$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: 3FCaHYFC7hWHqCnsU8SUEVKvQtCvDUbaODKVi4FgDSY= Subject key identifier: 42:6B:D3:E0:06:92:7D:93:A7:4E:EB:65:3F:D5:54:1F:81:BC:4C:20 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 07DD Signing time: Wed 02 Apr 2025 20:59:36 +0000 Manifest this update: Wed 02 Apr 2025 20:59:36 +0000 Manifest next update: Wed 09 Apr 2025 20:59:36 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: yd5wAasa9qEWgkOY0lLt71kc51qKFDgALEEdM539Log=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747 Validity Not Before: Apr 2 20:59:36 2025 GMT Not After : Apr 9 20:59:36 2025 GMT Subject: CN=67eda538-0e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:07:94:25:3b:29:3b:b6:14:3a:8e:31:21:c3: 57:f3:cc:86:65:70:cc:9c:08:ed:df:78:7e:7f:e1: d0:03:88:8a:77:86:e9:07:0d:a3:cb:a5:dd:a3:67: c6:3c:8f:8d:56:f0:2f:81:a5:e5:9e:58:03:d6:c1: a4:24:cc:5c:54:32:7d:6b:d5:94:15:61:7a:df:64: f6:70:11:62:0c:93:77:2e:0e:7a:c6:9f:f4:b8:8a: 33:a2:17:79:5f:80:09:ad:75:d5:10:c0:5c:94:bf: 8e:21:aa:f1:df:7f:48:cb:7a:c5:82:ef:95:11:9e: d5:b0:5b:75:29:ac:70:56:90:6a:c6:16:71:f6:73: 79:59:e2:36:40:ac:99:27:e4:db:b7:f2:43:d5:55: 01:c6:3f:2c:ce:69:b5:5f:5c:3b:c1:3f:2c:ad:94: ad:8b:a3:88:b1:10:b6:aa:49:16:20:ea:6f:d7:82: 5e:b0:ec:1d:04:91:12:7e:4e:c4:54:87:3e:2f:9e: 0f:bc:74:05:a1:eb:4c:a7:a3:3d:eb:9c:3b:27:1f: 80:6a:48:b3:5d:f2:03:f9:3f:af:28:4d:82:15:e2: 58:61:ab:68:b0:76:d2:12:8c:bf:0f:fe:71:62:40: a5:5c:73:db:34:b2:f4:a9:0f:07:1d:41:47:a3:80: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6B:D3:E0:06:92:7D:93:A7:4E:EB:65:3F:D5:54:1F:81:BC:4C:20 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:76:f2:8d:fd:60:17:91:41:bd:1f:f4:fc:f9:01:0b:c3:3d: ea:f8:73:da:de:63:b3:73:5f:7c:c6:8c:32:27:cd:2e:51:b0: df:fa:33:85:49:04:cb:80:71:be:a2:02:23:67:79:e9:28:05: 04:89:f1:84:a5:de:91:bf:2f:10:87:89:a9:e1:d1:9c:52:1a: 95:5a:9f:ab:fb:f9:5a:42:dc:ba:fa:f9:f1:05:1a:47:7a:53: 70:76:00:ae:4a:64:ba:83:54:83:12:dc:25:a7:aa:c0:c4:df: c8:ef:2a:b0:97:5d:03:22:4c:ce:09:20:28:04:dc:0f:33:43: 07:a9:d2:4c:7d:da:05:38:72:bf:bb:22:39:a7:2e:f7:74:89: b0:97:92:90:a4:49:ca:51:aa:76:e7:0d:2b:b5:43:ea:2e:0a: 18:d2:3e:c7:ee:fd:f7:ea:92:f3:83:5f:01:65:83:14:02:6b: 35:b2:ee:41:c7:92:98:50:10:51:37:b5:c9:e2:d2:06:07:69: c2:a1:89:60:a9:b6:45:f1:3b:b1:9a:36:f8:26:2a:55:35:1d: dc:35:dc:5e:bb:cb:30:9e:1d:a6:63:a3:d4:e7:54:4b:fb:c7: bc:79:78:18:48:04:bd:71:53:fc:94:a4:f4:31:36:83:42:ee: e7:97:42:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjUwNDAyMjA1OTM2WhcNMjUwNDA5MjA1OTM2WjAYMRYwFAYD VQQDEw02N2VkYTUzOC0wZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QeUJTspO7YUOo4xIcNX88yGZXDMnAjt33h+f+HQA4iKd4bpBw2jy6Xdo2fG PI+NVvAvgaXlnlgD1sGkJMxcVDJ9a9WUFWF632T2cBFiDJN3Lg56xp/0uIozohd5 X4AJrXXVEMBclL+OIarx339Iy3rFgu+VEZ7VsFt1KaxwVpBqxhZx9nN5WeI2QKyZ J+Tbt/JD1VUBxj8szmm1X1w7wT8srZSti6OIsRC2qkkWIOpv14JesOwdBJESfk7E VIc+L54PvHQFoetMp6M965w7Jx+AakizXfID+T+vKE2CFeJYYatosHbSEoy/D/5x YkClXHPbNLL0qQ8HHUFHo4CGWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJr0+AG kn2Tp07rZT/VVB+BvEwgMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOdvKN/WAXkUG9H/T8+QELwz3q+HPa3mOzc198xowyJ80uUbDf+jOF SQTLgHG+ogIjZ3npKAUEifGEpd6Rvy8Qh4mp4dGcUhqVWp+r+/laQty6+vnxBRpH elNwdgCuSmS6g1SDEtwlp6rAxN/I7yqwl10DIkzOCSAoBNwPM0MHqdJMfdoFOHK/ uyI5py73dImwl5KQpEnKUap25w0rtUPqLgoY0j7H7v336pLzg18BZYMUAms1su5B x5KYUBBRN7XJ4tIGB2nCoYlgqbZF8Tuxmjb4JipVNR3cNdxeu8swnh2mY6PU51RL +8e8eXgYSAS9cVP8lKT0MTaDQu7nl0JR -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:46 2025 by rpki-client