$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json) Hash identifier: FQfgXtqMqTB4wDjFjB7sSINFvi1Va1i7nbUY+cPfImQ= Subject key identifier: 6D:D4:9E:B4:0C:AA:58:F6:60:C7:43:61:51:69:17:1D:05:ED:D3:2C Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft Manifest number: 8A Signing time: Wed 09 Apr 2025 05:22:18 +0000 Manifest this update: Wed 09 Apr 2025 05:22:17 +0000 Manifest next update: Wed 16 Apr 2025 05:22:17 +0000 Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: vg+gYL5S8iwakDIuGqvcXsGXvoxnYcxha5PzWxuhJJI=) 2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B Validity Not Before: Apr 9 05:22:17 2025 GMT Not After : Apr 16 05:22:17 2025 GMT Subject: CN=67f6040a-13db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:88:d5:e7:04:ef:20:e3:72:f0:5e:76:36:d8: da:85:ac:13:bf:95:cb:e3:57:35:a2:4b:58:2a:46: c5:91:82:79:0b:83:ca:1b:88:75:72:f5:21:a2:72: b5:e3:b9:f0:9c:02:a4:d6:71:bd:7c:b5:e9:3c:69: 4b:38:cd:90:06:61:24:4a:eb:8a:86:2c:f9:ce:48: e3:2f:c5:22:48:94:ac:00:7d:ce:20:b7:3c:ec:3e: ad:94:aa:7a:58:53:10:bf:41:9c:23:6c:6f:f6:2a: bb:e7:35:9b:27:d2:2d:0f:aa:96:61:8c:9a:bf:c0: 91:a8:99:11:c9:b8:d7:54:a4:db:24:7e:22:b1:3d: 72:d2:34:67:ce:cd:8e:ca:6f:16:4a:28:fe:31:fd: c5:16:9d:a7:07:d8:88:cb:16:6d:af:ff:dd:41:1a: c9:66:5c:a3:be:c8:7c:0f:b1:9e:13:2a:4f:7a:2b: cb:db:be:ee:97:54:67:7f:b8:63:4c:84:2d:79:1b: c0:80:3a:05:bd:1f:2c:46:fa:c7:85:32:88:f8:34: 69:3d:71:81:d4:22:84:2a:59:65:fd:7f:aa:9c:62: 7b:9e:d6:b3:ab:c3:da:40:54:b5:8e:d5:be:27:ec: d4:c7:f7:c0:78:f3:cc:c1:42:08:2b:73:03:33:c2: 83:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D4:9E:B4:0C:AA:58:F6:60:C7:43:61:51:69:17:1D:05:ED:D3:2C X509v3 Authority Key Identifier: keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:12:1b:b4:4e:48:9f:81:5a:ee:2a:e0:6c:2e:df:60:93:6b: 98:ff:40:5b:89:ca:af:10:64:b8:81:db:aa:11:0d:64:f6:11: 69:86:30:73:cb:c7:ed:59:cc:c7:b9:8c:39:b4:78:9d:2a:80: 04:0e:86:d1:b6:d8:61:e9:b9:98:1e:92:4f:fa:70:5b:76:78: 44:6d:8f:d6:4e:c1:f0:06:0e:8a:93:4e:bb:ba:b0:d1:83:68: 22:07:1d:c4:4b:7f:b5:b0:8c:35:d2:d6:1e:24:cc:24:83:24: f8:a2:61:11:3b:e3:c4:99:d2:bb:e8:03:f6:20:ad:f9:27:eb: ba:dd:fb:99:20:62:53:8a:a7:2a:ed:ed:6a:de:9d:d3:b9:00: 6d:34:71:2a:ba:ba:08:21:c5:b5:73:c6:9d:cc:54:9f:4c:83: cd:e8:b8:af:2f:54:b1:13:b5:f7:72:5d:4b:e5:7f:32:f7:74: 22:7c:72:f3:8c:e7:65:14:aa:77:d5:2e:bf:cb:2c:6d:de:f0: 79:e2:43:b2:e4:6f:c9:e6:92:cd:f4:62:9c:fd:b2:0c:eb:9f: 1f:20:32:05:87:8b:76:ab:04:f3:a2:90:d3:1f:34:1f:c1:df: a3:20:3d:5b:98:a3:78:96:40:0c:91:f6:db:d3:fd:97:32:ec: 90:e4:cd:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKEMzOTNCQ0RGN0Q0NUE3MTk2RkYzQ0Q2RDMwRDYyMzBE RjRGREM1N0QwHhcNMjUwNDA5MDUyMjE3WhcNMjUwNDE2MDUyMjE3WjAYMRYwFAYD VQQDEw02N2Y2MDQwYS0xM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ojV5wTvIONy8F52NtjahawTv5XL41c1oktYKkbFkYJ5C4PKG4h1cvUhonK1 47nwnAKk1nG9fLXpPGlLOM2QBmEkSuuKhiz5zkjjL8UiSJSsAH3OILc87D6tlKp6 WFMQv0GcI2xv9iq75zWbJ9ItD6qWYYyav8CRqJkRybjXVKTbJH4isT1y0jRnzs2O ym8WSij+Mf3FFp2nB9iIyxZtr//dQRrJZlyjvsh8D7GeEypPeivL277ul1Rnf7hj TIQteRvAgDoFvR8sRvrHhTKI+DRpPXGB1CKEKlll/X+qnGJ7ntazq8PaQFS1jtW+ J+zUx/fAePPMwUIIK3MDM8KD0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3UnrQM qlj2YMdDYVFpFx0F7dMsMB8GA1UdIwQYMBaAFMOTvN99RacZb/PNbTDWIw30/cV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi9GQzExQkZEMjQ1 QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4bHY4ODF0TU5ZakRmVDl4 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi9GQzExQkZEMjQ1QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4 bHY4ODF0TU5ZakRmVDl4WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgEhu0TkifgVruKuBsLt9gk2uY/0BbicqvEGS4gduqEQ1k9hFphjBz y8ftWczHuYw5tHidKoAEDobRtthh6bmYHpJP+nBbdnhEbY/WTsHwBg6Kk067urDR g2giBx3ES3+1sIw10tYeJMwkgyT4omERO+PEmdK76AP2IK35J+u63fuZIGJTiqcq 7e1q3p3TuQBtNHEquroIIcW1c8adzFSfTIPN6LivL1SxE7X3cl1L5X8y93QifHLz jOdlFKp31S6/yyxt3vB54kOy5G/J5pLN9GKc/bIM658fIDIFh4t2qwTzopDTHzQf wd+jID1bmKN4lkAMkfbb0/2XMuyQ5M3m -----END CERTIFICATE-----Generated at Thu Apr 10 23:57:48 2025 by rpki-client