$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft File: wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json) Hash identifier: Hpm1g+RaoZUazFcBSVQOx8VKldxkxpti882wDLWZf4A= Subject key identifier: 1F:70:1A:05:74:61:1A:CF:7C:DD:35:AA:98:78:84:39:5C:34:98:F5 Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF Certificate issuer: /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Certificate serial: 08A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft Manifest number: 08F6 Signing time: Sun 20 Apr 2025 20:22:00 +0000 Manifest this update: Sun 20 Apr 2025 20:21:59 +0000 Manifest next update: Sun 27 Apr 2025 20:21:59 +0000 Files and hashes: 1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: s4dHf78P0SEWChoRzWmmGUauTFDiwjKKZU2oIlqhjsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Validity Not Before: Apr 20 20:21:59 2025 GMT Not After : Apr 27 20:21:59 2025 GMT Subject: CN=68055767-1c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:34:42:67:68:dc:9e:89:d8:39:0b:ac:be: 15:41:71:74:aa:b2:8c:2f:fd:e4:4a:cd:e5:de:5d: 9c:74:18:13:b3:79:86:41:7f:a4:47:18:48:40:1c: 45:a1:5e:8f:27:8d:bd:e4:3b:bb:99:9b:62:ea:62: 19:f5:10:94:3c:be:45:23:0e:12:3e:11:8a:d1:c4: 6e:fb:e0:56:a8:31:9d:af:27:ee:ad:6d:d9:8e:96: 9e:7e:13:c6:22:9c:ad:4a:a8:5c:51:b4:cf:3c:12: f8:8f:48:a2:36:e7:bf:4a:f8:5a:89:19:ce:29:d7: ac:16:1f:f5:28:c4:d6:3b:f3:ae:bc:1f:3e:25:4e: 54:fa:78:f2:c7:21:6d:23:fa:40:f7:6e:9a:68:ce: f1:5e:a6:c6:70:48:91:27:f4:b2:59:ce:57:b3:bd: 48:88:36:73:da:6a:aa:de:da:49:0b:6f:6f:a3:8d: 82:82:9e:28:2b:f3:48:b0:7e:2b:cd:6d:3d:b2:4e: 73:68:4e:e6:2b:85:b1:a5:f1:68:dc:7f:c4:9c:07: 2d:00:93:f5:99:6e:77:47:fd:26:a9:c7:20:ea:a2: a5:cc:7f:0b:11:af:f7:0f:e5:47:70:c5:3e:e6:30: d7:8e:de:e0:5b:29:4b:2d:c0:44:b8:d9:09:e4:d2: 1a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:70:1A:05:74:61:1A:CF:7C:DD:35:AA:98:78:84:39:5C:34:98:F5 X509v3 Authority Key Identifier: keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:7a:c9:89:ab:11:43:4a:86:f0:a6:78:22:cc:80:c3:d1:cd: 87:1f:b6:ce:3f:05:2a:96:4d:c7:b9:28:59:90:5c:de:c6:fe: bb:2d:3b:70:39:fc:88:f8:87:5e:0f:e8:a0:38:c6:92:06:52: be:1b:8b:a2:44:79:e8:a7:da:b4:7c:0d:ba:6b:5e:16:1f:40: a9:db:5c:2c:fc:f6:36:a4:5f:0a:3d:bc:c2:0a:34:29:c6:d3: 50:8e:2b:31:b3:10:e8:f9:35:24:69:97:3b:20:eb:54:2a:ba: 3b:b8:df:24:ca:d7:51:17:2d:5b:ea:25:52:bc:2d:78:a7:84: d2:5e:a6:1f:a1:20:7d:01:15:d8:57:cd:34:4d:da:b8:51:1f: 9e:92:9f:24:90:3b:64:df:35:93:c4:4f:bf:6a:81:f0:1f:d5: 99:51:41:d5:5e:0e:ec:a6:ee:e6:fc:f7:f6:db:e4:bd:e5:d8: 7c:a1:9e:f4:8e:d0:0f:71:a5:ee:eb:3e:2b:24:84:56:73:9f: ed:ee:b7:95:4a:70:26:1e:5e:a3:ca:ee:76:a3:90:b6:5f:ec: 4d:68:aa:1f:bd:a2:35:09:4f:01:6d:f5:74:6c:01:d3:96:14: 0d:b0:c3:e9:f9:09:24:08:7a:00:87:fd:71:3f:4e:af:f7:61: c2:07:70:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKEMwMzA1NkY2ODA5OTY0N0FGNzU4NUU1M0Y2QTk4RUNG RjNEOTg4REYwHhcNMjUwNDIwMjAyMTU5WhcNMjUwNDI3MjAyMTU5WjAYMRYwFAYD VQQDEw02ODA1NTc2Ny0xYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi80Qmdo3J6J2DkLrL4VQXF0qrKML/3kSs3l3l2cdBgTs3mGQX+kRxhIQBxF oV6PJ4295Du7mZti6mIZ9RCUPL5FIw4SPhGK0cRu++BWqDGdryfurW3ZjpaefhPG IpytSqhcUbTPPBL4j0iiNue/SvhaiRnOKdesFh/1KMTWO/OuvB8+JU5U+njyxyFt I/pA926aaM7xXqbGcEiRJ/SyWc5Xs71IiDZz2mqq3tpJC29vo42Cgp4oK/NIsH4r zW09sk5zaE7mK4WxpfFo3H/EnActAJP1mW53R/0mqccg6qKlzH8LEa/3D+VHcMU+ 5jDXjt7gWylLLcBEuNkJ5NIa6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9wGgV0 YRrPfN01qph4hDlcNJj1MB8GA1UdIwQYMBaAFMAwVvaAmWR691heU/apjs/z2Yjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpIcjNXRjVUOXFtT3pfUFpp TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEQlc5b0NaWkhyM1dGNVQ5cW1Pel9QWmlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpI cjNXRjVUOXFtT3pfUFppTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZesmJqxFDSobwpngizIDD0c2HH7bOPwUqlk3HuShZkFzexv67LTtw OfyI+IdeD+igOMaSBlK+G4uiRHnop9q0fA26a14WH0Cp21ws/PY2pF8KPbzCCjQp xtNQjisxsxDo+TUkaZc7IOtUKro7uN8kytdRFy1b6iVSvC14p4TSXqYfoSB9ARXY V800Tdq4UR+ekp8kkDtk3zWTxE+/aoHwH9WZUUHVXg7spu7m/Pf22+S95dh8oZ70 jtAPcaXu6z4rJIRWc5/t7reVSnAmHl6jyu52o5C2X+xNaKofvaI1CU8BbfV0bAHT lhQNsMPp+QkkCHoAh/1xP06v92HCB3BT -----END CERTIFICATE-----Generated at Mon Apr 21 03:42:26 2025 by rpki-client