$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json) Hash identifier: oxA4NcP0tvHU+nZ2baExk+n8lDBEOCL6thnXgTt2jyw= Subject key identifier: A6:71:56:69:1F:0A:68:40:75:61:53:FB:D6:A0:EA:CF:7B:22:D9:7E Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft Manifest number: 02D3 Signing time: Fri 25 Apr 2025 01:08:42 +0000 Manifest this update: Fri 25 Apr 2025 01:08:41 +0000 Manifest next update: Fri 02 May 2025 01:08:41 +0000 Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: 2WpQuvI4HPGrv4Pvit/Cks288S5/TWwuX8BnxsCTTKc=) 2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: 0dbqZkJLEDn7V9Hw0/4drKsR2U3rKU1wM+bwlHy41IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Validity Not Before: Apr 25 01:08:41 2025 GMT Not After : May 2 01:08:41 2025 GMT Subject: CN=680ae09a-0143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:d9:b6:95:86:78:a7:e3:4a:17:d2:2b:c8: 6f:11:34:92:4c:ec:3e:74:13:03:2d:0f:d4:b4:3b: e7:a3:6b:e7:86:6a:9e:41:73:f9:de:0c:4e:d1:2b: cd:90:01:1d:3f:38:63:82:6a:54:e9:4a:93:4d:2a: aa:7a:12:0a:ff:61:51:2c:f1:b8:71:6c:41:f2:a1: 66:26:56:b5:9c:53:9a:e9:63:97:60:f9:06:f2:06: 91:fd:d5:4c:9d:f2:ba:cc:25:ac:fa:d1:c3:6b:83: 5b:10:6b:53:b4:38:79:d6:fd:1c:d1:71:44:58:ce: 06:90:ca:41:fc:38:73:60:f8:eb:ea:fd:f3:1b:f9: 86:08:33:bb:78:76:1f:31:55:e7:a4:2e:a7:f0:11: 1c:4b:d6:16:13:5b:71:59:26:ce:dc:a3:0b:a3:db: b1:9e:48:92:18:2e:8b:b7:0e:ba:62:5d:f3:27:f6: b1:7b:ea:6f:d4:0f:c3:2e:72:c8:f5:50:2a:46:f2: 76:d2:cd:d0:54:ef:4b:5d:bb:e4:47:ac:b2:d2:93: 84:e9:83:4e:d8:49:97:16:a5:10:de:3a:ef:7a:d2: f8:51:2b:00:21:d5:2b:f4:d9:ba:f8:fc:d3:d1:fd: c5:21:a5:0d:60:50:e0:7e:aa:4e:36:db:57:e3:a8: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:71:56:69:1F:0A:68:40:75:61:53:FB:D6:A0:EA:CF:7B:22:D9:7E X509v3 Authority Key Identifier: keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:89:99:80:f8:6f:f2:ab:5d:c9:85:8d:13:54:f7:49:48:d7: ab:12:75:cc:49:e3:d0:99:e4:0c:93:8b:29:b8:04:95:e4:df: 1e:5a:a4:8f:16:94:34:5b:b0:14:0c:b3:21:b3:16:5b:47:0a: e5:94:6a:50:ac:d1:aa:b9:f2:98:f2:06:46:8f:bd:bc:4b:60: ae:8f:f3:60:0c:b1:fb:c0:d3:5c:34:7b:ae:bf:8d:c4:12:37: c9:52:d0:e9:df:27:5b:a4:50:c1:b7:65:de:02:c0:06:46:25: d8:6f:2a:3c:01:64:ab:0c:38:2b:8b:19:57:e5:61:25:e6:7f: ce:0d:9b:d1:a7:4c:98:25:ca:7f:48:73:bc:60:0e:49:2e:7f: ac:3b:1d:ea:93:ff:a1:05:31:7d:de:07:38:3f:17:f6:31:be: 35:e1:8a:a3:a1:2a:c0:e9:90:60:83:95:8c:f7:72:3b:53:ff: fa:65:e1:54:86:4f:20:c5:4c:f9:fc:5f:fb:9f:a4:31:f2:e1: 47:5c:77:c7:70:fb:7b:cd:c6:47:ad:87:86:c7:90:f9:09:e7: 75:c2:19:0f:a2:44:5c:12:00:d1:67:a8:25:8f:ee:2a:bc:1d: bb:88:54:87:33:ba:a4:a4:fa:27:3e:13:04:0c:a5:98:7d:c5: e4:66:e5:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEMEMxMTAvBgNVBAUTKDVCM0I4QkZCMkM5RjJDRTg4MzUxNUZBM0RDRjlEMUMw Q0ZBRDA3QTQwHhcNMjUwNDI1MDEwODQxWhcNMjUwNTAyMDEwODQxWjAYMRYwFAYD VQQDEw02ODBhZTA5YS0wMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc3ZtpWGeKfjShfSK8hvETSSTOw+dBMDLQ/UtDvno2vnhmqeQXP53gxO0SvN kAEdPzhjgmpU6UqTTSqqehIK/2FRLPG4cWxB8qFmJla1nFOa6WOXYPkG8gaR/dVM nfK6zCWs+tHDa4NbEGtTtDh51v0c0XFEWM4GkMpB/DhzYPjr6v3zG/mGCDO7eHYf MVXnpC6n8BEcS9YWE1txWSbO3KMLo9uxnkiSGC6Ltw66Yl3zJ/axe+pv1A/DLnLI 9VAqRvJ20s3QVO9LXbvkR6yy0pOE6YNO2EmXFqUQ3jrvetL4USsAIdUr9Nm6+PzT 0f3FIaUNYFDgfqpONttX46hwtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZxVmkf CmhAdWFT+9ag6s97Itl+MB8GA1UdIwQYMBaAFFs7i/ssnyzog1Ffo9z50cDPrQek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQwQy9CQTg2QkEyMkUz MkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxPaURVVi1qM1BuUndNLXRC NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d6dUwteXlmTE9pRFVWLWozUG5Sd00tdEI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQwQy9CQTg2QkEyMkUzMkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxP aURVVi1qM1BuUndNLXRCNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMiZmA+G/yq13JhY0TVPdJSNerEnXMSePQmeQMk4spuASV5N8eWqSP FpQ0W7AUDLMhsxZbRwrllGpQrNGqufKY8gZGj728S2Cuj/NgDLH7wNNcNHuuv43E EjfJUtDp3ydbpFDBt2XeAsAGRiXYbyo8AWSrDDgrixlX5WEl5n/ODZvRp0yYJcp/ SHO8YA5JLn+sOx3qk/+hBTF93gc4Pxf2Mb414YqjoSrA6ZBgg5WM93I7U//6ZeFU hk8gxUz5/F/7n6Qx8uFHXHfHcPt7zcZHrYeGx5D5Ced1whkPokRcEgDRZ6glj+4q vB27iFSHM7qkpPonPhMEDKWYfcXkZuWT -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:54 2025 by rpki-client