$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft File: RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json) Hash identifier: BnMPamHuAS0Df4a9248NKt6BL6/JtEtS43nGH+KY2rk= Subject key identifier: 1E:DD:11:25:4F:72:F7:4F:50:AB:DE:60:F6:67:7B:A3:C2:E9:17:72 Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 Certificate issuer: /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75 Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft Manifest number: 02A7 Signing time: Mon 07 Apr 2025 01:06:57 +0000 Manifest this update: Mon 07 Apr 2025 01:06:56 +0000 Manifest next update: Mon 14 Apr 2025 01:06:56 +0000 Files and hashes: 1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: UoerdRiqpNI/ZDtD2H7FEkw8jaQX+kufo7e7m/laFno=) 2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: cDpvh3Uhyb1LJHdjMZekAyyaNaYh9ET+ttEg2FAl8DY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 01:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BD68 Validity Not Before: Apr 7 01:06:56 2025 GMT Not After : Apr 14 01:06:56 2025 GMT Subject: CN=67f32531-c142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ba:3d:66:21:e9:c7:b6:9c:24:26:4d:62:b4: 6a:55:b0:06:64:c3:83:32:0d:8a:f1:ab:09:6a:56: 5b:e0:01:e9:d3:53:89:e6:81:a8:d3:9d:58:8a:6b: 80:dc:30:65:41:bc:84:bb:2d:4b:30:d1:91:96:ad: 37:84:1b:7b:15:0b:37:66:49:85:34:0e:f3:d1:18: f2:7c:35:fa:3a:d5:7c:35:47:f1:14:b6:80:57:04: 0a:9d:b4:4a:e1:9e:2a:4f:82:c6:c8:b2:e7:2d:17: 18:9e:1c:74:69:52:c5:d7:b5:c7:7e:1c:40:ce:d0: 30:3c:b3:c1:da:ba:be:a0:c4:85:63:fa:2b:c2:92: 82:6d:85:50:4d:93:f3:dd:2b:55:6e:ee:e6:ea:ca: 1a:23:67:91:8f:fa:96:0d:d3:90:46:91:a6:1b:4d: fb:db:e0:d4:12:a5:c4:0a:f4:7c:8e:55:d7:da:23: b0:c4:ac:c4:23:62:0d:ad:ad:14:67:43:17:5b:84: 26:34:81:9c:e5:7e:38:12:fb:16:6c:cd:e5:f9:fb: ff:fa:ea:64:e8:ee:c0:1f:c7:1e:24:f8:1a:4e:a7: 44:eb:c7:e4:59:66:f1:73:ff:5f:31:18:92:61:1a: 34:1a:f7:2d:5c:51:65:22:d7:bd:7b:59:e3:69:0a: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DD:11:25:4F:72:F7:4F:50:AB:DE:60:F6:67:7B:A3:C2:E9:17:72 X509v3 Authority Key Identifier: keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c9:94:f1:a6:3e:f1:93:f1:37:90:d4:22:5c:9f:f1:df:5d: 44:20:fd:d6:74:d5:d5:43:14:1d:30:ce:eb:b2:a2:ee:ae:88: 8f:a9:85:29:83:3f:de:fe:cb:21:e3:cd:4e:df:5c:6c:aa:eb: fc:08:08:fd:0e:fc:19:22:9e:34:c2:16:be:16:af:4d:96:4b: c4:48:00:d2:42:65:36:50:5a:94:83:64:53:fc:36:50:1d:33: 12:bc:c3:e0:33:76:bb:c2:4e:1b:f6:1c:02:f3:e1:1c:b2:7a: c0:66:cc:16:00:a3:2e:6d:15:51:1c:9a:04:f8:db:3d:48:5a: f6:62:a4:fc:56:2c:ab:7c:9b:65:8e:71:fe:63:a9:59:04:76: 94:e7:4c:10:eb:bb:e3:fd:28:d6:a1:de:73:5f:ff:d8:49:d0: 35:d3:0b:4a:6a:f6:38:4e:1c:21:31:b3:80:24:f7:92:10:f1: 1f:5f:a2:8f:46:5c:0f:c5:a7:b2:d6:35:82:01:0e:e1:7e:06: 21:a1:d2:c3:f4:92:ba:da:18:f9:6e:a7:e2:59:9d:d8:b0:ad: 33:d6:dd:33:b1:69:ec:fb:6e:71:f2:fe:3e:37:22:51:2c:fb: 3c:f8:4d:e2:7c:7d:a0:1a:7a:a1:6f:5d:24:83:1d:ab:1c:bc: 41:90:01:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JENjgxMTAvBgNVBAUTKDQ1NjMyMEZFOTcwRjVDQTRCRkQ3NzU2RkMzRTI3RTA2 QjMwOEJFNzUwHhcNMjUwNDA3MDEwNjU2WhcNMjUwNDE0MDEwNjU2WjAYMRYwFAYD VQQDEw02N2YzMjUzMS1jMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlro9ZiHpx7acJCZNYrRqVbAGZMODMg2K8asJalZb4AHp01OJ5oGo051YimuA 3DBlQbyEuy1LMNGRlq03hBt7FQs3ZkmFNA7z0RjyfDX6OtV8NUfxFLaAVwQKnbRK 4Z4qT4LGyLLnLRcYnhx0aVLF17XHfhxAztAwPLPB2rq+oMSFY/orwpKCbYVQTZPz 3StVbu7m6soaI2eRj/qWDdOQRpGmG0372+DUEqXECvR8jlXX2iOwxKzEI2INra0U Z0MXW4QmNIGc5X44EvsWbM3l+fv/+upk6O7AH8ceJPgaTqdE68fkWWbxc/9fMRiS YRo0GvctXFFlIte9e1njaQohbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7dESVP cvdPUKveYPZne6PC6RdyMB8GA1UdIwQYMBaAFEVjIP6XD1ykv9d1b8PifgazCL51 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkQ2OC8wNEQ3NEI1MEYx NTMxMUVDQjA3QzlGMjZDNEY5QUUwMi9SV01nX3BjUFhLU18xM1Z2dy1KLUJyTUl2 blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXTWdfcGNQWEtTXzEzVnZ3LUotQnJNSXZuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkQ2OC8wNEQ3NEI1MEYxNTMxMUVDQjA3QzlGMjZDNEY5QUUwMi9SV01nX3BjUFhL U18xM1Z2dy1KLUJyTUl2blUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuyZTxpj7xk/E3kNQiXJ/x311EIP3WdNXVQxQdMM7rsqLuroiPqYUp gz/e/ssh481O31xsquv8CAj9DvwZIp40wha+Fq9NlkvESADSQmU2UFqUg2RT/DZQ HTMSvMPgM3a7wk4b9hwC8+EcsnrAZswWAKMubRVRHJoE+Ns9SFr2YqT8ViyrfJtl jnH+Y6lZBHaU50wQ67vj/SjWod5zX//YSdA10wtKavY4ThwhMbOAJPeSEPEfX6KP RlwPxaey1jWCAQ7hfgYhodLD9JK62hj5bqfiWZ3YsK0z1t0zsWns+25x8v4+NyJR LPs8+E3ifH2gGnqhb10kgx2rHLxBkAFg -----END CERTIFICATE-----Generated at Tue Apr 8 15:48:42 2025 by rpki-client