$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft File: Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft (raw, json) Hash identifier: j57CjGb1yyNMWSWOygZdpbaCp8IIvSy9hpW1YWhKPRU= Subject key identifier: 75:70:0B:0E:07:64:28:34:A0:15:A8:4F:23:32:B9:08:A2:98:FA:4E Authority key identifier: 5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73 Certificate issuer: /CN=A913B6D5/serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft Manifest number: 0672 Signing time: Thu 24 Apr 2025 22:06:48 +0000 Manifest this update: Thu 24 Apr 2025 22:06:47 +0000 Manifest next update: Thu 01 May 2025 22:06:47 +0000 Files and hashes: 1: Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl (hash: NAR3YwJ0ZOPoPoF03FYdLwQXn3CizNgmz5gIwmqReiE=) 2: E2B81154741B11EB83EC7A62C4F9AE02.roa (hash: SfDbv1ydo+vznwdchu/VzafMX/NegNN92VChKBq/R3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B6D5, serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73 Validity Not Before: Apr 24 22:06:47 2025 GMT Not After : May 1 22:06:47 2025 GMT Subject: CN=680ab5f8-eea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5c:7a:84:2b:56:c2:71:c9:49:fa:bd:43:2f: 25:a5:6b:ae:c2:1d:b8:52:14:97:0d:7f:9e:a1:43: be:c3:da:1f:d5:f5:bc:7d:5d:b6:b7:24:92:b4:4b: 74:24:1f:6b:c4:98:28:b4:ec:b0:9f:a1:28:e7:d3: 00:ae:30:46:96:a2:3f:33:c6:02:54:2c:9d:93:69: ca:7a:3f:fa:28:d5:b8:51:52:1f:58:11:d1:43:0c: a1:5b:e0:69:bb:7e:42:9f:18:c9:d2:1e:3a:e9:cd: 63:9f:d0:66:5e:ce:b2:ff:31:1f:2f:f0:bb:77:c5: bf:ef:39:b8:85:dc:aa:72:3b:1e:c2:93:d3:a2:71: 3a:3b:70:51:e2:38:69:36:c8:ad:a4:20:0a:d9:65: 64:d8:18:d5:58:62:27:42:4f:c7:87:10:36:ca:31: cf:dd:ce:c7:83:6c:bb:76:94:db:c3:24:08:59:e7: ac:21:37:0a:11:34:c6:4d:06:a1:6b:0d:a6:10:a5: 8d:a7:0d:e9:a7:53:d0:fe:a5:02:e6:54:19:49:e7: 94:fc:b8:23:bf:aa:a1:8d:98:62:bd:10:fe:fa:16: b6:a7:9b:15:f4:4f:55:e0:75:87:1c:95:e2:5f:36: 6b:19:69:37:d8:13:ae:2f:fa:48:fe:ba:f3:0d:79: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:70:0B:0E:07:64:28:34:A0:15:A8:4F:23:32:B9:08:A2:98:FA:4E X509v3 Authority Key Identifier: keyid:5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b2:3f:dd:da:29:64:da:c6:9a:9a:39:e3:21:7f:ab:f6:70: c2:ab:01:84:da:d4:27:56:83:04:8e:42:aa:4a:73:e5:e1:f4: 01:3d:44:a7:4d:7e:98:8f:00:e1:e9:f2:af:e8:2a:99:00:80: 2b:b1:56:12:c4:98:5b:51:0c:cf:12:d5:b0:7f:d6:59:7a:53: 3a:73:f3:e2:db:75:af:28:c3:3a:4d:c9:bf:dd:90:b5:b4:79: 80:a6:09:25:ed:b9:bf:49:2a:82:3c:94:ac:f4:1d:57:a8:34: 51:8a:16:b7:d9:45:29:cb:06:0c:e1:0f:bb:ff:0d:3b:1e:9f: 27:b8:c7:50:46:12:9c:fa:42:97:0a:07:84:b8:c0:b2:23:67: 44:94:e6:48:4d:48:b0:30:29:38:ac:a2:43:da:15:a0:1c:58: 78:4e:72:fd:58:8e:ab:65:7f:b0:8e:00:e3:cb:c1:d0:20:f3: e0:2c:3c:79:b4:4f:6b:6c:da:9e:86:88:ed:b5:85:0c:d4:d5: 49:f2:9a:fe:ed:b7:fd:39:0f:3c:d6:69:a1:cc:d4:ad:08:21: b6:79:2a:7d:25:a5:ee:e7:c2:8a:68:33:da:8e:79:7f:5e:48: d9:a9:80:4b:73:af:72:ee:8e:9c:7d:d7:6b:ba:7c:8b:84:75: 4f:11:7b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2RDUxMTAvBgNVBAUTKDVBQzk2NUU1MENGRUJCNTkxNDc5MzdEQzM0RDgxRkQz MDJCNkJBNzMwHhcNMjUwNDI0MjIwNjQ3WhcNMjUwNTAxMjIwNjQ3WjAYMRYwFAYD VQQDEw02ODBhYjVmOC1lZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8lx6hCtWwnHJSfq9Qy8lpWuuwh24UhSXDX+eoUO+w9of1fW8fV22tySStEt0 JB9rxJgotOywn6Eo59MArjBGlqI/M8YCVCydk2nKej/6KNW4UVIfWBHRQwyhW+Bp u35CnxjJ0h466c1jn9BmXs6y/zEfL/C7d8W/7zm4hdyqcjsewpPTonE6O3BR4jhp NsitpCAK2WVk2BjVWGInQk/HhxA2yjHP3c7Hg2y7dpTbwyQIWeesITcKETTGTQah aw2mEKWNpw3pp1PQ/qUC5lQZSeeU/Lgjv6qhjZhivRD++ha2p5sV9E9V4HWHHJXi XzZrGWk32BOuL/pI/rrzDXkaLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVwCw4H ZCg0oBWoTyMyuQiimPpOMB8GA1UdIwQYMBaAFFrJZeUM/rtZFHk33DTYH9MCtrpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjZENS9CQzRCRkI3Njc0 MUExMUVCQjg5NzRFNjJDNEY5QUUwMi9Xc2xsNVF6LXUxa1VlVGZjTk5nZjB3SzJ1 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzbGw1UXotdTFrVWVUZmNOTmdmMHdLMnVuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjZENS9CQzRCRkI3Njc0MUExMUVCQjg5NzRFNjJDNEY5QUUwMi9Xc2xsNVF6LXUx a1VlVGZjTk5nZjB3SzJ1bk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvsj/d2ilk2saamjnjIX+r9nDCqwGE2tQnVoMEjkKqSnPl4fQBPUSn TX6YjwDh6fKv6CqZAIArsVYSxJhbUQzPEtWwf9ZZelM6c/Pi23WvKMM6Tcm/3ZC1 tHmApgkl7bm/SSqCPJSs9B1XqDRRiha32UUpywYM4Q+7/w07Hp8nuMdQRhKc+kKX CgeEuMCyI2dElOZITUiwMCk4rKJD2hWgHFh4TnL9WI6rZX+wjgDjy8HQIPPgLDx5 tE9rbNqehojttYUM1NVJ8pr+7bf9OQ881mmhzNStCCG2eSp9JaXu58KKaDPajnl/ XkjZqYBLc69y7o6cfddrunyLhHVPEXvF -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:01 2025 by rpki-client