$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft File: w7gqL3RR5pVsP6OTQNxzItDnjKY.mft (raw, json) Hash identifier: vc1GGTqXN7m02aAUvLdfQ9R3bGZgIYTkLI36LqdxcQE= Subject key identifier: 03:83:73:B4:90:C8:29:40:22:A7:C0:63:33:32:37:1D:37:6B:A7:EF Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft Manifest number: 025B Signing time: Sat 29 Mar 2025 02:03:11 +0000 Manifest this update: Sat 29 Mar 2025 02:03:10 +0000 Manifest next update: Sat 05 Apr 2025 02:03:10 +0000 Files and hashes: 1: w7gqL3RR5pVsP6OTQNxzItDnjKY.crl (hash: q6kMCIM1+L6yR6QmU6Sd3VbWIqphi3MP8OxeBj6Rh30=) 2: AA9183060FDC11ED9718606AC4F9AE02.roa (hash: esmrf2BFTjhprHyQQ5D38sZ0HfzZ4jtc/m9nB8i0g9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A Validity Not Before: Mar 29 02:03:10 2025 GMT Not After : Apr 5 02:03:10 2025 GMT Subject: CN=67e754df-c0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:ce:a1:a5:c3:5b:4b:a3:37:be:6c:44:64: 27:00:c0:92:84:ea:a1:e5:b1:e3:3a:c9:4e:0e:4f: 43:c7:a9:86:2b:99:c0:ec:cc:b3:5a:9a:e3:34:c3: e6:b4:e4:e3:0c:49:d0:33:ba:42:55:02:69:ff:bb: 97:40:d8:b7:07:e5:6b:13:75:99:6d:74:d0:95:2b: 68:b6:33:10:62:84:29:60:c4:fa:65:39:e2:1b:5b: 24:6e:1d:53:87:6d:8e:1c:2f:f6:ba:ad:7e:bd:05: ce:a8:5c:71:04:da:f7:39:0b:ac:8c:22:24:27:c4: a2:65:ae:37:a8:19:8c:8b:6a:da:7e:fb:81:2d:6c: 53:f7:76:8a:8c:46:7d:99:48:c5:f6:a9:9d:7c:a6: 4c:e3:45:cd:20:a8:bb:d1:19:82:5f:04:bd:2f:32: 56:a3:d1:90:35:22:eb:f9:08:45:53:cf:b5:f1:c3: 3d:0b:e7:34:56:f4:81:c6:60:e5:13:f6:e2:bb:c2: 58:39:a8:f8:69:a9:83:39:d5:b2:a8:2c:0b:e5:eb: 57:59:bf:7e:3e:c0:ec:6d:37:c1:21:ce:df:0f:70: 74:3a:cd:e3:a4:f6:2b:cd:68:f9:03:2c:1e:ca:1a: a1:87:51:aa:95:24:bf:a0:11:66:8d:e9:ee:dc:c5: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:83:73:B4:90:C8:29:40:22:A7:C0:63:33:32:37:1D:37:6B:A7:EF X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:2e:f2:46:45:0b:22:95:00:f1:2c:02:58:06:2a:de:36:93: 6e:d5:69:8d:0a:27:9f:f6:6b:9e:57:a3:5c:f0:18:d7:23:17: 33:b9:f6:13:32:44:3b:4e:ba:88:ca:a1:16:80:b1:01:e2:27: 22:f6:3d:c7:41:b9:b4:c7:82:51:43:17:b2:91:8a:69:0f:87: aa:ce:70:82:be:5f:d2:e9:1c:29:ef:ee:3e:c2:d3:05:0c:85: 61:2d:66:04:e0:5f:63:61:b6:8f:ea:ed:4d:21:b4:6b:6f:30: 4a:ac:62:70:45:de:7b:96:da:48:61:a5:70:9c:52:58:1a:fa: 39:6b:70:3b:0f:66:0e:eb:a8:ad:84:94:b1:d2:fa:ae:15:cc: 4c:35:13:ab:e0:21:b7:91:2c:cf:94:c8:d6:3a:1d:f9:d5:e8: 0b:24:ed:f8:a2:57:58:7a:5e:12:b1:5c:d4:c1:fd:0b:36:50: 14:4b:eb:7b:d4:1a:7d:44:46:81:4b:5a:a3:8b:b2:ab:7f:eb: 0e:90:62:d1:79:d6:be:94:c1:af:5d:8c:75:8a:a7:1a:41:64: 88:1d:8b:0e:49:71:d3:48:19:18:39:57:ca:2b:6f:d1:3a:78: e9:1a:5c:c6:42:56:66:5b:1a:13:07:46:e0:0f:23:70:01:3e: 15:44:20:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjUwMzI5MDIwMzEwWhcNMjUwNDA1MDIwMzEwWjAYMRYwFAYD VQQDEw02N2U3NTRkZi1jMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt7OoaXDW0ujN75sRGQnAMCShOqh5bHjOslODk9Dx6mGK5nA7MyzWprjNMPm tOTjDEnQM7pCVQJp/7uXQNi3B+VrE3WZbXTQlStotjMQYoQpYMT6ZTniG1skbh1T h22OHC/2uq1+vQXOqFxxBNr3OQusjCIkJ8SiZa43qBmMi2rafvuBLWxT93aKjEZ9 mUjF9qmdfKZM40XNIKi70RmCXwS9LzJWo9GQNSLr+QhFU8+18cM9C+c0VvSBxmDl E/biu8JYOaj4aamDOdWyqCwL5etXWb9+PsDsbTfBIc7fD3B0Os3jpPYrzWj5Aywe yhqhh1GqlSS/oBFmjenu3MVg6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAODc7SQ yClAIqfAYzMyNx03a6fvMB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVw VnNQNk9UUU54ekl0RG5qS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDALvJGRQsilQDxLAJYBireNpNu1WmNCief9mueV6Nc8BjXIxczufYT MkQ7TrqIyqEWgLEB4ici9j3HQbm0x4JRQxeykYppD4eqznCCvl/S6Rwp7+4+wtMF DIVhLWYE4F9jYbaP6u1NIbRrbzBKrGJwRd57ltpIYaVwnFJYGvo5a3A7D2YO66it hJSx0vquFcxMNROr4CG3kSzPlMjWOh351egLJO34oldYel4SsVzUwf0LNlAUS+t7 1Bp9REaBS1qji7Krf+sOkGLReda+lMGvXYx1iqcaQWSIHYsOSXHTSBkYOVfKK2/R OnjpGlzGQlZmWxoTB0bgDyNwAT4VRCAh -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:07 2025 by rpki-client