$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: XF32a8BVnfUzsqqTEycxX6N0wiKJjBx19RD0fS5IZ0M= Subject key identifier: 09:A5:F2:F5:4A:25:5A:61:C8:30:DD:22:99:A0:9F:79:11:8E:D2:A9 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: 41 Signing time: Fri 25 Apr 2025 06:26:35 +0000 Manifest this update: Fri 25 Apr 2025 06:26:35 +0000 Manifest next update: Fri 02 May 2025 06:26:35 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: 1LEFap+SWThOr71mv+xFptxAThyqvxmcBlUtZCv/qVU=) 2: 853312D2C0DD11EFB5F0D24AC4F9AE02.roa (hash: FGrsxVel52tLC2c3tTf2jw58e+atsnyXCQDnNztZqg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Apr 25 06:26:35 2025 GMT Not After : May 2 06:26:35 2025 GMT Subject: CN=680b2b1b-5401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:c2:5f:57:fa:04:bf:32:39:90:25:a1:b0: 1a:69:55:88:85:e0:72:14:36:80:88:97:57:da:9d: 6e:18:7b:93:68:ba:b3:c8:40:1f:df:58:4e:c0:e1: de:59:ee:f4:97:3e:cb:91:ca:86:dc:91:1e:fa:97: b9:7d:54:03:6e:5a:40:12:a3:46:5e:da:8a:5d:07: b8:d2:c5:6d:95:b3:47:6f:33:4f:b5:e5:65:88:de: f6:b3:63:aa:b9:88:cf:75:5a:1e:27:30:f8:e3:92: 6d:c7:86:5f:d2:f5:12:e9:75:85:ca:e3:9b:fc:9e: 83:85:d9:31:02:6b:2a:ce:2d:f3:cc:ef:64:3c:75: 3f:27:0e:85:13:76:8b:3c:05:6b:82:29:23:f0:2b: fb:84:51:4e:5d:84:5d:2d:a4:16:ac:22:e6:56:a4: 87:4b:9d:48:84:72:c1:1f:07:56:44:f3:47:00:ce: 1a:1a:47:ca:49:fb:31:05:89:8d:c3:22:9e:8a:dd: 52:4a:d8:79:33:78:ac:79:8c:68:bc:eb:a5:0c:d5: b9:b8:83:6f:61:3f:2e:e0:ae:3e:c0:15:73:02:eb: 6c:2f:03:97:fc:90:46:c5:05:50:51:49:d3:45:36: d6:5c:a8:78:73:b4:08:45:f3:ed:4a:f5:a5:c3:4b: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A5:F2:F5:4A:25:5A:61:C8:30:DD:22:99:A0:9F:79:11:8E:D2:A9 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:34:ba:15:5a:e1:ea:61:82:69:41:0c:39:80:30:1c:90:f8: 9d:89:ed:9f:7a:04:8a:16:b9:a5:a6:22:d2:3e:94:c2:5b:38: 97:e9:d9:26:18:95:de:7b:84:14:2a:fe:30:aa:7a:65:f9:a3: ba:a2:68:ee:19:69:71:d3:47:2f:be:1f:19:6d:c5:16:83:91: 8e:1a:e0:c5:75:3e:d3:65:e2:52:19:ee:e3:5c:33:0f:30:f3: 95:44:5b:45:c5:8a:ed:50:91:86:d0:5b:3a:f4:4e:05:2d:b6: b2:40:b8:f7:68:4e:47:c1:c7:52:f9:9d:b6:34:1d:9f:0e:d9: f5:25:c2:59:e7:80:ce:aa:06:cc:f9:01:16:16:3a:a0:71:54: af:f6:a4:5b:73:41:ed:13:26:c9:81:52:41:cb:fe:94:0f:46: d1:34:78:05:15:d2:4d:7c:8d:0a:ef:63:87:e6:af:cc:1c:cc: 73:fd:43:a0:92:cd:ea:7c:f7:7b:d7:c7:12:0d:25:c2:a2:dd: 4e:c5:5d:f0:54:da:95:28:50:21:ca:0e:c8:a5:7a:df:33:c3: 97:63:a7:95:d1:82:70:36:b9:4f:d2:0f:5f:10:5b:51:b3:11: 7d:8c:aa:23:ec:cc:93:03:f3:24:49:3d:75:26:ec:76:aa:1b: aa:e2:6d:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzkwOTExMC8GA1UEBRMoNTlGOUQ0OEREOTE2OTA5NzgzRTMxNzcxRDhBRDdFQ0Iz MERDM0JBMjAeFw0yNTA0MjUwNjI2MzVaFw0yNTA1MDIwNjI2MzVaMBgxFjAUBgNV BAMTDTY4MGIyYjFiLTU0MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa7MJfV/oEvzI5kCWhsBppVYiF4HIUNoCIl1fanW4Ye5NourPIQB/fWE7A4d5Z 7vSXPsuRyobckR76l7l9VANuWkASo0Ze2opdB7jSxW2Vs0dvM0+15WWI3vazY6q5 iM91Wh4nMPjjkm3Hhl/S9RLpdYXK45v8noOF2TECayrOLfPM72Q8dT8nDoUTdos8 BWuCKSPwK/uEUU5dhF0tpBasIuZWpIdLnUiEcsEfB1ZE80cAzhoaR8pJ+zEFiY3D Ip6K3VJK2HkzeKx5jGi866UM1bm4g29hPy7grj7AFXMC62wvA5f8kEbFBVBRSdNF NtZcqHhztAhF8+1K9aXDS7iLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCaXy9Uol WmHIMN0imaCfeRGO0qkwHwYDVR0jBBgwFoAUWfnUjdkWkJeD4xdx2K1+yzDcO6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOTA5L0ZGN0M1RkRDQzBE QjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2ZuVWpka1drSmVENHhkeDJLMS15ekRjTzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD OTA5L0ZGN0M1RkRDQzBEQjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0pl RDR4ZHgySzEteXpEY082SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAk0uhVa4ephgmlBDDmAMByQ+J2J7Z96BIoWuaWmItI+lMJbOJfp2SYY ld57hBQq/jCqemX5o7qiaO4ZaXHTRy++HxltxRaDkY4a4MV1PtNl4lIZ7uNcMw8w 85VEW0XFiu1QkYbQWzr0TgUttrJAuPdoTkfBx1L5nbY0HZ8O2fUlwlnngM6qBsz5 ARYWOqBxVK/2pFtzQe0TJsmBUkHL/pQPRtE0eAUV0k18jQrvY4fmr8wczHP9Q6CS zep893vXxxINJcKi3U7FXfBU2pUoUCHKDsilet8zw5djp5XRgnA2uU/SD18QW1Gz EX2MqiPszJMD8yRJPXUm7HaqG6ribWk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:55 2025 by rpki-client