$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: rTHE5671THJRgeA/Vstj0BIKiy4TzlMvnNbOa/KHVn4= Subject key identifier: FA:27:7B:55:9E:33:62:14:46:3B:56:BF:68:60:44:41:19:6A:AC:A2 Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0D81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0D79 Signing time: Thu 24 Apr 2025 17:55:21 +0000 Manifest this update: Thu 24 Apr 2025 17:55:21 +0000 Manifest next update: Thu 01 May 2025 17:55:21 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: Kql9bpddrXZ+taCIe7fVSpL1QtziWpe5Ob+RQvwC4eo=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: Jn/++SfV1VdnkIlweTbZK1B7H5Xpb4S9KYcvJi/sW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3457 (0xd81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: Apr 24 17:55:21 2025 GMT Not After : May 1 17:55:21 2025 GMT Subject: CN=680a7b09-8ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:e7:1f:26:1f:f1:5a:6e:60:20:67:86:84: 42:11:05:4b:4a:cc:70:0b:2b:42:bb:91:9d:9c:04: ad:bc:f4:1d:86:31:92:e6:7d:2a:f3:21:8d:8d:e5: 74:34:7e:7f:95:3c:da:f5:aa:c1:08:11:0e:1e:c3: f8:72:11:df:c2:c0:8c:9b:bd:db:30:ff:ad:65:53: 9b:ec:a9:6b:0b:07:5e:74:27:cc:69:11:28:a3:bb: b0:2f:b0:ef:43:cd:cd:50:f0:66:49:23:1a:02:1b: cd:0e:66:d6:d6:6c:4a:45:ea:a1:ad:01:fe:ba:2a: 20:11:f4:3f:54:2c:43:c9:6d:4f:14:65:15:dc:eb: 29:37:ce:6b:5c:45:dc:5b:2f:cb:48:9a:6b:a2:6a: bc:ef:70:43:2f:c4:a5:3f:3f:8d:af:41:d0:e6:83: ce:72:f0:c0:dc:67:b3:89:9a:04:85:5f:a7:94:ee: 7a:59:b3:fd:06:fe:82:c0:0a:e6:2c:29:49:5e:22: 52:64:bd:4e:b4:67:4b:d6:59:16:51:57:5a:e3:da: 89:25:1f:e1:13:8c:70:b1:7d:f1:3c:f7:2f:b8:a3: 3c:de:68:96:04:60:55:7b:1c:ba:02:d9:45:a3:8a: 7f:f3:7a:fe:7b:4b:03:9b:8b:e2:54:b5:ab:ca:6b: 14:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:27:7B:55:9E:33:62:14:46:3B:56:BF:68:60:44:41:19:6A:AC:A2 X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bb:93:d0:54:5c:2c:11:f1:34:fd:46:80:35:ac:92:9f:de: ef:4c:c2:22:97:54:c5:5a:66:59:15:3d:a1:88:a9:12:b1:d6: ad:fe:c4:0d:25:3e:7b:c0:6c:6c:06:06:c7:ce:dd:e3:df:b6: 4d:dd:70:2f:f2:d6:59:ff:29:48:44:14:16:00:2b:d4:47:b8: c5:43:e7:b4:fe:e1:4a:0b:b8:9c:14:a6:ca:73:1d:4d:85:9b: cf:01:00:15:e9:bd:7a:d8:40:84:98:82:de:35:c8:74:22:51: 09:f9:75:4b:7c:fc:35:05:d2:eb:3a:cf:ee:6c:d2:bd:26:6b: 64:f6:e2:ae:a3:be:40:00:a7:e7:7b:85:7a:17:f2:eb:5c:6b: 72:b2:d6:1a:a0:5f:f0:b8:75:a8:04:a8:cb:62:06:91:42:af: 1f:6c:91:e5:62:65:c8:3d:ab:39:01:99:05:bd:61:21:e8:a3: 50:e5:ee:4c:15:01:5f:1c:81:51:65:bb:d2:d1:88:d3:5d:6b: 30:77:db:7b:1b:3c:ab:58:65:44:bc:28:a3:ca:94:99:6b:1e: 60:29:9b:51:2f:0f:94:6c:e5:79:96:2a:2c:a8:03:7e:64:db: 2a:c7:54:a9:76:fa:ad:3b:3d:69:2e:93:06:e4:27:ac:fe:8f: 97:9b:6c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjUwNDI0MTc1NTIxWhcNMjUwNTAxMTc1NTIxWjAYMRYwFAYD VQQDEw02ODBhN2IwOS04YmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RLnHyYf8VpuYCBnhoRCEQVLSsxwCytCu5GdnAStvPQdhjGS5n0q8yGNjeV0 NH5/lTza9arBCBEOHsP4chHfwsCMm73bMP+tZVOb7KlrCwdedCfMaREoo7uwL7Dv Q83NUPBmSSMaAhvNDmbW1mxKReqhrQH+uiogEfQ/VCxDyW1PFGUV3OspN85rXEXc Wy/LSJpromq873BDL8SlPz+Nr0HQ5oPOcvDA3GeziZoEhV+nlO56WbP9Bv6CwArm LClJXiJSZL1OtGdL1lkWUVda49qJJR/hE4xwsX3xPPcvuKM83miWBGBVexy6AtlF o4p/83r+e0sDm4viVLWrymsUqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPone1We M2IURjtWv2hgREEZaqyiMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPu5PQVFwsEfE0/UaANaySn97vTMIil1TFWmZZFT2hiKkSsdat/sQN JT57wGxsBgbHzt3j37ZN3XAv8tZZ/ylIRBQWACvUR7jFQ+e0/uFKC7icFKbKcx1N hZvPAQAV6b162ECEmILeNch0IlEJ+XVLfPw1BdLrOs/ubNK9Jmtk9uKuo75AAKfn e4V6F/LrXGtystYaoF/wuHWoBKjLYgaRQq8fbJHlYmXIPas5AZkFvWEh6KNQ5e5M FQFfHIFRZbvS0YjTXWswd9t7GzyrWGVEvCijypSZax5gKZtRLw+UbOV5liosqAN+ ZNsqx1SpdvqtOz1pLpMG5Ces/o+Xm2xV -----END CERTIFICATE-----Generated at Sat Apr 26 17:21:37 2025 by rpki-client