$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: DHgFPcDMzF69bZJmb+Jw5RkVhDf3vIcssrR0+98Ni+I= Subject key identifier: B5:98:F3:66:FC:C2:D1:93:FD:A7:DB:67:A7:6B:55:AC:54:F8:76:C7 Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 03C7 Signing time: Wed 16 Apr 2025 23:48:15 +0000 Manifest this update: Wed 16 Apr 2025 23:48:14 +0000 Manifest next update: Wed 23 Apr 2025 23:48:14 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: pRXxWeL6MYkOeez2ylgo9zWXsS2WrTzfoclAZvWS7U0=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Validity Not Before: Apr 16 23:48:14 2025 GMT Not After : Apr 23 23:48:14 2025 GMT Subject: CN=680041bf-2fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:1e:22:2d:ca:e9:6f:4a:87:9b:ca:98:78: e6:5b:21:72:46:7c:90:90:79:f3:12:38:cb:e0:c0: fe:d4:ed:70:f3:7d:6d:93:11:a2:df:7d:38:e5:c7: 95:cf:b7:25:8a:f1:85:d4:31:ec:7d:63:c0:00:0b: f2:a9:ef:e0:2f:ac:f2:a7:53:d5:c8:84:50:fb:7d: 9e:d9:68:0d:59:52:7e:5f:e6:42:4f:e0:71:f8:7e: a3:a0:5f:85:26:48:e1:e3:6c:e9:cb:44:b6:b5:95: d4:a3:8a:26:08:c3:62:32:eb:9b:23:05:ed:e0:a0: 37:75:1d:4f:24:a2:a2:7c:ce:b0:75:b5:68:b2:70: 5c:4a:8f:23:65:ef:5f:82:35:ee:ff:db:5c:76:78: 70:d8:a4:b0:5c:69:3d:f2:12:10:4d:66:aa:8e:a4: 4b:bc:e9:99:b4:5d:44:7c:33:cb:4d:c3:13:5a:eb: a9:d0:41:4f:f1:e2:b0:99:98:70:d5:9f:99:61:d6: c2:89:45:2b:85:af:79:02:77:73:8b:e0:23:a2:87: 24:ed:ab:79:da:41:4a:02:dd:d2:67:44:86:d8:32: aa:ed:42:2e:01:98:2f:52:6a:4f:b1:5b:52:0e:c6: d0:03:b7:82:3f:fa:f4:68:cc:c0:8e:d8:e2:06:4d: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:98:F3:66:FC:C2:D1:93:FD:A7:DB:67:A7:6B:55:AC:54:F8:76:C7 X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b3:71:62:d6:07:83:a8:a7:14:e2:d3:b6:0f:f5:18:f4:de: 6a:24:ee:c3:ec:98:3c:a9:76:3a:2f:04:c1:5b:8d:cc:51:68: 34:2e:e0:ae:7c:fe:26:69:9a:31:92:7d:45:91:d0:e6:3b:a3: 34:3a:3c:93:ba:c7:dc:ce:a2:28:65:92:ac:c8:2b:6a:62:a9: 5e:1b:4a:21:77:4e:b7:88:f3:11:38:3b:ae:f2:5c:d2:82:f8: e3:47:9c:a9:d5:06:85:46:2b:bd:28:d6:77:77:31:a4:2d:5f: 6a:e5:4c:fe:79:e3:bf:6c:bc:25:67:0f:3d:0b:aa:9c:7f:90: 76:b9:da:1b:0f:fb:5e:4d:12:61:d8:c8:c3:7c:26:7a:22:58: 8a:07:ae:5c:15:43:10:39:17:c5:5c:b1:83:95:39:36:43:79: e3:f8:51:86:78:e3:ee:4f:f3:93:41:04:78:71:0f:d1:3f:21: 6a:5a:e9:da:b9:43:0a:8d:be:d1:fd:a6:d5:84:b1:30:86:24: 19:fb:61:30:6a:03:e7:f7:ac:cd:ec:a1:fb:28:c6:c5:8e:69: d6:ea:8b:fc:ef:9e:65:39:e8:40:8c:86:33:08:44:10:c6:ca: 89:66:b4:33:3e:43:52:5e:4a:99:11:b1:8a:04:3d:10:ee:60: 7a:64:75:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjUwNDE2MjM0ODE0WhcNMjUwNDIzMjM0ODE0WjAYMRYwFAYD VQQDEw02ODAwNDFiZi0yZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1EeIi3K6W9Kh5vKmHjmWyFyRnyQkHnzEjjL4MD+1O1w831tkxGi33045ceV z7clivGF1DHsfWPAAAvyqe/gL6zyp1PVyIRQ+32e2WgNWVJ+X+ZCT+Bx+H6joF+F Jkjh42zpy0S2tZXUo4omCMNiMuubIwXt4KA3dR1PJKKifM6wdbVosnBcSo8jZe9f gjXu/9tcdnhw2KSwXGk98hIQTWaqjqRLvOmZtF1EfDPLTcMTWuup0EFP8eKwmZhw 1Z+ZYdbCiUUrha95Andzi+Ajoock7at52kFKAt3SZ0SG2DKq7UIuAZgvUmpPsVtS DsbQA7eCP/r0aMzAjtjiBk2WIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWY82b8 wtGT/afbZ6drVaxU+HbHMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADs3Fi1geDqKcU4tO2D/UY9N5qJO7D7Jg8qXY6LwTBW43MUWg0LuCu fP4maZoxkn1FkdDmO6M0OjyTusfczqIoZZKsyCtqYqleG0ohd063iPMRODuu8lzS gvjjR5yp1QaFRiu9KNZ3dzGkLV9q5Uz+eeO/bLwlZw89C6qcf5B2udobD/teTRJh 2MjDfCZ6IliKB65cFUMQORfFXLGDlTk2Q3nj+FGGeOPuT/OTQQR4cQ/RPyFqWuna uUMKjb7R/abVhLEwhiQZ+2EwagPn96zN7KH7KMbFjmnW6ov8755lOehAjIYzCEQQ xsqJZrQzPkNSXkqZEbGKBD0Q7mB6ZHV1 -----END CERTIFICATE-----Generated at Fri Apr 18 01:47:30 2025 by rpki-client