$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: LumQHuBPnOM+Ja8Ebf8wGXdxBp51lsqzicPdRBz1I5E= Subject key identifier: 4A:3D:33:B2:DF:86:DF:11:E9:F0:DB:E1:D9:4E:22:EB:5E:B8:44:AD Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 2616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 25F0 Signing time: Sat 12 Apr 2025 15:40:32 +0000 Manifest this update: Sat 12 Apr 2025 15:40:32 +0000 Manifest next update: Sat 19 Apr 2025 15:40:32 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: ni1tYMfIB5McawjnhGX0QRjdo/xP/rfFO652dUcUS3Y=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bub+bmfe4PnreQ1ZPIst7Ck9C3Kep4qMMCvN4ZXfJXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9750 (0x2616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Apr 12 15:40:32 2025 GMT Not After : Apr 19 15:40:32 2025 GMT Subject: CN=67fa8970-6bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:1d:04:1c:cf:77:f4:fe:a3:2c:f2:a5:ed: c2:d4:b1:9b:6e:bc:63:37:f2:cf:8f:7a:3c:b1:b0: a8:09:57:4f:f2:21:91:30:b8:9c:91:47:49:a3:07: a1:86:17:85:34:7a:6d:af:46:38:6a:bd:c6:a2:a7: e1:58:c9:ce:13:47:37:71:7e:d3:96:d4:f8:80:0c: 71:df:6e:2f:cc:7b:41:e5:00:34:18:72:f1:e9:26: 79:23:b5:87:29:5d:12:00:22:cc:7f:1a:3d:66:b2: 20:ad:93:08:2c:cd:da:86:a3:70:ad:0e:cb:0f:f1: 6e:e6:c6:30:76:b7:5f:f6:bb:7e:b7:b7:65:a4:4a: 8d:d8:2e:98:e5:f5:76:85:a9:f8:de:b7:72:57:3a: 7d:62:4c:19:33:0e:45:cb:07:b9:76:4d:c1:8b:f0: 6e:6d:77:e9:5d:1b:c5:9f:5a:03:01:51:77:8f:7c: ec:6d:f9:03:af:b3:34:0a:65:37:34:1b:c4:94:3b: ef:d6:b7:19:62:1e:4d:c0:3f:88:94:f0:18:86:78: e2:02:5c:f8:92:e7:a6:a1:d3:fe:23:b0:fe:71:3b: 79:70:9a:50:ec:20:ef:9e:94:db:a9:b5:80:cf:be: 93:77:3b:cf:e7:8c:76:d3:ba:a1:95:ec:bc:f2:4b: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3D:33:B2:DF:86:DF:11:E9:F0:DB:E1:D9:4E:22:EB:5E:B8:44:AD X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:42:41:76:16:3d:59:e9:a9:1e:09:76:92:9d:98:df:bc:75: f7:6b:70:5e:9d:b8:e5:38:cb:dd:72:7e:b5:be:bd:c5:3a:8e: 19:5a:17:81:6e:4a:cd:c6:79:94:2a:7b:24:fe:b3:b0:5c:58: d8:e6:62:a0:bb:ef:ca:c6:57:3f:2e:0e:f1:2a:27:06:da:62: 47:7a:b2:de:cd:9d:e1:17:20:e5:54:a5:90:33:52:58:48:67: 66:84:3c:66:f0:ac:a8:71:d5:ac:01:1c:1f:ec:b5:62:5c:84: f0:6c:cd:94:b7:b7:d9:a5:09:3b:e2:bf:cb:71:76:88:03:d7: 54:ea:2b:51:e3:a1:0e:07:64:4b:eb:2b:bd:ef:03:78:bb:a9: 76:6f:b9:d0:f6:71:a6:f3:4e:18:77:45:72:65:39:0d:c1:30: 2b:85:3c:cd:01:8c:38:af:9b:eb:93:18:eb:81:7d:3e:5c:08: 21:b1:2b:62:45:09:b4:d3:9a:9e:eb:c3:4a:dd:df:dc:5b:47: 6a:3a:cb:1e:72:d1:ed:6b:d1:e2:b0:32:22:9c:f9:8c:d9:68: a4:32:e8:92:da:7d:fb:9f:24:57:0a:d0:c7:68:39:e8:c0:75: d3:ea:be:4f:0f:81:d6:85:42:a9:f1:f0:f4:37:11:ba:85:5c: 6e:cb:e6:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUwNDEyMTU0MDMyWhcNMjUwNDE5MTU0MDMyWjAYMRYwFAYD VQQDEw02N2ZhODk3MC02YmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphsdBBzPd/T+oyzype3C1LGbbrxjN/LPj3o8sbCoCVdP8iGRMLickUdJoweh hheFNHptr0Y4ar3GoqfhWMnOE0c3cX7TltT4gAxx324vzHtB5QA0GHLx6SZ5I7WH KV0SACLMfxo9ZrIgrZMILM3ahqNwrQ7LD/Fu5sYwdrdf9rt+t7dlpEqN2C6Y5fV2 han43rdyVzp9YkwZMw5Fywe5dk3Bi/BubXfpXRvFn1oDAVF3j3zsbfkDr7M0CmU3 NBvElDvv1rcZYh5NwD+IlPAYhnjiAlz4kuemodP+I7D+cTt5cJpQ7CDvnpTbqbWA z76TdzvP54x207qhley88ksn+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEo9M7Lf ht8R6fDb4dlOIuteuEStMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaQkF2Fj1Z6akeCXaSnZjfvHX3a3BenbjlOMvdcn61vr3FOo4ZWheB bkrNxnmUKnsk/rOwXFjY5mKgu+/Kxlc/Lg7xKicG2mJHerLezZ3hFyDlVKWQM1JY SGdmhDxm8KyocdWsARwf7LViXITwbM2Ut7fZpQk74r/LcXaIA9dU6itR46EOB2RL 6yu97wN4u6l2b7nQ9nGm804Yd0VyZTkNwTArhTzNAYw4r5vrkxjrgX0+XAghsSti RQm005qe68NK3d/cW0dqOssectHta9HisDIinPmM2WikMuiS2n37nyRXCtDHaDno wHXT6r5PD4HWhUKp8fD0NxG6hVxuy+Yu -----END CERTIFICATE-----Generated at Sat Apr 12 23:30:43 2025 by rpki-client