$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json) Hash identifier: imzsSaAgkbps1O7OH0K5kYH1E+V3VUFr9JYsR2rMEpo= Subject key identifier: FB:43:58:82:23:70:E0:77:5D:12:EF:71:27:90:3F:E7:91:20:18:72 Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft Manifest number: 0437 Signing time: Fri 25 Apr 2025 00:02:41 +0000 Manifest this update: Fri 25 Apr 2025 00:02:40 +0000 Manifest next update: Fri 02 May 2025 00:02:40 +0000 Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: tyzlVwCrQC5xJxRy2JGDChBMZktjPJmRbfkY4lOaF4U=) 2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Validity Not Before: Apr 25 00:02:40 2025 GMT Not After : May 2 00:02:40 2025 GMT Subject: CN=680ad121-9903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:6e:0f:1a:89:aa:a9:66:a4:5f:6f:e3:bc: 2b:f3:89:d7:51:be:93:8e:3c:f8:d8:df:8b:01:1d: 33:fd:75:37:15:00:06:3b:d7:36:29:1c:d7:ae:89: 5c:a4:4a:95:4a:a2:eb:49:48:e0:5f:5f:30:41:e9: 21:91:16:c3:a8:1a:63:5f:98:dc:c4:2d:86:1f:93: e1:97:6a:60:2d:34:1a:26:00:be:76:2f:a2:d2:80: ab:49:2d:c3:9e:c9:eb:b9:7a:76:54:30:03:f8:4f: b4:f1:ea:78:b6:ad:68:35:b2:d6:86:c0:ea:ec:47: ef:93:78:8b:b4:ad:cc:d2:9e:9c:0f:2e:57:c2:33: c4:aa:af:38:b2:ff:3f:18:c6:43:43:53:31:7b:68: 92:2d:b7:af:3d:88:6e:6d:1d:b4:8c:83:6f:a8:d2: 4d:05:ea:6e:46:9c:08:c4:55:79:99:16:9d:b3:c6: fe:87:b9:55:0e:5a:c3:af:72:96:7d:66:b2:f2:a8: 6f:f2:bd:1b:c4:1c:a6:88:5f:e8:26:bf:71:65:d7: b0:21:58:c5:4e:26:8d:2f:65:8a:50:4c:e5:86:a7: 5c:b2:5f:b0:61:18:4d:b7:f7:e0:bb:ff:9c:e0:e2: f4:ae:8a:65:37:bb:38:b3:d5:61:38:f9:34:1d:dd: c5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:43:58:82:23:70:E0:77:5D:12:EF:71:27:90:3F:E7:91:20:18:72 X509v3 Authority Key Identifier: keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:44:0f:3e:d5:32:82:c4:a6:e5:9e:31:66:8c:2d:24:aa:35: d8:a5:ef:4a:cb:ae:76:1d:e8:1c:43:b3:35:b4:ca:3e:7a:a8: 61:bd:07:f2:04:3a:e0:03:ba:83:27:47:70:7c:d6:99:f9:4a: 3c:1e:0b:97:52:1d:b1:18:82:4f:7f:15:10:9e:df:5f:bb:0e: 36:4a:88:99:a2:58:b2:88:b7:fa:40:fb:c8:25:1b:63:9a:88: dc:6e:f6:08:79:62:94:3f:e6:34:26:d7:f2:6f:53:0c:a2:80: a8:53:91:44:75:de:44:24:77:1b:8d:0e:ce:47:83:80:a5:d6: 83:1a:ce:7b:82:53:12:e9:cf:ba:83:39:e3:13:ef:e2:49:69: 51:15:6a:cc:ff:94:0b:b2:3f:a1:c1:48:30:16:31:f7:77:d1: 2e:d8:88:91:5c:89:54:ee:68:c3:c9:0d:ad:81:70:fd:f7:bd: 1b:b7:6c:43:28:f7:47:74:a7:c2:75:ce:32:dd:65:4c:69:01: 86:8f:1e:2c:1c:99:85:6b:e3:1b:16:81:93:de:de:24:63:5c: 77:3e:64:03:c1:92:d2:87:e8:54:f9:da:9b:93:3a:b1:ef:04: 8f:4f:f3:b6:27:2a:6a:a0:e8:a0:90:39:9c:8b:6b:a8:f0:4c: 72:16:c8:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0 QjFEOURBQTIwHhcNMjUwNDI1MDAwMjQwWhcNMjUwNTAyMDAwMjQwWjAYMRYwFAYD VQQDEw02ODBhZDEyMS05OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmZuDxqJqqlmpF9v47wr84nXUb6Tjjz42N+LAR0z/XU3FQAGO9c2KRzXrolc pEqVSqLrSUjgX18wQekhkRbDqBpjX5jcxC2GH5Phl2pgLTQaJgC+di+i0oCrSS3D nsnruXp2VDAD+E+08ep4tq1oNbLWhsDq7Efvk3iLtK3M0p6cDy5XwjPEqq84sv8/ GMZDQ1Mxe2iSLbevPYhubR20jINvqNJNBepuRpwIxFV5mRads8b+h7lVDlrDr3KW fWay8qhv8r0bxBymiF/oJr9xZdewIVjFTiaNL2WKUEzlhqdcsl+wYRhNt/fgu/+c 4OL0roplN7s4s9VhOPk0Hd3F2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtDWIIj cOB3XRLvcSeQP+eRIBhyMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8RA8+1TKCxKblnjFmjC0kqjXYpe9Ky652HegcQ7M1tMo+eqhhvQfy BDrgA7qDJ0dwfNaZ+Uo8HguXUh2xGIJPfxUQnt9fuw42SoiZoliyiLf6QPvIJRtj mojcbvYIeWKUP+Y0Jtfyb1MMooCoU5FEdd5EJHcbjQ7OR4OApdaDGs57glMS6c+6 gznjE+/iSWlRFWrM/5QLsj+hwUgwFjH3d9Eu2IiRXIlU7mjDyQ2tgXD9970bt2xD KPdHdKfCdc4y3WVMaQGGjx4sHJmFa+MbFoGT3t4kY1x3PmQDwZLSh+hU+dqbkzqx 7wSPT/O2JypqoOigkDmci2uo8ExyFshy -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:31 2025 by rpki-client