$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft File: j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json) Hash identifier: F79MF4UBr2tRRV8czUwoN8mmyygnGyb0CCZkeD2oVWg= Subject key identifier: 92:D5:C4:4C:4C:8F:66:6B:DF:78:16:CA:96:71:08:B1:26:0B:DA:18 Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E Certificate issuer: /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft Manifest number: D4 Signing time: Sun 11 May 2025 04:28:08 +0000 Manifest this update: Sun 11 May 2025 04:28:07 +0000 Manifest next update: Sun 18 May 2025 04:28:07 +0000 Files and hashes: 1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: 1O08QZSEHjH9nsvKcWbNQ+UBwVUQK7mZ0zcVw0H6no8=) 2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: Ux7MrDkQdEj+Gtfnp0Wmpu2t6Z1MtA7yxD7lmndlZrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Validity Not Before: May 11 04:28:07 2025 GMT Not After : May 18 04:28:07 2025 GMT Subject: CN=68202757-7f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:f3:7b:1c:fd:02:c1:eb:06:07:78:70:75: 89:08:58:0e:2e:1c:90:ef:70:d7:19:ec:ca:3a:15: d8:6d:d4:37:a3:ff:bc:db:22:ae:46:e3:25:6b:d1: 48:9e:4e:42:ff:3a:b9:33:0d:79:7a:99:7f:b0:e4: 5d:26:84:e0:3a:a6:3c:7a:c6:bb:8a:51:7c:24:0e: 8d:44:bb:d1:ed:4e:74:99:8f:f1:92:2c:6f:ec:fe: 44:3a:77:59:75:9b:4d:e9:ba:38:1d:b6:46:c2:23: 0f:27:b5:b5:e5:be:ac:fb:40:00:b4:e1:38:52:6f: e2:06:1b:fa:23:fc:47:49:40:ee:62:78:79:81:23: 75:b5:68:62:77:a2:84:98:ce:73:60:26:04:1d:80: eb:57:fb:8f:55:ae:a2:70:0e:58:d7:f2:ba:4b:33: 00:90:91:f1:37:ba:f7:8e:ca:aa:53:5b:93:d2:bd: 5a:d6:53:e2:e5:63:99:4e:f4:7d:59:06:b1:3f:bd: 08:c3:32:45:fe:8e:a4:58:33:4d:14:c4:4f:17:dc: 59:8d:68:e6:58:9e:75:7f:37:6b:15:6c:a8:9e:1f: 61:ff:e8:0f:fa:98:99:23:fd:5e:68:6d:40:2a:f0: 82:1f:aa:55:98:5d:12:45:e3:55:47:64:1b:74:d8: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D5:C4:4C:4C:8F:66:6B:DF:78:16:CA:96:71:08:B1:26:0B:DA:18 X509v3 Authority Key Identifier: keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:5b:90:41:ef:fb:b5:b3:f5:38:10:61:3a:06:59:26:37:9e: d6:d4:99:3e:b7:b1:36:2c:f2:07:91:5d:02:a4:72:b0:f2:53: c1:26:8c:86:48:d9:cb:5d:5f:3f:9c:36:1e:b4:49:e2:cb:03: a3:e5:b8:38:9b:b4:b9:bc:92:e7:b8:e0:c7:3a:59:3f:47:75: 82:7f:b5:2c:fa:e8:d2:3f:6d:4f:8f:b0:3e:6c:8b:45:28:df: 1b:3d:ae:39:9b:b5:68:45:28:cd:a6:9b:38:37:eb:11:39:dd: b9:12:74:98:d3:36:b8:68:47:47:1b:6d:31:51:08:de:d0:5c: aa:7a:09:3b:22:9e:80:64:5c:ac:c3:47:a1:65:e9:cb:b7:92: 5e:16:8d:dd:6f:aa:70:e7:d0:81:aa:ee:e7:91:bf:ff:e9:8c: 17:3c:69:67:ac:72:0d:aa:45:2b:09:a6:72:55:a9:1a:61:54: 7d:05:51:d5:38:8d:81:48:bc:91:1d:49:c1:b7:63:e8:fa:05: 9f:b3:1b:d6:00:f4:8d:85:74:a8:37:f1:a9:94:9c:d7:3e:d1: 77:43:aa:e6:b9:34:77:6d:3c:77:92:31:56:ed:62:c4:b0:98: 52:35:37:18:13:ca:5a:91:da:b6:55:90:1d:1e:6d:37:94:00: 74:45:df:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGMUQxMTAvBgNVBAUTKDhGRTVBN0M5OThGQjhCNzhBQzMzMUVBRTgzQkMxNzg2 MjNFRTNDOUUwHhcNMjUwNTExMDQyODA3WhcNMjUwNTE4MDQyODA3WjAYMRYwFAYD VQQDEw02ODIwMjc1Ny03ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJbzexz9AsHrBgd4cHWJCFgOLhyQ73DXGezKOhXYbdQ3o/+82yKuRuMla9FI nk5C/zq5Mw15epl/sORdJoTgOqY8esa7ilF8JA6NRLvR7U50mY/xkixv7P5EOndZ dZtN6bo4HbZGwiMPJ7W15b6s+0AAtOE4Um/iBhv6I/xHSUDuYnh5gSN1tWhid6KE mM5zYCYEHYDrV/uPVa6icA5Y1/K6SzMAkJHxN7r3jsqqU1uT0r1a1lPi5WOZTvR9 WQaxP70IwzJF/o6kWDNNFMRPF9xZjWjmWJ51fzdrFWyonh9h/+gP+piZI/1eaG1A KvCCH6pVmF0SReNVR2QbdNhjCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLVxExM j2Zr33gWypZxCLEmC9oYMB8GA1UdIwQYMBaAFI/lp8mY+4t4rDMeroO8F4Yj7jye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUYxRC9CQTlDRDhBQ0VD RTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kzaXNNeDZ1Zzd3WGhpUHVQ SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otV255Wmo3aTNpc014NnVnN3dYaGlQdVBKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUYxRC9CQTlDRDhBQ0VDRTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kz aXNNeDZ1Zzd3WGhpUHVQSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmW5BB7/u1s/U4EGE6BlkmN57W1Jk+t7E2LPIHkV0CpHKw8lPBJoyG SNnLXV8/nDYetEniywOj5bg4m7S5vJLnuODHOlk/R3WCf7Us+ujSP21Pj7A+bItF KN8bPa45m7VoRSjNpps4N+sROd25EnSY0za4aEdHG20xUQje0Fyqegk7Ip6AZFys w0ehZenLt5JeFo3db6pw59CBqu7nkb//6YwXPGlnrHINqkUrCaZyVakaYVR9BVHV OI2BSLyRHUnBt2Po+gWfsxvWAPSNhXSoN/GplJzXPtF3Q6rmuTR3bTx3kjFW7WLE sJhSNTcYE8pakdq2VZAdHm03lAB0Rd+l -----END CERTIFICATE-----Generated at Tue May 13 05:56:54 2025 by rpki-client