$ rpki-client -vvf rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft File: Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft (raw, json) Hash identifier: fLaCp0P0wxDU+cmLClB23nJArwU5OdzYKnC0AJJ63tY= Subject key identifier: C1:89:49:80:5E:3B:AD:75:2D:D2:53:CF:30:B0:9A:B7:CE:02:17:9C Authority key identifier: 5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A Certificate issuer: /CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft Manifest number: 3480 Signing time: Sat 26 Apr 2025 14:53:54 +0000 Manifest this update: Sat 26 Apr 2025 14:53:53 +0000 Manifest next update: Sat 03 May 2025 14:53:53 +0000 Files and hashes: 1: Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl (hash: hgmYaYLk0zqxn0b64fHCl4lVa5kdhYQrBdxM57bUFW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A311, serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A Validity Not Before: Apr 26 14:53:53 2025 GMT Not After : May 3 14:53:53 2025 GMT Subject: CN=680cf382-faf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:b3:35:a8:55:c0:2d:cf:72:87:37:9b:25: 62:f7:90:75:dd:b0:63:00:59:fe:8f:4a:72:b5:42: 4f:a6:9f:5d:6d:9c:33:7d:94:a1:3d:8d:5c:ef:cb: 5a:73:19:1c:80:e1:51:56:61:90:91:c8:9c:9c:c0: 0b:2d:3e:30:97:9d:0d:5f:b7:7b:48:3b:0d:4d:fa: 84:f7:d5:c5:82:05:f0:65:e9:16:2a:34:04:ab:50: 42:8c:67:eb:c9:a9:95:57:8b:79:3c:33:72:76:6d: aa:4a:b6:a6:3c:46:6e:b7:a5:26:60:80:b1:3b:e2: 1f:ba:a6:45:6b:dc:83:1d:9d:21:55:a5:b6:53:68: 45:cb:98:14:76:a5:30:5c:64:ad:d0:74:81:04:d9: 54:62:60:00:c9:78:54:46:19:10:be:ba:b0:fa:48: d2:c9:17:a5:7f:0e:1f:a1:b0:9e:70:6e:fb:65:ce: 07:da:97:9f:b7:b3:d9:d2:dd:34:9b:fc:77:f4:b4: 69:1b:87:6f:1b:01:9e:54:6e:b0:85:ed:42:b7:96: 1c:58:49:73:5c:91:ab:c1:b2:9d:28:8b:6b:34:67: 39:d2:3e:45:d7:a4:88:39:10:17:4e:e3:95:10:c5: 51:c2:04:82:a8:78:38:86:cc:fd:57:57:f7:fd:a8: 64:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:89:49:80:5E:3B:AD:75:2D:D2:53:CF:30:B0:9A:B7:CE:02:17:9C X509v3 Authority Key Identifier: keyid:5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f5:6a:91:b2:88:52:74:31:0c:a2:df:20:3e:bf:98:60:84: eb:4d:54:fc:e6:7e:c0:ce:1e:3e:45:b9:a9:5d:6b:6f:43:87: 31:a5:93:ce:18:6d:18:4e:a5:ad:71:7e:2f:43:ef:41:a1:b8: 91:e1:36:6a:e9:e0:fc:f5:03:81:1b:b8:6a:a3:d8:a1:50:f8: 7e:65:ad:3b:9d:87:e9:e9:d9:a7:b2:df:7b:62:84:c0:e5:61: 10:6d:aa:0a:8f:3b:69:a6:30:c3:c6:e4:c0:fd:91:bc:ea:f5: 90:cd:5a:bf:02:c8:fe:43:33:a4:a3:f3:c1:b5:13:fd:cd:dc: 8c:a9:34:19:8f:5e:ae:92:f8:cb:6b:8a:0f:8f:de:36:93:10: 84:19:40:2d:36:e0:4d:ff:52:d1:b6:ec:b6:77:86:fd:50:e3: c5:53:01:71:4b:bb:d6:c5:60:01:5f:10:5d:b3:7e:9d:18:d8: c3:1a:16:18:89:21:3f:62:c5:72:56:09:dc:e5:0c:9f:c8:be: be:20:98:3f:d7:8e:8c:49:02:43:02:d9:71:7e:5f:f7:ef:c5: 1b:1c:87:f5:38:42:e0:09:81:21:a1:db:57:13:51:0a:10:44: d6:d0:e3:2f:f4:38:c1:4f:f8:f1:c4:4d:49:7f:d3:00:5d:e3: b8:de:df:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzMTExMTAvBgNVBAUTKDVBMUUyRTM5OEMzMDZFRjFERkY0QzA2RUZDQUFGNkUz NDI2M0IxMkEwHhcNMjUwNDI2MTQ1MzUzWhcNMjUwNTAzMTQ1MzUzWjAYMRYwFAYD VQQDEw02ODBjZjM4Mi1mYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1W6zNahVwC3Pcoc3myVi95B13bBjAFn+j0pytUJPpp9dbZwzfZShPY1c78ta cxkcgOFRVmGQkcicnMALLT4wl50NX7d7SDsNTfqE99XFggXwZekWKjQEq1BCjGfr yamVV4t5PDNydm2qSramPEZut6UmYICxO+IfuqZFa9yDHZ0hVaW2U2hFy5gUdqUw XGSt0HSBBNlUYmAAyXhURhkQvrqw+kjSyRelfw4fobCecG77Zc4H2peft7PZ0t00 m/x39LRpG4dvGwGeVG6whe1Ct5YcWElzXJGrwbKdKItrNGc50j5F16SIORAXTuOV EMVRwgSCqHg4hsz9V1f3/ahkiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGJSYBe O611LdJTzzCwmrfOAhecMB8GA1UdIwQYMBaAFFoeLjmMMG7x3/TAbvyq9uNCY7Eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTMxMS8zRTZGODU4QzFE OTkxMUUyODUxMERDODMwOEIwMkNEMi9XaDR1T1l3d2J2SGY5TUJ1X0tyMjQwSmpz U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doNHVPWXd3YnZIZjlNQnVfS3IyNDBKanNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTMxMS8zRTZGODU4QzFEOTkxMUUyODUxMERDODMwOEIwMkNEMi9XaDR1T1l3d2J2 SGY5TUJ1X0tyMjQwSmpzU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB9WqRsohSdDEMot8gPr+YYITrTVT85n7Azh4+RbmpXWtvQ4cxpZPO GG0YTqWtcX4vQ+9BobiR4TZq6eD89QOBG7hqo9ihUPh+Za07nYfp6dmnst97YoTA 5WEQbaoKjztppjDDxuTA/ZG86vWQzVq/Asj+QzOko/PBtRP9zdyMqTQZj16ukvjL a4oPj942kxCEGUAtNuBN/1LRtuy2d4b9UOPFUwFxS7vWxWABXxBds36dGNjDGhYY iSE/YsVyVgnc5QyfyL6+IJg/146MSQJDAtlxfl/378UbHIf1OELgCYEhodtXE1EK EETW0OMv9DjBT/jxxE1Jf9MAXeO43t/F -----END CERTIFICATE-----Generated at Sat Apr 26 17:51:18 2025 by rpki-client