$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft File: 8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json) Hash identifier: WxCnXQwDH0Ei5U9bntiHkEtVcceaa79Fx02dZCe9fsk= Subject key identifier: 3F:1A:00:55:1E:0A:57:19:11:B2:6A:CA:83:C7:9D:82:B4:C3:C1:54 Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17 Certificate issuer: /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft Manifest number: 41 Signing time: Thu 03 Apr 2025 06:43:19 +0000 Manifest this update: Thu 03 Apr 2025 06:43:18 +0000 Manifest next update: Thu 10 Apr 2025 06:43:18 +0000 Files and hashes: 1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: +n3Wu+LA89tChbdOFRvsG++/jsbzkE5xY001R1OPm2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D756 Validity Not Before: Apr 3 06:43:18 2025 GMT Not After : Apr 10 06:43:18 2025 GMT Subject: CN=67ee2e06-9d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:9c:7e:80:48:05:78:2b:a3:5e:f1:d1:47: d9:e3:0a:84:f2:ce:51:00:72:a4:87:4e:e0:42:1f: 24:d9:75:06:25:1a:d4:fb:0a:8a:b1:5b:d4:77:dc: 43:1d:60:08:4c:f8:89:90:98:9b:3e:64:f2:99:12: 90:f0:bb:6a:e8:93:97:3b:74:30:0e:df:cb:b9:60: 80:92:fd:cf:67:99:51:50:fa:d0:80:9f:19:1c:32: 9f:5d:17:09:b4:36:24:71:05:61:5e:9d:d5:2a:7e: 8c:ef:7b:55:c3:02:2b:6b:51:14:62:c2:92:4d:dc: 3d:55:d2:3a:53:7f:5e:56:8a:8a:12:3a:84:b2:d2: 52:ae:ce:62:a9:41:d5:b7:a5:de:f7:9c:bd:d5:72: ae:28:2d:5d:56:32:bb:44:53:0d:13:2d:e4:80:27: a1:94:44:07:68:0a:56:a8:40:01:d6:70:a0:3a:75: 42:7f:ec:f7:df:4f:bd:2d:7b:95:28:64:03:ad:61: c3:62:0f:3a:31:cb:dc:41:9a:db:c6:f9:bb:25:56: 1d:7d:49:af:f7:ad:ba:f5:29:ce:88:8b:bf:87:a1: 15:94:66:4f:0f:18:b2:8c:26:fe:ab:8e:0f:a4:72: 05:b7:39:50:ac:c0:94:4c:ad:b9:6c:57:5a:12:dc: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1A:00:55:1E:0A:57:19:11:B2:6A:CA:83:C7:9D:82:B4:C3:C1:54 X509v3 Authority Key Identifier: keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:66:9f:d8:e3:93:f5:b3:7b:48:0f:6d:6a:94:b1:b1:d1:16: b4:0e:bd:d7:63:be:d7:82:80:f1:4b:41:3d:ce:c8:49:e1:6b: 82:f9:8e:b3:de:90:b3:c6:6c:4f:4d:09:b5:f1:d7:f1:2d:bf: 40:dc:a5:04:01:75:1e:af:8f:61:6c:cb:03:52:fe:10:c9:ea: 70:0b:4c:79:41:58:5c:7b:36:d6:04:e5:c8:63:f3:93:4f:55: 71:e6:e8:9f:1d:3e:a7:d5:13:f1:59:8f:fb:b3:f2:ad:cd:c8: 29:ed:84:48:19:e7:fe:3d:02:e4:34:6a:47:9d:63:53:6a:14: 46:51:b0:59:c3:c9:3b:65:2f:0e:d0:b6:d8:07:c2:1d:cf:3b: ef:d8:94:1b:cd:0c:4b:b6:28:41:11:22:9b:f4:0e:77:9a:ec: 09:00:be:46:62:75:e1:5a:d8:69:f2:ca:e2:45:c8:c0:90:3a: f7:80:4b:a5:aa:5a:0d:14:e4:e2:ca:b2:fb:56:6e:f3:12:49: 97:a0:ed:26:fd:c3:3f:3f:f3:28:ea:d0:df:48:59:44:78:f4: e7:1e:c8:55:27:34:37:85:ef:3f:e4:45:46:26:c6:45:de:b9: f6:4d:1c:ea:63:7d:bf:65:fe:05:78:54:91:f1:60:51:13:b8: ba:fd:b3:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDc1NjExMC8GA1UEBRMoRjMwOUI0OTNBOTJFRTdDNjI5NUUwMDkwNjMwQTI1MUEx RDEzNjUxNzAeFw0yNTA0MDMwNjQzMThaFw0yNTA0MTAwNjQzMThaMBgxFjAUBgNV BAMTDTY3ZWUyZTA2LTlkMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChdZx+gEgFeCujXvHRR9njCoTyzlEAcqSHTuBCHyTZdQYlGtT7CoqxW9R33EMd YAhM+ImQmJs+ZPKZEpDwu2rok5c7dDAO38u5YICS/c9nmVFQ+tCAnxkcMp9dFwm0 NiRxBWFendUqfozve1XDAitrURRiwpJN3D1V0jpTf15WiooSOoSy0lKuzmKpQdW3 pd73nL3Vcq4oLV1WMrtEUw0TLeSAJ6GURAdoClaoQAHWcKA6dUJ/7PffT70te5Uo ZAOtYcNiDzoxy9xBmtvG+bslVh19Sa/3rbr1Kc6Ii7+HoRWUZk8PGLKMJv6rjg+k cgW3OVCswJRMrblsV1oS3ONpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPxoAVR4K VxkRsmrKg8edgrTDwVQwHwYDVR0jBBgwFoAU8wm0k6ku58YpXgCQYwolGh0TZRcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNENzU2LzZBNDIxQTgwQjA2 NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZcFhnQ1FZd29sR2gwVFpS Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHdtMGs2a3U1OFlwWGdDUVl3b2xHaDBUWlJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE NzU2LzZBNDIxQTgwQjA2NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZ cFhnQ1FZd29sR2gwVFpSYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZmn9jjk/Wze0gPbWqUsbHRFrQOvddjvteCgPFLQT3OyEnha4L5jrPe kLPGbE9NCbXx1/Etv0DcpQQBdR6vj2FsywNS/hDJ6nALTHlBWFx7NtYE5chj85NP VXHm6J8dPqfVE/FZj/uz8q3NyCnthEgZ5/49AuQ0akedY1NqFEZRsFnDyTtlLw7Q ttgHwh3PO+/YlBvNDEu2KEERIpv0Dnea7AkAvkZideFa2GnyyuJFyMCQOveAS6Wq Wg0U5OLKsvtWbvMSSZeg7Sb9wz8/8yjq0N9IWUR49OceyFUnNDeF7z/kRUYmxkXe ufZNHOpjfb9l/gV4VJHxYFETuLr9s/E= -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:01 2025 by rpki-client