$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: ceiOaQ3P8qrvdmJ44/1B8A7KYHURNOLWP63MQ8tppXk= Subject key identifier: 96:AE:E3:FA:BD:2D:C5:B3:D5:E4:E3:02:69:B5:B3:C1:5D:0F:84:44 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 0590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 0584 Signing time: Thu 24 Apr 2025 23:03:44 +0000 Manifest this update: Thu 24 Apr 2025 23:03:43 +0000 Manifest next update: Thu 01 May 2025 23:03:43 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: Kzsxj9H/FIP7XeJ5P1VvtcEUlADL7Et7RC4TCAMeOr0=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: KjSC+EBY/UPIqhkSiTjfbrlSvd1G9oxKPCBMNEBLTuc=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Apr 24 23:03:43 2025 GMT Not After : May 1 23:03:43 2025 GMT Subject: CN=680ac34f-7835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:5e:1c:87:75:fb:ba:c1:aa:d8:ea:d5:87: 77:56:1d:16:0c:4a:15:9a:ff:ad:73:ab:08:f0:18: 2d:a3:18:0c:24:22:f6:07:ec:86:aa:a3:0a:21:4c: b0:63:14:57:44:24:3a:b4:9d:73:83:93:6d:33:01: f2:22:56:50:25:df:65:29:ef:3e:ce:1a:38:7e:a9: 4c:30:a0:d9:8c:94:b1:ad:08:09:5f:b5:2a:c3:2c: 84:e5:05:43:50:9d:de:41:d3:ac:64:38:5d:88:69: 34:8e:c4:ce:7a:d7:22:5b:13:11:3a:e7:8e:7d:65: a1:2d:a5:9f:29:53:d8:6e:29:46:cf:a6:55:99:28: 32:17:09:9f:b9:06:90:80:db:c6:96:db:a7:b3:2e: a8:f4:0e:36:68:6d:65:16:5a:46:a6:a8:25:f2:c0: 85:82:0c:fb:45:cc:f3:ab:e2:24:9b:81:38:d0:53: fc:f7:53:11:f4:6c:52:b9:7e:8a:30:ca:6d:15:59: 29:62:bf:f5:9e:25:c5:de:10:82:16:03:c1:04:c2: ca:f5:d7:18:ca:0c:84:f0:9f:81:d4:ad:3e:bf:e6: 57:4c:8f:47:b8:75:ef:69:4d:14:ff:8d:74:4d:9d: e4:cc:ec:c0:52:9d:3a:66:03:f2:f1:2f:d0:9d:26: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AE:E3:FA:BD:2D:C5:B3:D5:E4:E3:02:69:B5:B3:C1:5D:0F:84:44 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:3f:4d:e7:d7:93:63:00:9e:e7:81:cc:18:48:04:9e:b9:e3: 01:a3:1f:3e:bb:a9:2c:bd:91:0a:aa:9c:f7:cc:c9:75:1f:e5: 56:b2:79:f6:94:c7:84:f2:1b:af:37:f8:e5:8a:b7:29:89:c5: be:fa:c5:6c:80:ee:06:a4:0c:f3:9c:b5:92:62:e8:7f:e2:25: a6:c3:d4:97:40:bc:e0:b5:16:bb:22:9b:bc:90:88:96:f4:fd: 28:da:d7:3b:1a:8d:76:a1:8a:53:36:d8:ee:04:f8:3e:0b:59: a3:0a:ba:91:b1:63:03:c8:27:da:dd:9a:0f:ff:e9:09:57:7a: 70:d4:4c:a7:42:11:fd:f0:7d:fa:75:6c:fc:57:31:68:43:28: 63:5a:65:66:11:c4:f1:5d:e6:9e:c8:32:03:95:8c:7b:f4:63: 0b:bd:2b:43:54:2c:6b:b8:04:61:63:76:55:cb:32:22:61:37: 50:74:94:40:8e:e3:90:9a:92:ce:e1:ff:06:18:6b:c9:43:6c: 6d:c8:a1:6f:16:a9:47:bc:5d:c2:c2:20:00:b5:60:7e:ab:0d: be:a4:34:f1:89:59:47:0b:d2:b5:1e:2c:88:95:93:88:5f:a8: c2:1d:13:c2:bd:d5:19:aa:27:c1:52:bb:6a:99:63:0f:72:f5: 8c:e5:32:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwNDI0MjMwMzQzWhcNMjUwNTAxMjMwMzQzWjAYMRYwFAYD VQQDEw02ODBhYzM0Zi03ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4ZeHId1+7rBqtjq1Yd3Vh0WDEoVmv+tc6sI8BgtoxgMJCL2B+yGqqMKIUyw YxRXRCQ6tJ1zg5NtMwHyIlZQJd9lKe8+zho4fqlMMKDZjJSxrQgJX7UqwyyE5QVD UJ3eQdOsZDhdiGk0jsTOetciWxMROueOfWWhLaWfKVPYbilGz6ZVmSgyFwmfuQaQ gNvGltunsy6o9A42aG1lFlpGpqgl8sCFggz7Rczzq+Ikm4E40FP891MR9GxSuX6K MMptFVkpYr/1niXF3hCCFgPBBMLK9dcYygyE8J+B1K0+v+ZXTI9HuHXvaU0U/410 TZ3kzOzAUp06ZgPy8S/QnSaw7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJau4/q9 LcWz1eTjAmm1s8FdD4REMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXP03n15NjAJ7ngcwYSASeueMBox8+u6ksvZEKqpz3zMl1H+VWsnn2 lMeE8huvN/jlircpicW++sVsgO4GpAzznLWSYuh/4iWmw9SXQLzgtRa7Ipu8kIiW 9P0o2tc7Go12oYpTNtjuBPg+C1mjCrqRsWMDyCfa3ZoP/+kJV3pw1EynQhH98H36 dWz8VzFoQyhjWmVmEcTxXeaeyDIDlYx79GMLvStDVCxruARhY3ZVyzIiYTdQdJRA juOQmpLO4f8GGGvJQ2xtyKFvFqlHvF3CwiAAtWB+qw2+pDTxiVlHC9K1HiyIlZOI X6jCHRPCvdUZqifBUrtqmWMPcvWM5TIu -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:48 2025 by rpki-client