$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json) Hash identifier: 9eSuZUe00/hlkGwkyiTyctszj6x1bI87TFrv7/63YR4= Subject key identifier: 8C:85:CD:9B:2C:55:92:23:DF:7E:84:AC:31:E6:98:2C:04:F7:DF:3B Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Certificate serial: 0AD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft Manifest number: 0AC6 Signing time: Thu 24 Apr 2025 19:21:17 +0000 Manifest this update: Thu 24 Apr 2025 19:21:16 +0000 Manifest next update: Thu 01 May 2025 19:21:16 +0000 Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: iawacCJ/aVX9t6ufEQqwnweh/1X0hetu5OXs6fM80WE=) 2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: NhvbCD9rn5wGoBBlBsVdLQee62HOMGx358rKRJj0ugM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2768 (0xad0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F42A, serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Validity Not Before: Apr 24 19:21:16 2025 GMT Not After : May 1 19:21:16 2025 GMT Subject: CN=680a8f2d-ded7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:27:ad:a5:55:6e:1f:60:d3:12:8c:76:d1: bc:53:14:d4:2c:c0:21:a2:11:85:c5:d2:34:5b:48: cc:45:a0:2c:5c:03:1e:6e:d0:ed:e6:86:60:22:af: 6b:42:25:38:4d:dd:43:9e:7f:29:89:af:10:3c:f9: d4:5b:bb:c7:e3:70:24:0c:b6:91:4e:a9:cd:73:8d: 80:56:24:c2:38:b5:14:31:1e:81:62:14:51:e6:0f: 16:9c:55:1f:d0:32:bd:32:e9:78:d5:f9:20:1f:37: 80:93:0a:4a:f5:27:e1:cb:51:fe:91:35:75:a1:cd: 20:97:69:ba:66:2a:00:0a:af:e3:92:b6:8f:cd:a8: 33:3d:b8:50:f8:10:2d:b1:1a:2c:3c:24:60:95:c3: 3e:0b:8a:58:4f:aa:ce:f1:b6:d3:3e:d4:de:92:6f: c0:93:c7:e4:c3:1a:bc:39:70:76:c5:f9:da:4b:6a: 76:67:e2:8f:a5:5f:89:42:6e:f8:94:73:73:96:c9: b7:d3:a0:d7:e2:d3:38:7e:c3:10:2a:45:7f:83:13: a3:ab:04:bf:ba:70:87:bd:df:d5:31:9b:d8:27:ed: 2d:95:14:20:c1:93:33:73:14:cc:c1:6b:54:e7:42: 0b:c0:f0:aa:cb:5b:73:29:14:dc:62:ad:76:16:5b: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:85:CD:9B:2C:55:92:23:DF:7E:84:AC:31:E6:98:2C:04:F7:DF:3B X509v3 Authority Key Identifier: keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4b:2f:bd:fe:d4:42:03:17:37:72:4e:65:fd:f3:ae:a9:0b: 27:ad:6c:1b:14:0c:6c:f6:6d:24:a2:b1:d0:9b:dc:9a:d0:97: 53:25:8f:97:a8:5d:ac:1e:f1:e3:fa:62:cb:e6:20:cf:b1:b7: b3:e6:eb:f3:9a:94:45:c3:03:f9:7b:41:63:f4:bc:82:99:72: f4:2b:e4:ec:da:13:3e:cd:52:44:da:dc:18:a6:bf:48:29:68: 4d:eb:8b:6f:35:69:02:7b:58:e9:1b:98:fc:ff:38:cd:1a:cd: 6c:ff:cd:b7:8d:ac:43:58:ec:eb:4a:9c:3a:c0:7b:5f:4d:dc: 54:c1:82:67:98:a9:e5:70:3b:a6:25:ae:90:3e:53:43:be:d1: 5e:f1:38:8f:0c:0c:70:a4:9d:f1:33:d8:4c:30:13:af:37:45: b9:55:39:ff:f3:c8:a4:4e:f4:f4:4c:4b:38:0f:dc:a6:a0:e4: c7:76:62:ad:3c:7d:c8:c7:03:02:a0:4a:b3:cc:68:00:33:d8: fc:62:e3:c2:e0:44:1a:b2:66:97:c1:47:83:86:82:01:52:8a: d5:86:c9:7e:fb:02:d7:52:79:5b:7c:cb:d3:9b:90:e2:64:03: 3d:6d:71:6b:22:62:fc:fa:8f:8b:22:06:ff:41:bf:ce:15:66: 11:ab:c3:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB RTBBRTEyRDcwHhcNMjUwNDI0MTkyMTE2WhcNMjUwNTAxMTkyMTE2WjAYMRYwFAYD VQQDEw02ODBhOGYyZC1kZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01gnraVVbh9g0xKMdtG8UxTULMAhohGFxdI0W0jMRaAsXAMebtDt5oZgIq9r QiU4Td1Dnn8pia8QPPnUW7vH43AkDLaRTqnNc42AViTCOLUUMR6BYhRR5g8WnFUf 0DK9Mul41fkgHzeAkwpK9Sfhy1H+kTV1oc0gl2m6ZioACq/jkraPzagzPbhQ+BAt sRosPCRglcM+C4pYT6rO8bbTPtTekm/Ak8fkwxq8OXB2xfnaS2p2Z+KPpV+JQm74 lHNzlsm306DX4tM4fsMQKkV/gxOjqwS/unCHvd/VMZvYJ+0tlRQgwZMzcxTMwWtU 50ILwPCqy1tzKRTcYq12FluJkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyFzZss VZIj336ErDHmmCwE9987MB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5 cWNST1cxOEdNQml1Q3VFdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsSy+9/tRCAxc3ck5l/fOuqQsnrWwbFAxs9m0korHQm9ya0JdTJY+X qF2sHvHj+mLL5iDPsbez5uvzmpRFwwP5e0Fj9LyCmXL0K+Ts2hM+zVJE2twYpr9I KWhN64tvNWkCe1jpG5j8/zjNGs1s/823jaxDWOzrSpw6wHtfTdxUwYJnmKnlcDum Ja6QPlNDvtFe8TiPDAxwpJ3xM9hMMBOvN0W5VTn/88ikTvT0TEs4D9ymoOTHdmKt PH3IxwMCoEqzzGgAM9j8YuPC4EQasmaXwUeDhoIBUorVhsl++wLXUnlbfMvTm5Di ZAM9bXFrImL8+o+LIgb/Qb/OFWYRq8Mg -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:34 2025 by rpki-client