$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: HVQu9kKL/NHD8+RZmwtN/n3D2o42nu1ZZBtwEsMilds= Subject key identifier: 48:4E:B7:FF:A4:F9:DE:59:8F:78:20:14:58:56:82:AF:47:2A:BE:3B Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: F2 Signing time: Tue 15 Apr 2025 04:12:16 +0000 Manifest this update: Tue 15 Apr 2025 04:12:16 +0000 Manifest next update: Tue 22 Apr 2025 04:12:16 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: 9WqzKOMiioTgviHE8oj6IWMmAullZfGn0oAKud7w8eE=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 04:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: Apr 15 04:12:16 2025 GMT Not After : Apr 22 04:12:16 2025 GMT Subject: CN=67fddca0-a799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:ff:c8:ed:d1:5e:6d:4c:61:8e:5c:de:39: 01:6e:92:8e:48:93:0a:d0:ac:6c:7f:25:e0:9a:12: 5a:be:6d:2f:78:b6:3a:1d:01:8a:bf:ac:a8:0b:1c: bd:2c:e0:d2:cc:47:8f:43:d4:c6:9a:0c:2c:2e:23: aa:b9:5d:d0:a8:f2:63:4a:31:54:d3:18:7f:79:be: 36:7f:8a:f0:32:56:ab:87:59:75:12:4b:a4:72:85: 17:f3:32:49:37:50:79:2d:58:8f:25:dc:17:3e:5f: 0e:81:56:f5:de:73:16:56:f6:bd:1c:bb:6a:de:45: cf:19:c8:40:1b:bc:cd:9f:ea:31:19:e5:93:04:1d: 9c:71:db:1f:61:3e:87:7d:83:a1:8b:c8:fc:12:d3: 02:0f:da:d4:b5:56:83:d5:ad:d8:ab:0e:f7:f9:ca: 69:2d:73:73:71:77:68:44:05:16:95:f8:4c:4e:54: a3:23:d7:0d:96:7a:95:fb:50:5c:67:df:26:11:60: 9d:e3:9d:b6:9a:14:7d:33:d5:c6:08:4a:d7:9b:3a: 93:c3:ea:b0:64:00:37:3f:67:61:65:02:70:b3:9f: 9d:9d:46:29:e6:8f:f8:d5:59:7f:e1:65:13:cc:c9: c2:8a:bd:af:e5:18:e7:9b:de:72:44:99:23:76:7b: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4E:B7:FF:A4:F9:DE:59:8F:78:20:14:58:56:82:AF:47:2A:BE:3B X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:2b:00:ad:df:af:fd:d8:21:12:f4:d5:d2:7b:98:e3:bd:39: 1f:ba:95:e7:c6:92:a0:94:0d:98:71:ca:3b:34:d9:56:5d:c5: ff:82:86:5d:64:6a:70:b3:f4:f1:c1:c9:32:31:dc:38:cc:93: b2:10:63:eb:86:8f:13:ee:3e:ea:8a:a6:93:8d:91:bc:4b:2b: bd:ce:cf:d4:3d:fc:01:86:2b:33:1a:a2:fe:4b:34:a6:3e:6d: ae:49:40:57:2c:4c:e8:90:dd:27:d3:90:22:94:c6:60:95:10: 63:e7:95:a9:58:89:f9:4a:e5:66:35:95:8c:d9:35:a4:10:55: 44:43:08:47:df:e3:55:b9:94:42:bd:a4:8b:88:89:78:55:1c: 7a:b7:d0:f6:0a:8e:e1:4b:3c:57:2b:64:2e:d4:19:7b:d5:22: 18:15:c9:0c:c4:50:14:22:9b:06:75:ff:56:65:40:e2:e4:7c: e4:cd:cf:9c:8e:2c:16:9d:b2:f9:85:51:1b:84:f7:4d:79:63: f1:87:c4:80:8a:ba:de:d7:ad:2a:0c:b2:cb:1f:bf:05:26:87: e2:ca:d3:90:2b:5b:b2:bf:24:2a:18:7e:18:18:5c:50:72:2e: 1b:b6:6f:49:e1:21:91:ae:33:17:6f:aa:05:eb:61:af:b7:03: 7d:41:a4:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx NjQwREQzM0EwHhcNMjUwNDE1MDQxMjE2WhcNMjUwNDIyMDQxMjE2WjAYMRYwFAYD VQQDEw02N2ZkZGNhMC1hNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzv/yO3RXm1MYY5c3jkBbpKOSJMK0KxsfyXgmhJavm0veLY6HQGKv6yoCxy9 LODSzEePQ9TGmgwsLiOquV3QqPJjSjFU0xh/eb42f4rwMlarh1l1EkukcoUX8zJJ N1B5LViPJdwXPl8OgVb13nMWVva9HLtq3kXPGchAG7zNn+oxGeWTBB2ccdsfYT6H fYOhi8j8EtMCD9rUtVaD1a3Yqw73+cppLXNzcXdoRAUWlfhMTlSjI9cNlnqV+1Bc Z98mEWCd4522mhR9M9XGCErXmzqTw+qwZAA3P2dhZQJws5+dnUYp5o/41Vl/4WUT zMnCir2v5Rjnm95yRJkjdnssXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhOt/+k +d5Zj3ggFFhWgq9HKr47MB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1 Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkKwCt36/92CES9NXSe5jjvTkfupXnxpKglA2Ycco7NNlWXcX/goZd ZGpws/TxwckyMdw4zJOyEGPrho8T7j7qiqaTjZG8Syu9zs/UPfwBhiszGqL+SzSm Pm2uSUBXLEzokN0n05AilMZglRBj55WpWIn5SuVmNZWM2TWkEFVEQwhH3+NVuZRC vaSLiIl4VRx6t9D2Co7hSzxXK2Qu1Bl71SIYFckMxFAUIpsGdf9WZUDi5Hzkzc+c jiwWnbL5hVEbhPdNeWPxh8SAirre160qDLLLH78FJofiytOQK1uyvyQqGH4YGFxQ ci4btm9J4SGRrjMXb6oF62GvtwN9QaQG -----END CERTIFICATE-----Generated at Wed Apr 16 17:14:18 2025 by rpki-client