$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft File: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json) Hash identifier: MYFSk9YmMqoMxcWIl9kcStmtZlPaGuU3CXSrFiwC52U= Subject key identifier: AB:03:A1:24:D8:0B:F6:FE:52:1D:F7:59:1D:FD:FF:AC:1C:B2:85:2E Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B Certificate issuer: /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft Manifest number: 05BB Signing time: Thu 24 Apr 2025 22:56:48 +0000 Manifest this update: Thu 24 Apr 2025 22:56:48 +0000 Manifest next update: Thu 01 May 2025 22:56:48 +0000 Files and hashes: 1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: AI+edUOm064xlouqNvHMbxky4PtX6zS6VGPnQRM/RxQ=) 2: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: Ta4xFyi9glY4xr2WHsXG6St6wnwO3U134/DYeOjCkmc=) 3: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (hash: vOnw1zBAg2FFcl8sBOmkESgReB8BHoF4g3tKhlo/818=) 4: 101150200BF211ECB242D930C4F9AE02.roa (hash: Za8+PUGR68jxs9Nmg2MCsdR8AdTWP/IWaW3QjpYveqc=) 5: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: YdIu03zU60AoY5wUNSEkgrpdE4J72FH7Era61OXixIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Validity Not Before: Apr 24 22:56:48 2025 GMT Not After : May 1 22:56:48 2025 GMT Subject: CN=680ac1b0-da84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:25:c3:de:00:72:75:1d:db:40:05:e9:5e: 27:b3:c8:f2:f2:19:cc:c4:38:9d:6e:3d:26:16:53: 4b:55:f8:3f:ca:4d:a6:be:fc:e3:97:85:46:0d:95: 30:3c:4a:3b:18:95:75:ea:c8:ec:33:73:06:40:0c: dc:79:eb:6e:aa:e7:aa:33:16:43:71:2a:41:ec:c6: f8:ac:d2:d8:32:42:be:89:29:9f:5b:57:d5:e2:14: ca:2f:ec:9d:f1:22:e8:9a:51:44:94:af:74:4e:b8: af:1d:8d:74:cf:2c:a4:0a:91:05:a5:62:d8:04:5a: 35:52:ff:ce:91:1c:74:2c:05:f5:57:d4:ab:4a:d4: a1:6d:44:b7:39:4b:ba:16:52:03:fa:49:87:ab:57: 18:e6:ce:7c:90:ca:f9:cc:bc:0f:1f:4a:e1:8c:ba: 30:44:32:88:4f:47:49:04:a0:33:ff:93:2c:9a:16: 65:a4:ca:e6:0a:44:0e:94:7f:32:57:24:16:b8:e3: 04:80:09:a0:95:02:c4:86:fc:d3:19:ac:a6:f2:85: 72:4c:fe:19:40:c6:14:51:fb:03:d6:12:9e:a5:ca: 3e:68:32:d5:1f:4d:33:31:56:e6:aa:85:4c:e8:ca: c9:e3:97:9e:a0:97:80:51:64:d6:75:ed:f3:11:83: 05:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:03:A1:24:D8:0B:F6:FE:52:1D:F7:59:1D:FD:FF:AC:1C:B2:85:2E X509v3 Authority Key Identifier: keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d4:b7:d5:f2:e1:88:55:6d:8d:fe:c4:10:16:59:18:5e:a9: 2f:4f:2b:76:4e:8b:e2:85:75:36:4a:e8:4a:29:cf:f0:59:b8: 9f:13:c8:e5:2e:37:17:84:dd:f2:d4:52:4a:98:77:37:e8:5b: 4c:14:cf:83:8e:41:15:d7:b7:15:28:8a:23:d4:76:01:94:2c: 4f:18:d7:da:d7:9a:35:92:96:74:e0:c1:ec:9c:50:e4:c9:23: 26:0a:eb:40:1f:79:81:9e:7f:ac:d9:b1:25:d4:1a:82:b2:a4: a5:c3:64:91:c7:b7:3b:c4:c5:57:90:95:49:5d:2a:2e:01:95: e3:79:6d:23:80:c3:d3:c8:c3:d8:7b:59:3e:f6:87:23:9b:8d: fd:15:af:01:26:58:b3:d1:2c:35:f5:2e:ad:1a:b5:7a:c9:aa: 36:c6:51:36:b0:68:dc:a5:38:a2:54:f8:9d:5c:73:8d:3c:a7: 0d:72:d1:a5:a6:7e:f6:0f:b3:a7:f6:2d:4a:3b:03:cc:d0:43: 54:16:08:7f:7f:d1:dd:3d:2e:29:44:97:10:47:8f:5d:24:55: 92:2f:a4:48:1f:e2:14:7c:f7:19:c0:da:f2:cc:59:9e:5b:47: 68:b2:58:9d:7e:7e:3e:00:45:aa:f1:03:6a:cc:79:9b:05:06: 31:88:d7:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MkMxMTAvBgNVBAUTKDU4QjRERjhFNDc1N0NBRkRFNTQ2MkY0QTFBRjg3MEZF MjE0NERDNUIwHhcNMjUwNDI0MjI1NjQ4WhcNMjUwNTAxMjI1NjQ4WjAYMRYwFAYD VQQDEw02ODBhYzFiMC1kYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoMlw94AcnUd20AF6V4ns8jy8hnMxDidbj0mFlNLVfg/yk2mvvzjl4VGDZUw PEo7GJV16sjsM3MGQAzceetuqueqMxZDcSpB7Mb4rNLYMkK+iSmfW1fV4hTKL+yd 8SLomlFElK90TrivHY10zyykCpEFpWLYBFo1Uv/OkRx0LAX1V9SrStShbUS3OUu6 FlID+kmHq1cY5s58kMr5zLwPH0rhjLowRDKIT0dJBKAz/5MsmhZlpMrmCkQOlH8y VyQWuOMEgAmglQLEhvzTGaym8oVyTP4ZQMYUUfsD1hKepco+aDLVH00zMVbmqoVM 6MrJ45eeoJeAUWTWde3zEYMFiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsDoSTY C/b+Uh33WR39/6wcsoUuMB8GA1UdIwQYMBaAFFi0345HV8r95UYvShr4cP4hRNxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzcyQy84RUM2MTQwRUMz QUExMUVCODcwRUE5MUNDNEY5QUUwMi9XTFRmamtkWHl2M2xSaTlLR3Zod19pRkUz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dMVGZqa2RYeXYzbFJpOUtHdmh3X2lGRTNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzcyQy84RUM2MTQwRUMzQUExMUVCODcwRUE5MUNDNEY5QUUwMi9XTFRmamtkWHl2 M2xSaTlLR3Zod19pRkUzRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH1LfV8uGIVW2N/sQQFlkYXqkvTyt2TovihXU2SuhKKc/wWbifE8jl LjcXhN3y1FJKmHc36FtMFM+DjkEV17cVKIoj1HYBlCxPGNfa15o1kpZ04MHsnFDk ySMmCutAH3mBnn+s2bEl1BqCsqSlw2SRx7c7xMVXkJVJXSouAZXjeW0jgMPTyMPY e1k+9ocjm439Fa8BJliz0Sw19S6tGrV6yao2xlE2sGjcpTiiVPidXHONPKcNctGl pn72D7On9i1KOwPM0ENUFgh/f9HdPS4pRJcQR49dJFWSL6RIH+IUfPcZwNryzFme W0doslidfn4+AEWq8QNqzHmbBQYxiNeY -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:16 2025 by rpki-client