$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: Mg5QbQOKDn+CASypXbVpc9OJfxlfI36xVAAR7bhmVKs= Subject key identifier: 34:2F:81:49:96:2F:75:5A:7F:D3:CE:A7:0D:4F:86:56:A4:AB:74:6A Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: 72 Signing time: Thu 01 May 2025 05:49:00 +0000 Manifest this update: Thu 01 May 2025 05:48:59 +0000 Manifest next update: Thu 08 May 2025 05:48:59 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: uJjgpBGF3eI229kH37XrXQ194c1t59OfliKi++Pvawk=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: fkSkf/lrYAP+GPqi/wzsXVOHAz3euOzdB17q/HqvVko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 05:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: May 1 05:48:59 2025 GMT Not After : May 8 05:48:59 2025 GMT Subject: CN=68130b4b-b63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9a:23:fc:97:8d:93:96:88:5c:d7:cb:71:69: e3:9e:cc:db:c7:cd:35:47:cd:ec:aa:b1:04:9f:3b: 48:ee:52:55:a5:58:94:1f:da:50:32:a1:03:2b:9f: c9:de:13:6c:f5:4d:fe:ae:cf:f5:5e:54:44:d7:6d: c9:83:b5:ae:ac:06:7b:04:b2:54:10:ef:35:c5:f6: 5d:af:36:bf:a8:42:57:45:d8:c2:44:ac:49:31:27: bb:78:dc:81:99:f7:cc:6b:5c:63:24:4e:21:fe:1e: da:cc:1d:81:cd:c9:06:e5:1d:28:84:34:ca:08:d1: 12:99:ed:e4:b1:3d:ad:5f:6f:ed:04:51:c8:17:a3: 44:75:e2:89:e2:b9:1b:7b:84:3f:66:ae:8f:1e:fc: c2:58:1d:45:84:91:16:1f:7e:fd:2b:86:12:68:1f: 6d:c9:4a:12:da:8d:86:2c:17:40:eb:43:f0:a5:d6: 92:7e:ea:dc:06:b6:3b:f4:85:c5:fe:14:18:ad:8a: af:e2:e5:dd:49:b8:83:0f:a2:53:fe:b8:b1:23:8c: 6e:72:74:9c:87:b6:2d:f2:40:1a:58:d0:62:85:af: 75:35:ed:d5:f1:b2:61:10:bf:91:ff:2f:81:00:39: cf:fd:83:e1:68:90:18:3c:57:17:ac:3b:91:49:70: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2F:81:49:96:2F:75:5A:7F:D3:CE:A7:0D:4F:86:56:A4:AB:74:6A X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:87:5f:cc:07:a9:90:5a:49:1c:4c:86:c1:25:4a:6d:40:7f: ae:61:40:31:53:35:3f:44:ee:72:74:db:f5:bd:c8:32:a3:5d: da:79:69:8f:13:11:9b:8c:c3:d9:9c:42:04:ec:1b:62:f1:7d: 52:97:45:ce:06:1b:9c:10:cd:39:f6:2c:64:89:68:de:9d:46: 78:48:87:8b:40:e3:a9:ba:bd:61:c3:eb:3a:e7:8f:74:72:7f: c1:13:46:0a:42:0d:da:55:ea:94:46:51:f7:68:56:a6:f1:05: 9e:ee:0c:e1:b1:47:e5:2d:05:80:9f:81:16:dc:13:e0:79:85: c3:1c:c9:4c:fe:39:c2:34:82:9c:e3:52:97:1a:0c:dc:82:e3: 3b:03:61:79:59:b0:32:8f:e7:e6:5a:64:f5:a5:3a:b9:26:38: e8:6a:b8:83:cc:f4:da:e7:43:bd:ce:04:ad:f6:cd:67:02:62: 07:ab:4a:70:58:23:35:ff:62:1b:bd:ea:31:05:23:8e:25:f3: 40:69:9d:3e:3d:bc:58:34:a6:3d:b4:5c:04:89:e5:fe:ec:1f: 8d:e0:d5:5b:66:7c:8b:c5:71:68:8d:3f:19:01:2c:7e:c4:96: 5b:8e:27:f8:47:c1:c4:80:1b:14:04:ce:ac:88:87:e6:fe:1f: 96:3d:f3:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjUwRDExMC8GA1UEBRMoNTg2RjkzMzE3NkY2NTQ1NDM1QkIwNjk3RkU1Rjk4MkEy MDkzOTQxQjAeFw0yNTA1MDEwNTQ4NTlaFw0yNTA1MDgwNTQ4NTlaMBgxFjAUBgNV BAMTDTY4MTMwYjRiLWI2M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7miP8l42Tlohc18txaeOezNvHzTVHzeyqsQSfO0juUlWlWJQf2lAyoQMrn8ne E2z1Tf6uz/VeVETXbcmDta6sBnsEslQQ7zXF9l2vNr+oQldF2MJErEkxJ7t43IGZ 98xrXGMkTiH+HtrMHYHNyQblHSiENMoI0RKZ7eSxPa1fb+0EUcgXo0R14oniuRt7 hD9mro8e/MJYHUWEkRYffv0rhhJoH23JShLajYYsF0DrQ/Cl1pJ+6twGtjv0hcX+ FBitiq/i5d1JuIMPolP+uLEjjG5ydJyHti3yQBpY0GKFr3U17dXxsmEQv5H/L4EA Oc/9g+FokBg8VxesO5FJcAJBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNC+BSZYv dVp/086nDU+GVqSrdGowHwYDVR0jBBgwFoAUWG+TMXb2VFQ1uwaX/l+YKiCTlBsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTBEL0VGOEUzREFDN0JC QzExRUY5MkVFMUE2NkM0RjlBRTAyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxC cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV0ctVE1YYjJWRlExdXdhWF9sLVlLaUNUbEJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC NTBEL0VGOEUzREFDN0JCQzExRUY5MkVFMUE2NkM0RjlBRTAyL1dHLVRNWGIyVkZR MXV3YVhfbC1ZS2lDVGxCcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGaHX8wHqZBaSRxMhsElSm1Af65hQDFTNT9E7nJ02/W9yDKjXdp5aY8T EZuMw9mcQgTsG2LxfVKXRc4GG5wQzTn2LGSJaN6dRnhIh4tA46m6vWHD6zrnj3Ry f8ETRgpCDdpV6pRGUfdoVqbxBZ7uDOGxR+UtBYCfgRbcE+B5hcMcyUz+OcI0gpzj UpcaDNyC4zsDYXlZsDKP5+ZaZPWlOrkmOOhquIPM9NrnQ73OBK32zWcCYgerSnBY IzX/Yhu96jEFI44l80BpnT49vFg0pj20XASJ5f7sH43g1VtmfIvFcWiNPxkBLH7E lluOJ/hHwcSAGxQEzqyIh+b+H5Y98xE= -----END CERTIFICATE-----Generated at Thu May 1 19:52:58 2025 by rpki-client