$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: /f+4pRR/AOWipk+Hko+RXcKaL1LRS+h5fIOO/tHRieQ= Subject key identifier: 3D:EB:F8:D2:F3:95:FF:51:8E:D3:25:44:67:5C:BF:0A:13:7E:84:F9 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 19B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 19AF Signing time: Wed 14 May 2025 16:28:43 +0000 Manifest this update: Wed 14 May 2025 16:28:42 +0000 Manifest next update: Wed 21 May 2025 16:28:42 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: VQ9Rn/Ltoi7B43YViTl65BNAwKEOBlp3VhANS7hJkD0=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: yqEcj3SZ3T1pYpHMLtfx0ZxmS715TGOM5EI1dS08gyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6585 (0x19b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: May 14 16:28:42 2025 GMT Not After : May 21 16:28:42 2025 GMT Subject: CN=6824c4bb-3329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:5b:7e:4b:c5:0a:28:d5:69:cb:8d:e0:f7: 2a:7f:92:74:de:2e:a5:a0:fa:06:de:8d:2d:31:ef: 09:a5:c9:1e:7b:78:bc:73:0d:ca:58:c8:29:70:28: d6:d6:87:ac:c4:6d:ab:5b:57:88:ed:f3:6c:e3:dd: 91:db:d0:91:22:4b:62:d5:62:b8:40:3d:70:64:68: e0:a2:bf:1e:2e:02:aa:be:f9:5d:42:5b:a5:20:85: e6:f2:3f:d2:68:4d:90:27:30:29:e7:43:af:44:9a: 2e:af:e7:da:df:a5:4e:2b:b2:15:5e:ff:cd:96:4b: 5f:d0:0b:29:d9:7f:91:a0:de:ca:e1:3f:db:36:e9: f5:e9:31:4c:18:d1:d5:39:5c:f3:72:e1:40:0d:dc: 6d:27:17:7e:75:fa:af:fe:6a:ec:f8:5d:e2:c5:a1: 7f:19:e6:c7:81:29:c4:fa:72:8d:99:ce:d4:df:aa: a7:e5:53:4b:8b:05:35:0b:01:d2:e9:3a:13:6e:d7: de:7c:a9:c8:bc:1f:4b:51:65:8e:7e:ef:2a:bb:c3: a2:e4:7d:34:5d:be:20:75:0a:34:d7:73:a4:c1:6b: ab:98:fd:27:fa:dd:ca:04:97:10:51:29:8b:05:94: 0e:68:35:04:48:d4:6e:5f:17:10:35:e0:f7:06:1a: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EB:F8:D2:F3:95:FF:51:8E:D3:25:44:67:5C:BF:0A:13:7E:84:F9 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:e3:c0:ef:84:3a:4e:f2:51:0b:88:e0:e1:76:7b:81:78:31: 47:3e:68:9a:49:42:3d:05:e5:12:de:75:d3:ed:0a:1b:b6:ae: 9c:a6:1f:ba:42:f2:81:ee:c5:0e:80:18:fb:c6:46:bf:be:6e: 5f:eb:19:46:d0:60:f9:9c:43:48:1d:e8:e7:ea:d4:0d:33:fc: 7f:8d:e0:5b:30:03:b7:7a:18:06:e7:f4:0b:d9:3e:c9:93:42: a6:df:23:4c:1d:f5:40:cd:c7:4e:23:32:56:f4:5b:1b:03:ea: 65:f0:d6:ad:94:fe:14:c2:9b:d2:fa:b5:b0:04:e6:77:d5:45: 83:8a:25:64:ea:c7:72:9c:98:7c:59:6d:fb:ed:25:e7:c1:c1: 23:c0:9c:44:42:ba:73:5e:ef:fd:67:68:f2:85:9b:b5:26:0a: 9b:fe:a6:4a:40:8b:cf:9a:df:57:bc:27:3a:16:a8:f1:f1:4c: 2d:09:a4:63:4b:fd:3b:02:85:3a:e9:09:c9:e6:ec:c5:68:b0: 09:d0:08:de:e0:3f:9a:77:f9:71:1b:34:8d:79:44:cc:0a:68: 1a:b7:fd:d5:52:d9:66:0f:d8:fb:2a:5f:31:b0:bb:59:4b:2f: 98:31:8c:7e:0b:41:6e:8d:e7:91:16:3c:c0:79:31:41:df:90: b5:86:fa:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjUwNTE0MTYyODQyWhcNMjUwNTIxMTYyODQyWjAYMRYwFAYD VQQDEw02ODI0YzRiYi0zMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNJbfkvFCijVacuN4Pcqf5J03i6loPoG3o0tMe8Jpckee3i8cw3KWMgpcCjW 1oesxG2rW1eI7fNs492R29CRIkti1WK4QD1wZGjgor8eLgKqvvldQlulIIXm8j/S aE2QJzAp50OvRJour+fa36VOK7IVXv/Nlktf0Asp2X+RoN7K4T/bNun16TFMGNHV OVzzcuFADdxtJxd+dfqv/mrs+F3ixaF/GebHgSnE+nKNmc7U36qn5VNLiwU1CwHS 6ToTbtfefKnIvB9LUWWOfu8qu8Oi5H00Xb4gdQo013OkwWurmP0n+t3KBJcQUSmL BZQOaDUESNRuXxcQNeD3BhrWNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3r+NLz lf9RjtMlRGdcvwoTfoT5MB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDn48DvhDpO8lELiODhdnuBeDFHPmiaSUI9BeUS3nXT7Qobtq6cph+6 QvKB7sUOgBj7xka/vm5f6xlG0GD5nENIHejn6tQNM/x/jeBbMAO3ehgG5/QL2T7J k0Km3yNMHfVAzcdOIzJW9FsbA+pl8NatlP4UwpvS+rWwBOZ31UWDiiVk6sdynJh8 WW377SXnwcEjwJxEQrpzXu/9Z2jyhZu1Jgqb/qZKQIvPmt9XvCc6Fqjx8UwtCaRj S/07AoU66QnJ5uzFaLAJ0Aje4D+ad/lxGzSNeUTMCmgat/3VUtlmD9j7Kl8xsLtZ Sy+YMYx+C0FujeeRFjzAeTFB35C1hvpQ -----END CERTIFICATE-----Generated at Fri May 16 00:24:53 2025 by rpki-client