$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json) Hash identifier: d3iTgcYTjF2myST7kmV5gzZjjFmLzhVTFpbYjySOu0U= Subject key identifier: 31:FB:7F:DD:A0:92:98:0B:75:EA:9C:36:BA:E5:94:66:C1:AE:4A:13 Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Certificate serial: 12ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft Manifest number: 12DA Signing time: Fri 04 Apr 2025 17:09:09 +0000 Manifest this update: Fri 04 Apr 2025 17:09:08 +0000 Manifest next update: Fri 11 Apr 2025 17:09:08 +0000 Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: t5gEFJueYdk79zHRNW6r9827ob/acgwLJ8uZrZG2WL0=) 2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: mWJcvoB56xtTVL8jsG+OSQ9sF5v7r1+9ESUNzFxge8k=) 3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: 9g+f1SJF42ygeVyvheaF7ZLxnRH6Cv+HITF3QrrONoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4845 (0x12ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E08F Validity Not Before: Apr 4 17:09:08 2025 GMT Not After : Apr 11 17:09:08 2025 GMT Subject: CN=67f01234-5a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:4b:73:13:d2:71:b9:7b:1b:1d:71:a6:90: d4:23:5e:71:c9:eb:89:5c:05:7e:e0:79:e7:7a:db: b1:0a:9a:66:c3:cd:dc:4e:74:d2:10:d4:ae:c8:32: ad:f5:6d:3b:67:7b:63:8b:e6:8a:fa:5d:bf:89:d6: d3:15:d1:32:b9:b9:f7:10:d6:de:57:a8:0c:c0:87: d4:ee:98:0d:84:63:6c:d1:dd:2c:eb:12:1c:1d:ed: 09:53:32:f5:93:07:d4:c2:a2:ce:1d:79:74:e4:d2: 99:06:ba:37:ce:34:b9:f9:26:93:e6:c4:6c:66:85: ba:bf:93:64:31:18:bb:53:56:13:18:9f:21:f1:7c: f9:f0:e1:26:f8:32:c0:8b:92:6c:a1:5b:d6:9c:55: 24:87:51:2a:78:37:7b:a7:4c:13:b1:a1:33:46:d2: bf:36:61:ed:79:b9:0e:58:4a:6b:02:ac:7a:b7:3a: b0:3c:a2:c9:fc:12:65:b2:5a:3a:74:74:11:08:1a: 77:7a:8d:8b:b4:bd:15:d9:3c:50:5d:13:90:6b:c5: 22:90:da:4c:f2:89:3e:cc:29:a8:e3:cc:85:78:cc: 64:63:c3:2f:c4:c1:c6:d8:82:46:a8:96:3e:4c:95: 7d:3c:23:3f:a1:0e:64:e9:cb:72:b8:3c:f1:22:7d: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FB:7F:DD:A0:92:98:0B:75:EA:9C:36:BA:E5:94:66:C1:AE:4A:13 X509v3 Authority Key Identifier: keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:98:fb:69:2b:22:e9:81:c6:1d:2a:98:9c:49:7c:12:10:e1: dc:3c:c4:a4:06:6e:66:b3:31:fd:e3:e1:66:85:7b:13:1e:41: f7:13:2c:81:d4:74:0c:90:f9:f1:84:2e:04:11:56:cf:1f:8f: 75:2d:f1:dc:3d:8d:94:59:c2:ba:09:ef:61:61:f0:31:a3:84: 02:b5:c1:33:e5:77:ec:02:aa:c1:d0:66:80:ff:78:17:2b:80: 3f:e7:52:46:d3:de:2d:2a:5d:73:8c:28:f7:08:c2:24:08:ac: 6b:1d:13:b7:9b:91:57:d6:53:e5:aa:bf:69:71:b8:79:48:2c: c2:c2:72:57:59:37:c5:8b:39:4f:09:60:20:a4:e2:84:11:87: fd:7a:44:29:fa:00:f8:97:85:d1:c3:e6:11:d0:cb:a7:5e:c9: 5b:c2:af:0a:e0:69:9e:ad:2e:3b:fc:47:5f:7c:a0:22:c3:fe: ee:0f:5f:71:df:b7:a7:d0:ef:6d:14:8a:ba:fa:96:6e:6a:26: 0d:84:76:78:cc:67:9d:4d:02:7b:7d:30:de:36:f2:69:d4:06: 1c:ba:67:1a:0f:04:6e:6a:a3:ba:21:b6:c3:85:92:97:e2:1f: fb:7e:bb:a9:2a:8f:51:4d:24:ea:4e:5c:9e:47:3c:30:2a:8c: 0d:98:eb:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2 N0M2ODkyQjcwHhcNMjUwNDA0MTcwOTA4WhcNMjUwNDExMTcwOTA4WjAYMRYwFAYD VQQDEw02N2YwMTIzNC01YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXZLcxPScbl7Gx1xppDUI15xyeuJXAV+4HnnetuxCppmw83cTnTSENSuyDKt 9W07Z3tji+aK+l2/idbTFdEyubn3ENbeV6gMwIfU7pgNhGNs0d0s6xIcHe0JUzL1 kwfUwqLOHXl05NKZBro3zjS5+SaT5sRsZoW6v5NkMRi7U1YTGJ8h8Xz58OEm+DLA i5JsoVvWnFUkh1EqeDd7p0wTsaEzRtK/NmHtebkOWEprAqx6tzqwPKLJ/BJlslo6 dHQRCBp3eo2LtL0V2TxQXROQa8UikNpM8ok+zCmo48yFeMxkY8MvxMHG2IJGqJY+ TJV9PCM/oQ5k6ctyuDzxIn1SSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH7f92g kpgLdeqcNrrllGbBrkoTMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1 QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA4Ri9BOEYyMDMwOEI1QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRt bzl5SG5qeWZ5eVpueG9rcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzmPtpKyLpgcYdKpicSXwSEOHcPMSkBm5mszH94+FmhXsTHkH3EyyB 1HQMkPnxhC4EEVbPH491LfHcPY2UWcK6Ce9hYfAxo4QCtcEz5XfsAqrB0GaA/3gX K4A/51JG094tKl1zjCj3CMIkCKxrHRO3m5FX1lPlqr9pcbh5SCzCwnJXWTfFizlP CWAgpOKEEYf9ekQp+gD4l4XRw+YR0MunXslbwq8K4GmerS47/EdffKAiw/7uD19x 37en0O9tFIq6+pZuaiYNhHZ4zGedTQJ7fTDeNvJp1AYcumcaDwRuaqO6IbbDhZKX 4h/7frupKo9RTSTqTlyeRzwwKowNmOtR -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:32 2025 by rpki-client