$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft File: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json) Hash identifier: sY8QDje/5qLwxjZm34MTSWaYudu42LCt1LBRgr2UqYw= Subject key identifier: C9:04:11:01:AE:80:69:53:A3:E4:0B:CD:6E:F2:38:A8:45:0E:EA:14 Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 Certificate issuer: /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft Manifest number: 7A Signing time: Sun 11 May 2025 05:33:00 +0000 Manifest this update: Sun 11 May 2025 05:32:59 +0000 Manifest next update: Sun 18 May 2025 05:32:59 +0000 Files and hashes: 1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: Cq8GP6GKgeLbMz8xsNvRYj0+6QXHnMBDT46YQqvwUp8=) 2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: zuZnWcJxNflnoIsWXIqoUOj1sGwHZyfS7R+rQUgHs48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Validity Not Before: May 11 05:32:59 2025 GMT Not After : May 18 05:32:59 2025 GMT Subject: CN=6820368b-8e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:19:0b:02:08:19:17:b7:a6:f6:80:0e:8c: 0f:18:aa:de:15:41:41:f7:62:c0:d0:db:f6:8f:d6: 18:c0:64:de:90:70:f0:54:89:78:6f:17:fb:60:3b: 84:3a:c7:fb:d9:2d:df:56:90:64:a4:6d:aa:ab:13: 5e:8f:73:a4:66:20:0d:4d:23:37:1d:8b:c2:13:59: 69:12:72:ca:9a:77:fc:2f:b2:b6:49:48:4c:31:e4: 01:85:b4:6b:9f:88:b5:a9:ea:d3:52:88:1c:3b:d3: 4b:ef:57:cb:9e:87:87:67:ea:6a:11:fb:8b:51:46: 16:cc:8e:20:8e:88:1b:18:42:17:54:a3:35:77:ef: 35:8e:2d:75:c0:d5:f6:42:20:12:bf:0c:ba:d5:b7: 4e:73:48:d9:5a:bc:db:02:4a:a9:61:aa:99:14:ef: 84:77:44:e1:28:2a:90:0f:44:2d:7e:91:5f:b9:f3: 55:32:d2:ac:df:8b:32:ee:7d:17:a5:06:c9:bd:76: 2b:57:32:76:ff:af:09:c5:15:f3:c9:a8:bb:51:77: 29:8c:08:f4:59:02:a1:2c:3d:c2:5f:50:d3:a8:6f: 4d:14:ee:94:0c:88:46:91:ed:36:62:98:8a:05:22: eb:c9:c0:33:c0:36:3d:bc:e8:9f:2e:d0:73:55:40: bd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:04:11:01:AE:80:69:53:A3:E4:0B:CD:6E:F2:38:A8:45:0E:EA:14 X509v3 Authority Key Identifier: keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:9a:45:7d:26:77:01:44:79:e5:5e:cc:27:91:47:dd:a3:02: 19:da:09:8e:01:d8:59:e3:e3:93:f6:16:1b:69:f6:e6:25:72: 89:e8:94:ab:2c:41:54:36:18:b8:84:77:74:59:af:52:17:98: bc:0c:29:80:16:57:89:37:40:3c:c2:fd:c8:b8:b0:1f:fb:fa: 1e:0b:8e:1b:bb:99:82:11:3d:d7:b3:56:9e:57:1e:1c:cf:07: b0:a6:50:42:ae:f3:e5:c7:94:98:0f:87:db:51:62:9b:10:89: 82:81:d8:e7:41:b0:c2:1e:66:3a:1d:cf:5a:c5:3e:cb:a3:71: 09:38:87:81:f1:28:5c:69:ec:db:82:0f:80:51:44:ac:f2:ba: 9d:84:5c:71:cc:cb:ce:77:1d:d0:b4:35:5d:0e:f9:82:3a:dd: cf:d0:b0:8a:ae:bd:e9:46:35:e9:f6:6d:bf:d1:8d:30:38:fb: f2:6c:d0:80:f3:51:be:f8:34:8f:f9:ed:3e:9c:b2:c0:82:f6: f1:dd:ec:7d:7f:b2:69:a1:82:c0:df:47:b6:40:26:6d:21:50: 81:a9:2d:6c:f3:34:de:36:cf:38:97:cd:ca:b5:df:c9:a6:e6: d7:f0:ac:4c:a1:c5:75:b6:4f:de:12:5a:de:7d:d8:d0:ce:b9: 4d:b0:b8:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzY0NTExMC8GA1UEBRMoQ0IwQzMzMEUzODM3OTQ4RkU1RERGQTYwNDczMjc3NUQ0 QjBDRjgxNDAeFw0yNTA1MTEwNTMyNTlaFw0yNTA1MTgwNTMyNTlaMBgxFjAUBgNV BAMTDTY4MjAzNjhiLThlOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiYxkLAggZF7em9oAOjA8Yqt4VQUH3YsDQ2/aP1hjAZN6QcPBUiXhvF/tgO4Q6 x/vZLd9WkGSkbaqrE16Pc6RmIA1NIzcdi8ITWWkScsqad/wvsrZJSEwx5AGFtGuf iLWp6tNSiBw700vvV8ueh4dn6moR+4tRRhbMjiCOiBsYQhdUozV37zWOLXXA1fZC IBK/DLrVt05zSNlavNsCSqlhqpkU74R3ROEoKpAPRC1+kV+581Uy0qzfizLufRel Bsm9ditXMnb/rwnFFfPJqLtRdymMCPRZAqEsPcJfUNOob00U7pQMiEaR7TZimIoF IuvJwDPANj286J8u0HNVQL3NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyQQRAa6A aVOj5AvNbvI4qEUO6hQwHwYDVR0jBBgwFoAUywwzDjg3lI/l3fpgRzJ3XUsM+BQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDNjQ1LzFFRUVCRDIyODA2 RjExRUY4QjQ1RDc3OUM0RjlBRTAyL3l3d3pEamczbElfbDNmcGdSekozWFVzTS1C US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXd3ekRqZzNsSV9sM2ZwZ1J6SjNYVXNNLUJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD NjQ1LzFFRUVCRDIyODA2RjExRUY4QjQ1RDc3OUM0RjlBRTAyL3l3d3pEamczbElf bDNmcGdSekozWFVzTS1CUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALmaRX0mdwFEeeVezCeRR92jAhnaCY4B2Fnj45P2Fhtp9uYlconolKss QVQ2GLiEd3RZr1IXmLwMKYAWV4k3QDzC/ci4sB/7+h4Ljhu7mYIRPdezVp5XHhzP B7CmUEKu8+XHlJgPh9tRYpsQiYKB2OdBsMIeZjodz1rFPsujcQk4h4HxKFxp7NuC D4BRRKzyup2EXHHMy853HdC0NV0O+YI63c/QsIquvelGNen2bb/RjTA4+/Js0IDz Ub74NI/57T6cssCC9vHd7H1/smmhgsDfR7ZAJm0hUIGpLWzzNN42zziXzcq138mm 5tfwrEyhxXW2T94SWt592NDOuU2wuCs= -----END CERTIFICATE-----Generated at Sun May 11 12:03:37 2025 by rpki-client