$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json) Hash identifier: uG+WobG2tU5yoGPYTJdxZSzH6+uyFZwvz7/zKaHPQg0= Subject key identifier: 97:85:87:90:FB:54:FA:6D:66:66:04:C3:3D:9E:A0:F7:53:BF:18:5F Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft Manifest number: 046E Signing time: Sat 26 Apr 2025 23:45:26 +0000 Manifest this update: Sat 26 Apr 2025 23:45:25 +0000 Manifest next update: Sat 03 May 2025 23:45:25 +0000 Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: JfWPT9Qos2ITc8rzjaSf6F0NED75IKUya/0sapJCpTU=) 2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: mCBDfdCzdMmF0ELlLpacrmjz5gyRnSErCyAUmqRTucg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Validity Not Before: Apr 26 23:45:25 2025 GMT Not After : May 3 23:45:25 2025 GMT Subject: CN=680d7016-1daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:76:c7:26:15:c0:e3:62:14:bf:8c:94:83: 3b:d6:7e:68:33:b8:d7:a6:82:8a:86:16:b9:ef:98: 06:ca:0c:5c:d9:b6:3f:83:6c:f2:9f:50:ce:ff:5a: bd:b5:32:bd:b2:19:c2:2d:75:1a:52:44:09:2a:0c: 18:b2:4c:18:cd:f4:4c:bb:ef:84:a2:ba:38:64:ad: 35:bd:a0:e3:99:b4:2e:68:2a:96:8c:83:63:2f:a2: ef:d1:ab:65:0b:ab:d4:8a:94:97:b7:f0:e8:16:91: e3:6e:bd:07:c4:db:1a:e7:fd:5f:ff:51:af:d0:c4: c8:00:a7:b6:ed:90:b6:c7:a4:34:ef:5f:d1:2e:33: 8b:aa:0c:86:e4:39:35:ff:5c:1b:93:5e:bc:d6:36: 2a:97:80:e2:e4:64:cf:35:db:0a:f7:3a:c5:a8:7c: d8:22:5c:4b:a6:67:1c:e6:69:86:88:4a:a6:3a:98: e9:f3:b2:5b:1b:d3:bb:2f:70:95:a0:2d:83:23:de: db:e1:69:9f:30:d6:ad:18:2f:2e:8c:ec:2f:a3:dc: ce:0f:a4:17:87:44:8d:99:ef:8d:d3:ed:06:5f:64: 13:10:95:92:a7:de:39:7f:f2:fb:2f:0a:6c:28:15: 00:69:d2:12:74:35:11:fd:64:83:a9:d2:bb:21:24: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:85:87:90:FB:54:FA:6D:66:66:04:C3:3D:9E:A0:F7:53:BF:18:5F X509v3 Authority Key Identifier: keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5d:a2:29:03:cd:6f:82:56:5d:09:ac:dc:b2:6c:3c:56:af: 8e:8c:a6:53:af:19:f2:23:70:42:9f:fd:30:f3:54:c8:64:8b: d8:e4:92:e5:43:b5:ac:61:73:e2:1b:c3:f2:28:dc:19:d4:ea: 24:29:11:49:03:4b:d0:57:31:f3:e4:35:d5:dd:3e:10:ff:c6: c9:be:1e:6a:78:b9:47:2b:b2:b1:eb:73:63:19:b1:1c:0d:5b: 33:b6:01:3d:40:4d:b5:f3:f0:21:bc:66:0a:d9:0f:50:af:b2: 35:f9:e7:e7:52:89:f9:30:b5:39:8e:a2:e7:96:7c:8d:4a:49: bf:eb:b2:89:1f:54:37:41:e6:04:66:29:ef:d5:19:02:68:26: e4:f9:87:67:52:53:c8:d4:69:e3:25:35:8d:a9:b7:60:59:fc: cd:50:c4:c3:c1:61:68:2f:c9:21:53:40:20:13:44:fd:99:1f: 66:b2:e0:4f:3f:d4:ac:b9:0b:d6:78:3c:a0:d7:69:39:fa:c2: ff:79:7e:4a:2d:7a:97:19:70:56:23:c5:3e:1b:e7:88:f4:c2: c8:3c:a6:35:15:2d:4f:2b:1f:61:bb:0d:5e:bb:a6:cb:ee:1f: 16:d8:92:95:83:aa:77:d0:4e:ae:91:eb:74:e9:22:4d:23:20: b7:47:2a:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB RDhFQzMxM0QwHhcNMjUwNDI2MjM0NTI1WhcNMjUwNTAzMjM0NTI1WjAYMRYwFAYD VQQDEw02ODBkNzAxNi0xZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h52xyYVwONiFL+MlIM71n5oM7jXpoKKhha575gGygxc2bY/g2zyn1DO/1q9 tTK9shnCLXUaUkQJKgwYskwYzfRMu++Eoro4ZK01vaDjmbQuaCqWjINjL6Lv0atl C6vUipSXt/DoFpHjbr0HxNsa5/1f/1Gv0MTIAKe27ZC2x6Q071/RLjOLqgyG5Dk1 /1wbk1681jYql4Di5GTPNdsK9zrFqHzYIlxLpmcc5mmGiEqmOpjp87JbG9O7L3CV oC2DI97b4WmfMNatGC8ujOwvo9zOD6QXh0SNme+N0+0GX2QTEJWSp945f/L7Lwps KBUAadISdDUR/WSDqdK7ISQ6wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeFh5D7 VPptZmYEwz2eoPdTvxhfMB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS MUFfQUxIRGR1Ui10anNNVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtXaIpA81vglZdCazcsmw8Vq+OjKZTrxnyI3BCn/0w81TIZIvY5JLl Q7WsYXPiG8PyKNwZ1OokKRFJA0vQVzHz5DXV3T4Q/8bJvh5qeLlHK7Kx63NjGbEc DVsztgE9QE218/AhvGYK2Q9Qr7I1+efnUon5MLU5jqLnlnyNSkm/67KJH1Q3QeYE Zinv1RkCaCbk+YdnUlPI1GnjJTWNqbdgWfzNUMTDwWFoL8khU0AgE0T9mR9msuBP P9SsuQvWeDyg12k5+sL/eX5KLXqXGXBWI8U+G+eI9MLIPKY1FS1PKx9huw1eu6bL 7h8W2JKVg6p30E6uket06SJNIyC3Ryo6 -----END CERTIFICATE-----Generated at Sun Apr 27 05:26:56 2025 by rpki-client