZS00MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA042W+koCCoJMBDGvJ2DIu/xWc235c1v3aEh2sSRmwGhYJNZu65VEkQgCuALS MWLRS9DIbFlqUBvQRD4PMTTIfhkQD51t+OT5mLTdf8YtGnMnDdutJDQI4lcYC0ML UcW3bYvrQwOxegs2WF0B4tfq5qwZxkn87bwz1W3BpnTzdl7ZEu8aZms7rF682uiK i4Ud5Hwb5TutAejdIm36uGiJJ5J3HJgzCq8xrXfs4Z7IC2+3KhSucAU5+Yvs5j34 g+JE3nHlNDqKRp7hjj5cHkcTYuTJij8t7Rd5/q7Ao3Nzd/XFylWWeBVn/Pn/zFNh qtvpnAmtbeol7h6KXk1VAYvvZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGESmEC5 uV/A1EzM3IClwhbBSDc1MB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2 MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjIwQi8xOUU0REJGNjk2MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdD RzluSW5yUEV2dGdYN1ZhdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvo74AHNxtIykxsTm7GuTA6DObwaAB/AVJENuDnTz0Yhm+Xt/T3kzT CTycociwk9pBpuNyAUKlx5kRszsWmWsf2TurAhINrgnJYdGKHEuhmLxG0touQZ6Q j1VIdj/uVuJ+D2TEDuTWz4wRJKjxyUqh0uAO+2UZFJZGEJOiAxV18tqncem7Qhvg RvyPt+3X5O/i1mBA1Xu/go/cXs86RZ5UPvgErqqpsI+9yiLlQndqYi/YfiXQQBks fz4q7Qe4cN5we87Cy8+NU7VOfuCyaZggTs+xbiOge9jObSVPvjtao1oyQHk4UF1p O66MSlYhOopeoDytOLpPBO6nSS6zFDLo -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:35 2025 by rpki-client