$ rpki-client -vvf rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft File: -W0Mybs5WKCpxugXNpm4JO7o8uc.mft (raw, json) Hash identifier: 6GC+xa8L1uFTKFol9Js3lqCQfpG/thFnRegK4mzOEuU= Subject key identifier: CB:8F:18:87:B7:E9:C1:57:5C:FD:E7:F7:1C:A9:29:BF:0E:F0:C0:29 Authority key identifier: F9:6D:0C:C9:BB:39:58:A0:A9:C6:E8:17:36:99:B8:24:EE:E8:F2:E7 Certificate issuer: /CN=A919278E/serialNumber=F96D0CC9BB3958A0A9C6E8173699B824EEE8F2E7 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft Manifest number: BC Signing time: Fri 25 Apr 2025 04:56:01 +0000 Manifest this update: Fri 25 Apr 2025 04:56:01 +0000 Manifest next update: Fri 02 May 2025 04:56:01 +0000 Files and hashes: 1: -W0Mybs5WKCpxugXNpm4JO7o8uc.crl (hash: 2awDfYU5vh7nGQYz9F4OpfdMODcgoTecp9aL0b67OM4=) 2: 0374374A032711EFB14B6574C4F9AE02.roa (hash: 3TgUi0GmLtHiOckmKucwTFJfbV7bxO71FYN5P3l6ahM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.crl rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919278E, serialNumber=F96D0CC9BB3958A0A9C6E8173699B824EEE8F2E7 Validity Not Before: Apr 25 04:56:01 2025 GMT Not After : May 2 04:56:01 2025 GMT Subject: CN=680b15e1-c37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:2f:d5:c2:84:0f:9b:bc:82:c7:35:30:e9: 57:fe:5f:e4:91:c0:4c:d9:b7:f2:f3:8a:0b:7c:8b: 07:f4:ca:3f:2a:cc:57:0b:eb:f5:e8:07:56:e2:81: 71:37:c3:37:4f:a5:9f:2e:4b:c9:58:f5:be:3b:ca: 45:fc:ca:4e:2b:56:ac:1a:1c:ea:6e:3d:85:12:d6: d7:48:ff:2e:56:b0:af:6c:97:f2:f9:07:30:47:1d: 7c:e3:52:e4:fe:0e:a8:c0:19:95:0b:56:d2:67:61: 1b:ef:f4:c4:dc:63:27:33:30:46:e8:dc:dd:07:84: 25:0f:68:4c:64:68:0f:b8:55:9a:5d:b5:5d:ef:1e: da:81:61:78:92:13:bc:e2:1a:30:e4:7f:53:d4:d0: cb:c7:9d:35:6a:ef:73:1e:ff:9f:cf:84:ff:59:61: fb:ce:6d:19:37:d0:cc:05:2b:68:5c:a8:8f:6e:33: 98:5f:c1:44:d6:8e:f4:7f:9f:b9:e1:10:35:93:02: 58:85:88:7b:14:d6:38:b3:46:4c:15:ff:2e:81:e4: 91:df:e5:6e:8f:56:70:09:0e:0b:2e:8c:96:62:61: cd:45:6c:f4:4d:6c:c9:54:80:be:da:c7:a4:26:eb: dd:2a:4f:37:90:7b:b6:23:61:b0:dd:92:ac:ab:5b: 5f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:18:87:B7:E9:C1:57:5C:FD:E7:F7:1C:A9:29:BF:0E:F0:C0:29 X509v3 Authority Key Identifier: keyid:F9:6D:0C:C9:BB:39:58:A0:A9:C6:E8:17:36:99:B8:24:EE:E8:F2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:69:e1:96:b6:7a:ce:61:42:b7:0f:e5:64:3d:ca:8a:37:30: 