$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft File: rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json) Hash identifier: fWhUqufNN2cwX8uC+UyErINBrmYuhMg1f56L3Bj6MCQ= Subject key identifier: 9D:FB:F7:FD:68:B8:66:E3:34:1D:0A:F8:F7:9F:25:6E:4C:36:9C:20 Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 Certificate issuer: /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft Manifest number: 80 Signing time: Fri 11 Apr 2025 05:48:35 +0000 Manifest this update: Fri 11 Apr 2025 05:48:35 +0000 Manifest next update: Fri 18 Apr 2025 05:48:35 +0000 Files and hashes: 1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: XporAIv6zzYC231tPB2Cny1WN8NMdQuDDzzs6gKEW9k=) 2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: PmKB7v6narbsfvRh5TaIR4bk0nlj1W0GlQb30nMXpbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Validity Not Before: Apr 11 05:48:35 2025 GMT Not After : Apr 18 05:48:35 2025 GMT Subject: CN=67f8ad33-6eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4f:55:09:85:de:9e:42:75:4f:67:65:5d:fb: 29:2d:7d:fb:ce:dd:81:94:a6:0e:30:01:a2:e7:ad: 1f:fc:71:80:55:8e:bd:30:0f:ec:99:5e:2e:bb:d1: af:8e:65:fc:c1:fc:2c:a2:e5:a0:fa:dd:a0:c7:0a: c4:41:85:6b:45:2e:10:e0:4d:78:01:14:0c:76:15: 65:1c:48:96:dd:65:c3:df:07:22:21:a5:95:46:e9: 21:04:b9:6c:32:84:e4:01:e7:ac:59:7b:c8:a6:d5: bc:c8:5b:c4:10:b5:cc:e4:6f:aa:6c:ce:87:c9:bc: 4c:3a:d3:ed:1a:de:a0:56:cd:87:d1:66:e1:03:a4: 90:43:c8:49:98:fe:cb:0d:70:1f:b8:78:78:42:e7: 33:a5:97:8c:18:5a:13:d5:23:73:fc:cf:96:d4:f6: 44:b4:d5:00:9e:91:da:12:75:75:d4:8c:ca:2f:86: 1d:10:a2:a8:bb:74:ad:16:bf:b5:07:e5:02:1b:40: 92:09:15:5e:15:94:92:ed:0e:0e:3a:92:1f:0a:97: 13:d7:94:80:65:b9:93:50:e1:df:9f:9b:36:ff:5a: 22:fa:64:d0:36:3e:ca:7e:dc:3a:50:7b:11:c6:e6: b7:30:bf:13:43:9c:f9:86:6e:49:62:e5:4a:a4:ec: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FB:F7:FD:68:B8:66:E3:34:1D:0A:F8:F7:9F:25:6E:4C:36:9C:20 X509v3 Authority Key Identifier: keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:49:3a:f7:c2:95:d1:52:3a:c1:ee:65:29:ec:bb:77:e9:bb: 0d:ad:a4:ec:37:fd:31:22:f8:30:12:49:bf:98:5d:f0:8b:d1: 5e:f3:04:43:23:26:0e:90:cd:f9:51:e9:57:2a:06:8c:0c:b0: 60:df:26:69:a6:d7:fb:37:d9:94:ad:a7:41:57:2c:b9:28:48: eb:53:3f:ff:ee:eb:c2:3e:6b:43:d6:d5:a2:b4:f7:81:b1:a3: a3:29:e5:d0:86:dc:89:72:a9:3f:d1:0f:e5:2a:b0:1e:a5:57: 46:27:a3:20:35:0d:ce:f7:77:ac:2d:30:c3:8e:61:d5:67:16: a4:7b:62:fe:67:f3:11:6d:5f:ca:a4:44:4c:ed:e7:26:73:52: e8:25:1f:1b:53:17:12:b5:f6:56:72:f5:88:f8:d9:7a:46:5f: 5c:1a:98:da:0d:cc:45:2c:3a:ff:53:14:a2:7d:09:10:2e:81: 8b:08:76:f9:69:49:f6:f9:7c:87:23:fb:56:c3:23:0e:5e:6d: 90:a0:4f:09:94:3a:41:96:e3:58:ff:50:f1:f8:ab:05:f0:9f: bd:04:cf:7b:86:12:b9:c8:64:85:47:67:59:7e:f9:b2:80:f2: 99:ce:0c:e4:6e:bd:7c:81:64:ca:c6:19:91:30:29:be:f4:f7: fc:e3:c5:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE2OUExMTAvBgNVBAUTKEFFNjU4RUEzNzdFQTExODQwQjA4RUE2Qzg4RDkwOTBF OEI2QzUyMDQwHhcNMjUwNDExMDU0ODM1WhcNMjUwNDE4MDU0ODM1WjAYMRYwFAYD VQQDEw02N2Y4YWQzMy02ZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy09VCYXenkJ1T2dlXfspLX37zt2BlKYOMAGi560f/HGAVY69MA/smV4uu9Gv jmX8wfwsouWg+t2gxwrEQYVrRS4Q4E14ARQMdhVlHEiW3WXD3wciIaWVRukhBLls MoTkAeesWXvIptW8yFvEELXM5G+qbM6HybxMOtPtGt6gVs2H0WbhA6SQQ8hJmP7L DXAfuHh4QuczpZeMGFoT1SNz/M+W1PZEtNUAnpHaEnV11IzKL4YdEKKou3StFr+1 B+UCG0CSCRVeFZSS7Q4OOpIfCpcT15SAZbmTUOHfn5s2/1oi+mTQNj7Kftw6UHsR xua3ML8TQ5z5hm5JYuVKpOxFxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ379/1o uGbjNB0K+PefJW5MNpwgMB8GA1UdIwQYMBaAFK5ljqN36hGECwjqbIjZCQ6LbFIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTY5QS84QjBFNzM4MDU4 OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZUUxDT3BzaU5rSkRvdHNV Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JtV09vM2ZxRVlRTENPcHNpTmtKRG90c1VnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTY5QS84QjBFNzM4MDU4OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZ UUxDT3BzaU5rSkRvdHNVZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTSTr3wpXRUjrB7mUp7Lt36bsNraTsN/0xIvgwEkm/mF3wi9Fe8wRD IyYOkM35UelXKgaMDLBg3yZpptf7N9mUradBVyy5KEjrUz//7uvCPmtD1tWitPeB saOjKeXQhtyJcqk/0Q/lKrAepVdGJ6MgNQ3O93esLTDDjmHVZxake2L+Z/MRbV/K pERM7ecmc1LoJR8bUxcStfZWcvWI+Nl6Rl9cGpjaDcxFLDr/UxSifQkQLoGLCHb5 aUn2+XyHI/tWwyMOXm2QoE8JlDpBluNY/1Dx+KsF8J+9BM97hhK5yGSFR2dZfvmy gPKZzgzkbr18gWTKxhmRMCm+9Pf848Vk -----END CERTIFICATE-----Generated at Sat Apr 12 19:14:35 2025 by rpki-client