$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: Qp1oEwlRZ5ZXa1ATG2R5Sk/fo7CKpBvoA1uy0dXWwqU= Subject key identifier: F8:CE:14:14:D5:A0:71:90:93:78:70:46:2E:B1:18:E4:80:BA:51:BF Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: FF Signing time: Sun 11 May 2025 04:00:42 +0000 Manifest this update: Sun 11 May 2025 04:00:42 +0000 Manifest next update: Sun 18 May 2025 04:00:42 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: 3XD0uID+LMj2QZjzV3SDVpoY7vv8VT8y6fcqPSlPU5Q=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: May 11 04:00:42 2025 GMT Not After : May 18 04:00:42 2025 GMT Subject: CN=682020ea-b91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8b:83:d8:46:f5:99:ca:cc:d4:5f:47:27:6f: ad:8a:47:1d:98:90:77:c0:c2:5e:a1:d2:16:97:df: 22:a0:39:0d:b0:a5:5f:8d:d7:37:2d:8f:af:d4:86: 8b:ab:0c:19:90:93:b6:80:a4:88:58:f5:10:02:07: 2a:d3:d2:f1:6a:c5:c3:b4:16:aa:db:a1:ca:8e:d5: 11:87:88:bc:b5:54:e8:04:1f:3b:8f:b0:57:fc:64: 8d:d5:97:bb:7e:1c:cf:7d:6f:c1:53:01:d4:85:1c: 19:ea:33:af:94:76:f8:8a:8c:34:4e:71:0a:86:72: 5a:83:3a:f2:2a:2d:41:f1:1f:32:93:29:d0:0c:70: 07:40:0c:a2:3e:49:eb:be:4e:cc:e1:f0:7a:a9:07: 4c:7a:12:d8:cf:99:88:2f:8b:13:6c:45:92:e3:4f: 04:00:36:a2:50:52:5d:b1:a6:97:cf:27:74:5a:60: 67:bc:69:a9:c0:dd:c8:36:05:01:4d:21:4e:e8:a2: bb:b5:d2:34:66:98:e5:9d:28:4a:7d:cb:83:fb:7b: 59:c0:56:1a:a9:6e:7f:30:17:3f:f5:71:fe:78:ab: 0d:5b:cc:ad:a4:8c:7b:6e:5c:6c:00:cb:1b:df:39: e0:6c:5f:e9:c4:44:c8:16:dd:ae:ce:b9:03:6e:d2: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CE:14:14:D5:A0:71:90:93:78:70:46:2E:B1:18:E4:80:BA:51:BF X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:83:bf:20:1d:41:47:e2:8a:77:ea:d3:da:71:d7:64:43:14: 39:bf:ef:fa:46:96:11:63:1c:92:82:b7:42:ed:3b:0c:20:60: 3c:a0:c8:38:99:84:d4:e1:86:89:2a:0a:89:fd:d5:61:a8:6a: 1f:34:d8:4c:fa:07:83:d5:1d:6d:e0:aa:6d:77:b3:b7:06:3c: 93:a7:27:31:79:10:27:8a:47:ba:de:e6:0f:ea:92:14:58:07: 26:92:bd:be:90:ce:1c:55:31:3c:99:8b:76:f6:63:64:67:ac: 6c:60:61:bb:8a:20:36:82:a0:68:20:58:a5:be:71:8f:46:2e: 09:ab:4c:03:49:be:5b:4c:6e:59:ad:7d:ca:2f:40:e3:f3:2e: 85:56:1c:34:54:ef:2c:83:8e:ac:8b:d4:1a:1e:41:2e:79:f4: 85:c4:69:e8:6c:f3:40:cb:38:d2:ec:83:6c:42:79:d8:e5:59: c9:35:e1:39:e5:a6:3b:b1:18:46:f8:4f:97:3d:67:c4:e2:e8: d7:1a:1a:43:58:dc:6b:f6:17:f5:87:6f:a2:4a:05:92:4a:8b: d9:46:88:b3:6c:8b:5f:55:d3:98:db:44:07:07:e5:fb:00:df: ee:63:3f:84:79:54:e9:c6:11:30:82:60:38:27:4d:44:53:1e: 8e:12:6c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx NjQwREQzM0EwHhcNMjUwNTExMDQwMDQyWhcNMjUwNTE4MDQwMDQyWjAYMRYwFAYD VQQDEw02ODIwMjBlYS1iOTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YuD2Eb1mcrM1F9HJ2+tikcdmJB3wMJeodIWl98ioDkNsKVfjdc3LY+v1IaL qwwZkJO2gKSIWPUQAgcq09LxasXDtBaq26HKjtURh4i8tVToBB87j7BX/GSN1Ze7 fhzPfW/BUwHUhRwZ6jOvlHb4iow0TnEKhnJagzryKi1B8R8ykynQDHAHQAyiPknr vk7M4fB6qQdMehLYz5mIL4sTbEWS408EADaiUFJdsaaXzyd0WmBnvGmpwN3INgUB TSFO6KK7tdI0ZpjlnShKfcuD+3tZwFYaqW5/MBc/9XH+eKsNW8ytpIx7blxsAMsb 3zngbF/pxETIFt2uzrkDbtJJhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjOFBTV oHGQk3hwRi6xGOSAulG/MB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1 Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQg78gHUFH4op36tPacddkQxQ5v+/6RpYRYxySgrdC7TsMIGA8oMg4 mYTU4YaJKgqJ/dVhqGofNNhM+geD1R1t4Kptd7O3BjyTpycxeRAnike63uYP6pIU WAcmkr2+kM4cVTE8mYt29mNkZ6xsYGG7iiA2gqBoIFilvnGPRi4Jq0wDSb5bTG5Z rX3KL0Dj8y6FVhw0VO8sg46si9QaHkEuefSFxGnobPNAyzjS7INsQnnY5VnJNeE5 5aY7sRhG+E+XPWfE4ujXGhpDWNxr9hf1h2+iSgWSSovZRoizbItfVdOY20QHB+X7 AN/uYz+EeVTpxhEwgmA4J01EUx6OEmw4 -----END CERTIFICATE-----Generated at Sun May 11 22:14:54 2025 by rpki-client