$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: uJ22KonCMI1PE1MjbmscR6RI0Ri3Fs4nv73IqHZdCHo= Subject key identifier: C3:9B:63:C0:2F:71:9D:41:38:BD:18:24:C5:0B:A7:D0:E0:BF:4E:D9 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0BFE Signing time: Thu 24 Apr 2025 18:37:39 +0000 Manifest this update: Thu 24 Apr 2025 18:37:39 +0000 Manifest next update: Thu 01 May 2025 18:37:39 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: SeGhdOeR7ZkM2M/u6trSycA+P1nZf4oWs1hUaFede08=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Apr 24 18:37:39 2025 GMT Not After : May 1 18:37:39 2025 GMT Subject: CN=680a84f3-d32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:ad:e1:37:40:6e:72:a1:d9:75:77:c4:23: a4:ac:30:3e:72:c2:8a:f4:40:91:a5:fd:63:9b:6f: 5a:53:0f:8b:d9:34:dc:65:b5:b0:df:ed:2a:56:cb: 89:19:dd:58:9b:9d:b9:88:7f:c6:94:3e:58:2c:85: e1:fe:e8:ac:5f:dd:49:0d:77:7e:a1:cd:d4:db:15: cf:28:cc:c9:e9:86:54:22:72:1f:19:3a:22:65:49: 8b:66:4c:3f:3e:aa:66:66:3c:97:81:c7:93:a6:a3: e9:3c:d8:0d:e4:ac:cd:5a:13:93:46:cc:01:9b:18: af:2e:12:94:a7:cf:39:34:29:e5:3f:bf:cd:f1:8c: d7:59:d7:73:7f:b5:ee:7d:55:30:60:0b:56:54:3d: 85:6b:90:20:91:bd:2d:12:47:12:cd:a7:75:b2:c2: 20:e3:a3:de:0d:e8:69:e1:a2:f1:1a:61:6e:7a:16: c6:45:ec:5e:a9:83:68:81:f8:3d:77:48:82:2a:f1: e8:18:f8:01:f4:97:71:9a:9d:97:87:f1:e7:22:e8: c1:9d:50:20:de:cb:72:ad:9f:5b:eb:7e:01:45:2a: de:56:06:fa:6e:4b:f7:bc:a3:5e:97:f2:ea:7e:31: 75:a4:f6:3d:ec:56:e2:ef:17:2d:bb:3f:c4:6e:bf: a1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9B:63:C0:2F:71:9D:41:38:BD:18:24:C5:0B:A7:D0:E0:BF:4E:D9 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:cb:8a:75:e9:f9:90:eb:52:bd:24:c2:b5:1b:f9:0a:fd:e1: 14:b8:cd:13:14:2a:f3:e2:8b:82:57:6a:77:b4:b9:03:d9:d7: 26:19:95:31:48:a1:d6:15:2a:17:f8:44:59:ea:3b:0c:05:53: 97:e8:d0:f5:51:98:c1:ea:6e:a7:98:84:d0:84:28:04:97:f2: e8:68:fa:9f:3e:fd:c0:63:bd:2b:0e:0e:d0:f6:91:4e:fb:8a: a8:62:67:ad:07:36:23:45:e4:db:cb:62:ea:63:1a:75:42:6c: f9:c9:51:28:45:09:8d:20:c7:e7:ac:1e:56:a2:eb:96:e8:d9: 67:df:78:2d:57:27:bd:70:f0:3a:a7:0e:fd:78:bd:5b:45:a6: 49:71:b1:2d:da:70:41:d4:46:0c:db:28:e8:22:11:79:2c:6b: 2e:20:d2:5c:91:76:df:fe:6b:6a:0d:4a:38:79:43:9b:b7:77: 13:99:e4:2c:a3:5c:b1:78:b7:8e:87:af:4f:77:61:4d:e1:ea: d1:18:bb:63:b0:d8:c3:71:36:ce:b6:32:e0:5a:a0:ff:9d:51: e2:55:9e:b2:46:ff:36:bd:f0:06:0b:6c:97:f9:9c:2d:89:65: 63:96:a1:1f:94:87:cd:f7:e5:5d:38:00:b6:11:9a:20:a0:7e: a8:53:8f:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUwNDI0MTgzNzM5WhcNMjUwNTAxMTgzNzM5WjAYMRYwFAYD VQQDEw02ODBhODRmMy1kMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5at4TdAbnKh2XV3xCOkrDA+csKK9ECRpf1jm29aUw+L2TTcZbWw3+0qVsuJ Gd1Ym525iH/GlD5YLIXh/uisX91JDXd+oc3U2xXPKMzJ6YZUInIfGToiZUmLZkw/ PqpmZjyXgceTpqPpPNgN5KzNWhOTRswBmxivLhKUp885NCnlP7/N8YzXWddzf7Xu fVUwYAtWVD2Fa5Agkb0tEkcSzad1ssIg46PeDehp4aLxGmFuehbGRexeqYNogfg9 d0iCKvHoGPgB9Jdxmp2Xh/HnIujBnVAg3styrZ9b634BRSreVgb6bkv3vKNel/Lq fjF1pPY97Fbi7xctuz/Ebr+hgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMObY8Av cZ1BOL0YJMULp9Dgv07ZMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjy4p16fmQ61K9JMK1G/kK/eEUuM0TFCrz4ouCV2p3tLkD2dcmGZUx SKHWFSoX+ERZ6jsMBVOX6ND1UZjB6m6nmITQhCgEl/LoaPqfPv3AY70rDg7Q9pFO +4qoYmetBzYjReTby2LqYxp1Qmz5yVEoRQmNIMfnrB5WouuW6Nln33gtVye9cPA6 pw79eL1bRaZJcbEt2nBB1EYM2yjoIhF5LGsuINJckXbf/mtqDUo4eUObt3cTmeQs o1yxeLeOh69Pd2FN4erRGLtjsNjDcTbOtjLgWqD/nVHiVZ6yRv82vfAGC2yX+Zwt iWVjlqEflIfN9+VdOAC2EZogoH6oU49C -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:50 2025 by rpki-client