$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft File: WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json) Hash identifier: UAJWAdVNe4fpQkBOx5iYMaP5BycZH+e7FzmEGAJl5w4= Subject key identifier: A2:1A:4B:6D:68:45:D6:1E:EA:0F:16:28:6A:41:2E:31:2A:46:0A:D2 Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 Certificate issuer: /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft Manifest number: 55 Signing time: Fri 25 Apr 2025 06:13:46 +0000 Manifest this update: Fri 25 Apr 2025 06:13:46 +0000 Manifest next update: Fri 02 May 2025 06:13:46 +0000 Files and hashes: 1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: y6bng9kLAm5m+5Xwdohj06uz4Ss6wZF05p2iqfz7+oc=) 2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: xTT8Qi7eRLtjGj1MJV5lOZ1nPkMc9OMOKapYnFfPneA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Validity Not Before: Apr 25 06:13:46 2025 GMT Not After : May 2 06:13:46 2025 GMT Subject: CN=680b281a-9fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:ea:d1:49:2c:86:07:0b:5c:39:f5:8f:3e: 77:39:3e:68:de:b0:5e:60:0f:36:0d:f3:01:7c:11: 3c:93:77:19:dd:fc:0f:94:d7:dd:cf:97:05:5b:b4: 30:d7:b8:db:70:f1:43:8c:40:29:0c:f6:0d:e2:8b: 2a:58:27:e5:2b:a8:7d:6f:42:9b:aa:28:9e:ae:44: 7d:db:9b:37:77:b2:9c:20:bb:6f:1a:b7:0e:e7:49: 67:e5:74:2b:f1:7f:9e:ba:ce:3a:bd:07:4e:40:27: 2b:80:4d:64:4d:c0:8c:1a:18:9b:03:80:7a:a7:41: a2:6c:54:d8:ea:ab:88:6c:61:11:a2:86:73:98:8d: 37:e6:c1:6f:a1:b6:2f:26:66:15:c6:de:c9:92:38: 3e:1c:ab:22:cc:21:5e:5a:3e:1e:a2:29:e6:69:47: 83:7a:b5:0a:fc:da:5b:72:c3:c4:76:31:4b:a9:2a: 4b:cf:41:d5:a7:a4:b8:01:8a:53:91:37:9b:46:43: f9:f6:1e:1a:6b:8a:02:37:22:84:eb:c5:b5:5e:69: 42:ee:e1:f0:9b:7c:8e:b0:7f:cb:8e:31:5a:b3:de: 5c:83:63:2f:ab:3b:fd:0d:74:88:4a:65:34:a3:0e: 79:5b:6b:7b:bc:31:4d:2b:80:c5:37:70:c1:a1:ec: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1A:4B:6D:68:45:D6:1E:EA:0F:16:28:6A:41:2E:31:2A:46:0A:D2 X509v3 Authority Key Identifier: keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:bf:0a:26:84:42:67:08:03:69:ab:25:c5:0c:dd:d7:9a:4f: 72:c9:90:42:e8:16:d5:26:34:c0:d1:20:fa:17:86:0a:08:dc: 76:be:26:d4:91:ea:88:3c:6b:b3:42:0c:0f:d7:3c:90:5c:f2: 30:86:1f:79:60:05:60:8e:d0:77:1e:c6:63:44:3e:8f:82:75: ae:27:05:5b:ff:5a:4c:37:b8:9c:0c:67:46:3d:af:03:71:b3: d8:76:09:02:47:60:52:9a:fa:0b:9b:28:c8:b1:9c:7a:28:0d: 36:05:a8:77:be:26:c5:97:4b:60:37:49:03:b9:57:8a:f5:63: 84:86:30:ff:31:bc:36:1b:76:1a:f5:d4:2c:b4:8d:fd:b0:80: e4:20:b5:ef:82:45:b9:aa:b8:06:98:77:2d:bb:c8:3c:17:60: 4a:50:35:e0:21:c6:79:d9:ec:87:29:ee:fd:94:ff:00:cf:92: 02:e6:7e:84:88:da:7d:cc:b4:fe:2b:34:e7:3c:84:90:76:3f: b9:a5:11:5c:fd:16:d7:c1:56:c0:9c:07:8b:d8:45:f8:14:6e: 74:21:bf:ca:36:24:b3:65:ad:2e:b4:20:c0:ee:de:c2:f6:46: 24:85:c5:6a:0f:d8:a7:88:ee:0c:c8:d7:84:f2:25:18:5f:2a: 8f:d2:28:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzRGRDExMC8GA1UEBRMoNTk5MEY0QzNCQjIzNDM2Qzk1MTAwQjQ4NDhEQzkxODZB QTQ5NTMxOTAeFw0yNTA0MjUwNjEzNDZaFw0yNTA1MDIwNjEzNDZaMBgxFjAUBgNV BAMTDTY4MGIyODFhLTlmZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7FerRSSyGBwtcOfWPPnc5PmjesF5gDzYN8wF8ETyTdxnd/A+U193PlwVbtDDX uNtw8UOMQCkM9g3iiypYJ+UrqH1vQpuqKJ6uRH3bmzd3spwgu28atw7nSWfldCvx f566zjq9B05AJyuATWRNwIwaGJsDgHqnQaJsVNjqq4hsYRGihnOYjTfmwW+hti8m ZhXG3smSOD4cqyLMIV5aPh6iKeZpR4N6tQr82ltyw8R2MUupKkvPQdWnpLgBilOR N5tGQ/n2HhprigI3IoTrxbVeaULu4fCbfI6wf8uOMVqz3lyDYy+rO/0NdIhKZTSj Dnlba3u8MU0rgMU3cMGh7DL/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUohpLbWhF 1h7qDxYoakEuMSpGCtIwHwYDVR0jBBgwFoAUWZD0w7sjQ2yVEAtISNyRhqpJUxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDNEZEL0E1N0NBQkVDQTU1 NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5VkVBdElTTnlSaHFwSlV4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV1pEMHc3c2pRMnlWRUF0SVNOeVJocXBKVXhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND NEZEL0E1N0NBQkVDQTU1NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5 VkVBdElTTnlSaHFwSlV4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFW/CiaEQmcIA2mrJcUM3deaT3LJkELoFtUmNMDRIPoXhgoI3Ha+JtSR 6og8a7NCDA/XPJBc8jCGH3lgBWCO0HcexmNEPo+Cda4nBVv/Wkw3uJwMZ0Y9rwNx s9h2CQJHYFKa+gubKMixnHooDTYFqHe+JsWXS2A3SQO5V4r1Y4SGMP8xvDYbdhr1 1Cy0jf2wgOQgte+CRbmquAaYdy27yDwXYEpQNeAhxnnZ7Icp7v2U/wDPkgLmfoSI 2n3MtP4rNOc8hJB2P7mlEVz9FtfBVsCcB4vYRfgUbnQhv8o2JLNlrS60IMDu3sL2 RiSFxWoP2KeI7gzI14TyJRhfKo/SKL8= -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:40 2025 by rpki-client