$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft File: WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json) Hash identifier: gwvtlRvpVgz9IDTjUczO/tLoQwN7g5h3F8nfyXgf5jY= Subject key identifier: 7D:04:AF:39:F3:60:D1:53:63:BD:9E:02:40:2D:3A:DF:47:75:95:2B Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft Manifest number: 01B7 Signing time: Fri 25 Apr 2025 02:29:15 +0000 Manifest this update: Fri 25 Apr 2025 02:29:15 +0000 Manifest next update: Fri 02 May 2025 02:29:15 +0000 Files and hashes: 1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: wDWHwYU4U9onXS+UYWORoL/p0bAjAKYMQSEBXvik2eM=) 2: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (hash: NtempH4sH10J4xA32EJi0/pMUNSLL5Y5TyDjBhb9q5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D65B, serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Validity Not Before: Apr 25 02:29:15 2025 GMT Not After : May 2 02:29:15 2025 GMT Subject: CN=680af37b-9b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:a1:e4:2a:52:b7:a2:9c:f5:26:9f:d5:e5: 6d:52:fe:ee:7c:cd:73:52:64:39:1a:fe:4f:b6:cd: b4:01:89:c2:0f:5f:7d:3b:85:87:bc:cb:e7:20:70: e0:67:b1:3b:b9:b4:bb:13:c9:7a:3c:d1:2a:69:9d: 3f:23:3b:a0:b1:cb:0c:a1:a2:34:96:60:b8:b9:1f: c4:38:e4:96:2d:8c:91:ef:4d:c7:f6:ad:ae:5f:d8: 7f:02:02:55:e0:27:55:a7:b6:af:b9:ca:e5:6f:12: b9:6f:ad:90:37:e1:9b:23:09:cb:e5:79:87:66:10: 8f:7e:44:40:59:24:c4:87:45:0e:ee:93:39:7a:fe: 46:5f:f4:ce:d5:70:43:74:9b:95:ab:7d:42:d1:d6: db:9c:8f:14:e3:f3:4f:40:bd:d7:8d:f5:7a:e0:f8: 5a:2c:80:6e:1f:6b:4b:86:ac:77:03:a0:50:a8:ed: 58:34:09:c7:ef:d6:50:f7:47:48:41:2e:eb:21:f4: db:c5:85:92:c7:17:a9:64:58:8e:83:1c:77:2f:b6: 51:4e:22:c4:fd:b4:a2:62:42:2c:f5:2e:72:65:64: 51:32:50:31:47:d3:5c:72:20:e6:07:bf:c3:e6:9a: fe:3a:0b:7c:e9:f1:24:5f:a6:36:8f:44:d9:d7:2d: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:04:AF:39:F3:60:D1:53:63:BD:9E:02:40:2D:3A:DF:47:75:95:2B X509v3 Authority Key Identifier: keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:23:33:45:24:e9:b9:81:42:ec:e9:64:49:d6:39:db:aa:d2: 54:57:8d:ee:dc:dc:58:2e:bb:bd:2f:64:7f:c7:83:ee:dc:d0: 38:7a:d3:99:5b:55:62:ca:9e:a0:3e:7a:f9:01:e4:d7:14:f4: 52:9c:86:63:f8:b9:a8:ae:88:fd:65:0d:55:35:16:24:f2:43: 00:b6:80:90:2b:73:22:9a:6c:a8:26:21:50:1f:17:3b:90:09: c1:74:9c:da:53:90:c9:69:12:d9:97:cc:3b:21:ef:c7:80:aa: 1f:31:05:21:ba:1b:a3:e7:26:01:6c:4a:fb:b8:eb:90:4f:b4: 2d:11:af:8f:c8:6b:98:d9:6b:ef:4d:4f:49:4b:f7:0e:6a:6c: 09:0e:51:a0:dd:af:de:0f:b4:48:aa:c2:9c:f2:35:4d:21:0e: 7a:61:42:4d:4c:35:79:1e:03:2c:04:0f:d2:5b:81:62:3f:45: 1e:d5:d1:73:ae:bf:91:31:54:41:5d:4d:ba:91:6e:ff:2a:6b: 25:b0:ab:ca:79:2c:60:3c:be:c9:f9:ea:dc:dc:7d:a7:65:40: f2:c9:11:dc:1e:7a:3f:b8:b1:63:32:d4:74:7d:66:cb:8a:52: 6a:26:d1:a8:ae:b5:39:0a:9b:51:8f:96:14:41:2e:b7:e2:4f: 71:bd:b7:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NUIxMTAvBgNVBAUTKDU4MTMzMkY1RDNFQjg4MkE1QzI1MkZERkQ5ODBCNjBB MUEzNzhFNDEwHhcNMjUwNDI1MDIyOTE1WhcNMjUwNTAyMDIyOTE1WjAYMRYwFAYD VQQDEw02ODBhZjM3Yi05YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDeh5CpSt6Kc9Saf1eVtUv7ufM1zUmQ5Gv5Pts20AYnCD199O4WHvMvnIHDg Z7E7ubS7E8l6PNEqaZ0/IzugscsMoaI0lmC4uR/EOOSWLYyR703H9q2uX9h/AgJV 4CdVp7avucrlbxK5b62QN+GbIwnL5XmHZhCPfkRAWSTEh0UO7pM5ev5GX/TO1XBD dJuVq31C0dbbnI8U4/NPQL3XjfV64PhaLIBuH2tLhqx3A6BQqO1YNAnH79ZQ90dI QS7rIfTbxYWSxxepZFiOgxx3L7ZRTiLE/bSiYkIs9S5yZWRRMlAxR9NcciDmB7/D 5pr+Ogt86fEkX6Y2j0TZ1y2+TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0Erznz YNFTY72eAkAtOt9HdZUrMB8GA1UdIwQYMBaAFFgTMvXT64gqXCUv39mAtgoaN45B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Qi9DRjRDRjEzQUE1 RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlDcGNKU19mMllDMkNobzNq a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2prRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Qi9DRjRDRjEzQUE1RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlD cGNKU19mMllDMkNobzNqa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcIzNFJOm5gULs6WRJ1jnbqtJUV43u3NxYLru9L2R/x4Pu3NA4etOZ W1Viyp6gPnr5AeTXFPRSnIZj+Lmoroj9ZQ1VNRYk8kMAtoCQK3MimmyoJiFQHxc7 kAnBdJzaU5DJaRLZl8w7Ie/HgKofMQUhuhuj5yYBbEr7uOuQT7QtEa+PyGuY2Wvv TU9JS/cOamwJDlGg3a/eD7RIqsKc8jVNIQ56YUJNTDV5HgMsBA/SW4FiP0Ue1dFz rr+RMVRBXU26kW7/KmslsKvKeSxgPL7J+erc3H2nZUDyyRHcHno/uLFjMtR0fWbL ilJqJtGorrU5CptRj5YUQS634k9xvbe+ -----END CERTIFICATE-----Generated at Sat Apr 26 05:09:15 2025 by rpki-client