$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: B58k1PXZG8LYpLrrp24rGMh7fs+57Z1SRrnDH8rL6Cw= Subject key identifier: 26:82:AE:6E:8E:32:8B:82:4D:4B:74:7B:7B:30:A3:02:30:CE:07:E8 Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 3E Signing time: Fri 25 Apr 2025 06:27:43 +0000 Manifest this update: Fri 25 Apr 2025 06:27:43 +0000 Manifest next update: Fri 02 May 2025 06:27:43 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: BkS2U7aywoat2/zPbjYxdD423cwz6zsTC/XQ1EWcr3g=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Apr 25 06:27:43 2025 GMT Not After : May 2 06:27:43 2025 GMT Subject: CN=680b2b5f-4083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:4c:d8:5a:b7:4b:a7:80:65:2f:ba:38:7d: 1a:54:61:a8:09:9d:d2:b4:f2:ef:84:46:90:83:64: f5:a7:a7:ac:45:bd:fc:a5:85:43:50:57:86:30:a7: bf:93:4f:e7:36:0d:3d:99:be:84:67:97:a2:c1:7f: 01:7c:68:3f:f1:8f:57:51:25:34:eb:7b:d9:de:1f: 35:16:5d:53:61:60:ac:64:c4:ba:18:6b:ad:02:49: 7b:29:99:f9:7d:6a:1f:b5:7a:6d:fc:bf:1b:a2:2b: 8e:a2:76:48:f9:e3:b1:34:7a:45:63:0f:dc:e0:a2: 63:a8:32:de:68:e6:c9:f6:76:f5:2e:08:fd:7f:4b: e7:91:c7:0b:06:50:26:93:48:48:89:3d:eb:22:9c: 55:61:f0:bd:81:ab:97:97:d8:67:a0:05:1d:50:d9: 8b:be:8d:28:b8:a9:ca:64:fd:29:5c:23:bf:e4:ef: 94:95:21:f9:5c:df:6f:77:e2:fb:17:68:be:67:37: 3e:05:d8:dd:67:86:2d:ee:60:0e:06:02:fa:02:f8: 5d:ee:32:f4:3a:99:0b:87:fa:a4:99:0a:3d:7a:e8: db:07:ba:3b:ab:1c:d8:e5:93:07:53:67:f7:9f:ca: 1a:aa:cf:29:2b:c5:b5:6f:1f:da:97:42:76:a9:37: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:82:AE:6E:8E:32:8B:82:4D:4B:74:7B:7B:30:A3:02:30:CE:07:E8 X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:38:a6:75:73:f5:0c:b0:0c:a7:4f:d7:b2:ba:38:4a:65:c6: ef:ef:cf:78:68:0a:a0:30:89:6d:2c:c1:4b:12:d5:bb:df:c0: c0:68:e5:b3:8a:17:a7:e2:e4:5b:4d:24:18:88:ce:90:5a:34: 05:ab:5f:d3:9f:f6:27:9f:e5:c0:25:4d:ee:f8:34:c3:7c:71: 3a:7f:d6:2f:70:31:1b:38:23:cf:72:34:a9:cc:c5:80:d7:5f: a4:a4:11:56:bf:51:97:7b:02:47:1b:e0:02:6c:45:a8:82:6b: 12:e3:5a:46:2b:b8:da:82:a3:1c:25:97:99:79:fe:ef:e3:d8: 20:cb:25:b5:1e:06:d0:6f:24:4b:a7:e1:b3:b0:07:28:4a:21: da:01:c3:e4:05:bf:d0:52:66:98:e7:3e:7f:34:cf:15:6a:db: f5:87:9c:f9:97:81:4f:3b:aa:67:4c:8e:f9:f3:32:67:d1:80: 9b:61:ed:6e:07:83:96:da:60:c4:48:0a:f2:ff:8b:94:dc:8f: 9a:b8:63:c9:66:a2:bf:fb:ef:45:19:e6:66:ff:1e:50:a1:af: ea:e2:75:c1:2c:c1:ce:a8:fb:23:c7:48:a9:dd:a3:dc:f3:2c: fe:df:99:b3:82:11:15:46:2c:6b:ac:ac:41:6f:90:d4:9c:9e: 53:98:71:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQzFCNzY2REEyOUVEMjkzRERGQTVDQ0VCMEFFNDI5NzQ1 NDQ0RDYxNTAeFw0yNTA0MjUwNjI3NDNaFw0yNTA1MDIwNjI3NDNaMBgxFjAUBgNV BAMTDTY4MGIyYjVmLTQwODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP7kzYWrdLp4BlL7o4fRpUYagJndK08u+ERpCDZPWnp6xFvfylhUNQV4Ywp7+T T+c2DT2ZvoRnl6LBfwF8aD/xj1dRJTTre9neHzUWXVNhYKxkxLoYa60CSXspmfl9 ah+1em38vxuiK46idkj547E0ekVjD9zgomOoMt5o5sn2dvUuCP1/S+eRxwsGUCaT SEiJPesinFVh8L2Bq5eX2GegBR1Q2Yu+jSi4qcpk/SlcI7/k75SVIflc32934vsX aL5nNz4F2N1nhi3uYA4GAvoC+F3uMvQ6mQuH+qSZCj166NsHujurHNjlkwdTZ/ef yhqqzykrxbVvH9qXQnapN1XnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJoKubo4y i4JNS3R7ezCjAjDOB+gwHwYDVR0jBBgwFoAUwbdm2intKT3fpczrCuQpdFRE1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzFBRjdERjZBQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2JkbTJpbnRLVDNmcGN6ckN1UXBkRlJFMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzFBRjdERjZBQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1Qz ZnBjenJDdVFwZEZSRTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMs4pnVz9QywDKdP17K6OEplxu/vz3hoCqAwiW0swUsS1bvfwMBo5bOK F6fi5FtNJBiIzpBaNAWrX9Of9ief5cAlTe74NMN8cTp/1i9wMRs4I89yNKnMxYDX X6SkEVa/UZd7Akcb4AJsRaiCaxLjWkYruNqCoxwll5l5/u/j2CDLJbUeBtBvJEun 4bOwByhKIdoBw+QFv9BSZpjnPn80zxVq2/WHnPmXgU87qmdMjvnzMmfRgJth7W4H g5baYMRICvL/i5Tcj5q4Y8lmor/770UZ5mb/HlChr+ridcEswc6o+yPHSKndo9zz LP7fmbOCERVGLGusrEFvkNScnlOYcRo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:39 2025 by rpki-client