$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: tK0Eds7yNdPUz7mXtiLTMn6aNvdxC49wabl70HBQvlM= Subject key identifier: 05:3A:7E:A8:C6:AE:D8:B3:CA:74:71:FE:BC:6E:95:DF:C8:C2:C1:2D Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 03B3 Signing time: Wed 12 Mar 2025 23:48:50 +0000 Manifest this update: Wed 12 Mar 2025 23:48:49 +0000 Manifest next update: Wed 19 Mar 2025 23:48:49 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: 5/ufyrWYzSaeAQYnTbWXLsAs+jRe3wGO8+2ML+oZ0x0=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: PLGw9NG/LDLAwYupVxB/HWVn7IiF43r6Nw3857fc1oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 23:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080 Validity Not Before: Mar 12 23:48:49 2025 GMT Not After : Mar 19 23:48:49 2025 GMT Subject: CN=67d21d61-13bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:8d:da:eb:cd:73:0f:d9:52:c8:e3:24:da: 10:b4:17:1d:c7:5a:66:d0:eb:4b:af:ad:87:7d:1e: 11:1e:24:ea:cc:ea:38:2c:06:f3:e6:5d:ea:86:6c: 33:c2:af:9e:58:96:d1:8b:6e:95:f0:79:c6:55:ec: a4:78:df:ed:15:93:84:30:19:dd:c8:f0:9b:d6:0e: 4b:5e:10:3c:42:49:91:c8:ad:f5:31:94:4b:ac:83: 71:af:85:81:38:a9:1e:96:bb:d8:fb:27:69:6b:79: d9:a5:07:c9:3f:94:10:0e:6b:b6:58:dd:b9:a9:42: 42:ef:2b:93:58:2f:bb:70:9a:9c:25:61:a4:5f:c7: 96:4f:16:d8:75:78:33:c1:7c:79:70:2b:6a:33:fe: 4c:2b:22:ea:8a:80:1d:1d:3d:16:0a:b3:4e:77:c2: 54:07:3c:a5:0a:05:17:d5:6d:a3:86:9e:5d:a8:44: 67:64:db:92:ca:5b:61:cf:8c:d2:db:1c:9f:98:b7: 07:72:7e:73:b0:fb:8b:20:66:60:1f:0d:33:4a:87: 7e:84:d9:7e:16:ab:82:0f:18:21:68:07:e5:49:71: c1:8e:81:fd:ed:6a:f4:3d:fc:8d:7b:ad:37:fa:37: 00:d9:c8:8a:33:ec:11:32:ce:38:2a:a5:f0:8c:a2: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3A:7E:A8:C6:AE:D8:B3:CA:74:71:FE:BC:6E:95:DF:C8:C2:C1:2D X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:25:49:17:8a:50:27:62:1c:66:b9:6e:5b:79:d8:1e:49:ec: e7:77:ae:b8:c5:c3:5f:f2:80:ec:35:60:5d:f4:fa:85:76:79: 46:36:6f:7d:f2:bf:62:de:5a:a3:8f:91:73:bf:1e:b9:a6:34: a2:87:6a:dd:c8:b8:3c:f4:2f:ce:e7:f8:52:e8:f6:b7:23:81: 0f:6b:9f:13:80:0a:a3:cb:65:7d:96:ae:ac:b7:30:77:48:68: 50:a5:cd:43:b2:22:7b:de:45:ec:4f:fc:27:b2:2e:74:f4:6e: dc:4a:d8:6f:5d:d5:53:d8:d5:9e:83:d3:a0:45:66:04:2b:7e: e8:10:4a:56:93:9c:38:7f:3f:4c:41:fa:3d:79:45:cb:20:58: 0b:d6:c9:96:ec:22:cc:b3:e9:83:5b:cb:09:53:c7:e9:67:9a: 1b:4b:30:3c:19:42:69:c6:1e:c1:69:e5:f7:c4:e4:b2:c9:33: 89:f3:62:3a:59:7d:99:70:24:b3:ba:e7:82:22:50:56:be:44: 5b:00:03:73:a8:c6:aa:94:31:82:88:a7:54:9c:f9:92:9e:64: 1d:d4:8b:42:8c:c5:72:42:5d:c7:a9:ea:08:1b:14:98:cf:a1: 20:2c:d3:e2:2e:74:50:55:b4:7b:4b:84:72:5f:54:4c:e5:fe: 17:31:a8:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjUwMzEyMjM0ODQ5WhcNMjUwMzE5MjM0ODQ5WjAYMRYwFAYD VQQDEw02N2QyMWQ2MS0xM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJCN2uvNcw/ZUsjjJNoQtBcdx1pm0OtLr62HfR4RHiTqzOo4LAbz5l3qhmwz wq+eWJbRi26V8HnGVeykeN/tFZOEMBndyPCb1g5LXhA8QkmRyK31MZRLrINxr4WB OKkelrvY+ydpa3nZpQfJP5QQDmu2WN25qUJC7yuTWC+7cJqcJWGkX8eWTxbYdXgz wXx5cCtqM/5MKyLqioAdHT0WCrNOd8JUBzylCgUX1W2jhp5dqERnZNuSylthz4zS 2xyfmLcHcn5zsPuLIGZgHw0zSod+hNl+FquCDxghaAflSXHBjoH97Wr0PfyNe603 +jcA2ciKM+wRMs44KqXwjKJooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU6fqjG rtizynRx/rxuld/IwsEtMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMJUkXilAnYhxmuW5bedgeSeznd664xcNf8oDsNWBd9PqFdnlGNm99 8r9i3lqjj5Fzvx65pjSih2rdyLg89C/O5/hS6Pa3I4EPa58TgAqjy2V9lq6stzB3 SGhQpc1DsiJ73kXsT/wnsi509G7cSthvXdVT2NWeg9OgRWYEK37oEEpWk5w4fz9M Qfo9eUXLIFgL1smW7CLMs+mDW8sJU8fpZ5obSzA8GUJpxh7BaeX3xOSyyTOJ82I6 WX2ZcCSzuueCIlBWvkRbAANzqMaqlDGCiKdUnPmSnmQd1ItCjMVyQl3HqeoIGxSY z6EgLNPiLnRQVbR7S4RyX1RM5f4XMaj6 -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:50 2025 by rpki-client