$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft File: wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft (raw, json) Hash identifier: JVpypMmqloupOlSkgdd/GmBxOa/tkNYAwvqD5pWDRMc= Subject key identifier: 48:8F:F7:F4:66:25:11:57:5C:EC:81:BB:59:3B:1E:30:ED:72:38:F6 Authority key identifier: C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94 Certificate issuer: /CN=A914CC0F/serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94 Certificate serial: 0948 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft Manifest number: 0943 Signing time: Thu 24 Apr 2025 20:06:56 +0000 Manifest this update: Thu 24 Apr 2025 20:06:56 +0000 Manifest next update: Thu 01 May 2025 20:06:56 +0000 Files and hashes: 1: wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl (hash: N1WVi/glIj+UVbJQsnvvSai1/F01C3cSPRtsUBiYXCU=) 2: 170BFAA6995211EA9CF98C52C4F9AE02.roa (hash: 8yoAnMqhlRDOBdM8mgmHUO5+MkemJ+tEuJ78ZlMNQFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2376 (0x948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94 Validity Not Before: Apr 24 20:06:56 2025 GMT Not After : May 1 20:06:56 2025 GMT Subject: CN=680a99e0-2f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:ef:7e:ea:8b:b5:ce:2c:0e:fc:25:cc:19: ed:ea:7c:f1:43:49:dc:e5:34:bd:8c:59:58:b0:5f: 20:16:36:a3:e9:a9:84:bd:3c:73:85:84:6e:85:21: e0:ff:77:6d:92:a1:ee:e2:69:96:b9:fa:5e:80:2c: 31:60:bd:01:bb:d4:de:95:01:ed:e2:43:07:fe:00: c6:c6:72:c9:63:6e:11:e8:d3:17:db:54:2f:7d:f6: 0f:ae:63:47:57:6a:47:01:d8:2c:84:9e:72:57:20: c3:ea:6c:1d:d3:04:a9:28:29:0a:8a:93:55:ad:a6: 5c:ac:c9:ee:90:2c:56:3b:07:ba:7c:ec:4c:2e:42: b5:73:5a:5d:e0:8f:cd:83:e2:0c:d3:f1:a5:b6:8f: 5c:92:93:b9:e0:27:0c:d4:1f:05:11:ef:4a:e6:3f: 4b:be:b6:45:3d:7d:2b:bd:68:1a:61:f1:74:f0:ca: de:92:cf:fe:29:ec:ee:0b:57:f4:26:0e:eb:0c:0d: 72:20:f0:bb:8b:b6:ff:6a:db:58:00:79:89:60:f8: 1d:08:98:81:14:0b:00:0d:2c:7f:4a:b7:05:60:4a: bf:7d:68:fb:e2:cc:9a:8d:84:84:24:99:a3:34:7a: 51:1f:f4:00:44:04:81:75:3d:9b:4c:f3:79:90:7c: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8F:F7:F4:66:25:11:57:5C:EC:81:BB:59:3B:1E:30:ED:72:38:F6 X509v3 Authority Key Identifier: keyid:C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:7b:d3:d8:c7:55:e0:a2:9b:18:f8:cf:0b:b6:54:a7:a2:8a: 1c:9b:0b:6e:45:e9:33:4f:d0:d5:bb:c0:8b:09:47:4e:dc:d8: 90:94:b0:a1:f0:66:dc:e8:63:15:06:b3:eb:c3:64:22:a6:9e: 8f:78:8f:a7:63:84:3e:df:0c:42:eb:40:af:ee:a2:2e:86:90: d3:06:73:39:19:2d:b0:72:c8:09:c8:43:fe:69:c6:19:bb:43: 67:42:aa:1a:18:a7:8d:6c:a8:f3:54:ea:38:73:74:2b:66:2a: 69:80:f1:29:51:1a:72:81:fd:84:36:3f:01:0c:09:28:aa:ed: 92:3e:77:02:c3:b3:94:81:6e:2e:96:b8:8f:ad:c7:5a:f4:eb: 63:b1:3e:f3:c6:7b:88:bd:9f:e2:c7:e3:5c:ae:ff:93:ae:5a: 12:06:fb:bf:57:2a:69:9e:47:80:1e:55:31:a7:da:bc:31:71: f8:83:b5:5a:25:ab:1a:52:87:1c:58:64:3d:c8:25:cb:7f:03: 83:9d:0f:02:aa:49:bc:c4:38:f5:76:48:3f:2b:26:eb:ff:7e: 66:94:38:fc:44:0f:16:42:5a:6c:3d:a9:b1:17:e9:46:f0:3c: 16:a2:55:5e:19:e0:b8:e9:90:2a:88:91:d0:7b:e5:9c:39:54: 80:16:b8:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMEYxMTAvBgNVBAUTKEMwQkExREZCMzU5OTZGQ0U5QTdFNDg1OUU4QUY4Nzkx RkFGMEVDOTQwHhcNMjUwNDI0MjAwNjU2WhcNMjUwNTAxMjAwNjU2WjAYMRYwFAYD VQQDEw02ODBhOTllMC0yZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUjvfuqLtc4sDvwlzBnt6nzxQ0nc5TS9jFlYsF8gFjaj6amEvTxzhYRuhSHg /3dtkqHu4mmWufpegCwxYL0Bu9TelQHt4kMH/gDGxnLJY24R6NMX21QvffYPrmNH V2pHAdgshJ5yVyDD6mwd0wSpKCkKipNVraZcrMnukCxWOwe6fOxMLkK1c1pd4I/N g+IM0/Glto9ckpO54CcM1B8FEe9K5j9LvrZFPX0rvWgaYfF08Mreks/+KezuC1f0 Jg7rDA1yIPC7i7b/attYAHmJYPgdCJiBFAsADSx/SrcFYEq/fWj74syajYSEJJmj NHpRH/QARASBdT2bTPN5kHxr5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiP9/Rm JRFXXOyBu1k7HjDtcjj2MB8GA1UdIwQYMBaAFMC6Hfs1mW/Omn5IWeivh5H68OyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi8zNEY2Nzk4Qzk2 NjUxMUVBQjY4QjQ0NjdDNEY5QUUwMi93TG9kLXpXWmI4NmFma2haNkstSGtmcnc3 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMb2QteldaYjg2YWZraFo2Sy1Ia2ZydzdKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MwRi8zNEY2Nzk4Qzk2NjUxMUVBQjY4QjQ0NjdDNEY5QUUwMi93TG9kLXpXWmI4 NmFma2haNkstSGtmcnc3SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAme9PYx1XgopsY+M8LtlSnooocmwtuRekzT9DVu8CLCUdO3NiQlLCh 8Gbc6GMVBrPrw2Qipp6PeI+nY4Q+3wxC60Cv7qIuhpDTBnM5GS2wcsgJyEP+acYZ u0NnQqoaGKeNbKjzVOo4c3QrZippgPEpURpygf2ENj8BDAkoqu2SPncCw7OUgW4u lriPrcda9OtjsT7zxnuIvZ/ix+Ncrv+TrloSBvu/VyppnkeAHlUxp9q8MXH4g7Va JasaUoccWGQ9yCXLfwODnQ8Cqkm8xDj1dkg/Kybr/35mlDj8RA8WQlpsPamxF+lG 8DwWolVeGeC46ZAqiJHQe+WcOVSAFrig -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:45 2025 by rpki-client