$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft File: RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json) Hash identifier: Lnrtf1T9IrtmOHNFt21eIGxmrHlPTSvZVFVbQRbl8ok= Subject key identifier: C1:D9:22:5F:0A:4E:69:33:74:07:F9:F3:D2:2D:44:32:A4:0F:F1:AA Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 Certificate issuer: /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75 Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft Manifest number: 02BA Signing time: Thu 15 May 2025 01:27:33 +0000 Manifest this update: Thu 15 May 2025 01:27:32 +0000 Manifest next update: Thu 22 May 2025 01:27:32 +0000 Files and hashes: 1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: EsoQ6rKeRexfMhMCz4+GX3TkYEYVlcXcoKzBnNpuxPc=) 2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: cDpvh3Uhyb1LJHdjMZekAyyaNaYh9ET+ttEg2FAl8DY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BD68, serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75 Validity Not Before: May 15 01:27:32 2025 GMT Not After : May 22 01:27:32 2025 GMT Subject: CN=68254304-85f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:e2:21:bd:91:67:0c:30:12:dc:d9:f1:09: 3d:d5:63:ac:85:da:e3:58:90:1d:3f:ad:dc:7e:26: 4e:24:23:cf:c6:a0:61:a8:fb:8a:41:df:74:47:c8: 3f:7f:e9:ce:75:8e:1d:38:30:f2:e1:20:29:a5:01: 93:ad:24:a6:5e:ff:32:18:47:cb:ce:3d:d7:34:2a: 03:a7:74:d0:6d:1b:c5:1f:44:c7:16:ae:41:40:1f: ad:55:f8:61:e2:37:6f:4a:fa:c0:3f:6a:55:3d:15: e1:5f:f3:26:9c:c3:71:33:dc:66:4b:e5:26:69:ec: c6:5e:33:bf:28:76:c1:9f:b4:df:a5:aa:c9:c1:48: b1:d7:fb:3a:91:e7:b8:a9:26:31:d0:dd:0b:bb:19: 5a:5a:35:2c:7c:66:88:e6:46:77:f6:7f:70:dd:6f: be:ed:55:ec:e4:c4:95:fb:45:9e:9f:bb:d5:d7:3a: bb:18:22:f8:be:e0:58:cc:9d:12:92:53:d0:2e:7f: cf:b8:a3:be:52:d2:cb:1a:fd:55:fe:86:64:c4:6c: c0:c5:15:80:6c:42:aa:d2:72:6c:48:65:98:ce:17: 4f:d8:e3:34:7c:7e:aa:5b:44:63:e8:c3:be:50:fa: b7:fc:69:c4:b2:59:04:a9:a2:29:d1:ba:07:ec:26: 1b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D9:22:5F:0A:4E:69:33:74:07:F9:F3:D2:2D:44:32:A4:0F:F1:AA X509v3 Authority Key Identifier: keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:c8:95:9f:d5:8b:6c:bb:fa:99:60:1a:d0:02:f9:70:71:08: ea:ee:aa:a1:d4:20:8f:6f:81:6f:e8:5e:37:e8:d8:12:0f:c7: b1:8c:d7:67:54:8c:f4:d1:f8:c5:60:5f:45:cc:c4:29:70:1e: a1:fa:8e:6f:9d:8c:1d:86:71:ac:7a:a6:8c:8e:fc:a0:ea:c4: 11:0e:8e:23:6f:3b:53:f6:bb:70:97:d4:e7:61:c1:8a:a5:7d: 25:03:4f:1a:2e:62:b4:b2:22:f8:06:64:57:51:55:2e:2e:d8: e7:92:7a:22:3e:39:59:78:cd:4e:62:48:80:b1:ab:91:c6:bf: 6f:4d:2c:de:9d:64:58:f8:7a:b3:97:98:71:78:f7:bd:78:41: 2b:2d:5e:13:ff:c2:91:5c:dc:13:1b:6b:9a:69:cd:e8:56:26: e1:c5:f2:2d:6e:53:74:11:ba:e7:11:06:9e:4a:02:66:9e:3f: b3:5b:4a:1b:6b:1c:a7:41:e9:af:b6:2c:86:a2:55:e4:ef:9e: 9c:5c:86:58:56:98:31:90:65:5e:3f:88:29:d1:e3:fc:33:fa: 79:f1:10:11:54:9b:45:08:e9:67:67:78:a6:d6:e2:3d:17:43: 35:5f:2b:7e:61:3e:dc:61:a8:9f:45:fc:92:49:84:86:3f:42: e3:1a:12:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JENjgxMTAvBgNVBAUTKDQ1NjMyMEZFOTcwRjVDQTRCRkQ3NzU2RkMzRTI3RTA2 QjMwOEJFNzUwHhcNMjUwNTE1MDEyNzMyWhcNMjUwNTIyMDEyNzMyWjAYMRYwFAYD VQQDEw02ODI1NDMwNC04NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufTiIb2RZwwwEtzZ8Qk91WOshdrjWJAdP63cfiZOJCPPxqBhqPuKQd90R8g/ f+nOdY4dODDy4SAppQGTrSSmXv8yGEfLzj3XNCoDp3TQbRvFH0THFq5BQB+tVfhh 4jdvSvrAP2pVPRXhX/MmnMNxM9xmS+UmaezGXjO/KHbBn7TfparJwUix1/s6kee4 qSYx0N0LuxlaWjUsfGaI5kZ39n9w3W++7VXs5MSV+0Wen7vV1zq7GCL4vuBYzJ0S klPQLn/PuKO+UtLLGv1V/oZkxGzAxRWAbEKq0nJsSGWYzhdP2OM0fH6qW0Rj6MO+ UPq3/GnEslkEqaIp0boH7CYbQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHZIl8K TmkzdAf589ItRDKkD/GqMB8GA1UdIwQYMBaAFEVjIP6XD1ykv9d1b8PifgazCL51 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkQ2OC8wNEQ3NEI1MEYx NTMxMUVDQjA3QzlGMjZDNEY5QUUwMi9SV01nX3BjUFhLU18xM1Z2dy1KLUJyTUl2 blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXTWdfcGNQWEtTXzEzVnZ3LUotQnJNSXZuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkQ2OC8wNEQ3NEI1MEYxNTMxMUVDQjA3QzlGMjZDNEY5QUUwMi9SV01nX3BjUFhL U18xM1Z2dy1KLUJyTUl2blUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGyJWf1Ytsu/qZYBrQAvlwcQjq7qqh1CCPb4Fv6F436NgSD8exjNdn VIz00fjFYF9FzMQpcB6h+o5vnYwdhnGseqaMjvyg6sQRDo4jbztT9rtwl9TnYcGK pX0lA08aLmK0siL4BmRXUVUuLtjnknoiPjlZeM1OYkiAsauRxr9vTSzenWRY+Hqz l5hxePe9eEErLV4T/8KRXNwTG2uaac3oVibhxfItblN0EbrnEQaeSgJmnj+zW0ob axynQemvtiyGolXk756cXIZYVpgxkGVeP4gp0eP8M/p58RARVJtFCOlnZ3im1uI9 F0M1Xyt+YT7cYaifRfySSYSGP0LjGhIH -----END CERTIFICATE-----Generated at Fri May 16 06:18:30 2025 by rpki-client