$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft File: Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json) Hash identifier: UxWidzlaXxM2aqrZapvA4Ui+3hHfdVFGl1iOsXubc9w= Subject key identifier: 5A:40:BF:85:BF:74:67:D4:61:D8:20:79:58:14:0F:01:32:63:C5:AC Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 Certificate issuer: /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft Manifest number: 12 Signing time: Fri 11 Apr 2025 07:16:46 +0000 Manifest this update: Fri 11 Apr 2025 07:16:45 +0000 Manifest next update: Fri 18 Apr 2025 07:16:45 +0000 Files and hashes: 1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: vDa2n+cSEEwY9DD/AXljKUTVhg6caWQwf55yLcnOMdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 07:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Validity Not Before: Apr 11 07:16:45 2025 GMT Not After : Apr 18 07:16:45 2025 GMT Subject: CN=67f8c1de-bd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:53:c6:c4:2f:b8:b3:03:cf:a7:ae:f9:95: 71:19:16:4a:03:22:a4:df:90:02:14:a7:62:4b:37: c6:a3:ac:50:03:f9:ad:eb:86:8a:30:0d:35:52:d5: e5:1c:0e:f7:58:d4:68:3b:0f:04:5c:16:18:5a:fb: 00:50:97:58:51:88:4b:74:ba:76:a0:af:96:8e:83: 5c:0f:01:9a:d3:61:7d:62:a9:34:79:92:cd:7d:cb: cd:9f:59:e7:ec:40:e6:6f:64:29:02:dd:d4:36:3f: 3b:57:fb:c7:62:3d:f7:5c:3c:e3:1e:0a:56:40:0b: 7b:d1:2f:13:ff:c8:52:ee:30:ba:18:8d:f3:52:83: 17:6a:fd:1a:59:77:22:bf:5a:e7:bc:22:1e:6d:f9: 19:c4:50:c2:9b:41:19:27:bd:5e:2f:60:9d:8b:b3: 21:13:c2:48:34:8d:ab:e4:26:2e:a1:e7:2e:ce:27: a6:37:8a:2a:63:b9:29:75:d1:95:6a:c2:50:87:b4: 87:69:1b:f8:4d:ff:9c:ee:65:aa:93:15:fa:36:dc: 2d:3e:af:74:c9:8f:f6:58:be:de:eb:2a:ae:6e:c2: 03:08:9a:e2:16:cd:98:72:f9:bb:77:5a:57:ab:f7: c5:56:4c:32:81:c7:98:dd:31:1c:eb:c0:79:c2:30: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:40:BF:85:BF:74:67:D4:61:D8:20:79:58:14:0F:01:32:63:C5:AC X509v3 Authority Key Identifier: keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ab:1b:63:7c:f7:e5:72:e6:05:a3:ab:df:0d:4e:a6:0d:86: a9:76:ad:f5:40:4e:79:a2:c3:25:d8:be:46:59:d6:a4:9b:3a: 8f:01:d9:d0:a7:c6:ff:99:f1:e5:0c:8d:6c:a5:19:ab:1b:2d: b7:93:97:c3:fd:7a:23:48:0e:f2:94:b1:67:5a:3a:5a:8a:7d: d7:a6:aa:41:e1:53:25:26:4f:43:21:ee:9e:ae:86:d3:c2:1f: be:db:7c:cd:8a:cd:66:72:e5:37:78:c7:7a:2e:58:74:a6:9a: d2:e7:19:c9:7c:50:76:35:ac:fd:a7:5d:1a:33:19:6a:d3:02: 3a:cd:db:f9:72:e0:ba:d3:d7:75:69:3e:b8:32:58:c5:15:94: 68:a5:98:fe:4d:a8:83:40:da:08:e5:b3:60:34:f1:24:1a:5b: d4:bd:33:9b:fd:a4:12:3f:c1:bf:bc:b8:3f:75:d9:c0:9c:b8: 00:18:0f:46:9b:cf:88:05:3f:c4:09:32:6b:29:06:56:53:38: 72:65:17:aa:b5:f3:83:ad:70:10:a4:88:08:33:6a:bb:3f:5a: fb:02:65:df:1c:ad:4f:e1:b1:2e:32:d1:d8:a3:65:4a:2b:b9: ef:61:01:15:88:80:1c:4a:a3:58:fe:f3:47:72:f2:a9:5c:3f: 61:42:8f:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0NERDExMC8GA1UEBRMoNUFCRTMzN0U2NUMwMEJFQTg0N0NFMEQyNTlDODg3RTRG REIzQjkyMTAeFw0yNTA0MTEwNzE2NDVaFw0yNTA0MTgwNzE2NDVaMBgxFjAUBgNV BAMTDTY3ZjhjMWRlLWJkNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOwFPGxC+4swPPp675lXEZFkoDIqTfkAIUp2JLN8ajrFAD+a3rhoowDTVS1eUc DvdY1Gg7DwRcFhha+wBQl1hRiEt0unagr5aOg1wPAZrTYX1iqTR5ks19y82fWefs QOZvZCkC3dQ2PztX+8diPfdcPOMeClZAC3vRLxP/yFLuMLoYjfNSgxdq/RpZdyK/ Wue8Ih5t+RnEUMKbQRknvV4vYJ2LsyETwkg0javkJi6h5y7OJ6Y3iipjuSl10ZVq wlCHtIdpG/hN/5zuZaqTFfo23C0+r3TJj/ZYvt7rKq5uwgMImuIWzZhy+bt3Wler 98VWTDKBx5jdMRzrwHnCMEedAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWkC/hb90 Z9Rh2CB5WBQPATJjxawwHwYDVR0jBBgwFoAUWr4zfmXAC+qEfODSWciH5P2zuSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQ0RELzM5QjFCMzYyRkRE ODExRUZCNTI1QjY3NEM0RjlBRTAyL1dyNHpmbVhBQy1xRWZPRFNXY2lINVAyenVT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3I0emZtWEFDLXFFZk9EU1djaUg1UDJ6dVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz Q0RELzM5QjFCMzYyRkREODExRUZCNTI1QjY3NEM0RjlBRTAyL1dyNHpmbVhBQy1x RWZPRFNXY2lINVAyenVTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFOrG2N89+Vy5gWjq98NTqYNhql2rfVATnmiwyXYvkZZ1qSbOo8B2dCn xv+Z8eUMjWylGasbLbeTl8P9eiNIDvKUsWdaOlqKfdemqkHhUyUmT0Mh7p6uhtPC H77bfM2KzWZy5Td4x3ouWHSmmtLnGcl8UHY1rP2nXRozGWrTAjrN2/ly4LrT13Vp PrgyWMUVlGilmP5NqINA2gjls2A08SQaW9S9M5v9pBI/wb+8uD912cCcuAAYD0ab z4gFP8QJMmspBlZTOHJlF6q184OtcBCkiAgzars/WvsCZd8crU/hsS4y0dijZUor ue9hARWIgBxKo1j+80dy8qlcP2FCj20= -----END CERTIFICATE-----Generated at Sat Apr 12 19:05:02 2025 by rpki-client