$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft File: Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json) Hash identifier: emaAin6VsVuZD/csDWpA99xVmiP5OU55tIrH+1cwnxQ= Subject key identifier: E2:EB:94:1B:4D:14:52:1A:97:73:00:60:A8:CB:F5:54:4B:DD:3C:24 Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 Certificate issuer: /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Certificate serial: 0B96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft Manifest number: 0B8D Signing time: Thu 24 Apr 2025 18:55:57 +0000 Manifest this update: Thu 24 Apr 2025 18:55:57 +0000 Manifest next update: Thu 01 May 2025 18:55:57 +0000 Files and hashes: 1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: 4T45FB2OJRbpjLb6Fz046/cbILgtNzxp+pgez8e35i8=) 2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: w2bZ1Vy5tJz/xtNGpIMywBX1w2FBfB12WPfrA4jI4ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2966 (0xb96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Validity Not Before: Apr 24 18:55:57 2025 GMT Not After : May 1 18:55:57 2025 GMT Subject: CN=680a893d-c0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:57:65:c4:b5:59:38:fa:b1:df:cc:3d:e2: 0e:51:0a:06:1c:39:65:4d:af:12:98:d5:71:6a:aa: 01:8c:21:89:3c:83:f0:38:ff:0e:4e:85:2d:6f:e9: 3f:0a:f2:e3:e1:b9:0c:99:75:92:1f:22:fa:27:a6: 8e:45:a3:d3:58:a5:fe:04:52:20:43:b6:92:2b:e3: a6:4e:7f:e2:a0:21:25:c8:7a:25:a6:33:a3:e1:9c: fe:2f:33:1f:40:6d:67:5d:28:06:98:9b:71:93:c6: 21:23:e4:77:ac:35:ef:7f:3c:2f:71:f4:92:b7:fd: 18:31:81:74:07:3f:c8:bf:96:fd:89:59:66:2b:cb: 82:3e:48:e6:83:e6:74:29:34:84:fd:6b:56:85:36: 25:ab:87:03:7a:4c:91:b3:1a:4d:0f:c6:94:3d:c9: fc:12:41:79:15:35:3d:0f:b2:d3:04:4d:32:3d:8c: e6:86:fa:f5:9f:b5:29:0f:55:52:74:68:04:5d:02: 5e:06:9e:2c:42:bf:56:ba:25:65:21:98:45:df:a3: 73:ee:2a:5b:b2:e8:e4:22:d7:cb:c0:0f:b0:e3:3a: 8b:96:64:90:3a:34:0d:6d:c5:0b:fd:f2:73:6e:b5: 71:29:ae:11:f4:94:8e:ab:30:41:77:3d:0e:bd:8e: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EB:94:1B:4D:14:52:1A:97:73:00:60:A8:CB:F5:54:4B:DD:3C:24 X509v3 Authority Key Identifier: keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b8:d2:42:31:27:3e:8c:18:b7:6a:3f:e9:dd:b6:5a:f8:4b: e7:0a:53:91:a9:bc:d8:56:a9:f5:31:09:62:4b:43:74:63:b9: 2f:0f:a9:cc:1a:7e:4d:f1:8a:00:ab:a7:48:8a:db:28:13:f8: 52:37:69:5d:f2:03:40:3e:75:f5:f1:d0:6a:ba:dd:ae:28:58: d0:c6:fe:65:2c:0e:46:f2:28:b1:07:4e:cf:18:f8:46:57:85: 6d:7d:b4:c0:e6:e4:f7:25:6d:ed:30:d5:66:54:f6:b3:48:f5: 76:3e:b5:36:cb:a9:80:51:b9:36:b6:bb:50:ad:80:be:67:9d: 0b:04:e8:11:e2:f2:ae:18:f6:a3:a4:27:cd:65:48:00:4f:ad: 09:63:29:9a:45:38:88:7b:c8:2c:33:00:d9:de:1b:7d:b8:c3: 6a:8e:ce:77:e4:08:c6:f7:72:33:ac:9f:a5:81:fe:4b:d7:be: a3:4b:09:bc:a7:b7:38:44:2a:8f:a9:9f:5a:b7:49:30:2f:68: ce:13:f2:70:f6:c6:f8:c2:75:93:e1:95:8c:de:12:f9:06:9e: dd:ad:fb:a4:dd:41:f4:2a:0c:17:0e:c5:6b:f3:3f:f8:8e:44: 56:47:00:2a:8b:df:42:85:d9:83:d8:32:34:b2:ef:f4:74:98: b5:e2:32:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQzQxMTAvBgNVBAUTKDVBOEZDNkQ5Qjk5MjMyMkYyRDdDMDc3MzQ1NDNGNzk4 OTdFRDgwMzcwHhcNMjUwNDI0MTg1NTU3WhcNMjUwNTAxMTg1NTU3WjAYMRYwFAYD VQQDEw02ODBhODkzZC1jMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZNXZcS1WTj6sd/MPeIOUQoGHDllTa8SmNVxaqoBjCGJPIPwOP8OToUtb+k/ CvLj4bkMmXWSHyL6J6aORaPTWKX+BFIgQ7aSK+OmTn/ioCElyHolpjOj4Zz+LzMf QG1nXSgGmJtxk8YhI+R3rDXvfzwvcfSSt/0YMYF0Bz/Iv5b9iVlmK8uCPkjmg+Z0 KTSE/WtWhTYlq4cDekyRsxpND8aUPcn8EkF5FTU9D7LTBE0yPYzmhvr1n7UpD1VS dGgEXQJeBp4sQr9WuiVlIZhF36Nz7ipbsujkItfLwA+w4zqLlmSQOjQNbcUL/fJz brVxKa4R9JSOqzBBdz0OvY5hdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLrlBtN FFIal3MAYKjL9VRL3TwkMB8GA1UdIwQYMBaAFFqPxtm5kjIvLXwHc0VD95iX7YA3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FDNC8zQkY0QTY5ODI2 MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01pOHRmQWR6UlVQM21KZnRn RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvX0cyYm1TTWk4dGZBZHpSVVAzbUpmdGdEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FDNC8zQkY0QTY5ODI2MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01p OHRmQWR6UlVQM21KZnRnRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARuNJCMSc+jBi3aj/p3bZa+EvnClORqbzYVqn1MQliS0N0Y7kvD6nM Gn5N8YoAq6dIitsoE/hSN2ld8gNAPnX18dBqut2uKFjQxv5lLA5G8iixB07PGPhG V4VtfbTA5uT3JW3tMNVmVPazSPV2PrU2y6mAUbk2trtQrYC+Z50LBOgR4vKuGPaj pCfNZUgAT60JYymaRTiIe8gsMwDZ3ht9uMNqjs535AjG93IzrJ+lgf5L176jSwm8 p7c4RCqPqZ9at0kwL2jOE/Jw9sb4wnWT4ZWM3hL5Bp7drfuk3UH0KgwXDsVr8z/4 jkRWRwAqi99ChdmD2DI0su/0dJi14jIa -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:25 2025 by rpki-client