$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft File: W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json) Hash identifier: 6/l1s3Q5O+mcvFhq52z0NSwNbbS+zI1I64B3MT7iGkg= Subject key identifier: 5E:7B:5E:08:72:BD:AD:4F:A5:17:12:E9:B3:73:A8:76:41:5E:12:41 Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A Certificate issuer: /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A Certificate serial: 08BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft Manifest number: 08B0 Signing time: Wed 02 Apr 2025 20:32:51 +0000 Manifest this update: Wed 02 Apr 2025 20:32:51 +0000 Manifest next update: Wed 09 Apr 2025 20:32:51 +0000 Files and hashes: 1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: gk67c3SJxqzjJuEt4eQK9ZDKoPJVPM4wJpBMxymCb1o=) 2: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: vous3xXvjFiAXL/Nl/pupAEtSC4yfMyFz8lsRruGfJA=) 3: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: uzwGZx0lOKgMiII26y/rxgrO7suGbXUTp9/KngrkqPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E80E Validity Not Before: Apr 2 20:32:51 2025 GMT Not After : Apr 9 20:32:51 2025 GMT Subject: CN=67ed9ef3-572c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:a6:ea:91:be:80:5a:17:27:4d:bd:ef:d7: a5:8d:b4:65:07:02:20:25:6b:f0:e0:52:4e:f2:e7: 1e:4c:06:5d:61:37:dd:98:c2:f0:c0:a7:01:ac:8f: 6e:43:92:46:c0:0f:9f:29:03:aa:96:7c:e0:e5:8b: 98:cb:56:a9:75:ce:c0:3c:4e:a6:0e:24:d0:29:de: 9b:f1:41:c9:24:8c:1c:a3:2e:0c:47:5a:00:ef:18: ad:6b:06:31:fe:95:f7:7f:81:6e:c1:38:3a:23:bf: 33:89:b6:63:af:03:9b:99:20:4e:46:e1:9f:fe:76: 45:ed:f7:74:eb:3b:a1:d7:43:83:fa:0f:08:40:e1: 01:46:64:a6:19:02:e4:5e:cd:8d:54:6c:b2:75:e5: 21:40:bc:92:1b:67:27:c5:b4:9a:59:36:72:33:77: 96:c2:54:e9:b3:ee:92:0e:98:68:f5:20:3e:35:87: 59:d0:9c:3a:4d:65:86:61:4a:00:a1:87:aa:62:b3: b9:3d:07:69:71:48:ac:a9:98:e7:32:f2:eb:69:2c: 11:76:61:19:d0:e7:8d:9b:24:8e:be:ea:c7:30:70: b7:9c:05:4b:e1:b1:1a:9f:4a:01:d1:20:b0:0c:0f: a6:16:09:b0:d7:c4:f0:cf:e2:e1:a0:33:a6:da:2a: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7B:5E:08:72:BD:AD:4F:A5:17:12:E9:B3:73:A8:76:41:5E:12:41 X509v3 Authority Key Identifier: keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a4:55:bb:9b:e6:98:15:7f:ee:ef:77:a0:ab:1e:4e:73:fc: d6:cd:57:f4:b8:b7:df:cf:1c:62:07:6e:e2:0e:49:51:63:f5: 51:0c:f4:35:f1:ab:43:59:13:1a:84:b4:9a:5a:bc:68:b5:53: 0a:aa:e2:fb:2f:65:c3:e4:47:b1:11:94:31:60:e6:67:71:c9: cb:a6:af:77:ac:cd:eb:2f:63:12:82:39:2c:2e:4c:63:12:e0: 3d:71:11:35:70:4b:40:c7:2b:60:65:5a:88:fe:47:8f:b0:a6: f1:7b:a3:b2:0f:b5:af:d8:79:45:4b:66:5f:d6:44:f1:07:23: 9e:a2:b7:50:39:2b:9a:68:5c:6c:49:c3:e2:0a:8a:28:a9:56: e5:15:bb:59:6a:de:e3:5c:36:1c:dc:fb:54:29:cf:b2:7f:89: 58:4b:82:bc:19:42:58:5a:77:ba:d0:ea:9a:1e:42:f0:5b:78: b5:9c:de:1e:a1:0a:49:e4:92:e6:50:55:59:01:aa:0a:80:5c: 94:d4:42:ea:2b:ae:51:1e:1c:d2:d7:1e:c8:cc:3e:00:a5:16: 6c:ba:ee:d5:66:88:c0:df:18:4a:2f:77:cf:86:bc:45:a9:29: d5:c7:09:af:04:4a:3c:db:bc:e1:c5:2b:3b:d7:5f:6c:3a:7a: 9c:13:ca:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4MEUxMTAvBgNVBAUTKDVCQkQ2NkU4NjMzNEU5OTgxN0UyQzZENUJDRUI3REFE MDIwRkNBOEEwHhcNMjUwNDAyMjAzMjUxWhcNMjUwNDA5MjAzMjUxWjAYMRYwFAYD VQQDEw02N2VkOWVmMy01NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCOm6pG+gFoXJ02979eljbRlBwIgJWvw4FJO8uceTAZdYTfdmMLwwKcBrI9u Q5JGwA+fKQOqlnzg5YuYy1apdc7APE6mDiTQKd6b8UHJJIwcoy4MR1oA7xitawYx /pX3f4FuwTg6I78zibZjrwObmSBORuGf/nZF7fd06zuh10OD+g8IQOEBRmSmGQLk Xs2NVGyydeUhQLySG2cnxbSaWTZyM3eWwlTps+6SDpho9SA+NYdZ0Jw6TWWGYUoA oYeqYrO5PQdpcUisqZjnMvLraSwRdmEZ0OeNmySOvurHMHC3nAVL4bEan0oB0SCw DA+mFgmw18Twz+LhoDOm2ip48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF57Xghy va1PpRcS6bNzqHZBXhJBMB8GA1UdIwQYMBaAFFu9ZuhjNOmYF+LG1bzrfa0CD8qK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTgwRS8wMEU5MjUwNEIx Q0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZaZ1g0c2JWdk90OXJRSVB5 b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c3MW02R00wNlpnWDRzYlZ2T3Q5clFJUHlvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTgwRS8wMEU5MjUwNEIxQ0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZa Z1g0c2JWdk90OXJRSVB5b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZpFW7m+aYFX/u73egqx5Oc/zWzVf0uLffzxxiB27iDklRY/VRDPQ1 8atDWRMahLSaWrxotVMKquL7L2XD5EexEZQxYOZnccnLpq93rM3rL2MSgjksLkxj EuA9cRE1cEtAxytgZVqI/kePsKbxe6OyD7Wv2HlFS2Zf1kTxByOeordQOSuaaFxs ScPiCoooqVblFbtZat7jXDYc3PtUKc+yf4lYS4K8GUJYWne60OqaHkLwW3i1nN4e oQpJ5JLmUFVZAaoKgFyU1ELqK65RHhzS1x7IzD4ApRZsuu7VZojA3xhKL3fPhrxF qSnVxwmvBEo827zhxSs7119sOnqcE8q8 -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:00 2025 by rpki-client