$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft File: WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json) Hash identifier: JgjRm+zbFlp5QKFETndHPRNNaPsB4/dRQks1b9xAq94= Subject key identifier: 35:28:57:B4:1E:D5:7B:6E:00:64:39:E0:A2:95:53:CB:04:12:A4:4D Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB Certificate issuer: /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft Manifest number: 0446 Signing time: Fri 25 Apr 2025 00:00:58 +0000 Manifest this update: Fri 25 Apr 2025 00:00:58 +0000 Manifest next update: Fri 02 May 2025 00:00:58 +0000 Files and hashes: 1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: bfPtwOzWAvUGupk1Z4ABqZHa/KD3xcSZUs+JRt5aDbA=) 2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: ngVDpB9EeVUj1wtwuXlGNZD63XjFCao61CO9K4ARPTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Validity Not Before: Apr 25 00:00:58 2025 GMT Not After : May 2 00:00:58 2025 GMT Subject: CN=680ad0ba-b43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:92:32:0f:aa:20:c0:a6:64:49:10:48:2c: 76:92:56:f2:26:a0:8a:0d:44:a4:a7:f1:5b:1a:4d: 3d:e9:2a:05:db:12:a7:86:c1:37:14:83:78:37:78: 06:b1:bc:2e:cf:3f:23:b7:d7:7e:71:2d:87:ef:f9: 3d:8d:85:1e:57:f1:ad:79:ad:47:d6:45:bb:e7:16: d6:41:69:e0:d9:c4:2c:19:36:5b:49:36:6f:28:66: 56:7a:18:9c:c2:9e:bf:09:e7:75:0a:c9:8f:85:01: c2:f4:95:a9:cb:1c:6b:18:c4:c7:85:25:09:95:94: 35:4e:4e:a3:33:ab:8a:dd:26:27:45:1a:fa:02:ba: 2b:57:9a:26:db:87:8f:ca:9b:be:75:94:40:09:60: 6b:72:b7:4d:58:6f:37:8e:44:48:75:01:87:34:51: 0b:96:3e:3c:ff:da:e3:54:e3:a7:bc:bc:85:51:f9: b0:f0:b4:11:d6:a8:3c:4a:44:26:b0:e6:a3:75:50: 40:f2:55:f5:d0:46:f7:43:65:24:de:d1:66:30:5d: d9:ed:8f:47:5e:07:dc:1b:30:4d:32:81:63:0b:2f: 99:35:5f:a0:49:4c:75:a2:de:44:4f:bf:7f:8b:13: 00:74:b3:65:b3:42:11:61:c5:86:5b:62:84:d6:1f: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:28:57:B4:1E:D5:7B:6E:00:64:39:E0:A2:95:53:CB:04:12:A4:4D X509v3 Authority Key Identifier: keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:72:09:a2:9d:54:66:f6:8b:6d:12:5f:2f:82:79:33:38:54: aa:ed:53:5d:82:0c:54:12:71:af:8c:0b:23:f0:44:b4:2e:d9: 53:e2:60:51:e8:7f:af:a5:f1:c5:19:5b:f0:3f:b6:34:ff:eb: aa:03:8b:6d:f9:58:d1:a4:f3:ab:e9:dd:cb:ad:e7:78:bb:8c: fa:f0:be:20:b0:ce:58:d4:72:79:d5:59:2c:12:73:94:7c:aa: af:61:b1:10:4e:32:71:c5:89:96:f3:cc:04:9c:48:9e:99:bf: 82:ce:21:01:f0:67:c8:4a:30:c7:c9:85:7c:6e:d8:24:10:0a: 60:9a:de:c7:53:18:04:d4:dd:ed:34:3f:fa:93:7c:a7:31:b3: 85:01:f7:2f:b0:90:bc:f8:38:76:ff:99:27:d9:c1:24:81:03: 58:85:c9:4c:64:57:c2:a3:be:69:20:bd:1b:cf:63:09:c6:e9: f9:62:9b:f9:5b:1a:c3:bb:19:05:47:af:60:f9:96:40:6a:71: 0f:1c:81:04:bb:24:9e:21:40:88:0a:38:9d:71:b5:e1:68:87: b5:2b:fc:b3:98:76:47:e4:9f:2a:53:52:85:37:9c:2d:58:36: f8:37:54:4b:89:2a:b1:a2:77:9d:78:6c:0f:0f:b0:d7:8b:d1: 9d:5f:9c:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3MUExMTAvBgNVBAUTKDU4NUREQzRGRDlGOUUzMTQwMDVGMzcxOThGRDFFMjJF NjgyNDlERUIwHhcNMjUwNDI1MDAwMDU4WhcNMjUwNTAyMDAwMDU4WjAYMRYwFAYD VQQDEw02ODBhZDBiYS1iNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfuSMg+qIMCmZEkQSCx2klbyJqCKDUSkp/FbGk096SoF2xKnhsE3FIN4N3gG sbwuzz8jt9d+cS2H7/k9jYUeV/Gtea1H1kW75xbWQWng2cQsGTZbSTZvKGZWehic wp6/Ced1CsmPhQHC9JWpyxxrGMTHhSUJlZQ1Tk6jM6uK3SYnRRr6ArorV5om24eP ypu+dZRACWBrcrdNWG83jkRIdQGHNFELlj48/9rjVOOnvLyFUfmw8LQR1qg8SkQm sOajdVBA8lX10Eb3Q2Uk3tFmMF3Z7Y9HXgfcGzBNMoFjCy+ZNV+gSUx1ot5ET79/ ixMAdLNls0IRYcWGW2KE1h81owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUoV7Qe 1XtuAGQ54KKVU8sEEqRNMB8GA1UdIwQYMBaAFFhd3E/Z+eMUAF83GY/R4i5oJJ3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODcxQS8wNUJEMEYzMDUy NDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4UUFYemNaajlIaUxtZ2tu ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGM2NUOW41NHhRQVh6Y1pqOUhpTG1na25lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODcxQS8wNUJEMEYzMDUyNDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4 UUFYemNaajlIaUxtZ2tuZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxcgminVRm9ottEl8vgnkzOFSq7VNdggxUEnGvjAsj8ES0LtlT4mBR 6H+vpfHFGVvwP7Y0/+uqA4tt+VjRpPOr6d3Lred4u4z68L4gsM5Y1HJ51VksEnOU fKqvYbEQTjJxxYmW88wEnEiemb+CziEB8GfISjDHyYV8btgkEApgmt7HUxgE1N3t ND/6k3ynMbOFAfcvsJC8+Dh2/5kn2cEkgQNYhclMZFfCo75pIL0bz2MJxun5Ypv5 WxrDuxkFR69g+ZZAanEPHIEEuySeIUCICjidcbXhaIe1K/yzmHZH5J8qU1KFN5wt WDb4N1RLiSqxonedeGwPD7DXi9GdX5yZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:19 2025 by rpki-client