$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft File: v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json) Hash identifier: iqSZTIAFN+HC9T/nyR/GJCVVjes2gc3EfGik2qdWtlA= Subject key identifier: C1:44:B5:DE:EF:27:5C:11:3B:22:1D:A9:52:24:98:50:33:96:08:60 Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 Certificate issuer: /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft Manifest number: D4 Signing time: Fri 25 Apr 2025 04:39:49 +0000 Manifest this update: Fri 25 Apr 2025 04:39:49 +0000 Manifest next update: Fri 02 May 2025 04:39:49 +0000 Files and hashes: 1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: fKr9uDX1s6WBshOnvkEAraUZJ3LLlkwoTzD651Q9Bi4=) 2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: SDPNisnSYRGvj5gVjzP5feJ+X0hwI7v9EIoicUEp2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Validity Not Before: Apr 25 04:39:49 2025 GMT Not After : May 2 04:39:49 2025 GMT Subject: CN=680b1215-a541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:41:75:f9:78:bc:ae:64:ca:52:a5:c5:3f:33: 92:3d:86:93:2c:d3:27:41:19:20:71:1d:3f:19:58: 22:13:66:6e:aa:a2:c6:ca:6c:36:e9:c8:f9:fa:79: ab:2d:d2:ea:88:1f:d5:47:d4:74:c6:7b:03:f9:b4: 72:a4:b2:05:06:84:4d:36:19:2d:91:5b:f0:1c:d7: 62:1b:a4:8b:95:43:ad:d7:7f:b7:bb:36:95:7b:42: 38:0f:8b:91:45:81:90:6e:74:03:03:5d:94:de:f6: 7a:c0:ad:b2:b7:60:bc:46:70:11:a1:0a:fc:fc:9d: b7:54:82:5b:b5:3f:37:cc:e8:ab:f5:d0:8d:25:e8: 7c:e7:1b:73:60:1a:22:d2:b5:d3:4e:85:e4:e6:20: 7f:82:e2:d7:31:31:a4:fa:db:36:7c:11:0f:b2:f7: b2:44:9a:8a:b9:80:06:0b:c7:f1:57:c1:d9:91:d9: 3b:c2:73:75:1e:0c:41:b8:e9:56:86:10:44:e4:d6: 62:cd:08:41:43:9e:18:63:47:3c:ba:3e:24:a4:e5: d7:9f:c5:53:26:f3:a3:e6:71:e5:f2:a5:0e:97:27: 95:b9:e4:70:25:8c:e5:1c:8a:1e:58:9b:41:da:25: af:4c:df:b3:10:cc:dc:fb:f2:d0:4c:fd:57:83:eb: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:44:B5:DE:EF:27:5C:11:3B:22:1D:A9:52:24:98:50:33:96:08:60 X509v3 Authority Key Identifier: keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6c:2b:b2:9a:30:cb:79:47:85:0d:f2:48:38:87:ff:d6:ea: 43:25:1d:89:87:85:6b:b8:65:58:f6:9e:21:a9:f4:47:ff:d4: 7e:37:2c:c4:e9:67:48:3e:3b:9a:7e:e0:57:24:ad:ed:1a:d1: 88:c1:d7:cd:31:8d:d7:61:b3:59:4f:6c:3c:29:ee:d8:3d:b7: cc:f9:5d:0c:cc:05:56:90:94:8d:e1:92:54:a4:e5:bd:5c:b7: d1:e5:72:72:c9:88:35:69:78:1e:5b:7f:3e:e6:10:48:9e:43: 38:82:15:f1:de:62:d2:e4:9c:6a:78:84:d1:8c:65:e0:69:05: 5c:ca:19:d0:bc:5f:50:a8:da:0f:27:aa:38:72:74:ea:e8:09: 1e:61:c7:bb:9f:cb:ae:95:17:77:59:2f:10:fa:be:64:8c:19: 1e:71:87:24:3c:be:0f:6e:97:e7:c0:10:65:61:75:5b:bc:a8: 43:01:35:39:1a:71:0c:70:de:b1:dd:ab:86:da:ae:8a:d8:6f: ff:ae:9c:3b:ae:11:ac:6a:ab:b8:55:c8:a5:e5:38:08:84:ce: 4c:20:c7:a0:45:f9:7f:d8:1b:0e:3c:a3:77:76:a7:ae:6f:de: 73:cc:18:4d:22:ed:2a:42:65:90:b7:01:f7:2b:24:0d:f0:0e: 4f:24:29:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKEJGRjU4MTUxMThDM0JDREQ4RDVBQzIzMTdEQkJDRkEz OTk3RTM1RjYwHhcNMjUwNDI1MDQzOTQ5WhcNMjUwNTAyMDQzOTQ5WjAYMRYwFAYD VQQDEw02ODBiMTIxNS1hNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10F1+Xi8rmTKUqXFPzOSPYaTLNMnQRkgcR0/GVgiE2ZuqqLGymw26cj5+nmr LdLqiB/VR9R0xnsD+bRypLIFBoRNNhktkVvwHNdiG6SLlUOt13+3uzaVe0I4D4uR RYGQbnQDA12U3vZ6wK2yt2C8RnARoQr8/J23VIJbtT83zOir9dCNJeh85xtzYBoi 0rXTToXk5iB/guLXMTGk+ts2fBEPsveyRJqKuYAGC8fxV8HZkdk7wnN1HgxBuOlW hhBE5NZizQhBQ54YY0c8uj4kpOXXn8VTJvOj5nHl8qUOlyeVueRwJYzlHIoeWJtB 2iWvTN+zEMzc+/LQTP1Xg+sjawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFEtd7v J1wROyIdqVIkmFAzlghgMB8GA1UdIwQYMBaAFL/1gVEYw7zdjVrCMX27z6OZfjX2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9EREM5NDJBQURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZOMk5Xc0l4ZmJ2UG81bC1O ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZfV0JVUmpEdk4yTldzSXhmYnZQbzVsLU5mWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9EREM5NDJBQURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZO Mk5Xc0l4ZmJ2UG81bC1OZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKbCuymjDLeUeFDfJIOIf/1upDJR2Jh4VruGVY9p4hqfRH/9R+NyzE 6WdIPjuafuBXJK3tGtGIwdfNMY3XYbNZT2w8Ke7YPbfM+V0MzAVWkJSN4ZJUpOW9 XLfR5XJyyYg1aXgeW38+5hBInkM4ghXx3mLS5JxqeITRjGXgaQVcyhnQvF9QqNoP J6o4cnTq6AkeYce7n8uulRd3WS8Q+r5kjBkecYckPL4PbpfnwBBlYXVbvKhDATU5 GnEMcN6x3auG2q6K2G//rpw7rhGsaqu4Vcil5TgIhM5MIMegRfl/2BsOPKN3dqeu b95zzBhNIu0qQmWQtwH3KyQN8A5PJCk5 -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:49 2025 by rpki-client