$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: I8NgBWpaZYxAMErRMg7KhVrJB7liBP5bV220kMweZJk= Subject key identifier: 7D:6C:8B:EE:21:4F:23:F4:4E:A0:E7:A0:A1:1A:FB:13:ED:3F:A8:B7 Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 3492 Signing time: Thu 24 Apr 2025 15:13:09 +0000 Manifest this update: Thu 24 Apr 2025 15:13:08 +0000 Manifest next update: Thu 01 May 2025 15:13:08 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: nINZ8DWFEBUZPK5nn6n/JDRV0d7oKoeVZlG9t+RMxFo=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Apr 24 15:13:08 2025 GMT Not After : May 1 15:13:08 2025 GMT Subject: CN=680a5504-09a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:77:9b:72:6b:0d:8b:64:df:5d:4e:ae:02:d0: 17:0e:d9:45:f7:64:3c:23:9c:f0:a5:9e:1b:fb:45: d9:92:c4:7d:37:4e:4b:57:30:fa:e7:7c:7d:fd:fc: b5:d1:5f:45:d8:e3:86:22:41:11:90:67:ba:6d:23: 6e:59:65:c1:75:d5:84:9c:ed:91:a3:89:46:f2:38: 6a:9a:d3:d0:6d:51:f6:c3:45:c1:d1:1d:d3:19:ea: 08:b1:f1:e2:7a:29:80:68:63:90:0c:ef:84:cf:d8: 8a:33:eb:6c:37:ca:f0:bd:30:8a:ee:a0:1a:12:c3: 95:69:7b:2a:a1:44:c6:5c:6f:6b:3a:1b:78:1d:3b: 3f:9a:2c:26:18:1c:d1:d7:8b:33:f2:54:22:1e:54: 53:b1:1c:81:50:5f:b1:42:42:a8:ff:59:7a:4e:e2: 2e:f3:4c:0b:c5:bf:04:88:bf:a8:6d:48:c0:26:52: 91:1f:74:f6:c8:ae:39:cd:2a:af:8a:60:bf:01:b1: f7:67:74:a3:24:52:b3:62:5b:2b:b4:85:33:04:57: 56:12:51:37:03:0c:ac:4a:6b:87:03:a8:19:5e:b9: a3:e7:33:91:b6:4c:e8:c1:22:f9:06:da:68:26:c7: 4a:03:20:78:ee:50:c6:d6:11:c1:fa:c3:2c:68:61: 0b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6C:8B:EE:21:4F:23:F4:4E:A0:E7:A0:A1:1A:FB:13:ED:3F:A8:B7 X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f6:b2:4a:b0:ce:3f:61:19:0e:c1:ca:0d:7c:4a:5a:d6:2a: 7d:00:97:7f:a5:d8:4a:e2:2b:06:f4:f2:44:d1:0e:c6:4d:78: 8a:70:1a:7c:a8:a4:d7:65:8e:39:24:77:32:9e:c0:17:86:0c: 44:df:3b:d5:67:57:e0:a8:c6:62:f1:7e:06:e2:f8:17:51:35: 80:67:1f:83:4a:ed:54:b9:8c:b3:6c:87:73:75:a3:69:d2:db: 60:2c:5a:d6:90:64:c9:08:dc:9b:7a:6e:c5:19:6f:cc:8a:27: c3:c1:0b:fe:19:18:5c:71:08:4a:c1:b1:0c:89:b0:74:85:88: 23:7e:77:5a:c3:ad:b0:fa:47:01:6f:a0:40:bb:99:84:f1:1f: fe:3e:dc:d3:e3:ae:aa:1d:ae:85:31:5c:3a:92:f5:0c:53:20: eb:a7:bf:2b:92:03:4b:f1:01:11:25:77:fd:58:0e:c6:20:aa: 6f:07:c6:f5:6b:7e:ef:c8:44:f2:0d:f7:f7:05:f8:8e:6a:74: 9d:29:cf:dc:59:98:09:2f:e5:71:4d:bd:a9:be:7b:4d:2f:19: e6:41:17:2d:84:90:d9:1e:42:87:f6:f6:67:10:b2:ee:46:2a: 44:c1:49:79:50:3c:6a:d7:a1:21:f2:08:b8:81:d5:d6:d5:94: 22:89:89:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUwNDI0MTUxMzA4WhcNMjUwNTAxMTUxMzA4WjAYMRYwFAYD VQQDEw02ODBhNTUwNC0wOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63ebcmsNi2TfXU6uAtAXDtlF92Q8I5zwpZ4b+0XZksR9N05LVzD653x9/fy1 0V9F2OOGIkERkGe6bSNuWWXBddWEnO2Ro4lG8jhqmtPQbVH2w0XB0R3TGeoIsfHi eimAaGOQDO+Ez9iKM+tsN8rwvTCK7qAaEsOVaXsqoUTGXG9rOht4HTs/miwmGBzR 14sz8lQiHlRTsRyBUF+xQkKo/1l6TuIu80wLxb8EiL+obUjAJlKRH3T2yK45zSqv imC/AbH3Z3SjJFKzYlsrtIUzBFdWElE3AwysSmuHA6gZXrmj5zORtkzowSL5Btpo JsdKAyB47lDG1hHB+sMsaGELDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1si+4h TyP0TqDnoKEa+xPtP6i3MB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC49rJKsM4/YRkOwcoNfEpa1ip9AJd/pdhK4isG9PJE0Q7GTXiKcBp8 qKTXZY45JHcynsAXhgxE3zvVZ1fgqMZi8X4G4vgXUTWAZx+DSu1UuYyzbIdzdaNp 0ttgLFrWkGTJCNybem7FGW/MiifDwQv+GRhccQhKwbEMibB0hYgjfndaw62w+kcB b6BAu5mE8R/+PtzT466qHa6FMVw6kvUMUyDrp78rkgNL8QERJXf9WA7GIKpvB8b1 a37vyETyDff3BfiOanSdKc/cWZgJL+VxTb2pvntNLxnmQRcthJDZHkKH9vZnELLu RipEwUl5UDxq16Eh8gi4gdXW1ZQiiYlS -----END CERTIFICATE-----Generated at Sat Apr 26 05:46:04 2025 by rpki-client