$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json) Hash identifier: iX0h/QINakpH+EnwZF47YSFxAFJU3sFvIn3jTu42nAY= Subject key identifier: FC:5A:3A:90:25:43:9B:F3:54:CB:DB:9E:4B:CC:A9:8F:4E:A3:9C:E4 Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft Manifest number: 02FF Signing time: Tue 13 May 2025 01:03:14 +0000 Manifest this update: Tue 13 May 2025 01:03:13 +0000 Manifest next update: Tue 20 May 2025 01:03:13 +0000 Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: 1l/dBRWbi8lmqKTWUpPEJoSq/jzEtjEGQiaXz32Urx0=) 2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: P0qEB44hIqjtgoxJbWTuafMgiRenfg8d6UvJuS/K3BM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3 Validity Not Before: May 13 01:03:13 2025 GMT Not After : May 20 01:03:13 2025 GMT Subject: CN=68229a51-1538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:69:f8:69:43:2b:c8:e1:f1:08:4b:70:5a: 7a:ff:6e:b8:0a:de:45:ba:73:8a:de:a8:b8:3c:03: e4:98:b8:fb:9b:86:38:e0:e7:15:bb:35:fa:95:ec: db:f5:ab:2b:d4:c5:97:39:ee:3f:ec:0e:b1:5c:9f: cb:c0:dc:d8:c3:72:74:f7:e5:5d:d3:c1:01:30:bd: 11:cb:92:18:ba:1f:25:87:26:ff:ff:67:b2:bb:54: 50:56:36:cd:30:1c:4e:df:0d:86:ca:ef:4d:70:4a: 9a:b2:5d:96:12:20:5e:13:22:b6:51:65:cb:13:da: 73:e7:8a:1a:5e:0a:c9:03:a5:7c:af:57:90:52:ee: e5:42:cf:d2:91:63:ad:ec:13:1e:6e:2d:c3:ea:e9: bb:23:6c:88:4a:98:29:6f:06:e7:b0:a5:31:90:09: 04:e2:e3:89:ba:51:e3:32:bf:36:31:16:90:a2:52: 57:cf:c3:75:05:56:72:af:6c:be:dc:e2:e3:39:c3: df:68:5e:cf:a6:2d:6d:21:a6:3d:a9:13:51:83:e5: 95:77:d3:53:20:4a:f9:47:73:b5:4d:10:0f:e6:a4: 30:42:55:0f:2b:6f:84:a5:40:a3:bc:e0:cc:15:ae: 68:70:eb:2d:4f:70:00:63:4c:7f:cd:e1:12:b1:b3: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:3A:90:25:43:9B:F3:54:CB:DB:9E:4B:CC:A9:8F:4E:A3:9C:E4 X509v3 Authority Key Identifier: keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:25:19:01:5d:ca:77:ed:53:70:b5:23:02:2a:4e:af:8e:4e: 3f:c8:b7:65:47:8b:11:6b:03:ff:9f:1b:24:d5:9a:1a:ab:db: 07:a1:08:83:c0:8e:b9:9b:93:d0:a8:72:6b:37:33:1a:33:39: 8e:a5:6e:ef:4c:b3:63:1c:51:ec:8e:85:a2:0f:60:c1:8d:e1: 7a:b4:66:53:bd:a0:bc:f9:9e:8d:bb:ec:ce:95:84:98:53:17: 91:a5:41:f1:cc:b3:43:4e:09:0d:10:77:d8:9c:d5:9b:3f:bf: 63:54:7f:18:fe:60:9c:19:7f:e2:7c:9d:26:88:72:ba:35:82: 23:84:4f:5b:96:c4:46:c3:bf:20:f9:0d:82:a1:ae:fb:90:b6: f3:d4:c3:41:93:36:ff:52:e5:a4:22:eb:89:e2:1e:5d:fd:b1: 05:d6:10:69:1d:9f:fe:fe:53:af:e0:0d:43:b5:d9:ef:d6:37: 5d:a8:57:8a:1c:97:b1:43:46:c6:26:3c:6c:48:05:34:40:a7: e6:82:7c:96:da:7d:2b:da:fc:40:e5:c5:a0:88:7a:a3:73:d9: 61:f9:70:28:f6:59:f5:0c:bc:02:9f:5a:83:a6:13:8f:ed:15: f5:4d:81:9b:9d:4d:79:89:6a:f4:ba:8b:17:79:a4:38:54:02: da:d2:77:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC RkVERTkxQjMwHhcNMjUwNTEzMDEwMzEzWhcNMjUwNTIwMDEwMzEzWjAYMRYwFAYD VQQDEw02ODIyOWE1MS0xNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLxp+GlDK8jh8QhLcFp6/264Ct5FunOK3qi4PAPkmLj7m4Y44OcVuzX6lezb 9asr1MWXOe4/7A6xXJ/LwNzYw3J09+Vd08EBML0Ry5IYuh8lhyb//2eyu1RQVjbN MBxO3w2Gyu9NcEqasl2WEiBeEyK2UWXLE9pz54oaXgrJA6V8r1eQUu7lQs/SkWOt 7BMebi3D6um7I2yISpgpbwbnsKUxkAkE4uOJulHjMr82MRaQolJXz8N1BVZyr2y+ 3OLjOcPfaF7Ppi1tIaY9qRNRg+WVd9NTIEr5R3O1TRAP5qQwQlUPK2+EpUCjvODM Fa5ocOstT3AAY0x/zeESsbODjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxaOpAl Q5vzVMvbnkvMqY9Oo5zkMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0 REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0JRkBXcp37VNwtSMCKk6vjk4/yLdlR4sRawP/nxsk1Zoaq9sHoQiD wI65m5PQqHJrNzMaMzmOpW7vTLNjHFHsjoWiD2DBjeF6tGZTvaC8+Z6Nu+zOlYSY UxeRpUHxzLNDTgkNEHfYnNWbP79jVH8Y/mCcGX/ifJ0miHK6NYIjhE9blsRGw78g +Q2Coa77kLbz1MNBkzb/UuWkIuuJ4h5d/bEF1hBpHZ/+/lOv4A1Dtdnv1jddqFeK HJexQ0bGJjxsSAU0QKfmgnyW2n0r2vxA5cWgiHqjc9lh+XAo9ln1DLwCn1qDphOP 7RX1TYGbnU15iWr0uosXeaQ4VALa0nfa -----END CERTIFICATE-----Generated at Wed May 14 18:27:24 2025 by rpki-client