$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft File: WFTG2IaugFcOzmJHTVQZnE6CnKs.mft (raw, json) Hash identifier: PQh9wXo0G7sx/4RNYo59nm6xRPAyZGN4tiMAAwI0gis= Subject key identifier: BF:40:B9:DB:08:F1:4E:94:C0:4F:47:98:84:ED:02:1C:A0:82:22:33 Authority key identifier: 58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB Certificate issuer: /CN=A9110AD1/serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft Manifest number: 064E Signing time: Thu 24 Apr 2025 22:18:22 +0000 Manifest this update: Thu 24 Apr 2025 22:18:22 +0000 Manifest next update: Thu 01 May 2025 22:18:22 +0000 Files and hashes: 1: WFTG2IaugFcOzmJHTVQZnE6CnKs.crl (hash: Tox2eMivXMc/vRuUpLCLLBHgusDyuJ525r68DlNg9X8=) 2: 5F38A4F082D611EB802C1A55C4F9AE02.roa (hash: UOjR0c6GhcTb/ztzkw/K5+yS24Iwi0A/h+4yO2s04cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110AD1, serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB Validity Not Before: Apr 24 22:18:22 2025 GMT Not After : May 1 22:18:22 2025 GMT Subject: CN=680ab8ae-6f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:29:75:39:e0:cd:ad:82:cb:e6:26:bb:af: 6b:2b:9b:af:83:b2:d2:8f:83:9d:ef:fc:5d:3e:53: fb:7a:6c:3d:73:5a:25:3d:c1:0b:f8:0f:e1:ed:e0: e2:c1:16:0e:40:9c:09:ea:1b:d6:6f:2b:8c:85:01: 0f:cc:0e:f5:81:b1:e1:7a:4c:57:08:0e:2d:dc:7f: 37:8b:00:90:ac:00:d8:91:de:e0:20:a9:8e:cd:bd: 31:f0:dc:5c:a3:88:c6:d3:4e:a3:58:6d:d6:42:43: 02:ab:50:f5:fe:64:66:54:59:d2:72:7d:89:58:7c: 3d:d7:9e:e3:41:f1:85:37:82:41:76:6a:fd:9a:55: a9:4a:29:c8:bc:ae:17:05:55:30:c9:bb:68:82:1a: 04:83:7a:bd:c8:67:9b:03:32:07:67:24:f4:ce:ab: f9:f5:b7:f9:b1:6e:d4:bc:79:35:6c:75:69:9a:d3: d4:df:dc:b2:a0:84:98:5c:87:4c:8e:ff:ef:41:2f: 37:54:c0:71:a3:45:25:3d:f5:3c:46:1b:4d:d1:ae: a8:d7:8a:b4:55:42:1a:28:d5:56:bf:9d:68:0e:68: e6:07:10:5c:30:fc:9f:b4:05:fb:a6:5c:3f:e5:dd: 4d:d4:1e:92:48:3f:6b:a0:64:43:46:12:41:aa:f1: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:40:B9:DB:08:F1:4E:94:C0:4F:47:98:84:ED:02:1C:A0:82:22:33 X509v3 Authority Key Identifier: keyid:58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:1a:24:ae:1d:a1:f0:a6:f2:25:bd:cd:e9:ee:dc:ff:b7:5a: 25:ec:b5:06:23:aa:35:e2:8d:69:69:4e:12:21:a8:0d:f6:b0: bb:74:51:af:95:22:ec:5b:9b:21:4e:d6:9d:e7:36:da:da:40: 63:28:d0:ff:c3:2c:0c:15:91:c3:7f:8e:52:a6:17:97:0f:17: 0e:22:3b:3e:2b:e9:ca:be:67:e0:9a:61:8c:33:ac:2e:44:e6: 6a:cb:c9:1b:26:9f:d1:1c:02:15:46:96:5c:13:c2:5c:b2:e7: dc:cb:19:ab:c5:21:d3:89:70:6e:96:41:55:51:a5:11:4a:77: f1:92:3d:b9:29:d4:0d:eb:db:83:ed:9e:a5:48:06:c4:0f:25: 8e:88:d1:3c:11:e1:aa:1e:2a:96:de:1f:ec:d0:26:28:fd:e6: c1:ff:00:01:f7:4c:eb:54:b3:36:42:72:5a:20:a1:d0:15:a0: 16:9e:d6:fa:f4:c4:3a:99:9e:3d:3c:3e:e7:bc:9a:6f:d9:1f: 0e:62:f4:66:3f:a4:da:c2:73:c7:27:33:3b:1b:3f:01:a0:36: 19:57:3d:2e:91:ed:88:30:54:c6:6a:02:9a:28:18:c3:e8:a3: c5:4b:3f:63:52:ec:0a:4e:8d:94:29:0d:a4:9d:d5:ef:9d:e6: 37:89:4e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBRDExMTAvBgNVBAUTKDU4NTRDNkQ4ODZBRTgwNTcwRUNFNjI0NzRENTQxOTlD NEU4MjlDQUIwHhcNMjUwNDI0MjIxODIyWhcNMjUwNTAxMjIxODIyWjAYMRYwFAYD VQQDEw02ODBhYjhhZS02Zjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq0pdTngza2Cy+Ymu69rK5uvg7LSj4Od7/xdPlP7emw9c1olPcEL+A/h7eDi wRYOQJwJ6hvWbyuMhQEPzA71gbHhekxXCA4t3H83iwCQrADYkd7gIKmOzb0x8Nxc o4jG006jWG3WQkMCq1D1/mRmVFnScn2JWHw9157jQfGFN4JBdmr9mlWpSinIvK4X BVUwybtoghoEg3q9yGebAzIHZyT0zqv59bf5sW7UvHk1bHVpmtPU39yyoISYXIdM jv/vQS83VMBxo0UlPfU8RhtN0a6o14q0VUIaKNVWv51oDmjmBxBcMPyftAX7plw/ 5d1N1B6SSD9roGRDRhJBqvEzGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9AudsI 8U6UwE9HmITtAhyggiIzMB8GA1UdIwQYMBaAFFhUxtiGroBXDs5iR01UGZxOgpyr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFEMS81QTgzQTU4NDgy Q0UxMUVCQkI2OTRGODdDNEY5QUUwMi9XRlRHMklhdWdGY096bUpIVFZRWm5FNkNu S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGVEcySWF1Z0ZjT3ptSkhUVlFabkU2Q25Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEFEMS81QTgzQTU4NDgyQ0UxMUVCQkI2OTRGODdDNEY5QUUwMi9XRlRHMklhdWdG Y096bUpIVFZRWm5FNkNuS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwGiSuHaHwpvIlvc3p7tz/t1ol7LUGI6o14o1paU4SIagN9rC7dFGv lSLsW5shTtad5zba2kBjKND/wywMFZHDf45SpheXDxcOIjs+K+nKvmfgmmGMM6wu ROZqy8kbJp/RHAIVRpZcE8JcsufcyxmrxSHTiXBulkFVUaURSnfxkj25KdQN69uD 7Z6lSAbEDyWOiNE8EeGqHiqW3h/s0CYo/ebB/wAB90zrVLM2QnJaIKHQFaAWntb6 9MQ6mZ49PD7nvJpv2R8OYvRmP6TawnPHJzM7Gz8BoDYZVz0uke2IMFTGagKaKBjD 6KPFSz9jUuwKTo2UKQ2kndXvneY3iU5H -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:16 2025 by rpki-client