$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: Wl7s7rrRbuThHDaEezgWMQ26Fc2bwArhY4KznZdt5yM= Subject key identifier: 3E:6D:9A:20:9D:35:9A:FF:8C:10:DC:7B:63:45:ED:D4:97:A0:87:D9 Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: FC Signing time: Fri 25 Apr 2025 04:20:05 +0000 Manifest this update: Fri 25 Apr 2025 04:20:04 +0000 Manifest next update: Fri 02 May 2025 04:20:04 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: C2Qw/KiNvIGL6umyWIVDTOGV/2x8nB5xOFWasKp9O6c=) 2: 700C51B61F1011F0904C2080C4F9AE02.roa (hash: r2t2I1rYNWTM/4BwGa+crAaos7NAZ6BNTYQ2KhcCpfk=) 3: EAEFF196E3C811EE8818A409C4F9AE02.roa (hash: ezjLKJRXRac8xcRH9uTO+dGIc1KG4Hx+liqGMCZmuFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: Apr 25 04:20:04 2025 GMT Not After : May 2 04:20:04 2025 GMT Subject: CN=680b0d75-7bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:36:21:be:52:1b:66:87:38:a7:c9:90:e8: ce:21:0c:ea:be:2b:6c:be:7c:af:06:90:01:33:b3: 7f:85:71:0e:65:ca:06:02:ee:f1:cf:94:77:96:5f: d5:9e:db:24:a0:b3:0b:c1:d8:db:64:14:ec:d6:d3: 90:73:5d:45:23:e1:b9:5e:4b:97:c0:17:8d:ba:36: b3:e1:e5:f4:ad:3e:5a:06:92:5a:c0:05:ba:1b:42: 7d:ca:be:9a:c1:cc:a3:69:19:0a:38:82:e9:46:89: 13:0f:b0:cc:84:f5:40:ef:52:06:ec:cd:a0:59:f6: 03:0b:a0:28:ab:19:12:73:90:4e:22:fe:c3:17:04: 1d:0b:89:7b:6b:49:50:2f:38:7b:1f:b2:44:c1:42: 69:6f:75:37:2f:75:f9:e7:e4:0f:58:de:53:94:3f: e5:8d:59:d8:f3:8c:77:71:2a:e0:e3:ae:c1:39:d9: 82:3d:2e:1a:92:e9:d4:82:ec:75:d3:c5:80:43:8c: 2f:4a:d0:9f:c1:9c:78:20:ed:64:38:07:b2:9d:0c: 08:fb:d0:92:12:77:99:c3:6a:78:18:e6:d0:3d:a4: 9e:1e:35:e0:f0:09:a3:81:69:a3:c0:9d:79:bb:a8: 3b:69:a0:1b:40:c5:7c:4b:c6:c7:84:9f:f7:d3:96: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6D:9A:20:9D:35:9A:FF:8C:10:DC:7B:63:45:ED:D4:97:A0:87:D9 X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b0:30:51:03:00:fc:89:b0:7c:47:bc:4a:ca:4d:e2:6c:69: 37:b8:3b:c2:73:96:2e:bf:e1:17:6f:5d:65:1e:55:25:cf:fe: 81:1c:52:64:bd:e6:9d:8e:a3:be:19:ed:32:cd:f0:81:5d:8b: b6:e1:02:2b:f7:74:1e:55:a1:7d:af:06:86:4c:69:07:bd:b1: ba:8c:12:14:2d:47:49:41:8e:9c:5c:c5:c1:cb:76:34:e3:2a: db:5d:4d:1b:a8:e1:a3:17:f9:00:24:e0:fc:92:20:1a:c1:b8: 64:2c:1a:24:9a:ca:28:54:4e:dd:c6:b3:4a:fa:d9:3e:f1:1c: 2c:37:bd:3f:64:df:ac:48:e8:26:96:82:a3:d8:3e:cb:f1:95: 08:9d:3e:7a:70:61:6f:ab:9f:87:20:3d:85:9b:55:2b:41:cd: 23:15:2b:c6:1c:de:5d:f1:f6:6b:55:b9:19:39:cf:92:31:fb: 32:ce:09:5b:22:90:f3:1e:e4:43:45:0e:9b:d7:14:51:5a:17: 1a:20:42:b6:68:ef:f0:3b:96:8f:60:70:49:04:b4:4e:03:49: 88:ec:a6:5a:61:93:a9:55:f8:b1:72:4b:e8:96:55:06:95:17: 20:a8:8b:08:cf:f5:87:09:50:b4:ed:4e:14:29:ed:81:a0:f4: db:f0:be:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjUwNDI1MDQyMDA0WhcNMjUwNTAyMDQyMDA0WjAYMRYwFAYD VQQDEw02ODBiMGQ3NS03YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWY2Ib5SG2aHOKfJkOjOIQzqvitsvnyvBpABM7N/hXEOZcoGAu7xz5R3ll/V ntskoLMLwdjbZBTs1tOQc11FI+G5XkuXwBeNujaz4eX0rT5aBpJawAW6G0J9yr6a wcyjaRkKOILpRokTD7DMhPVA71IG7M2gWfYDC6AoqxkSc5BOIv7DFwQdC4l7a0lQ Lzh7H7JEwUJpb3U3L3X55+QPWN5TlD/ljVnY84x3cSrg467BOdmCPS4akunUgux1 08WAQ4wvStCfwZx4IO1kOAeynQwI+9CSEneZw2p4GObQPaSeHjXg8AmjgWmjwJ15 u6g7aaAbQMV8S8bHhJ/305be4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5tmiCd NZr/jBDce2NF7dSXoIfZMB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbsDBRAwD8ibB8R7xKyk3ibGk3uDvCc5Yuv+EXb11lHlUlz/6BHFJk veadjqO+Ge0yzfCBXYu24QIr93QeVaF9rwaGTGkHvbG6jBIULUdJQY6cXMXBy3Y0 4yrbXU0bqOGjF/kAJOD8kiAawbhkLBokmsooVE7dxrNK+tk+8RwsN70/ZN+sSOgm loKj2D7L8ZUInT56cGFvq5+HID2Fm1UrQc0jFSvGHN5d8fZrVbkZOc+SMfsyzglb IpDzHuRDRQ6b1xRRWhcaIEK2aO/wO5aPYHBJBLROA0mI7KZaYZOpVfixckvollUG lRcgqIsIz/WHCVC07U4UKe2BoPTb8L55 -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:06 2025 by rpki-client