$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft File: RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json) Hash identifier: rvb9bQSF7f5jsHxFBsdqP5yctGzSu7Cl/qJuACcSWQU= Subject key identifier: 48:FA:58:F7:E0:26:9C:A3:32:A5:43:27:0B:1A:86:8E:5C:CB:F5:9E Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft Manifest number: 45 Signing time: Sat 05 Apr 2025 06:41:29 +0000 Manifest this update: Sat 05 Apr 2025 06:41:29 +0000 Manifest next update: Sat 12 Apr 2025 06:41:29 +0000 Files and hashes: 1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: wZfyjRGgGi1lnmZW02c+mtn+kNGoQawEF7RVb9htFeI=) 2: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (hash: ewpedKUZb61m1VLcsAn7GYfV7OReNryZEeFprMQVt3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5 Validity Not Before: Apr 5 06:41:29 2025 GMT Not After : Apr 12 06:41:29 2025 GMT Subject: CN=67f0d099-7fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:6f:64:8b:47:71:87:df:04:c8:f7:1d:9c: a2:28:08:7d:2b:74:db:93:07:d1:cc:9a:18:ad:ac: 5e:3f:b3:10:d4:5f:d1:5b:0a:09:10:14:25:5b:46: 59:11:16:b8:a0:a7:b7:ad:b6:e3:7f:af:a8:71:8b: 3e:dc:7b:01:16:74:f4:d3:d5:5a:c9:3e:c8:1c:cd: d9:9e:3e:c5:ef:9c:82:fa:b5:30:62:65:88:b2:e4: d8:99:6a:8c:54:3a:a1:17:1f:95:37:64:af:94:8c: 18:bd:0f:69:09:8a:84:3e:4d:60:97:12:14:c2:ab: 13:01:7c:60:4f:fa:9f:5a:d7:09:d5:93:e9:b7:27: 64:e7:7e:96:09:9b:cc:4f:db:84:35:28:ae:f2:06: 60:ff:b3:77:67:b5:44:43:f1:92:22:d8:55:2f:ea: bc:77:09:f1:e8:28:33:3c:53:95:74:f9:12:2f:a4: fe:81:5d:d8:7e:b5:db:ad:ec:fd:3b:e3:4e:69:e2: ff:3f:2f:53:a0:b8:1f:e8:3b:23:9d:b2:58:9d:a4: f8:b9:3a:28:dc:c6:4e:7d:82:f1:4e:e6:86:f8:fb: 5b:3d:44:31:5d:49:c1:e8:4f:75:2f:df:f2:c5:da: 9c:ca:bc:dc:db:70:1b:8b:49:c5:e9:8b:10:4e:95: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FA:58:F7:E0:26:9C:A3:32:A5:43:27:0B:1A:86:8E:5C:CB:F5:9E X509v3 Authority Key Identifier: keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ce:7b:57:1a:ca:e6:77:32:77:2d:e2:4c:04:a9:a5:2f:20: 7a:ec:be:44:7f:83:36:88:4d:d0:25:25:7e:91:f8:4b:38:f4: f7:f7:09:a9:90:db:5f:b6:96:25:15:c9:ef:33:e9:eb:78:f2: c1:38:62:e2:c1:cd:52:79:b4:1b:b8:99:47:ab:37:8b:78:12: 47:fb:a9:cc:8f:4a:45:2c:34:2f:2e:13:ea:e2:2e:f2:49:79: 1a:33:c2:35:ce:76:5a:4a:b2:e7:47:63:44:14:0f:0a:0c:70: 3b:90:01:9c:e5:8c:f3:a5:67:eb:0f:5e:bd:63:ab:55:cb:72: c9:40:2a:3e:14:ae:02:64:1a:c5:6c:f5:1d:d6:ca:dc:16:6c: 2c:a7:a7:aa:d1:84:ec:85:dc:d8:1c:ef:d6:5f:2e:8a:9e:50: 52:4f:cd:1f:08:0f:42:69:77:3c:80:a3:16:f2:c9:c9:51:a5: 8e:a1:06:b5:f3:f5:4c:78:65:a2:62:60:dd:ab:89:a1:91:4c: f8:6a:eb:02:0f:5b:a6:cf:f4:95:17:bd:63:e7:f0:3c:9e:68: 0c:61:89:79:96:43:ac:b5:82:b4:97:20:79:0f:20:b7:91:49: f2:96:e9:cb:ec:2f:fd:d5:3d:82:60:65:81:05:8a:c9:9d:0c: 10:03:74:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFDNTExMC8GA1UEBRMoNDcwMUNGMkQyODIwMDlENkM2RUFGNDU1NkZCMERDMUIw RDU1NTdFRjAeFw0yNTA0MDUwNjQxMjlaFw0yNTA0MTIwNjQxMjlaMBgxFjAUBgNV BAMTDTY3ZjBkMDk5LTdmZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6qm9ki0dxh98EyPcdnKIoCH0rdNuTB9HMmhitrF4/sxDUX9FbCgkQFCVbRlkR Frigp7ettuN/r6hxiz7cewEWdPTT1VrJPsgczdmePsXvnIL6tTBiZYiy5NiZaoxU OqEXH5U3ZK+UjBi9D2kJioQ+TWCXEhTCqxMBfGBP+p9a1wnVk+m3J2TnfpYJm8xP 24Q1KK7yBmD/s3dntURD8ZIi2FUv6rx3CfHoKDM8U5V0+RIvpP6BXdh+tdut7P07 405p4v8/L1OguB/oOyOdslidpPi5Oijcxk59gvFO5ob4+1s9RDFdScHoT3Uv3/LF 2pzKvNzbcBuLScXpixBOlbVFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSPpY9+Am nKMypUMnCxqGjlzL9Z4wHwYDVR0jBBgwFoAURwHPLSggCdbG6vRVb7DcGw1VV+8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUM1L0MzOTU4MkMwQUJE QTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2RiRzZ2UlZiN0RjR3cxVlYt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUndIUExTZ2dDZGJHNnZSVmI3RGNHdzFWVi04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE QUM1L0MzOTU4MkMwQUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2Ri RzZ2UlZiN0RjR3cxVlYtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHLOe1cayuZ3Mnct4kwEqaUvIHrsvkR/gzaITdAlJX6R+Es49Pf3CamQ 21+2liUVye8z6et48sE4YuLBzVJ5tBu4mUerN4t4Ekf7qcyPSkUsNC8uE+riLvJJ eRozwjXOdlpKsudHY0QUDwoMcDuQAZzljPOlZ+sPXr1jq1XLcslAKj4UrgJkGsVs 9R3WytwWbCynp6rRhOyF3Ngc79ZfLoqeUFJPzR8ID0JpdzyAoxbyyclRpY6hBrXz 9Ux4ZaJiYN2riaGRTPhq6wIPW6bP9JUXvWPn8DyeaAxhiXmWQ6y1grSXIHkPILeR SfKW6cvsL/3VPYJgZYEFismdDBADdOI= -----END CERTIFICATE-----Generated at Mon Apr 7 04:52:28 2025 by rpki-client