$ rpki-client -vvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft File: W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft (raw, json) Hash identifier: QgOG4GzfhqUVpchLlhYyGycecK00O0m5+p5p355guto= Subject key identifier: BC:2C:9A:D1:E7:20:56:8C:8E:73:DA:0D:ED:39:44:7C:E8:0A:0F:85 Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21 Certificate issuer: /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft Manifest number: 0117 Signing time: Thu 03 Apr 2025 04:03:34 +0000 Manifest this update: Thu 03 Apr 2025 04:03:34 +0000 Manifest next update: Thu 10 Apr 2025 04:03:34 +0000 Files and hashes: 1: W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl (hash: eKTLKH1jiyoB0yIrm7nKaa4AU6wbQqDrcSjpXdLxZ7M=) 2: 12225D3A66F611EE82864875C4F9AE02.roa (hash: kCGrl3mXtq7SDelNlIUQzKXuGt3Lw19xPqDULlWm58o=) 3: 12C3947A66F611EE82864875C4F9AE02.roa (hash: 9fewhte7FG+d2VuRFA5Cc4zNjoexhBMgBSrFkyFPOWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911069A Validity Not Before: Apr 3 04:03:34 2025 GMT Not After : Apr 10 04:03:34 2025 GMT Subject: CN=67ee0896-36b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:27:a6:b4:b9:9b:9f:f8:33:b7:24:19:6b:9e: 0f:11:39:d5:36:1b:ce:01:b3:49:42:66:c6:23:d8: 8d:cc:0e:65:0f:bb:2f:ee:b8:0c:8d:6c:dc:05:b4: 89:8e:05:95:9e:5d:f0:04:53:e8:f6:3c:81:25:0b: 0c:8a:5e:bc:23:e7:8a:55:7e:19:6b:2e:df:cb:87: a5:a4:6a:11:f6:41:de:72:98:54:40:f7:6f:f8:8f: 01:b5:61:19:91:06:dd:fd:1d:fc:40:d6:13:98:f1: d9:c8:87:f5:86:39:7b:a0:b3:65:47:c9:35:a7:e0: f2:2e:04:93:53:5c:cf:8c:8c:9f:31:83:7b:8d:16: 07:af:88:ed:4e:37:c4:2f:33:9b:ea:ab:0d:92:43: 20:60:bf:e4:48:84:ae:fd:19:01:c9:d1:91:d2:57: 16:74:80:4e:86:4e:b0:85:c9:7b:66:94:85:21:f9: 8a:32:b2:fd:44:07:22:b4:f7:25:81:36:be:f8:97: a0:66:ca:4a:3c:2b:21:0c:5f:df:60:1a:1d:ac:8a: 7f:a5:87:13:26:79:9d:04:d6:8b:4c:d6:64:61:fa: cf:ab:4f:06:45:2a:98:61:16:d7:1b:c3:41:67:7c: cd:38:de:d9:e3:d3:de:37:12:50:e1:5b:11:02:e3: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2C:9A:D1:E7:20:56:8C:8E:73:DA:0D:ED:39:44:7C:E8:0A:0F:85 X509v3 Authority Key Identifier: keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:db:59:2e:d3:d9:38:c3:5a:2e:4e:91:20:d2:03:bb:2e:dd: 7f:d9:18:00:0d:5d:36:fb:36:19:55:87:d4:af:27:aa:49:50: 54:e4:91:24:85:49:ed:6a:b5:b1:16:2d:ad:12:36:a1:eb:3a: 0e:c2:f9:2f:d1:cc:6b:7b:22:fa:b7:99:15:28:b0:b2:9a:1e: 6e:7a:53:70:50:27:a8:99:8d:ab:40:1f:c5:ca:ef:62:cf:0d: 3b:b9:f6:c7:32:64:38:84:25:4e:58:21:9c:69:4b:06:25:e8: 10:7b:fd:fd:a9:27:23:d2:6f:5f:09:b5:4d:88:01:99:0a:96: 4c:48:0c:29:5b:83:e3:95:b9:f0:45:e7:fc:a1:64:05:59:5c: 00:df:5a:78:db:f4:93:cb:6e:b4:56:5e:c0:ba:01:30:c2:67: 6d:48:f4:1f:fe:4d:26:ac:2e:13:3c:ee:61:f1:41:f6:4b:bf: 29:e0:0e:d3:6f:48:49:7b:82:95:e3:4d:44:30:1e:a7:83:9c: 36:1a:94:60:84:57:eb:9a:71:a1:99:74:aa:9f:95:1e:22:05: 90:42:f6:ae:71:c6:05:ae:3c:b3:4e:cb:92:2d:93:17:32:ae: 40:72:ff:b1:69:22:e0:d6:70:de:f6:88:c8:d0:f1:b6:fc:c7: 95:96:40:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA2OUExMTAvBgNVBAUTKDVCODJFODhDMDE0MTMyODIzRDAyMEQ1QzMwQTZCRkI2 RDVCNTAyMjEwHhcNMjUwNDAzMDQwMzM0WhcNMjUwNDEwMDQwMzM0WjAYMRYwFAYD VQQDEw02N2VlMDg5Ni0zNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8iemtLmbn/gztyQZa54PETnVNhvOAbNJQmbGI9iNzA5lD7sv7rgMjWzcBbSJ jgWVnl3wBFPo9jyBJQsMil68I+eKVX4Zay7fy4elpGoR9kHecphUQPdv+I8BtWEZ kQbd/R38QNYTmPHZyIf1hjl7oLNlR8k1p+DyLgSTU1zPjIyfMYN7jRYHr4jtTjfE LzOb6qsNkkMgYL/kSISu/RkBydGR0lcWdIBOhk6whcl7ZpSFIfmKMrL9RAcitPcl gTa++JegZspKPCshDF/fYBodrIp/pYcTJnmdBNaLTNZkYfrPq08GRSqYYRbXG8NB Z3zNON7Z49PeNxJQ4VsRAuN9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwsmtHn IFaMjnPaDe05RHzoCg+FMB8GA1UdIwQYMBaAFFuC6IwBQTKCPQINXDCmv7bVtQIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDY5QS85NjFCMkE0NjY2 RjUxMUVFQTQzODRGNzRDNEY5QUUwMi9XNExvakFGQk1vSTlBZzFjTUthX3R0VzFB aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c0TG9qQUZCTW9JOUFnMWNNS2FfdHRXMUFpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDY5QS85NjFCMkE0NjY2RjUxMUVFQTQzODRGNzRDNEY5QUUwMi9XNExvakFGQk1v STlBZzFjTUthX3R0VzFBaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn21ku09k4w1ouTpEg0gO7Lt1/2RgADV02+zYZVYfUryeqSVBU5JEk hUntarWxFi2tEjah6zoOwvkv0cxreyL6t5kVKLCymh5uelNwUCeomY2rQB/Fyu9i zw07ufbHMmQ4hCVOWCGcaUsGJegQe/39qScj0m9fCbVNiAGZCpZMSAwpW4Pjlbnw Ref8oWQFWVwA31p42/STy260Vl7AugEwwmdtSPQf/k0mrC4TPO5h8UH2S78p4A7T b0hJe4KV401EMB6ng5w2GpRghFfrmnGhmXSqn5UeIgWQQvauccYFrjyzTsuSLZMX Mq5Acv+xaSLg1nDe9ojI0PG2/MeVlkAS -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:19 2025 by rpki-client