$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: urhIFIY0ghjudlK3R5GPOwrHvv/AaI9J+r8010cwS54= Subject key identifier: 9F:9F:66:10:37:2A:CD:25:A1:1F:15:6B:C1:7A:83:38:84:5F:7E:3C Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 34DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 34AC Signing time: Tue 08 Apr 2025 14:17:30 +0000 Manifest this update: Tue 08 Apr 2025 14:17:30 +0000 Manifest next update: Tue 15 Apr 2025 14:17:30 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: meWaNmM6utmRSvkmHsc7JvK97P8YQX8DiNgIlLDWaE0=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 5NXAIxqc7ZB69eigMV3ENYonV7O2v0+3W3X0MsYYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 14:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A Validity Not Before: Apr 8 14:17:30 2025 GMT Not After : Apr 15 14:17:30 2025 GMT Subject: CN=67f52ffa-4795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:d6:13:61:42:d7:5f:ac:21:d0:ce:51:91: 9e:73:30:56:3e:49:5e:cc:f3:38:20:a0:af:96:92: 1b:7a:f2:64:c5:2e:67:a9:4c:8a:dc:a3:ca:d5:b2: c8:22:6b:73:d3:42:ea:a2:b3:3f:2e:c2:a7:bf:9e: bc:7b:a2:7b:a3:c0:aa:ff:aa:36:c0:d3:dc:f4:51: e9:f5:f0:61:65:86:e4:7c:51:64:c7:b2:58:8c:d1: 12:9d:ec:50:66:08:5c:4a:e3:2e:f7:b0:40:31:cd: 80:9e:12:80:ae:77:a2:eb:d9:21:2d:6c:fe:f5:75: 69:14:92:71:c5:62:23:1d:b1:48:24:b2:71:22:86: 84:af:fa:c7:16:ae:b0:81:9e:49:40:51:6e:ec:7c: 33:8a:13:c3:c5:1a:d9:28:f0:72:96:30:cb:63:91: 7c:ac:e1:00:4c:a7:21:30:2e:fa:a8:8b:39:bf:a6: 31:f5:7e:ac:f1:8c:f6:bc:5e:58:4a:b1:6f:f7:a4: 2e:3c:5d:29:9f:2a:71:50:2b:d8:1b:a3:a9:f1:14: ab:33:36:fc:4c:f3:13:cd:5a:a7:91:1b:9b:7f:8e: 0f:be:6d:a6:30:56:b9:4a:1d:14:55:3c:15:c6:19: fd:5f:27:be:0a:45:0d:30:1f:d8:da:85:a6:c9:3d: 48:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:66:10:37:2A:CD:25:A1:1F:15:6B:C1:7A:83:38:84:5F:7E:3C X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c5:02:5d:b7:ea:2b:a8:7b:7b:a3:cd:86:01:9d:c4:a6:fe: 4b:9b:32:f9:ba:2b:3c:8b:67:8b:c4:4e:2d:c9:44:fb:3a:67: 88:b3:96:ad:3b:51:2d:8c:b7:e0:86:59:b3:6a:e9:29:eb:0c: bd:0d:bf:9f:da:79:d9:ef:3a:f4:30:fa:db:43:6d:25:8d:1d: 5b:9d:04:13:7a:e0:a2:d6:f9:9f:2f:52:c5:0f:90:31:b5:4c: 0a:61:d6:41:2e:48:5c:41:3c:c9:97:c7:77:27:ca:b1:9f:36: 84:a7:86:ec:af:c7:a9:0f:7d:80:43:bf:7d:53:d3:20:df:42: 77:4b:40:0c:10:00:40:0d:97:67:15:13:99:9e:a3:c1:4e:0e: f0:84:c9:91:7d:3d:bd:05:0f:2b:91:ed:52:a3:e0:33:91:89: 1a:44:fc:52:81:ce:44:dc:20:5c:26:a2:18:ad:7d:dd:cf:31: 24:67:f7:fd:8e:f7:70:38:19:74:0a:56:ff:26:7b:52:55:26: 26:38:7a:7d:8b:e6:ea:ea:7f:7a:08:e1:1b:67:14:34:ff:65: af:03:0f:05:b2:f4:ce:16:cf:7b:85:fd:52:13:dd:2a:4a:b3: 84:86:36:55:ca:c0:15:ac:fb:cc:bc:34:eb:4f:54:e9:19:5a: 9c:a7:a0:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjUwNDA4MTQxNzMwWhcNMjUwNDE1MTQxNzMwWjAYMRYwFAYD VQQDEw02N2Y1MmZmYS00Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxzWE2FC11+sIdDOUZGeczBWPklezPM4IKCvlpIbevJkxS5nqUyK3KPK1bLI Imtz00LqorM/LsKnv568e6J7o8Cq/6o2wNPc9FHp9fBhZYbkfFFkx7JYjNESnexQ ZghcSuMu97BAMc2AnhKArnei69khLWz+9XVpFJJxxWIjHbFIJLJxIoaEr/rHFq6w gZ5JQFFu7HwzihPDxRrZKPByljDLY5F8rOEATKchMC76qIs5v6Yx9X6s8Yz2vF5Y SrFv96QuPF0pnypxUCvYG6Op8RSrMzb8TPMTzVqnkRubf44Pvm2mMFa5Sh0UVTwV xhn9Xye+CkUNMB/Y2oWmyT1IcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+fZhA3 Ks0loR8Va8F6gziEX348MB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqxQJdt+orqHt7o82GAZ3Epv5LmzL5uis8i2eLxE4tyUT7OmeIs5at O1EtjLfghlmzaukp6wy9Db+f2nnZ7zr0MPrbQ20ljR1bnQQTeuCi1vmfL1LFD5Ax tUwKYdZBLkhcQTzJl8d3J8qxnzaEp4bsr8epD32AQ799U9Mg30J3S0AMEABADZdn FROZnqPBTg7whMmRfT29BQ8rke1So+AzkYkaRPxSgc5E3CBcJqIYrX3dzzEkZ/f9 jvdwOBl0Clb/JntSVSYmOHp9i+bq6n96COEbZxQ0/2WvAw8FsvTOFs97hf1SE90q SrOEhjZVysAVrPvMvDTrT1TpGVqcp6DH -----END CERTIFICATE-----Generated at Tue Apr 8 21:01:08 2025 by rpki-client