$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft File: Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json) Hash identifier: OQqAkaUWA2eilw4ckZ8Pz8jet85HElclT2OqD9fLwcI= Subject key identifier: 18:52:C3:CE:27:B9:0A:23:E9:3C:DE:93:DB:CA:51:F6:F2:F8:FB:C8 Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB Certificate issuer: /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft Manifest number: 4F Signing time: Fri 25 Apr 2025 06:17:11 +0000 Manifest this update: Fri 25 Apr 2025 06:17:11 +0000 Manifest next update: Fri 02 May 2025 06:17:11 +0000 Files and hashes: 1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: SIuJycEoKJ1Md/+j5emeXaYiO/VfhcvrLeyzAIfRGHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB Validity Not Before: Apr 25 06:17:11 2025 GMT Not After : May 2 06:17:11 2025 GMT Subject: CN=680b28e7-3990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4e:05:18:f0:d6:42:5a:78:a4:1a:f4:8c:66: 6e:d2:cd:63:ae:27:d0:aa:db:b5:9f:7b:72:e3:5d: 5b:0a:eb:b7:1d:d6:d7:93:72:b6:a4:08:0a:de:ab: 6d:61:8c:84:69:34:7f:02:cb:d4:57:0c:fa:35:31: 70:12:e9:aa:2a:91:fa:b2:e7:8d:b8:03:47:ad:34: c8:8e:29:13:ee:b5:71:d8:76:71:6a:1e:02:f2:42: ac:7f:ba:64:8c:13:7d:34:ab:57:5e:9d:91:b8:bd: be:5a:92:c1:68:01:89:7f:4c:d9:aa:b3:87:10:f0: e7:4c:04:e4:b0:30:d3:df:55:3b:10:4a:50:8b:51: 0d:21:f1:20:6a:8c:aa:03:75:ec:ec:a7:bd:7e:9b: 19:45:b4:29:b4:32:bd:af:a3:51:15:68:7c:3d:c4: 27:5a:bf:a7:00:f0:4b:a9:fb:85:54:35:7e:c0:e0: 3f:01:11:1b:1d:b9:00:8f:7b:12:fa:df:1e:c9:7c: b3:50:87:d6:0f:8d:07:66:12:d7:78:a0:cc:b0:82: 97:b5:5d:33:b8:63:7c:e4:84:de:2a:b4:b7:1e:51: 6e:81:e9:03:0e:df:28:ec:32:46:d6:79:89:cd:3f: 97:85:0d:bc:de:49:27:2c:d5:5f:8c:07:30:1e:81: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:C3:CE:27:B9:0A:23:E9:3C:DE:93:DB:CA:51:F6:F2:F8:FB:C8 X509v3 Authority Key Identifier: keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c0:07:3f:eb:98:cd:3d:a8:f3:58:98:e0:4d:af:9a:4e:26: 78:33:f6:fd:19:62:ab:24:e1:54:c9:23:d4:59:91:db:ee:2a: bc:eb:90:3d:bf:47:6d:78:64:87:0c:d7:f0:c5:34:c0:fa:5e: 74:91:42:b4:61:cc:aa:40:19:5e:32:6d:dc:53:4c:20:a5:f8: 6b:5f:66:ae:7b:87:6d:5e:28:0c:b0:f8:91:77:b3:6b:7e:69: 37:ce:67:2b:6f:44:2e:f6:b2:5e:6d:7c:96:2b:00:cb:06:92: 08:f6:9e:be:44:da:c7:90:be:f8:02:bb:68:ae:19:c0:ee:b3: e1:13:99:ce:57:ad:cb:fe:e3:4a:8c:c3:5f:8f:22:a8:97:b1: b7:7e:0b:98:80:26:44:a1:18:0f:58:19:2b:2f:69:e2:ab:0b: e6:63:f3:8a:0c:fd:3a:be:24:39:4c:d7:ac:f6:5b:df:7a:2e: af:7e:bc:17:66:c0:8b:98:63:58:db:7e:09:fe:69:cc:91:4a: 53:d0:cb:02:f7:13:8b:08:50:6f:96:4d:84:7a:58:51:94:1e: 53:0b:c4:b9:bb:7b:7f:97:fe:81:e8:b9:57:43:46:6e:bd:10: 88:6e:51:c4:66:b3:40:98:1b:30:19:44:fc:a3:b8:6e:80:23: 3e:b9:24:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFDNTExMC8GA1UEBRMoNUFFRDA1QTY0Mjc2NDEwODFBRkNFODRGNjk3MjVFQzg1 NkEwQTRFQjAeFw0yNTA0MjUwNjE3MTFaFw0yNTA1MDIwNjE3MTFaMBgxFjAUBgNV BAMTDTY4MGIyOGU3LTM5OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYTgUY8NZCWnikGvSMZm7SzWOuJ9Cq27Wfe3LjXVsK67cd1teTcrakCAreq21h jIRpNH8Cy9RXDPo1MXAS6aoqkfqy5424A0etNMiOKRPutXHYdnFqHgLyQqx/umSM E300q1denZG4vb5aksFoAYl/TNmqs4cQ8OdMBOSwMNPfVTsQSlCLUQ0h8SBqjKoD dezsp71+mxlFtCm0Mr2vo1EVaHw9xCdav6cA8Eup+4VUNX7A4D8BERsduQCPexL6 3x7JfLNQh9YPjQdmEtd4oMywgpe1XTO4Y3zkhN4qtLceUW6B6QMO3yjsMkbWeYnN P5eFDbzeSScs1V+MBzAegas/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGFLDzie5 CiPpPN6T28pR9vL4+8gwHwYDVR0jBBgwFoAUWu0FpkJ2QQga/OhPaXJeyFagpOsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUM1L0NCOUFENUY2QUJE QTExRUZBMUMxNEU3NkM0RjlBRTAyL1d1MEZwa0oyUVFnYV9PaFBhWEpleUZhZ3BP cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3UwRnBrSjJRUWdhX09oUGFYSmV5RmFncE9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE QUM1L0NCOUFENUY2QUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyL1d1MEZwa0oyUVFn YV9PaFBhWEpleUZhZ3BPcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGvABz/rmM09qPNYmOBNr5pOJngz9v0ZYqsk4VTJI9RZkdvuKrzrkD2/ R214ZIcM1/DFNMD6XnSRQrRhzKpAGV4ybdxTTCCl+GtfZq57h21eKAyw+JF3s2t+ aTfOZytvRC72sl5tfJYrAMsGkgj2nr5E2seQvvgCu2iuGcDus+ETmc5Xrcv+40qM w1+PIqiXsbd+C5iAJkShGA9YGSsvaeKrC+Zj84oM/Tq+JDlM16z2W996Lq9+vBdm wIuYY1jbfgn+acyRSlPQywL3E4sIUG+WTYR6WFGUHlMLxLm7e3+X/oHouVdDRm69 EIhuUcRms0CYGzAZRPyjuG6AIz65JNs= -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:46 2025 by rpki-client