$ rpki-client -vvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft File: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft (raw, json) Hash identifier: wvehbw9s/NztM53vs/C+9OU4WKGQ81/gZSd7UoC1XPA= Subject key identifier: 52:CC:A1:9E:5E:CE:82:92:9F:2F:D6:25:05:61:7A:53:E3:3E:B0:A4 Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 Certificate issuer: /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft Manifest number: 0826 Signing time: Fri 28 Mar 2025 21:04:23 +0000 Manifest this update: Fri 28 Mar 2025 21:04:22 +0000 Manifest next update: Fri 04 Apr 2025 21:04:22 +0000 Files and hashes: 1: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl (hash: QIB/b52kkvu+94PEwS5XyAf0+hfpw0XBKbjhhXZGJcM=) 2: F011FBC4CBDF11EAB6162265C4F9AE02.roa (hash: Ec43C0Y3q4p+M8MX6lzreXmsuhfKAufm7Yw2BAr8btg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 21:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F7E7 Validity Not Before: Mar 28 21:04:22 2025 GMT Not After : Apr 4 21:04:22 2025 GMT Subject: CN=67e70ed6-39a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e7:0b:0b:09:c8:b6:d2:b7:16:46:66:2c:bc: bc:ec:75:ac:01:79:74:c7:35:75:ab:22:a6:90:ca: 26:24:f7:72:84:53:d1:20:da:1b:30:a6:3b:38:44: f4:0c:b0:81:ec:12:ee:91:70:71:be:1d:fa:1d:59: e9:35:4b:59:f9:50:3b:6d:6f:9c:77:ee:93:db:20: 4f:09:25:cb:f8:4e:07:37:11:7e:90:21:1e:5a:32: 88:29:5d:34:66:e2:35:c2:15:f0:c4:5c:72:e5:48: f9:17:34:7a:9f:6f:54:28:f0:d7:44:90:67:29:6d: db:bc:67:f3:1c:d3:42:c9:f7:64:61:04:33:1d:5c: a4:64:58:28:d5:f0:48:9f:c5:14:f9:38:26:d4:85: ce:2f:e1:83:5a:62:03:28:ee:f3:71:d0:86:77:be: a5:e2:a9:c3:3f:ac:64:ed:2a:8a:3f:5b:4e:05:22: ec:cb:9f:2b:eb:9f:9c:5a:79:89:9e:6e:34:06:cf: 9f:c6:df:05:e1:fe:56:d1:4a:5e:f8:d2:d7:ab:09: 46:d9:7b:ab:75:34:dd:2b:4f:c1:2b:67:5f:ed:3b: 6b:30:8c:07:32:cb:0d:09:81:a5:11:5a:ad:f1:4e: 10:30:c2:56:29:7b:a6:b4:cf:cd:86:02:dc:a3:00: aa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CC:A1:9E:5E:CE:82:92:9F:2F:D6:25:05:61:7A:53:E3:3E:B0:A4 X509v3 Authority Key Identifier: keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:5b:b2:dc:4f:03:64:86:d6:9c:5e:06:00:76:da:01:fb:19: 36:eb:43:9d:5e:f8:c6:f5:0f:89:0b:9d:a8:ae:2f:00:23:fd: 2a:bd:8b:cc:1b:f4:b2:fe:63:e5:00:67:5f:7a:23:6a:3a:ee: ed:e4:1e:82:cd:93:5d:74:a8:a8:71:61:3c:d5:f3:8d:07:24: d9:09:0d:f9:86:01:b3:52:67:1e:2e:70:53:50:18:2e:26:94: b3:08:52:f2:4d:40:69:a7:4f:20:5a:e6:87:f1:9f:96:28:f4: 3b:d5:e9:f1:87:e5:15:d5:14:64:52:83:72:4d:2f:3a:3f:96: 47:22:8b:c1:a2:f0:4c:c7:56:1f:28:22:05:d3:63:6e:fb:be: f4:9c:25:44:da:b7:10:da:92:06:70:89:81:08:76:7e:f2:53: af:c0:3b:ae:65:d8:cc:3e:7b:94:b3:87:ba:83:a9:2c:17:f3: c7:42:35:05:74:4e:c6:1c:de:83:5e:93:1d:df:2e:cc:ff:db: 91:e0:1f:0a:24:e4:23:4a:e1:bc:e3:99:d2:4d:f7:39:62:66: 7e:b9:22:bc:34:4e:55:3f:eb:85:c4:62:17:76:f6:47:f9:34: a7:8c:42:3c:a6:19:25:26:5c:ca:8b:59:e9:51:5d:d3:56:79: 20:8f:be:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY3RTcxMTAvBgNVBAUTKDlCMDUxMERGMDY3MkU2Q0ZEQjcyNTRBOTlGNTI3NEY5 MERGMEVGNTQwHhcNMjUwMzI4MjEwNDIyWhcNMjUwNDA0MjEwNDIyWjAYMRYwFAYD VQQDEw02N2U3MGVkNi0zOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ucLCwnIttK3FkZmLLy87HWsAXl0xzV1qyKmkMomJPdyhFPRINobMKY7OET0 DLCB7BLukXBxvh36HVnpNUtZ+VA7bW+cd+6T2yBPCSXL+E4HNxF+kCEeWjKIKV00 ZuI1whXwxFxy5Uj5FzR6n29UKPDXRJBnKW3bvGfzHNNCyfdkYQQzHVykZFgo1fBI n8UU+Tgm1IXOL+GDWmIDKO7zcdCGd76l4qnDP6xk7SqKP1tOBSLsy58r65+cWnmJ nm40Bs+fxt8F4f5W0Upe+NLXqwlG2XurdTTdK0/BK2df7TtrMIwHMssNCYGlEVqt 8U4QMMJWKXumtM/NhgLcowCqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLMoZ5e zoKSny/WJQVhelPjPrCkMB8GA1UdIwQYMBaAFJsFEN8GcubP23JUqZ9SdPkN8O9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjdFNy9EQ0QwMzc4QUNC REQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVzX2JjbFNwbjFKMC1RM3c3 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213VVEzd1p5NXNfYmNsU3BuMUowLVEzdzcxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjdFNy9EQ0QwMzc4QUNCREQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVz X2JjbFNwbjFKMC1RM3c3MVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIW7LcTwNkhtacXgYAdtoB+xk260OdXvjG9Q+JC52ori8AI/0qvYvM G/Sy/mPlAGdfeiNqOu7t5B6CzZNddKiocWE81fONByTZCQ35hgGzUmceLnBTUBgu JpSzCFLyTUBpp08gWuaH8Z+WKPQ71enxh+UV1RRkUoNyTS86P5ZHIovBovBMx1Yf KCIF02Nu+770nCVE2rcQ2pIGcImBCHZ+8lOvwDuuZdjMPnuUs4e6g6ksF/PHQjUF dE7GHN6DXpMd3y7M/9uR4B8KJOQjSuG845nSTfc5YmZ+uSK8NE5VP+uFxGIXdvZH +TSnjEI8phklJlzKi1npUV3TVnkgj76C -----END CERTIFICATE-----Generated at Fri Apr 4 18:28:32 2025 by rpki-client