$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft File: Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json) Hash identifier: JWTQnKybk2bOc7ixZjOFg7CJ535YvI1qfo0eKRPCyOM= Subject key identifier: 12:96:16:39:B4:84:60:49:EB:E7:80:93:14:9D:64:FC:00:22:59:F8 Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB Certificate issuer: /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft Manifest number: 072A Signing time: Thu 24 Apr 2025 22:39:41 +0000 Manifest this update: Thu 24 Apr 2025 22:39:41 +0000 Manifest next update: Thu 01 May 2025 22:39:41 +0000 Files and hashes: 1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: t8U5otypdhlML8DR1W+fchcHWJBbTXR+ySzqBCp/MTs=) 2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: aQsHMdafTipMWqWSV46rK02/G7PlIH4QrZ4xAvLOfVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193235, serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Validity Not Before: Apr 24 22:39:41 2025 GMT Not After : May 1 22:39:41 2025 GMT Subject: CN=680abdad-e7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:a8:68:7d:3a:99:8f:91:b9:d9:d5:14:ad: 26:49:c7:1a:c6:e3:2f:7a:db:8f:b5:ef:6f:72:5e: 28:1f:91:e5:93:fc:6c:e4:44:39:45:e4:61:54:ad: 3d:b8:ca:32:4a:8a:75:a7:a6:42:80:62:a8:48:3b: f4:d7:5a:4d:a6:8e:71:2e:ac:36:bd:db:a2:65:cf: 90:54:c1:37:be:a2:eb:77:89:d5:d5:22:9d:25:d3: 81:92:9a:2d:68:3a:e6:46:53:73:a2:b8:2c:76:42: 9e:c3:24:5e:a4:dc:ea:1e:ff:70:5a:e9:b3:10:93: 6f:ca:fd:d3:d9:bd:18:ee:5c:b1:8c:5c:35:1e:97: 1d:54:3f:07:21:d0:69:2f:e2:72:c8:ef:e4:7c:e4: 39:a8:76:9e:8f:9b:1a:91:e2:69:8f:12:7a:b5:01: d8:9c:b4:1d:38:77:8e:a1:de:58:0f:04:b1:44:dd: 56:52:58:41:f1:bc:96:18:8c:de:c2:20:3d:e8:16: fd:b9:eb:a8:23:a8:2f:d0:5c:3b:db:ab:2c:e3:3e: e9:b0:f0:ba:38:f1:07:4f:82:b3:d6:56:55:a9:21: 60:1d:40:c9:de:b2:0c:d2:b4:f2:27:14:21:e2:87: 9b:7d:d7:52:32:a1:7d:9d:da:f5:a9:64:0b:ae:ff: f7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:96:16:39:B4:84:60:49:EB:E7:80:93:14:9D:64:FC:00:22:59:F8 X509v3 Authority Key Identifier: keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:36:72:92:9c:7a:0d:63:3f:4d:aa:58:6c:4b:9d:49:4e:01: 37:48:ed:f4:c5:a1:b6:6a:27:1a:04:68:f5:f8:0c:e4:ef:ff: 90:6e:71:05:16:d6:11:45:55:8f:67:56:22:91:cd:26:b2:e1: 9f:c6:d8:24:e4:af:1c:c8:e2:5d:2a:dd:ac:ef:3e:2d:03:7f: 8d:ae:6b:ad:3a:60:65:0c:57:60:f2:67:25:d3:41:22:d3:a8: cf:60:51:b8:3e:30:5e:60:f9:f2:c9:c8:0e:83:35:77:28:83: 7f:79:d4:b5:dc:8e:d6:a5:fd:ef:c0:38:84:ef:84:40:5f:73: 60:7f:4c:0c:ad:9f:8b:5b:3f:8d:b9:1e:65:ab:be:3d:88:55: 13:5d:48:35:1b:ba:85:e2:95:9f:53:32:70:ab:8b:bb:f6:bb: 21:cf:58:5f:1b:1d:e1:a0:95:2a:d7:37:3d:49:75:6e:dd:f8: 75:88:4b:cb:f2:2b:09:37:4c:24:aa:85:0a:04:2d:fc:41:ec: ae:f9:0d:df:1d:c3:af:47:8b:f1:e2:b8:ac:ef:6f:71:18:33: c4:cb:a0:6d:59:f3:60:e5:37:7c:5b:22:8c:04:7c:29:53:e8: 5e:80:d6:91:3d:ce:60:c5:fe:8c:7e:f6:2f:32:16:18:01:aa: 78:f2:e3:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyMzUxMTAvBgNVBAUTKDVBNTZGODlGNTA4MTJBODEwRkYyREU4NDU0NzBGMTA5 MjcyNEExQUIwHhcNMjUwNDI0MjIzOTQxWhcNMjUwNTAxMjIzOTQxWjAYMRYwFAYD VQQDEw02ODBhYmRhZC1lN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmWoaH06mY+RudnVFK0mSccaxuMvetuPte9vcl4oH5Hlk/xs5EQ5ReRhVK09 uMoySop1p6ZCgGKoSDv011pNpo5xLqw2vduiZc+QVME3vqLrd4nV1SKdJdOBkpot aDrmRlNzorgsdkKewyRepNzqHv9wWumzEJNvyv3T2b0Y7lyxjFw1HpcdVD8HIdBp L+JyyO/kfOQ5qHaej5sakeJpjxJ6tQHYnLQdOHeOod5YDwSxRN1WUlhB8byWGIze wiA96Bb9ueuoI6gv0Fw726ss4z7psPC6OPEHT4Kz1lZVqSFgHUDJ3rIM0rTyJxQh 4oebfddSMqF9ndr1qWQLrv/39QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKWFjm0 hGBJ6+eAkxSdZPwAIln4MB8GA1UdIwQYMBaAFFpW+J9QgSqBD/LehFRw8QknJKGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzIzNS9BNEZDM0I1QTlG QTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktvRVA4dDZFVkhEeENTY2tv YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsYjRuMUNCS29FUDh0NkVWSER4Q1Nja29hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzIzNS9BNEZDM0I1QTlGQTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktv RVA4dDZFVkhEeENTY2tvYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFNnKSnHoNYz9NqlhsS51JTgE3SO30xaG2aicaBGj1+Azk7/+QbnEF FtYRRVWPZ1Yikc0msuGfxtgk5K8cyOJdKt2s7z4tA3+NrmutOmBlDFdg8mcl00Ei 06jPYFG4PjBeYPnyycgOgzV3KIN/edS13I7Wpf3vwDiE74RAX3Ngf0wMrZ+LWz+N uR5lq749iFUTXUg1G7qF4pWfUzJwq4u79rshz1hfGx3hoJUq1zc9SXVu3fh1iEvL 8isJN0wkqoUKBC38Qeyu+Q3fHcOvR4vx4ris729xGDPEy6BtWfNg5Td8WyKMBHwp U+hegNaRPc5gxf6MfvYvMhYYAap48uPS -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:06 2025 by rpki-client