$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json) Hash identifier: KzGlFAb+exYITkQKT6CWldGTGDrQsEHO5ckUQBSWiCI= Subject key identifier: 9E:23:74:79:F8:F9:86:03:38:AB:FD:D9:0B:75:65:35:DF:F8:61:0E Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft Manifest number: EF Signing time: Fri 25 Apr 2025 04:21:08 +0000 Manifest this update: Fri 25 Apr 2025 04:21:07 +0000 Manifest next update: Fri 02 May 2025 04:21:07 +0000 Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: 5yyaUIxIpFm+6UeBmTKqk2NCBZzpaUAINXwUGb7+Hsw=) 2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: CRo8pDS3QFFaAXTL+9qZM9K187fka63VWkrPnljCSFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Validity Not Before: Apr 25 04:21:07 2025 GMT Not After : May 2 04:21:07 2025 GMT Subject: CN=680b0db3-2fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:a1:08:76:1b:85:53:c8:0b:f5:6e:e8:1d: ca:26:df:a0:60:27:da:35:7c:ba:95:4d:4d:c5:e6: de:e3:8a:3b:64:60:ba:39:46:08:1e:f4:9f:96:48: 8a:bd:3a:35:11:8e:7a:89:08:e0:7b:12:bd:b4:42: 04:a4:2d:9f:72:b0:51:16:1e:15:bc:6a:96:e2:90: ab:aa:f1:2c:38:7f:cc:d8:ad:c8:77:e3:d0:71:ed: 01:ef:45:9d:cd:fb:e6:20:8e:3b:52:2d:70:f7:f8: 46:21:ba:90:bf:e0:90:28:2b:1f:44:26:be:de:c2: b1:00:b7:6f:c9:e1:df:17:45:0b:79:ec:70:37:21: 27:7f:70:0d:16:da:1e:98:b0:40:b8:57:e0:75:03: 89:01:90:7c:b5:dd:ab:16:43:a8:3d:42:c9:9b:c7: cc:2b:69:5a:90:e1:49:d0:e5:66:58:fa:2a:35:37: e3:e4:35:59:d5:21:0e:0e:cb:f6:f2:84:29:b8:1d: 75:7e:63:f9:0b:5a:f0:01:1b:7c:1f:38:dc:7d:34: 00:ce:69:18:c0:61:e7:ea:0c:b6:85:77:ca:4d:a5: f1:f2:9d:ce:79:cc:8a:3b:ae:f2:89:72:13:69:09: cb:c2:2b:10:54:d7:cb:56:2e:9a:49:a8:ac:41:d0: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:74:79:F8:F9:86:03:38:AB:FD:D9:0B:75:65:35:DF:F8:61:0E X509v3 Authority Key Identifier: keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c3:e4:5b:d0:79:cb:3d:0b:68:e2:d7:7d:75:0b:bc:cd:52: a5:02:ec:40:98:7c:19:6f:0a:9b:df:76:d1:43:1e:7d:87:d7: 6e:22:23:a8:7c:e8:4e:b0:73:a8:d4:c2:f2:06:55:57:d4:9f: 8c:e3:1d:fa:ac:85:9c:ce:53:81:9d:9a:e0:eb:99:67:64:29: f4:43:f5:a5:44:6c:ad:59:47:cb:f2:1f:fa:15:b9:d0:bc:f5: fb:b0:b6:36:09:12:a2:cb:b1:22:8e:5b:3e:a4:b7:bf:78:a1: 7b:10:30:ad:15:da:03:ab:09:97:7e:88:95:08:fc:58:38:94: f5:ca:45:2b:d7:d2:22:eb:19:20:59:6c:f6:ed:84:da:7c:23: a2:b9:41:b5:7d:2d:01:52:2b:28:09:b7:c3:b7:be:25:fb:50: 1e:45:6e:5d:a9:ac:bc:cb:2e:78:60:a9:91:0c:b9:3f:89:16: 19:6a:be:b8:ea:6e:2a:1f:a5:52:48:a7:69:7e:93:95:d1:f6: e1:82:e3:28:d6:b9:99:13:ef:92:a8:b3:a6:8e:78:4e:61:12: 16:0c:c5:15:23:8b:0b:d2:9d:0e:c0:2b:86:3a:29:c9:f3:1a: bb:b7:5b:28:d5:fb:36:18:5f:4d:e1:6d:51:3b:cd:05:12:e0: 38:a9:d2:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI4NUIxMTAvBgNVBAUTKEMyNzVGN0I4QUVDQzI5NDhENEI0QkE5OTlGQTlDMEUy QUQ1NEVBNTkwHhcNMjUwNDI1MDQyMTA3WhcNMjUwNTAyMDQyMTA3WjAYMRYwFAYD VQQDEw02ODBiMGRiMy0yZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbyhCHYbhVPIC/Vu6B3KJt+gYCfaNXy6lU1Nxebe44o7ZGC6OUYIHvSflkiK vTo1EY56iQjgexK9tEIEpC2fcrBRFh4VvGqW4pCrqvEsOH/M2K3Id+PQce0B70Wd zfvmII47Ui1w9/hGIbqQv+CQKCsfRCa+3sKxALdvyeHfF0ULeexwNyEnf3ANFtoe mLBAuFfgdQOJAZB8td2rFkOoPULJm8fMK2lakOFJ0OVmWPoqNTfj5DVZ1SEODsv2 8oQpuB11fmP5C1rwARt8HzjcfTQAzmkYwGHn6gy2hXfKTaXx8p3OecyKO67yiXIT aQnLwisQVNfLVi6aSaisQdC1SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4jdHn4 +YYDOKv92Qt1ZTXf+GEOMB8GA1UdIwQYMBaAFMJ197iuzClI1LS6mZ+pwOKtVOpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjg1Qi8yMDQ3RDc0NkI0 QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtValV0THFabjZuQTRxMVU2 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjg1Qi8yMDQ3RDc0NkI0QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtV alV0THFabjZuQTRxMVU2bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnw+Rb0HnLPQto4td9dQu8zVKlAuxAmHwZbwqb33bRQx59h9duIiOo fOhOsHOo1MLyBlVX1J+M4x36rIWczlOBnZrg65lnZCn0Q/WlRGytWUfL8h/6FbnQ vPX7sLY2CRKiy7Eijls+pLe/eKF7EDCtFdoDqwmXfoiVCPxYOJT1ykUr19Ii6xkg WWz27YTafCOiuUG1fS0BUisoCbfDt74l+1AeRW5dqay8yy54YKmRDLk/iRYZar64 6m4qH6VSSKdpfpOV0fbhguMo1rmZE++SqLOmjnhOYRIWDMUVI4sL0p0OwCuGOinJ 8xq7t1so1fs2GF9N4W1RO80FEuA4qdLj -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:16 2025 by rpki-client