$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: 4TBQJFDnNk5NuP04mk7qTsXjrWil0x1nDYSSf/guH24= Subject key identifier: 1D:AC:00:FB:B6:DB:4D:00:CF:4B:63:2A:28:E9:37:C9:58:D2:1E:47 Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 0129 Signing time: Fri 09 May 2025 04:10:11 +0000 Manifest this update: Fri 09 May 2025 04:10:11 +0000 Manifest next update: Fri 16 May 2025 04:10:11 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: sLNd7Ee14KQ0Jw8qGSaUMNN6RGBeuSwJZc3trhqSEMQ=) 2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: gez5Qlcfm6c6NA79ftuR/sN6GbAgowRygpjom7unUmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Validity Not Before: May 9 04:10:11 2025 GMT Not After : May 16 04:10:11 2025 GMT Subject: CN=681d8023-422c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:a3:2c:8b:3c:4e:68:fa:45:41:29:59:7f: c9:7a:91:25:37:e6:a4:72:4b:ca:d9:88:93:64:35: 49:80:f1:ad:71:fc:4b:0a:75:04:68:08:12:d2:b8: 54:28:4d:b0:bd:07:72:06:56:8d:ae:2d:99:d2:8b: 7d:71:5f:0b:3e:b1:61:a5:5a:56:2a:27:31:a4:a1: 09:9f:ab:56:ed:b8:7b:6c:ee:de:58:15:14:99:ec: 98:5a:0e:47:06:d5:20:ab:cc:e8:96:fe:ba:a7:0c: 2d:6d:32:91:3e:16:1c:03:52:43:94:2e:ca:8a:95: 7f:1a:f6:95:2a:90:0d:ee:fe:55:1b:b3:5a:53:c5: 3d:71:4c:a0:26:85:7d:a4:8b:c4:ab:15:a5:87:75: c4:1d:65:e9:11:fa:06:df:88:8d:9e:92:83:b5:b5: 09:05:bf:9e:34:d2:c3:01:ad:ba:3a:52:e3:5c:87: 08:42:b8:0f:86:0f:8a:8e:6c:33:c8:99:58:88:76: ec:51:72:6a:ba:fd:18:02:ef:18:d6:54:f4:1f:97: bc:73:59:b3:fa:55:92:38:58:ef:5b:f9:b7:e1:c1: 87:b7:f9:27:3f:c8:65:7e:e8:23:b4:2d:f9:73:73: b4:d1:51:d1:b6:54:b1:94:2d:91:76:5d:1e:11:23: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:00:FB:B6:DB:4D:00:CF:4B:63:2A:28:E9:37:C9:58:D2:1E:47 X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:5d:a9:99:58:65:4c:f3:f5:92:b5:33:f7:e1:73:81:71:82: 36:c1:87:0e:19:66:eb:72:ce:c5:c6:6e:00:f1:8a:9f:10:a9: 75:89:25:08:aa:df:1c:9d:5b:66:56:e1:37:12:e8:44:32:b8: 76:68:27:d1:d4:b7:f9:32:e8:86:10:87:a8:f3:58:4f:46:da: 11:0c:37:8d:fc:72:ac:dd:8b:13:53:72:eb:b3:ad:0e:2f:6c: fb:a4:a0:bd:c1:ad:ee:5e:3a:79:5b:0f:39:4a:c0:0e:be:41: 58:1f:c1:d0:b3:0f:e1:5b:8b:d0:f5:e6:76:54:cf:91:21:f7: 19:a2:36:9c:20:67:82:96:49:83:cf:65:f4:1e:a7:6c:4a:d8: 4a:48:6f:a4:e8:c2:7d:67:07:54:60:42:2e:bd:10:1d:6c:68: 6d:b6:02:a4:0b:dc:d8:b8:79:6f:03:19:9c:84:f4:6c:5f:29: 7e:f8:16:89:aa:75:e7:ca:ac:e1:59:e3:05:2a:4e:78:3e:b3: 49:34:9d:b8:6b:89:05:4a:1f:54:45:b5:eb:bf:81:da:e0:52: 79:bb:ab:76:d0:17:e9:1d:bd:ae:0b:c4:88:95:3e:ca:34:04: 21:9a:f7:3a:db:da:9a:e3:75:dd:a3:b7:f5:a2:13:f4:6e:75: 94:1c:bd:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF MkNDQkIyNUEwHhcNMjUwNTA5MDQxMDExWhcNMjUwNTE2MDQxMDExWjAYMRYwFAYD VQQDEw02ODFkODAyMy00MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CajLIs8Tmj6RUEpWX/JepElN+akckvK2YiTZDVJgPGtcfxLCnUEaAgS0rhU KE2wvQdyBlaNri2Z0ot9cV8LPrFhpVpWKicxpKEJn6tW7bh7bO7eWBUUmeyYWg5H BtUgq8zolv66pwwtbTKRPhYcA1JDlC7KipV/GvaVKpAN7v5VG7NaU8U9cUygJoV9 pIvEqxWlh3XEHWXpEfoG34iNnpKDtbUJBb+eNNLDAa26OlLjXIcIQrgPhg+Kjmwz yJlYiHbsUXJquv0YAu8Y1lT0H5e8c1mz+lWSOFjvW/m34cGHt/knP8hlfugjtC35 c3O00VHRtlSxlC2Rdl0eESOKCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2sAPu2 200Az0tjKijpN8lY0h5HMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkXamZWGVM8/WStTP34XOBcYI2wYcOGWbrcs7Fxm4A8YqfEKl1iSUI qt8cnVtmVuE3EuhEMrh2aCfR1Lf5MuiGEIeo81hPRtoRDDeN/HKs3YsTU3Lrs60O L2z7pKC9wa3uXjp5Ww85SsAOvkFYH8HQsw/hW4vQ9eZ2VM+RIfcZojacIGeClkmD z2X0HqdsSthKSG+k6MJ9ZwdUYEIuvRAdbGhttgKkC9zYuHlvAxmchPRsXyl++BaJ qnXnyqzhWeMFKk54PrNJNJ24a4kFSh9URbXrv4Ha4FJ5u6t20BfpHb2uC8SIlT7K NAQhmvc629qa43Xdo7f1ohP0bnWUHL3W -----END CERTIFICATE-----Generated at Sun May 11 04:34:40 2025 by rpki-client