$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft File: WpjqUfgHDWcBhCEBRTothWT80ts.mft (raw, json) Hash identifier: aysSds2Gc6xfYaJpe/yT+FJbWNBoeSGWY6s3Zqkqnts= Subject key identifier: C3:77:9E:7D:17:F1:D7:34:61:15:3A:79:C5:0A:58:5D:4F:CC:68:A8 Authority key identifier: 5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB Certificate issuer: /CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Certificate serial: 076C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft Manifest number: 0766 Signing time: Thu 24 Apr 2025 21:21:02 +0000 Manifest this update: Thu 24 Apr 2025 21:21:01 +0000 Manifest next update: Thu 01 May 2025 21:21:01 +0000 Files and hashes: 1: WpjqUfgHDWcBhCEBRTothWT80ts.crl (hash: N2ut/ZldmqYDY7ldNaiH0kXCQ6VCom63yLBWkjoeAw0=) 2: 27EA36484AC411EB95EE2C61C4F9AE02.roa (hash: 0MFbelavrnvkHJOZxZvDps06Vm64af2RypLjbngW5IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE9, serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Validity Not Before: Apr 24 21:21:01 2025 GMT Not After : May 1 21:21:01 2025 GMT Subject: CN=680aab3d-30b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:43:83:01:f7:0b:45:e8:42:37:3d:95:e8: f0:be:3c:0c:6f:a8:a1:7f:8c:cd:28:11:39:c1:e1: 7e:e4:30:19:f0:20:94:09:9e:d3:19:0d:a2:b1:1b: d4:2f:52:a3:69:56:41:44:94:e1:cd:56:e4:e7:a3: 2c:fb:25:d4:a2:42:c3:a6:92:11:a2:ea:8c:10:c5: 24:6d:f8:64:6e:08:98:69:f9:b8:3a:b9:90:76:5a: 06:fb:80:c3:06:f7:e7:b5:cb:a5:e5:9f:13:d1:80: 57:cb:d6:6c:5d:9c:56:6f:ac:27:c6:b0:9e:5d:90: d2:9a:0f:ab:0b:73:f5:cc:d7:97:29:95:55:37:d1: 64:6e:4d:44:d9:b5:e4:c0:13:92:78:1f:97:87:b6: d7:50:03:33:c9:cd:9a:60:fe:c2:51:10:00:ef:07: 09:f5:5e:a8:1f:b6:49:21:ad:da:3f:39:54:c3:c5: 72:6f:7d:62:8e:9b:14:63:91:e5:52:1a:34:44:2c: d1:d4:26:6b:26:b5:db:26:76:1f:4c:30:fc:2e:2f: 84:b9:9d:95:1e:52:00:e5:62:71:a4:e7:64:ab:c4: ee:b6:05:86:58:de:7b:f5:0e:6a:80:64:ea:50:04: 03:6c:0e:70:66:57:15:33:ee:4a:93:96:18:bd:00: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:77:9E:7D:17:F1:D7:34:61:15:3A:79:C5:0A:58:5D:4F:CC:68:A8 X509v3 Authority Key Identifier: keyid:5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c4:fd:12:b1:3a:3e:ad:89:f9:0d:af:74:42:81:bb:e0:33: 0b:2f:f9:95:ad:07:a1:58:65:44:66:1f:d9:a2:8a:50:9a:95: 4e:c7:15:f1:11:bc:b3:29:e6:8d:2a:27:42:ec:9a:0a:5f:2b: ba:c8:ab:29:67:75:27:a6:0d:2b:bd:a0:f4:1b:f7:0c:30:40: 68:b6:91:04:27:2e:26:a3:ad:8f:4b:0b:dd:a1:46:49:3d:51: 9e:e2:b1:b4:e3:3b:d3:46:07:ff:e3:51:22:d4:7c:21:e5:42: 52:28:30:6f:67:d7:87:7b:9e:af:69:f4:da:f1:a7:a2:74:10: ef:93:e9:f3:47:9e:ec:17:7e:de:32:3b:79:17:a4:c5:1b:64: 59:05:48:1e:3b:d9:40:0f:c1:58:75:1b:07:86:07:ba:6b:4b: e1:55:03:4e:c6:99:19:0e:32:56:3c:8f:97:02:3a:2d:d1:35: 89:26:67:cf:ec:a3:1e:54:66:e9:37:6a:ac:ae:0d:a4:24:9f: 3e:85:af:90:b1:b3:b5:2b:19:51:9d:1c:3d:b6:44:ad:7d:08: 95:1f:91:e0:47:73:b0:80:77:05:ae:6c:85:25:ab:dd:3e:35: 10:c7:bf:6c:5b:ab:1f:21:b3:c8:d4:c0:6d:df:b2:89:7b:a6: 58:8c:39:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTkxMTAvBgNVBAUTKDVBOThFQTUxRjgwNzBENjcwMTg0MjEwMTQ1M0EyRDg1 NjRGQ0QyREIwHhcNMjUwNDI0MjEyMTAxWhcNMjUwNTAxMjEyMTAxWjAYMRYwFAYD VQQDEw02ODBhYWIzZC0zMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzppDgwH3C0XoQjc9lejwvjwMb6ihf4zNKBE5weF+5DAZ8CCUCZ7TGQ2isRvU L1KjaVZBRJThzVbk56Ms+yXUokLDppIRouqMEMUkbfhkbgiYafm4OrmQdloG+4DD Bvfntcul5Z8T0YBXy9ZsXZxWb6wnxrCeXZDSmg+rC3P1zNeXKZVVN9Fkbk1E2bXk wBOSeB+Xh7bXUAMzyc2aYP7CURAA7wcJ9V6oH7ZJIa3aPzlUw8Vyb31ijpsUY5Hl Uho0RCzR1CZrJrXbJnYfTDD8Li+EuZ2VHlIA5WJxpOdkq8TutgWGWN579Q5qgGTq UAQDbA5wZlcVM+5Kk5YYvQBYawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMN3nn0X 8dc0YRU6ecUKWF1PzGioMB8GA1UdIwQYMBaAFFqY6lH4Bw1nAYQhAUU6LYVk/NLb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFOS83Q0U1MjJBNjE1 MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERXY0JoQ0VCUlRvdGhXVDgw dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwanFVZmdIRFdjQmhDRUJSVG90aFdUODB0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFOS83Q0U1MjJBNjE1MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERX Y0JoQ0VCUlRvdGhXVDgwdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSxP0SsTo+rYn5Da90QoG74DMLL/mVrQehWGVEZh/ZoopQmpVOxxXx EbyzKeaNKidC7JoKXyu6yKspZ3Unpg0rvaD0G/cMMEBotpEEJy4mo62PSwvdoUZJ PVGe4rG04zvTRgf/41Ei1Hwh5UJSKDBvZ9eHe56vafTa8aeidBDvk+nzR57sF37e Mjt5F6TFG2RZBUgeO9lAD8FYdRsHhge6a0vhVQNOxpkZDjJWPI+XAjot0TWJJmfP 7KMeVGbpN2qsrg2kJJ8+ha+QsbO1KxlRnRw9tkStfQiVH5HgR3OwgHcFrmyFJavd PjUQx79sW6sfIbPI1MBt37KJe6ZYjDk4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:55:47 2025 by rpki-client