$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft File: pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json) Hash identifier: wQj5NsPEdN3W7N/eGIZbgo5L0qm+Da9h8hVtCV5BEeY= Subject key identifier: 01:DB:69:FB:4B:D4:89:6A:DA:E2:1A:37:FC:EF:B4:03:8E:03:00:CE Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 Certificate issuer: /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft Manifest number: 0104 Signing time: Mon 21 Apr 2025 03:56:33 +0000 Manifest this update: Mon 21 Apr 2025 03:56:32 +0000 Manifest next update: Mon 28 Apr 2025 03:56:32 +0000 Files and hashes: 1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: X3UqidVhj9XMqhEF3pIjM+AN5cqBV/+3thJUdI2aNqc=) 2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: xTZDs1cESf1SGEobV9O/GqTj36xfVMlMR7VudfYRv7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 03:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Validity Not Before: Apr 21 03:56:32 2025 GMT Not After : Apr 28 03:56:32 2025 GMT Subject: CN=6805c1f1-b477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0b:f9:50:be:0f:74:6f:9c:94:ba:f7:49:12: 96:a2:8b:10:e0:94:ce:ee:32:a5:b1:1e:18:e5:4c: da:0a:ae:5a:bb:6c:bf:76:69:0a:14:77:e9:0e:3c: 15:a8:a5:35:45:3e:10:43:87:55:f2:29:2f:95:29: bf:4c:f7:17:98:73:29:f5:84:b3:d1:a3:e6:be:70: 53:3d:18:b2:5f:87:f9:d5:14:14:43:b0:a5:96:38: 24:dc:4d:5d:1f:b9:c8:66:ca:c1:53:f3:40:5b:73: 69:35:7f:51:b0:d9:5a:df:84:51:69:33:82:9b:40: 49:4c:0f:35:aa:19:d4:44:5a:a5:2f:ce:12:c7:6a: 79:44:d7:ee:cf:f8:82:28:c3:02:67:7d:ea:7e:7f: 5b:9b:3f:e3:93:10:f9:e9:17:46:10:e5:82:96:28: e5:05:ee:43:1c:e0:b4:46:35:7a:6e:81:97:5b:3e: 08:00:dc:d3:03:8e:98:f4:1b:7a:91:23:d2:be:35: 96:2a:0f:0b:e1:9a:47:4a:2e:9f:0b:55:f5:ef:96: b9:ac:a4:c4:06:d6:3a:9a:50:8d:66:c2:9e:b4:be: 67:f6:2b:fc:cc:a4:47:6a:05:5f:57:06:ec:dc:d8: f7:9a:a6:31:a6:ec:a5:9b:a0:a7:5a:87:5d:15:b7: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DB:69:FB:4B:D4:89:6A:DA:E2:1A:37:FC:EF:B4:03:8E:03:00:CE X509v3 Authority Key Identifier: keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8d:93:d7:c6:6f:9c:1f:69:44:36:32:ed:51:69:28:22:05: 5c:4e:1a:77:d2:f0:13:46:30:46:82:8a:9f:43:ec:a6:e1:78: 10:bf:27:17:3b:1f:a4:7c:64:04:b7:13:02:f7:4e:21:41:0a: 75:f2:c5:e0:7a:f9:2b:ad:d0:ce:91:36:a6:f7:f1:2c:31:52: 8c:fa:60:2c:e9:5b:c3:f7:ba:fc:61:04:e6:f4:a3:16:ee:1e: 96:07:c7:d5:c0:0a:e3:4e:06:70:f7:27:45:87:27:e4:fd:7c: e4:dd:15:bf:dd:7e:73:d5:41:5c:78:b6:c9:bc:ab:6f:b6:25: ff:aa:40:aa:3d:58:77:89:de:51:d4:60:dc:6a:4f:b8:1c:24: 07:fc:dc:78:bc:17:c0:15:05:96:36:dd:7f:30:2e:0a:96:2e: dc:1f:92:f2:d8:bb:42:2c:bb:ed:de:95:83:9c:f4:e0:0a:93: 14:ce:4e:2a:9a:96:a5:d6:08:ee:00:43:f3:46:28:47:af:27: 30:07:e1:3f:75:9f:0a:b8:b7:cf:19:78:bd:7b:4a:1b:51:aa: 2e:0c:80:1f:85:79:aa:c9:4a:e8:73:07:07:f1:14:af:ac:22: f2:66:41:a4:f4:79:1f:bb:1d:a6:fb:36:7e:05:40:02:2b:81: cd:5f:d6:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NzExMTAvBgNVBAUTKEE1NkFFNzJDNjZBNjRFNjI3OUM4Q0M5QzBFRkU0RjM2 MzY5MDI3ODAwHhcNMjUwNDIxMDM1NjMyWhcNMjUwNDI4MDM1NjMyWjAYMRYwFAYD VQQDEw02ODA1YzFmMS1iNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQv5UL4PdG+clLr3SRKWoosQ4JTO7jKlsR4Y5UzaCq5au2y/dmkKFHfpDjwV qKU1RT4QQ4dV8ikvlSm/TPcXmHMp9YSz0aPmvnBTPRiyX4f51RQUQ7Clljgk3E1d H7nIZsrBU/NAW3NpNX9RsNla34RRaTOCm0BJTA81qhnURFqlL84Sx2p5RNfuz/iC KMMCZ33qfn9bmz/jkxD56RdGEOWClijlBe5DHOC0RjV6boGXWz4IANzTA46Y9Bt6 kSPSvjWWKg8L4ZpHSi6fC1X175a5rKTEBtY6mlCNZsKetL5n9iv8zKRHagVfVwbs 3Nj3mqYxpuylm6CnWoddFbemBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHbaftL 1Ilq2uIaN/zvtAOOAwDOMB8GA1UdIwQYMBaAFKVq5yxmpk5iecjMnA7+TzY2kCeA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ3MS82RkU4QTJFRTky M0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRtSjV5TXljRHY1UE5qYVFK NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXcm5MR2FtVG1KNXlNeWNEdjVQTmphUUo0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ3MS82RkU4QTJFRTkyM0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRt SjV5TXljRHY1UE5qYVFKNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcjZPXxm+cH2lENjLtUWkoIgVcThp30vATRjBGgoqfQ+ym4XgQvycX Ox+kfGQEtxMC904hQQp18sXgevkrrdDOkTam9/EsMVKM+mAs6VvD97r8YQTm9KMW 7h6WB8fVwArjTgZw9ydFhyfk/Xzk3RW/3X5z1UFceLbJvKtvtiX/qkCqPVh3id5R 1GDcak+4HCQH/Nx4vBfAFQWWNt1/MC4Kli7cH5Ly2LtCLLvt3pWDnPTgCpMUzk4q mpal1gjuAEPzRihHrycwB+E/dZ8KuLfPGXi9e0obUaouDIAfhXmqyUrocwcH8RSv rCLyZkGk9Hkfux2m+zZ+BUACK4HNX9Y7 -----END CERTIFICATE-----Generated at Mon Apr 21 17:15:52 2025 by rpki-client