13:a9:6b:aa:84:77:b2:3c:82:5d:e0:8b:07:85:4d:0a:6d:86: be:13:e8:e3:43:eb:e0:6f:94:16:d9:8c:01:7e:74:91:4f:ab: 49:eb:82:27:b9:ab:57:8e:85:54:ff:7f:fe:14:6b:0d:e3:16: 84:6d:7b:04:b8:20:08:15:61:e2:4d:b7:48:6c:a1:4d:78:d1: 6f:49:0a:a4:c4:81:4c:da:e5:b6:01:73:e2:a5:89:76:72:ee: 48:d0:04:4b:8c:09:19:80:34:4e:90:02:91:f2:0c:81:96:3f: 27:64:ea:d4:92:23:7d:7e:7d:69:aa:d3:6b:78:50:9e:20:e9: fc:a4:d1:8c:23:e1:cb:fa:e8:a9:b6:f4:7d:3f:ef:09:91:82: b9:66:81:2c:c9:88:7f:f2:34:dd:78:df:93:08:84:61:dd:a2: 22:4c:e3:52:83:a7:8a:34:fa:0a:9c:4b:fa:68:52:6f:ab:a5: 12:2d:f5:ed:2a:2d:9f:96:21:87:60:73:58:88:3a:eb:18:f2: 62:fd:9d:c2:30:7b:55:d9:1e:6b:93:fa:ad:e0:e9:03:2a:6d: a0:25:5c:de:6e:95:49:da:c0:37:a6:c1:eb:94:ec:c4:b0:f8: 6b:a6:8c:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI3OEUxMTAvBgNVBAUTKEY5NkQwQ0M5QkIzOTU4QTBBOUM2RTgxNzM2OTlCODI0 RUVFOEYyRTcwHhcNMjUwNDI1MDQ1NjAxWhcNMjUwNTAyMDQ1NjAxWjAYMRYwFAYD VQQDEw02ODBiMTVlMS1jMzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3Mv1cKED5u8gsc1MOlX/l/kkcBM2bfy84oLfIsH9Mo/KsxXC+v16AdW4oFx N8M3T6WfLkvJWPW+O8pF/MpOK1asGhzqbj2FEtbXSP8uVrCvbJfy+QcwRx1841Lk /g6owBmVC1bSZ2Eb7/TE3GMnMzBG6NzdB4QlD2hMZGgPuFWaXbVd7x7agWF4khO8 4how5H9T1NDLx501au9zHv+fz4T/WWH7zm0ZN9DMBStoXKiPbjOYX8FE1o70f5+5 4RA1kwJYhYh7FNY4s0ZMFf8ugeSR3+Vuj1ZwCQ4LLoyWYmHNRWz0TWzJVIC+2sek JuvdKk83kHu2I2Gw3ZKsq1tfUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuPGIe3 6cFXXP3n9xypKb8O8MApMB8GA1UdIwQYMBaAFPltDMm7OVigqcboFzaZuCTu6PLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Mjc4RS9DMDVDMzlCMjAz MjYxMUVGOEE1N0ZDNzNDNEY5QUUwMi8tVzBNeWJzNVdLQ3B4dWdYTnBtNEpPN284 dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XME15YnM1V0tDcHh1Z1hOcG00Sk83bzh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Mjc4RS9DMDVDMzlCMjAzMjYxMUVGOEE1N0ZDNzNDNEY5QUUwMi8tVzBNeWJzNVdL Q3B4dWdYTnBtNEpPN284dWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALaeGWtnrOYUK3D+VkPcqKNzATqWuqhHeyPIJd4IsHhU0KbYa+E+jj Q+vgb5QW2YwBfnSRT6tJ64InuatXjoVU/3/+FGsN4xaEbXsEuCAIFWHiTbdIbKFN eNFvSQqkxIFM2uW2AXPipYl2cu5I0ARLjAkZgDROkAKR8gyBlj8nZOrUkiN9fn1p qtNreFCeIOn8pNGMI+HL+uiptvR9P+8JkYK5ZoEsyYh/8jTdeN+TCIRh3aIiTONS g6eKNPoKnEv6aFJvq6USLfXtKi2fliGHYHNYiDrrGPJi/Z3CMHtV2R5rk/qt4OkD Km2gJVzebpVJ2sA3psHrlOzEsPhrpoxN -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:45 2025 by rpki-client