$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: JQD9rrYK8UGENOKG2/mMhfaULkEn5XM+Noo/IicbnVY= Subject key identifier: 25:92:4D:24:94:0F:E5:B7:90:F1:8A:AD:33:4B:F6:86:78:5E:1D:E0 Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 0116 Signing time: Sat 05 Apr 2025 04:38:12 +0000 Manifest this update: Sat 05 Apr 2025 04:38:11 +0000 Manifest next update: Sat 12 Apr 2025 04:38:11 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: PNyQZ3khen8X0sIRt0CZuOBELgrrFeK7D90zyF4CvxQ=) 2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: Hc2nQWpYQRaKENnErggeFlb/7PAEm8QKAhDbzdl16TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4 Validity Not Before: Apr 5 04:38:11 2025 GMT Not After : Apr 12 04:38:11 2025 GMT Subject: CN=67f0b3b4-567b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:6a:d5:2e:f5:fb:34:51:9d:43:7e:34:04: 25:36:af:7b:fe:c0:3e:c0:07:12:49:d7:7c:36:57: e8:ec:fa:79:79:c3:41:df:c6:f4:91:cc:0e:5d:02: b0:84:81:fa:fe:67:d8:63:87:db:bd:5d:56:f7:9a: 97:97:ae:0d:1d:f1:d7:05:0e:3d:bc:bc:23:0a:31: ec:db:e0:ba:4a:e4:b5:1d:e3:de:82:f8:95:9f:b9: 00:a7:fb:a5:a1:e1:1f:eb:dd:90:03:9b:42:0b:14: 97:79:8f:b7:be:b1:34:75:fd:d8:66:62:d7:d9:36: d9:38:83:4b:62:08:51:3b:39:0b:de:e2:ef:83:0f: a7:34:af:17:60:74:7b:d4:42:4d:3b:3a:20:68:a8: 0e:be:f3:b4:c0:fe:81:e0:f4:ba:54:ce:8e:71:83: ff:9b:82:68:84:b8:f6:3d:81:90:dd:d2:08:f3:02: 60:8c:dc:26:b5:cd:d7:fb:a9:23:b0:54:89:a3:26: e2:90:34:04:1d:16:b1:9b:9a:b8:73:f8:07:47:7a: 28:5a:a5:ab:d1:a8:f9:54:8b:22:3d:7c:18:69:49: 47:dc:f8:e4:0f:90:f5:9d:9e:64:49:d6:78:b7:25: 97:41:3d:c6:06:e7:4e:6a:88:9a:8d:e0:2f:ba:b8: 4a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:4D:24:94:0F:E5:B7:90:F1:8A:AD:33:4B:F6:86:78:5E:1D:E0 X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4e:88:b7:7d:a4:f5:df:3e:38:d1:25:64:c2:95:67:c1:67: 28:0f:1c:88:70:1c:f0:2a:77:b4:1f:dc:48:7a:eb:98:ac:0f: 2c:be:d6:d5:59:22:cd:ec:44:55:a9:09:e2:06:cd:b6:be:25: cf:b1:ce:4a:90:11:e3:52:6b:cc:1c:f8:02:3e:0e:1e:5d:b1: 92:28:3e:81:a3:09:af:66:af:ef:07:c1:61:4f:ed:45:0a:7f: c9:d6:26:91:23:88:ae:b9:38:13:58:00:90:81:37:db:3d:b0: a3:3b:c8:cd:4c:f3:8a:0d:33:49:49:64:b4:35:55:62:88:d9: b4:5c:47:8a:d9:ff:5b:2f:b3:a0:a9:b8:a7:62:b9:8b:d5:d6: b5:1a:07:72:47:d1:9d:1b:85:b3:bc:51:d5:06:83:0b:01:56: 56:25:23:1e:08:98:24:55:da:98:d0:87:c7:fa:38:08:7f:b5: 46:bb:33:c8:6d:9d:06:0f:a7:c7:65:38:7e:f7:58:bf:b0:d4: c0:ff:54:a2:de:e1:74:78:d3:54:d8:39:3b:0f:93:81:79:09: 05:be:70:97:ed:0e:13:6f:89:26:23:bf:1f:43:fe:33:72:38: 2f:4a:cb:fb:06:49:5a:87:98:7e:b1:80:f1:b8:6d:58:74:10: 9d:56:9e:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF MkNDQkIyNUEwHhcNMjUwNDA1MDQzODExWhcNMjUwNDEyMDQzODExWjAYMRYwFAYD VQQDEw02N2YwYjNiNC01NjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6tq1S71+zRRnUN+NAQlNq97/sA+wAcSSdd8Nlfo7Pp5ecNB38b0kcwOXQKw hIH6/mfYY4fbvV1W95qXl64NHfHXBQ49vLwjCjHs2+C6SuS1HePegviVn7kAp/ul oeEf692QA5tCCxSXeY+3vrE0df3YZmLX2TbZOINLYghROzkL3uLvgw+nNK8XYHR7 1EJNOzogaKgOvvO0wP6B4PS6VM6OcYP/m4JohLj2PYGQ3dII8wJgjNwmtc3X+6kj sFSJoybikDQEHRaxm5q4c/gHR3ooWqWr0aj5VIsiPXwYaUlH3PjkD5D1nZ5kSdZ4 tyWXQT3GBudOaoiajeAvurhKJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWSTSSU D+W3kPGKrTNL9oZ4Xh3gMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpToi3faT13z440SVkwpVnwWcoDxyIcBzwKne0H9xIeuuYrA8svtbV WSLN7ERVqQniBs22viXPsc5KkBHjUmvMHPgCPg4eXbGSKD6BowmvZq/vB8FhT+1F Cn/J1iaRI4iuuTgTWACQgTfbPbCjO8jNTPOKDTNJSWS0NVViiNm0XEeK2f9bL7Og qbinYrmL1da1GgdyR9GdG4WzvFHVBoMLAVZWJSMeCJgkVdqY0IfH+jgIf7VGuzPI bZ0GD6fHZTh+91i/sNTA/1Si3uF0eNNU2Dk7D5OBeQkFvnCX7Q4Tb4kmI78fQ/4z cjgvSsv7Bklah5h+sYDxuG1YdBCdVp5D -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:42 2025 by rpki-client