$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: 2uX7Fhl/hBM6ySxjDJukcHvinWmzGOsS8nfgEusBVLY= Subject key identifier: B5:0B:09:2E:34:3B:F5:64:12:4C:02:EE:23:07:43:B5:5E:4D:D2:D0 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 19A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 199D Signing time: Tue 08 Apr 2025 16:24:15 +0000 Manifest this update: Tue 08 Apr 2025 16:24:15 +0000 Manifest next update: Tue 15 Apr 2025 16:24:15 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: iEaAQsK/KOn/sqv1FeC3OLIYlByAQbRAKSdLS5yMsGg=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: yqEcj3SZ3T1pYpHMLtfx0ZxmS715TGOM5EI1dS08gyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6567 (0x19a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265 Validity Not Before: Apr 8 16:24:15 2025 GMT Not After : Apr 15 16:24:15 2025 GMT Subject: CN=67f54daf-9ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b8:39:04:df:02:59:90:d4:da:cb:fc:d7:91: 53:e3:41:1d:1b:26:ea:ca:e5:bb:ad:41:5d:82:5d: 19:50:81:6d:cf:7a:32:37:48:cd:87:70:26:d5:d9: 7d:c8:d9:74:a5:35:53:03:db:d3:c2:25:4e:f2:82: ef:25:f7:51:d4:00:ad:19:01:92:1f:ea:15:66:d1: 47:96:0b:04:e5:05:85:18:d0:2a:c6:79:88:28:fb: 58:d8:6e:99:ee:d0:02:b3:69:fc:70:ee:0d:7b:21: a9:2f:80:6b:8d:1c:85:f3:fa:7d:22:dd:c4:5d:40: 46:51:0c:33:d2:c0:e4:6c:1c:fc:78:4c:a4:8b:df: b6:77:ef:43:8e:a0:53:fc:35:fd:5a:ae:ad:e2:31: 81:57:9c:87:2f:95:72:46:d9:0f:c8:48:69:47:c5: 67:80:6a:63:c1:82:b1:1a:34:66:e5:b9:3a:c2:78: 12:5d:53:3e:11:df:e0:85:34:16:a7:65:30:00:5e: 3f:36:6a:0b:14:5d:eb:44:73:b7:5a:65:7f:85:2a: 11:37:86:81:c6:3b:5a:ae:20:3f:ed:77:24:84:4f: b9:4a:60:16:79:3b:6b:f1:64:32:5a:16:01:fa:f9: d6:2b:e2:8b:68:af:38:65:c0:5f:a8:43:3d:eb:fe: 9c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0B:09:2E:34:3B:F5:64:12:4C:02:EE:23:07:43:B5:5E:4D:D2:D0 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:bc:4d:12:b2:12:52:b1:05:c9:27:d2:b8:db:ab:87:c4:f2: 88:97:27:7b:6b:fa:8a:37:5d:a7:03:9b:c3:07:08:52:b8:8b: 0d:ce:66:e9:7e:0c:38:a5:93:1b:00:72:b8:97:08:d5:95:44: d2:93:74:bd:eb:c2:08:79:ba:a3:46:73:63:6d:9a:93:f5:60: d5:74:f3:b3:ea:42:2c:d3:7e:76:22:2e:4b:a8:81:7a:2b:44: b3:de:b7:26:d8:f1:ab:74:38:0a:c9:a1:a1:a6:62:2b:88:c1: a3:56:c9:97:92:e0:61:b7:59:19:2c:70:39:b8:b3:7d:ad:68: af:5d:8b:6e:21:da:39:63:2b:c5:fb:d8:19:4e:d5:48:ac:82: cd:f1:60:f9:39:c3:e8:0d:50:c4:0a:a0:d3:1c:87:b4:3c:7a: 23:36:a0:e3:35:f2:93:6a:ed:72:93:33:6e:78:6c:ed:7d:37: 05:f2:f6:64:02:36:7b:75:73:2a:ff:7b:7e:8a:c9:d8:97:01: 94:e8:22:38:ec:44:12:b2:6b:a1:96:d8:bd:a4:37:25:ee:67: 69:14:85:09:be:f5:df:90:69:51:04:3d:f7:4f:cf:7f:df:00: 5d:8d:70:68:e3:4c:ee:04:1d:7c:9b:b7:e0:e0:7c:a4:3d:1b: 98:be:ca:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjUwNDA4MTYyNDE1WhcNMjUwNDE1MTYyNDE1WjAYMRYwFAYD VQQDEw02N2Y1NGRhZi05ZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47g5BN8CWZDU2sv815FT40EdGybqyuW7rUFdgl0ZUIFtz3oyN0jNh3Am1dl9 yNl0pTVTA9vTwiVO8oLvJfdR1ACtGQGSH+oVZtFHlgsE5QWFGNAqxnmIKPtY2G6Z 7tACs2n8cO4NeyGpL4BrjRyF8/p9It3EXUBGUQwz0sDkbBz8eEyki9+2d+9DjqBT /DX9Wq6t4jGBV5yHL5VyRtkPyEhpR8VngGpjwYKxGjRm5bk6wngSXVM+Ed/ghTQW p2UwAF4/NmoLFF3rRHO3WmV/hSoRN4aBxjtariA/7XckhE+5SmAWeTtr8WQyWhYB +vnWK+KLaK84ZcBfqEM96/6cdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLULCS40 O/VkEkwC7iMHQ7VeTdLQMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCvE0SshJSsQXJJ9K426uHxPKIlyd7a/qKN12nA5vDBwhSuIsNzmbp fgw4pZMbAHK4lwjVlUTSk3S968IIebqjRnNjbZqT9WDVdPOz6kIs0352Ii5LqIF6 K0Sz3rcm2PGrdDgKyaGhpmIriMGjVsmXkuBht1kZLHA5uLN9rWivXYtuIdo5YyvF +9gZTtVIrILN8WD5OcPoDVDECqDTHIe0PHojNqDjNfKTau1ykzNueGztfTcF8vZk AjZ7dXMq/3t+isnYlwGU6CI47EQSsmuhlti9pDcl7mdpFIUJvvXfkGlRBD33T89/ 3wBdjXBo40zuBB18m7fg4HykPRuYvsoB -----END CERTIFICATE-----Generated at Fri Apr 11 19:19:13 2025 by rpki-client