$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json) Hash identifier: drEoTWCiCcAEwiah5vn4XUe0jV5K+2FpbR9lurvaFEc= Subject key identifier: 45:88:B3:0D:C6:6D:F0:A7:32:6C:71:A3:E7:06:DE:0B:C9:5B:96:C4 Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft Manifest number: 0160 Signing time: Fri 25 Apr 2025 03:08:13 +0000 Manifest this update: Fri 25 Apr 2025 03:08:13 +0000 Manifest next update: Fri 02 May 2025 03:08:13 +0000 Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: 3E4jzwwwJ2vex2WpTlfMiUTwpBq1bNl3QIX2sHUcA+c=) 2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: CtHJodJQnL5Xz0yuYtNWAz2VQ1bux6VI2UVz4UoYjHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Validity Not Before: Apr 25 03:08:13 2025 GMT Not After : May 2 03:08:13 2025 GMT Subject: CN=680afc9d-3f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:fb:0e:d6:89:40:e6:70:a7:be:51:c8:73: 45:c9:2d:d0:28:13:4f:12:84:65:bd:27:02:ea:a1: 04:e0:9f:9e:7c:78:bb:bb:00:b6:a4:01:7a:63:a5: aa:b6:99:f9:ed:49:c5:dd:24:ab:30:4a:8c:bb:7d: 56:7f:76:5b:49:6d:67:98:de:7c:39:87:98:83:95: 42:1f:79:d7:bf:d2:6a:e9:91:1c:f4:2e:89:4b:38: ee:20:af:75:bf:f2:a7:9b:2a:4f:6b:db:80:23:d9: bd:8c:f5:39:1d:35:48:f0:82:cf:f4:32:3d:21:84: 7c:fc:ba:b5:78:98:b8:99:47:00:c3:f6:9a:e8:b7: cc:3a:4f:0f:f7:1f:59:e2:69:ff:75:f3:38:0e:b2: 7b:40:74:e1:cf:8a:64:a4:c7:3e:6f:8e:a4:9d:e6: 2d:15:2a:c2:07:d6:44:c8:c8:c2:b2:03:21:5e:41: fa:39:80:0d:78:e3:85:10:45:ba:66:2a:33:99:58: 5b:c4:35:d7:d6:40:74:79:22:79:e2:ab:0d:37:13: f3:d8:09:52:28:74:5c:c5:b4:48:5d:c2:0b:20:34: 19:2d:07:92:ac:bb:28:e0:65:79:65:c8:f0:32:e0: 3e:04:47:28:40:65:9b:d3:45:46:7e:02:a9:5a:ce: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:88:B3:0D:C6:6D:F0:A7:32:6C:71:A3:E7:06:DE:0B:C9:5B:96:C4 X509v3 Authority Key Identifier: keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e2:01:c6:d2:2f:d6:39:cb:df:24:5f:14:25:6c:da:9d:8d: 85:c8:0e:88:27:34:5f:e3:fd:f6:8a:91:a9:4c:11:2c:0d:3e: e6:ec:e8:f5:5b:a0:54:bd:03:52:d6:d4:20:fc:d1:21:50:8d: 60:aa:43:40:04:60:c8:bb:56:85:23:7e:9e:80:fb:f1:03:2e: 49:d4:75:6a:cb:63:68:cb:1a:ea:f0:72:e4:fa:a4:18:4b:a6: 68:a7:16:b1:91:2f:28:c1:0a:a7:b8:dc:52:1b:90:6e:7d:f0: 5b:e4:fa:b3:9f:9d:32:04:be:56:6f:ff:69:ed:57:06:25:24: b0:48:1e:a5:6b:1b:cc:2b:67:07:c2:49:f9:28:dc:3e:55:72: 03:a0:ab:32:75:5f:40:02:60:68:22:66:2f:d4:11:18:06:12: 86:88:70:6d:9f:2f:be:f6:43:32:6e:f3:80:30:24:72:5a:64: f5:a8:61:99:d5:e9:a3:47:59:73:66:3c:fb:fe:41:e1:ce:d3: c5:4b:cc:c7:99:26:d2:0d:71:ff:be:0d:61:76:cf:c9:56:6e: 9b:78:84:60:db:3b:a4:d5:b8:52:9f:5b:d8:38:0b:67:66:68: 6f:85:da:f6:aa:fe:fc:c9:9a:d3:60:60:dd:7a:1c:fe:47:72: 8e:92:1f:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGRDAxMTAvBgNVBAUTKDU5QjZENkNENzMwNUYyREVFQzJCOEU2MTNDNUQ4RjQ5 NDI1RTAwMzkwHhcNMjUwNDI1MDMwODEzWhcNMjUwNTAyMDMwODEzWjAYMRYwFAYD VQQDEw02ODBhZmM5ZC0zZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRL7DtaJQOZwp75RyHNFyS3QKBNPEoRlvScC6qEE4J+efHi7uwC2pAF6Y6Wq tpn57UnF3SSrMEqMu31Wf3ZbSW1nmN58OYeYg5VCH3nXv9Jq6ZEc9C6JSzjuIK91 v/KnmypPa9uAI9m9jPU5HTVI8ILP9DI9IYR8/Lq1eJi4mUcAw/aa6LfMOk8P9x9Z 4mn/dfM4DrJ7QHThz4pkpMc+b46kneYtFSrCB9ZEyMjCsgMhXkH6OYANeOOFEEW6 ZiozmVhbxDXX1kB0eSJ54qsNNxPz2AlSKHRcxbRIXcILIDQZLQeSrLso4GV5Zcjw MuA+BEcoQGWb00VGfgKpWs7CowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWIsw3G bfCnMmxxo+cG3gvJW5bEMB8GA1UdIwQYMBaAFFm21s1zBfLe7CuOYTxdj0lCXgA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUZEMC8zODMzNDQ3ODA5 Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0N3NLNDVoUEYyUFNVSmVB RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1diYld6WE1GOHQ3c0s0NWhQRjJQU1VKZUFEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUZEMC8zODMzNDQ3ODA5Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0 N3NLNDVoUEYyUFNVSmVBRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB4gHG0i/WOcvfJF8UJWzanY2FyA6IJzRf4/32ipGpTBEsDT7m7Oj1 W6BUvQNS1tQg/NEhUI1gqkNABGDIu1aFI36egPvxAy5J1HVqy2Noyxrq8HLk+qQY S6ZopxaxkS8owQqnuNxSG5BuffBb5Pqzn50yBL5Wb/9p7VcGJSSwSB6laxvMK2cH wkn5KNw+VXIDoKsydV9AAmBoImYv1BEYBhKGiHBtny++9kMybvOAMCRyWmT1qGGZ 1emjR1lzZjz7/kHhztPFS8zHmSbSDXH/vg1hds/JVm6beIRg2zuk1bhSn1vYOAtn Zmhvhdr2qv78yZrTYGDdehz+R3KOkh+Y -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:43 2025 by rpki-client