$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft File: pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json) Hash identifier: wHQXBG9L69J4MNdQJXaUQ1BiIqzkUGklpoddXGvU7eA= Subject key identifier: 37:3C:30:8F:04:B7:0E:83:D0:AB:E4:06:7C:14:62:B7:9D:88:93:11 Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft Manifest number: 01DF Signing time: Fri 25 Apr 2025 01:56:41 +0000 Manifest this update: Fri 25 Apr 2025 01:56:41 +0000 Manifest next update: Fri 02 May 2025 01:56:41 +0000 Files and hashes: 1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: u+qSxMH+C9YoMl3IiS1QPHOrW8vJRTP52pqOX+ovVus=) 2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: AKQfVSoyvedil4fBrswJw8Fk2im5oq9KA2WJlwXE+SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Validity Not Before: Apr 25 01:56:41 2025 GMT Not After : May 2 01:56:41 2025 GMT Subject: CN=680aebd9-8198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5e:7a:38:64:af:43:df:8e:35:4e:a7:37:15: df:6a:45:3f:c3:3b:8b:dc:22:d3:7a:73:89:2e:34: 1a:92:d9:4f:20:a7:25:8d:60:1f:fb:07:cb:56:84: de:7e:2a:14:3c:3e:26:ef:41:c6:02:6b:0a:73:23: 86:ff:50:d6:4c:d4:8c:a4:bd:5a:55:94:57:c4:eb: 60:14:ad:8d:53:15:cb:f5:a6:ba:e1:2a:b3:cb:38: c8:b5:17:df:0f:98:e7:a3:9a:a1:90:f2:8d:88:57: dc:59:c5:49:7d:38:94:81:1c:b5:e0:7c:91:7f:41: af:de:40:f5:17:d4:dc:fa:e5:07:7e:76:2a:42:3c: d6:84:49:53:23:1c:bb:a9:27:5e:12:ff:12:22:3f: e2:6b:01:33:9c:0e:c6:37:14:8c:2b:23:12:14:80: ea:71:a0:ea:a9:02:73:28:7d:98:9d:da:5d:db:13: ab:db:80:a1:3b:fc:82:c0:22:92:6c:4d:23:17:bf: c4:40:f8:99:a9:de:cb:1e:51:db:33:27:c7:4e:4c: c4:75:c6:44:e7:fb:f2:07:78:2f:c7:48:23:05:94: 67:16:2f:88:24:e8:2d:57:8d:8d:b9:de:e0:74:c8: e9:e8:93:f6:33:06:18:60:5d:4d:16:b7:a0:d9:15: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3C:30:8F:04:B7:0E:83:D0:AB:E4:06:7C:14:62:B7:9D:88:93:11 X509v3 Authority Key Identifier: keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f3:25:15:5a:01:e8:fc:d3:eb:1e:6f:b1:27:b7:85:dd:4d: cb:f0:ee:70:ef:fc:21:23:03:3f:2c:60:4a:8d:ff:17:b4:13: 28:c2:7d:7d:73:ee:24:9a:5a:ee:c6:cc:fc:3c:f4:be:88:56: 6f:e7:9c:b4:55:9d:31:32:9a:32:71:12:b9:95:74:c4:53:8b: 0d:3c:39:aa:b9:91:a3:d0:06:80:ad:a1:af:78:29:e5:2f:8c: 05:e4:62:08:a9:13:df:de:63:54:40:15:3e:0f:6b:f7:51:bf: ef:da:39:ec:0f:3b:6c:65:9e:d3:ec:4d:26:31:c4:f2:73:c2: 10:2e:8c:a9:ad:af:b2:3d:47:e1:39:a8:fc:0d:a9:71:e9:1e: dd:33:d1:a4:44:58:9a:0e:73:48:9b:98:c9:e3:b5:02:e8:ee: 9d:5c:d8:20:7d:ad:a8:b8:48:24:d0:21:39:3d:df:c8:a0:34: 34:e6:8b:31:8e:5c:32:10:1c:1a:4c:3d:2b:a0:93:ea:10:0b: bd:8a:6b:07:f9:a5:ba:4d:92:44:e6:4c:57:62:ca:09:18:d1: d0:94:2a:0b:e5:63:dd:3a:71:fe:f3:6a:6a:c4:f3:14:a4:2d: 1d:8a:d4:41:07:8c:42:8c:5b:c1:16:0d:f1:2f:07:a1:83:6a: ba:b7:26:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTQxMTAvBgNVBAUTKEE3MDdFOEVENkM3NEJBRjM2MURENDA3MjcxQzZBMzRE NDQwMjIyQUMwHhcNMjUwNDI1MDE1NjQxWhcNMjUwNTAyMDE1NjQxWjAYMRYwFAYD VQQDEw02ODBhZWJkOS04MTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5156OGSvQ9+ONU6nNxXfakU/wzuL3CLTenOJLjQaktlPIKcljWAf+wfLVoTe fioUPD4m70HGAmsKcyOG/1DWTNSMpL1aVZRXxOtgFK2NUxXL9aa64SqzyzjItRff D5jno5qhkPKNiFfcWcVJfTiUgRy14HyRf0Gv3kD1F9Tc+uUHfnYqQjzWhElTIxy7 qSdeEv8SIj/iawEznA7GNxSMKyMSFIDqcaDqqQJzKH2Yndpd2xOr24ChO/yCwCKS bE0jF7/EQPiZqd7LHlHbMyfHTkzEdcZE5/vyB3gvx0gjBZRnFi+IJOgtV42Nud7g dMjp6JP2MwYYYF1NFreg2RVVAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc8MI8E tw6D0KvkBnwUYrediJMRMB8GA1UdIwQYMBaAFKcH6O1sdLrzYd1AcnHGo01EAiKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxNC8xODhDMUMyNjRF MTMxMUVEQjEyRjNDNkZDNEY5QUUwMi9wd2ZvN1d4MHV2TmgzVUJ5Y2NhalRVUUNJ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B3Zm83V3gwdXZOaDNVQnljY2FqVFVRQ0lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxNC8xODhDMUMyNjRFMTMxMUVEQjEyRjNDNkZDNEY5QUUwMi9wd2ZvN1d4MHV2 TmgzVUJ5Y2NhalRVUUNJcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ8yUVWgHo/NPrHm+xJ7eF3U3L8O5w7/whIwM/LGBKjf8XtBMown19 c+4kmlruxsz8PPS+iFZv55y0VZ0xMpoycRK5lXTEU4sNPDmquZGj0AaAraGveCnl L4wF5GIIqRPf3mNUQBU+D2v3Ub/v2jnsDztsZZ7T7E0mMcTyc8IQLoypra+yPUfh Oaj8Dalx6R7dM9GkRFiaDnNIm5jJ47UC6O6dXNggfa2ouEgk0CE5Pd/IoDQ05osx jlwyEBwaTD0roJPqEAu9imsH+aW6TZJE5kxXYsoJGNHQlCoL5WPdOnH+82pqxPMU pC0ditRBB4xCjFvBFg3xLwehg2q6tyZs -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:27 2025 by rpki-client