$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft File: w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json) Hash identifier: vIjVJLq0i/tcCeOAxcvfNc9OGyJKqtUNlqrXmhW271g= Subject key identifier: 58:C4:F7:2B:9C:A7:61:43:B8:F3:05:BD:28:C4:C3:97:76:05:71:9F Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D Certificate issuer: /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft Manifest number: E3 Signing time: Mon 07 Apr 2025 04:23:16 +0000 Manifest this update: Mon 07 Apr 2025 04:23:16 +0000 Manifest next update: Mon 14 Apr 2025 04:23:16 +0000 Files and hashes: 1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: cjVuVRhjQqPvCZQAR7QsoEnAywnHB7nuhZBBQ4RkdME=) 2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: ut259rkGij2B93AJ9ZMpQpFJu2cjgHFJdqE5QCl8kGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 04:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070 Validity Not Before: Apr 7 04:23:16 2025 GMT Not After : Apr 14 04:23:16 2025 GMT Subject: CN=67f35334-4ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:d2:33:ca:db:4c:d4:ed:f6:1f:69:be:55: d1:0a:cb:60:b6:ae:89:27:5c:73:dc:a7:7f:52:cb: 51:7e:57:ad:81:84:b5:1b:98:cd:3b:ed:a2:0c:cb: 1c:d0:50:28:3b:8e:8a:31:f9:85:67:8d:73:51:f9: da:dd:06:10:fa:38:b1:ac:93:77:9e:5d:0f:eb:bc: c8:5c:96:76:ea:27:2b:aa:3d:dc:63:1a:8a:06:33: 39:c8:ae:b2:28:1b:4a:09:e9:2a:ec:43:a9:58:90: da:40:94:b0:7d:0c:af:25:a6:d5:a0:77:81:9a:91: 1d:0e:21:ca:8c:b1:ad:65:3c:56:85:a6:42:e3:c1: a0:f0:45:5e:b0:12:38:78:db:02:4a:98:5c:1c:1f: 51:a1:af:fd:25:73:45:b5:d1:6f:87:c8:73:6d:a5: 33:12:24:1b:96:d5:c2:02:55:4d:d8:a1:a4:47:9f: 9e:a8:43:7c:52:54:19:4b:13:da:59:dd:e3:88:ee: 98:7b:37:c2:a4:2a:fc:0e:c0:ae:bd:c8:9f:f2:09: 6e:86:93:71:eb:6c:6a:2e:2c:08:cc:92:2f:9f:f4: f7:3c:f7:ff:d3:72:7d:f4:42:70:e2:30:c4:a9:7f: ca:27:18:ef:fb:8b:2d:5d:f4:eb:fb:cc:1a:1b:c9: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C4:F7:2B:9C:A7:61:43:B8:F3:05:BD:28:C4:C3:97:76:05:71:9F X509v3 Authority Key Identifier: keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:43:95:1a:e0:2a:8b:9f:2d:04:72:ae:3b:49:3b:4f:a9:cf: ba:6c:ce:71:a0:81:ff:51:ee:b7:cc:93:ee:1a:58:c8:b1:11: fb:66:da:73:82:01:bc:c7:d3:09:e1:f4:60:f7:2e:df:7f:57: 68:df:96:a3:95:2e:95:f4:ee:bd:fa:2b:6a:ae:87:5a:c5:e2: 09:92:ce:04:61:93:5d:70:60:33:8c:27:6e:3b:1b:59:e1:0e: 49:03:8b:d1:f6:c1:25:49:fd:77:9a:83:27:0c:27:07:cc:f7: 41:35:1a:29:e3:81:01:37:44:f5:78:79:2f:f3:bd:14:4f:f1: 9f:ed:e7:51:59:fc:e0:28:e2:90:4a:7d:8b:1e:0e:4c:d5:07: 03:df:fc:81:5e:a2:f7:00:73:90:76:fe:e8:00:4c:85:b2:34: fb:e3:20:42:f3:c0:2d:c9:4d:04:6f:63:a9:6f:b6:dc:06:0f: d4:cb:b5:19:51:37:71:38:22:7c:5b:90:72:c5:e8:1d:9b:19: 37:fa:92:04:af:ba:af:c2:1c:91:e7:bd:ff:b3:d3:d5:af:35: 07:f9:5d:f5:ca:c9:c2:dc:4d:61:88:7c:f2:7c:68:a7:98:1b: 94:fa:7a:22:df:46:f7:dc:ed:59:27:33:ce:d2:af:b5:c3:9c: 76:39:6b:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwNzAxMTAvBgNVBAUTKEMzNkNGNURFMjUzMzlCOTE0NTZFNUNDMjMxNzI0OEIz NkVBNDVCN0QwHhcNMjUwNDA3MDQyMzE2WhcNMjUwNDE0MDQyMzE2WjAYMRYwFAYD VQQDEw02N2YzNTMzNC00Y2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxLSM8rbTNTt9h9pvlXRCstgtq6JJ1xz3Kd/UstRfletgYS1G5jNO+2iDMsc 0FAoO46KMfmFZ41zUfna3QYQ+jixrJN3nl0P67zIXJZ26icrqj3cYxqKBjM5yK6y KBtKCekq7EOpWJDaQJSwfQyvJabVoHeBmpEdDiHKjLGtZTxWhaZC48Gg8EVesBI4 eNsCSphcHB9Roa/9JXNFtdFvh8hzbaUzEiQbltXCAlVN2KGkR5+eqEN8UlQZSxPa Wd3jiO6YezfCpCr8DsCuvcif8gluhpNx62xqLiwIzJIvn/T3PPf/03J99EJw4jDE qX/KJxjv+4stXfTr+8waG8mCJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjE9yuc p2FDuPMFvSjEw5d2BXGfMB8GA1UdIwQYMBaAFMNs9d4lM5uRRW5cwjFySLNupFt9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84MDhCNEQ2Q0JD MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01RkZibHpDTVhKSXMyNmtX MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1czMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA3MC84MDhCNEQ2Q0JDMTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01 RkZibHpDTVhKSXMyNmtXMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQQ5Ua4CqLny0Ecq47STtPqc+6bM5xoIH/Ue63zJPuGljIsRH7Ztpz ggG8x9MJ4fRg9y7ff1do35ajlS6V9O69+itqrodaxeIJks4EYZNdcGAzjCduOxtZ 4Q5JA4vR9sElSf13moMnDCcHzPdBNRop44EBN0T1eHkv870UT/Gf7edRWfzgKOKQ Sn2LHg5M1QcD3/yBXqL3AHOQdv7oAEyFsjT74yBC88AtyU0Eb2Opb7bcBg/Uy7UZ UTdxOCJ8W5Byxegdmxk3+pIEr7qvwhyR573/s9PVrzUH+V31ysnC3E1hiHzyfGin mBuU+noi30b33O1ZJzPO0q+1w5x2OWuq -----END CERTIFICATE-----Generated at Mon Apr 7 17:32:43 2025 by rpki-client