$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft File: wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json) Hash identifier: fFaN8LmMNacjHyD7sgEDm4Qq87FBESapr7ok8qtE43c= Subject key identifier: 5D:48:A2:3B:ED:9A:B4:B7:3D:77:C5:3D:9E:74:1F:E9:40:19:37:6D Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D Certificate issuer: /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft Manifest number: 078E Signing time: Mon 14 Apr 2025 21:05:51 +0000 Manifest this update: Mon 14 Apr 2025 21:05:51 +0000 Manifest next update: Mon 21 Apr 2025 21:05:51 +0000 Files and hashes: 1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: H5Lt8Bn7rBZsu6CKMZMjxyPNs+JxK+D3/y9TN313MHQ=) 2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: hCxFygIxGBaZzO8/d0Vcf9NqUsTf/UZgA3mXuGpyT3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 21:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D Validity Not Before: Apr 14 21:05:51 2025 GMT Not After : Apr 21 21:05:51 2025 GMT Subject: CN=67fd78af-5179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:02:3d:0f:f9:9d:ec:13:99:90:da:e3:17:30: 41:a0:75:dd:f8:7d:5d:33:cd:4b:52:9b:2e:b7:ee: 90:e4:73:7f:db:07:28:9a:6e:7d:b0:9c:c4:29:50: ad:ea:56:5c:af:5c:8d:11:59:9d:3e:a6:2d:e3:d0: 04:3b:46:13:95:00:85:e6:06:cb:51:dd:c3:a8:d2: 9b:f6:da:79:9b:16:d6:3c:b0:1b:30:19:66:e8:2a: 95:74:e0:ca:dd:fe:2c:86:b8:f2:df:01:d2:e0:06: 94:4e:fa:5c:97:34:25:c6:a8:55:d4:0d:0e:a5:bd: 7c:7b:58:9f:07:91:29:9b:61:14:7c:97:72:9e:b9: 64:e4:d1:40:e2:61:8a:46:69:0f:50:61:74:82:d6: 07:33:47:b4:d3:17:f1:21:38:9b:db:6e:ea:1e:44: 8d:82:2f:54:93:ee:c8:a2:0e:07:21:dc:2f:44:e9: 68:cb:15:ef:0e:32:0f:07:3d:3c:d0:54:07:93:c5: 96:67:3b:77:e4:46:32:b1:d4:77:c1:3a:c4:1c:70: 0c:b9:9a:11:3d:d9:c4:21:c6:45:d0:30:02:37:c0: cb:d2:77:6b:04:75:18:1c:7b:a3:40:c7:bd:d9:52: 5e:2d:ef:08:3e:d1:c0:a9:cf:1f:a5:36:b2:5f:75: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:48:A2:3B:ED:9A:B4:B7:3D:77:C5:3D:9E:74:1F:E9:40:19:37:6D X509v3 Authority Key Identifier: keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:71:d7:0f:04:21:ea:98:c3:f1:fb:cc:82:78:3a:1b:a1:53: d0:ec:b4:fb:60:34:3d:79:ca:f5:b3:7c:fa:9d:b5:58:89:88: d7:88:fb:df:a1:97:70:93:71:9a:6f:c6:46:c0:c1:06:d5:37: 3c:d0:a0:eb:56:77:32:04:c2:a5:2f:8a:d0:c3:0b:ff:29:fa: 44:e4:df:89:fc:e9:6b:e8:38:2b:4d:00:1a:a6:5c:fa:d7:0f: 99:f6:a9:2a:3b:81:57:dc:67:4c:a2:76:43:09:76:a3:f7:58: 72:95:a1:96:e8:eb:91:c0:98:a2:7e:5b:69:ed:db:96:d4:08: 37:8b:ee:c7:7e:c7:d8:0e:eb:64:44:44:63:10:1c:29:cf:b2: d5:f4:cd:54:fc:12:82:05:b5:38:13:15:30:0a:eb:35:41:42: 88:6d:30:6f:47:66:56:04:4a:57:c6:fe:6d:a1:64:90:95:38: 90:38:b9:60:68:c8:19:fa:1f:68:f6:0c:2b:d1:0d:03:82:65: 61:57:e8:a6:a7:dd:8a:a8:95:ac:05:9e:4d:1f:ba:8a:c8:db: 19:9b:5f:1b:d8:05:dd:22:3d:19:46:65:d7:88:aa:67:72:9a: 6c:9c:ef:75:ef:80:60:05:cc:7e:93:c3:c0:de:ca:53:37:9f: ef:d9:a8:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBNzAxMTAvBgNVBAUTKEMxMkYwRjU3MkRBMzM4RDIxMzQ0MUVGMDdDQTUxMUQx QTlDODlCNkQwHhcNMjUwNDE0MjEwNTUxWhcNMjUwNDIxMjEwNTUxWjAYMRYwFAYD VQQDEw02N2ZkNzhhZi01MTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gI9D/md7BOZkNrjFzBBoHXd+H1dM81LUpsut+6Q5HN/2wcomm59sJzEKVCt 6lZcr1yNEVmdPqYt49AEO0YTlQCF5gbLUd3DqNKb9tp5mxbWPLAbMBlm6CqVdODK 3f4shrjy3wHS4AaUTvpclzQlxqhV1A0Opb18e1ifB5Epm2EUfJdynrlk5NFA4mGK RmkPUGF0gtYHM0e00xfxITib227qHkSNgi9Uk+7Iog4HIdwvROloyxXvDjIPBz08 0FQHk8WWZzt35EYysdR3wTrEHHAMuZoRPdnEIcZF0DACN8DL0ndrBHUYHHujQMe9 2VJeLe8IPtHAqc8fpTayX3WCZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1Iojvt mrS3PXfFPZ50H+lAGTdtMB8GA1UdIwQYMBaAFMEvD1ctozjSE0Qe8HylEdGpyJtt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0E3MC9BNzEyNUQ3NjAz QUExMUVCOEMxNTgyMjlDNEY5QUUwMi93UzhQVnkyak9OSVRSQjd3ZktVUjBhbklt MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dTOFBWeTJqT05JVFJCN3dmS1VSMGFuSW0yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0E3MC9BNzEyNUQ3NjAzQUExMUVCOEMxNTgyMjlDNEY5QUUwMi93UzhQVnkyak9O SVRSQjd3ZktVUjBhbkltMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUcdcPBCHqmMPx+8yCeDoboVPQ7LT7YDQ9ecr1s3z6nbVYiYjXiPvf oZdwk3Gab8ZGwMEG1Tc80KDrVncyBMKlL4rQwwv/KfpE5N+J/Olr6DgrTQAaplz6 1w+Z9qkqO4FX3GdMonZDCXaj91hylaGW6OuRwJiifltp7duW1Ag3i+7HfsfYDutk RERjEBwpz7LV9M1U/BKCBbU4ExUwCus1QUKIbTBvR2ZWBEpXxv5toWSQlTiQOLlg aMgZ+h9o9gwr0Q0DgmVhV+imp92KqJWsBZ5NH7qKyNsZm18b2AXdIj0ZRmXXiKpn cppsnO9174BgBcx+k8PA3spTN5/v2ai2 -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:36 2025 by rpki-client