$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json) Hash identifier: 5fqNcciX6dSLXSWVwIJbmOHiq6K9pbJANAQrz5N/ItA= Subject key identifier: F2:F2:59:FE:95:F5:E3:D1:DC:CA:3A:B1:01:B5:E0:1D:2F:14:D4:A9 Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Certificate serial: 12F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft Manifest number: 12E4 Signing time: Thu 24 Apr 2025 17:04:30 +0000 Manifest this update: Thu 24 Apr 2025 17:04:29 +0000 Manifest next update: Thu 01 May 2025 17:04:29 +0000 Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: 13hS2FGN/R/5pFMjzySIWt60hzUZg4LtZJ0WQOcyuAY=) 2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: mWJcvoB56xtTVL8jsG+OSQ9sF5v7r1+9ESUNzFxge8k=) 3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: 9g+f1SJF42ygeVyvheaF7ZLxnRH6Cv+HITF3QrrONoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4855 (0x12f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Validity Not Before: Apr 24 17:04:29 2025 GMT Not After : May 1 17:04:29 2025 GMT Subject: CN=680a6f1e-1e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:e3:3a:89:2a:72:62:2b:32:e5:8d:44:ee: 20:a4:f4:19:b2:0d:5d:11:8d:f9:17:e3:e7:0f:a0: fe:3c:4b:53:eb:58:ea:24:c9:d3:c7:47:63:d0:ed: f1:88:8e:16:9d:0d:63:5e:07:ea:5f:63:24:48:51: c2:9c:16:3e:4c:77:29:68:9f:f2:4e:5a:69:03:64: 46:dc:52:99:0c:b2:0b:11:d5:25:fb:11:28:dc:0f: 12:3a:b7:c4:0b:e0:d6:5a:8b:a0:13:a4:ae:bf:44: d8:81:d3:7a:cb:83:c4:b9:d9:0b:6b:35:ee:f0:8e: 31:64:66:31:bc:0e:80:76:26:fd:5b:af:b9:03:f5: 28:39:bc:50:20:fe:77:30:dd:8f:56:fe:ea:c9:71: b6:51:c2:22:63:d9:42:b6:2a:d9:da:94:9e:e8:ff: 60:f1:17:fc:2f:fb:a4:42:8b:45:73:63:74:f7:36: 26:4a:09:c7:50:1d:a3:92:b8:1b:de:7f:8f:a6:62: 60:7a:5c:a1:da:57:c2:2e:0d:8a:98:9f:82:43:b2: d8:7d:7c:66:41:97:3e:31:e3:cf:fd:74:fe:05:cb: 8b:d2:54:d8:6f:d8:b9:7a:f9:5f:11:b2:f2:f1:27: d2:1b:3d:90:7f:26:59:19:9c:e5:83:e0:19:cb:d7: 93:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F2:59:FE:95:F5:E3:D1:DC:CA:3A:B1:01:B5:E0:1D:2F:14:D4:A9 X509v3 Authority Key Identifier: keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:af:13:4f:62:5a:e2:71:fa:21:c2:b0:a5:5f:fd:f5:ae:1d: 95:c5:b5:ce:f8:19:4b:e5:e5:10:8f:82:81:30:6b:8b:72:59: f1:44:88:33:2f:34:f0:bf:b6:0a:ca:f8:77:83:94:e1:1d:ad: 18:17:c3:2a:c3:17:90:5e:e6:25:d2:71:70:67:12:8a:e7:e3: 95:a4:67:15:a9:0a:68:e0:7f:f9:2c:86:8d:21:57:35:7d:9f: 62:9b:de:be:a1:b9:61:4f:32:16:74:14:11:5d:7c:30:dc:88: a4:09:08:82:5f:db:7d:67:22:08:be:5d:ed:eb:24:62:ab:5a: 10:f1:fd:4f:b3:b9:39:c0:f2:72:8d:15:54:e0:d9:f0:c8:75: 6a:ad:10:cc:79:d8:f1:ea:be:78:19:4b:e2:1b:b4:ec:be:ed: e5:4b:17:6c:80:30:4b:3e:62:0c:0a:c3:98:72:e4:ca:13:c2: cf:fa:eb:7f:f0:81:64:c1:59:82:02:5a:eb:a7:d6:0c:00:0f: 5b:27:b7:88:7c:f7:f0:f3:03:5b:45:e8:c9:4e:be:73:32:16: 25:94:28:1b:58:df:88:8c:44:e5:82:28:30:80:a5:5d:bb:7d: e8:85:d0:5e:c0:ad:db:8b:cb:5d:4b:09:55:5f:86:47:0d:3a: e0:20:fd:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2 N0M2ODkyQjcwHhcNMjUwNDI0MTcwNDI5WhcNMjUwNTAxMTcwNDI5WjAYMRYwFAYD VQQDEw02ODBhNmYxZS0xZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv//jOokqcmIrMuWNRO4gpPQZsg1dEY35F+PnD6D+PEtT61jqJMnTx0dj0O3x iI4WnQ1jXgfqX2MkSFHCnBY+THcpaJ/yTlppA2RG3FKZDLILEdUl+xEo3A8SOrfE C+DWWougE6Suv0TYgdN6y4PEudkLazXu8I4xZGYxvA6Adib9W6+5A/UoObxQIP53 MN2PVv7qyXG2UcIiY9lCtirZ2pSe6P9g8Rf8L/ukQotFc2N09zYmSgnHUB2jkrgb 3n+PpmJgelyh2lfCLg2KmJ+CQ7LYfXxmQZc+MePP/XT+BcuL0lTYb9i5evlfEbLy 8SfSGz2QfyZZGZzlg+AZy9eTdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLyWf6V 9ePR3Mo6sQG14B0vFNSpMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1 QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA4Ri9BOEYyMDMwOEI1QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRt bzl5SG5qeWZ5eVpueG9rcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkrxNPYlricfohwrClX/31rh2VxbXO+BlL5eUQj4KBMGuLclnxRIgz LzTwv7YKyvh3g5ThHa0YF8MqwxeQXuYl0nFwZxKK5+OVpGcVqQpo4H/5LIaNIVc1 fZ9im96+oblhTzIWdBQRXXww3IikCQiCX9t9ZyIIvl3t6yRiq1oQ8f1Ps7k5wPJy jRVU4NnwyHVqrRDMedjx6r54GUviG7Tsvu3lSxdsgDBLPmIMCsOYcuTKE8LP+ut/ 8IFkwVmCAlrrp9YMAA9bJ7eIfPfw8wNbRejJTr5zMhYllCgbWN+IjETlgigwgKVd u33ohdBewK3bi8tdSwlVX4ZHDTrgIP3c -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:28 2025 by rpki-client