$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft File: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft (raw, json) Hash identifier: Zc8ZKAfODcqFX6GTZkF5M9ncAzVuZvDOVTRr7Eis4zo= Subject key identifier: 1A:C3:8C:22:7E:BD:59:68:6A:52:BF:BD:A0:98:FC:07:B8:6E:2C:55 Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6 Certificate issuer: /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft Manifest number: D4 Signing time: Fri 25 Apr 2025 04:40:09 +0000 Manifest this update: Fri 25 Apr 2025 04:40:08 +0000 Manifest next update: Fri 02 May 2025 04:40:08 +0000 Files and hashes: 1: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl (hash: DfdDco/DZRn4bB8IMrPfeesgpDDS4zgIc52y+CtSg48=) 2: 90D6EB20DF5811EE9A25765FC4F9AE02.roa (hash: 9yKuVeku78GalBmu1IDdWmb+Ncr/r5STqW93UMJtxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158322, serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6 Validity Not Before: Apr 25 04:40:08 2025 GMT Not After : May 2 04:40:08 2025 GMT Subject: CN=680b1229-4541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:5a:f9:f4:0d:3d:5b:65:4f:7f:8d:62:3e: e1:12:3b:14:41:38:42:ce:4d:39:37:c7:71:75:94: 28:dd:97:a2:a3:3e:6b:4e:57:f6:e5:73:30:50:9e: bf:a6:d0:15:fd:20:c0:a4:01:5f:42:18:32:06:12: a1:86:d7:bf:0a:b9:35:48:0f:ae:2a:87:6b:da:a2: 2f:48:47:45:1b:f7:a7:bb:02:02:50:36:a2:db:1b: 7c:97:d8:08:0a:a7:37:03:78:d3:f5:e1:5d:be:3c: 3b:1a:83:9b:f3:99:b7:c6:06:20:22:89:7d:ae:a5: 3b:c3:69:d3:75:b9:46:ba:52:a4:1d:bb:9f:58:e9: b7:60:da:9f:cd:46:73:16:76:99:6c:87:12:10:47: 31:ae:c0:47:ca:f6:07:2c:2f:31:ef:a6:6b:79:0b: 69:5e:a9:93:cc:29:2a:3d:49:ee:b5:f0:c3:71:22: 1a:29:13:78:3e:28:ff:ab:d8:26:a6:c3:15:9a:9b: 6e:c0:41:d0:8d:15:12:06:8f:48:0c:fd:33:93:07: af:27:2e:ec:8a:95:63:e1:23:81:a5:da:88:43:35: 51:f0:2a:de:39:d0:2e:99:9d:19:fc:8f:64:44:6d: fc:f9:94:10:b0:d7:d1:65:83:53:9b:e5:f3:cf:19: e1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C3:8C:22:7E:BD:59:68:6A:52:BF:BD:A0:98:FC:07:B8:6E:2C:55 X509v3 Authority Key Identifier: keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:15:85:ec:06:bb:29:fa:fa:41:d6:48:3c:cb:8b:bc:8d:55: 6a:3f:4f:5a:2f:f9:3e:0f:58:4a:61:f9:44:69:f8:4b:6a:05: e4:f5:f8:da:2d:b9:41:74:45:eb:ee:3a:fa:d4:4c:14:88:ca: a9:19:a8:25:e4:ec:02:81:c7:e7:9f:a4:2e:6e:cf:c7:e8:66: c3:cb:74:da:2a:da:d8:fa:e9:72:62:53:da:11:d2:a8:40:fd: fa:99:36:df:07:03:da:31:cf:6e:f8:6e:4f:2d:30:f2:d9:22: 49:87:3a:ee:8a:b8:9d:44:3d:55:f0:32:b5:45:9d:eb:92:f8: e4:f1:52:9a:65:0d:ad:5d:13:d9:6f:d2:8d:b2:ed:4a:cc:4b: 69:22:51:30:a0:95:69:f7:48:e8:a1:68:67:37:26:ab:e9:f4: 6b:c9:af:74:14:a9:b8:1f:e2:05:17:2e:f7:91:2c:a4:18:fc: 73:88:4e:fa:01:22:02:07:5c:00:34:97:ff:a5:32:6f:87:b7: 47:a0:a6:56:c2:72:ef:6b:53:10:e9:5c:c5:1d:07:a2:45:2d: d1:4d:29:43:04:85:39:e2:15:6d:ab:da:66:c8:ca:14:e7:50: fb:86:c1:71:7f:6c:e2:f8:50:f2:d5:f4:89:f4:31:1a:fc:a7: 10:52:8e:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzMjIxMTAvBgNVBAUTKDVBRjM0NUMyMjJCMDlBNTU1QzdFNkFBNUE1NzM2MTAz MEI5MzE3QTYwHhcNMjUwNDI1MDQ0MDA4WhcNMjUwNTAyMDQ0MDA4WjAYMRYwFAYD VQQDEw02ODBiMTIyOS00NTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuBa+fQNPVtlT3+NYj7hEjsUQThCzk05N8dxdZQo3Zeioz5rTlf25XMwUJ6/ ptAV/SDApAFfQhgyBhKhhte/Crk1SA+uKodr2qIvSEdFG/enuwICUDai2xt8l9gI Cqc3A3jT9eFdvjw7GoOb85m3xgYgIol9rqU7w2nTdblGulKkHbufWOm3YNqfzUZz FnaZbIcSEEcxrsBHyvYHLC8x76ZreQtpXqmTzCkqPUnutfDDcSIaKRN4Pij/q9gm psMVmptuwEHQjRUSBo9IDP0zkwevJy7sipVj4SOBpdqIQzVR8CreOdAumZ0Z/I9k RG38+ZQQsNfRZYNTm+XzzxnhAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrDjCJ+ vVloalK/vaCY/Ae4bixVMB8GA1UdIwQYMBaAFFrzRcIisJpVXH5qpaVzYQMLkxem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODMyMi81NUFDMDY2NkRG NTgxMUVFOUY0Q0NGNUVDNEY5QUUwMi9Xdk5Gd2lLd21sVmNmbXFscFhOaEF3dVRG NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d2TkZ3aUt3bWxWY2ZtcWxwWE5oQXd1VEY2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODMyMi81NUFDMDY2NkRGNTgxMUVFOUY0Q0NGNUVDNEY5QUUwMi9Xdk5Gd2lLd21s VmNmbXFscFhOaEF3dVRGNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWFYXsBrsp+vpB1kg8y4u8jVVqP09aL/k+D1hKYflEafhLagXk9fja LblBdEXr7jr61EwUiMqpGagl5OwCgcfnn6Qubs/H6GbDy3TaKtrY+ulyYlPaEdKo QP36mTbfBwPaMc9u+G5PLTDy2SJJhzruiridRD1V8DK1RZ3rkvjk8VKaZQ2tXRPZ b9KNsu1KzEtpIlEwoJVp90jooWhnNyar6fRrya90FKm4H+IFFy73kSykGPxziE76 ASICB1wANJf/pTJvh7dHoKZWwnLva1MQ6VzFHQeiRS3RTSlDBIU54hVtq9pmyMoU 51D7hsFxf2zi+FDy1fSJ9DEa/KcQUo42 -----END CERTIFICATE-----Generated at Sat Apr 26 18:36:16 2025 by rpki-client