$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft File: wLFgOcRs3wyI2adKgtnkWaOoyuY.mft (raw, json) Hash identifier: nnZVy0tndenH+YD/ygT2H7d30eBVtm1XUY843D0QbXA= Subject key identifier: C8:E3:FA:5C:D3:92:99:79:86:EF:C4:BA:68:85:A7:BF:67:9E:44:3E Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6 Certificate issuer: /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft Manifest number: 058E Signing time: Thu 24 Apr 2025 23:03:37 +0000 Manifest this update: Thu 24 Apr 2025 23:03:36 +0000 Manifest next update: Thu 01 May 2025 23:03:36 +0000 Files and hashes: 1: wLFgOcRs3wyI2adKgtnkWaOoyuY.crl (hash: AfDLV4AkbnRE+msf5pbCdPTiBuFDvLAPhbi6OXs0sps=) 2: 974A6E0CE15611EC9E14513DC4F9AE02.roa (hash: vkMZJEjscrWrQmP1QMXSLN6kZ0KXOHfP1HCgjPMFuKU=) 3: 1E75BFFA062311F084ABB51CC4F9AE02.roa (hash: UKf1PhGBjzHATMGTv648kOTke4/dUT/Ksv5RydXXc3w=) 4: B95648BA062211F09E5D020EC4F9AE02.roa (hash: v9BoKHPtS+6KDJpJ1s6FsD8QqUN0uxXtfO3LUF0PxsA=) 5: 96033290E15611EC9E14513DC4F9AE02.roa (hash: 9rUYZVVSecYKVgGZS3+LYYtxh4AnVM4o9EV4HsZiQko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A9EE, serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6 Validity Not Before: Apr 24 23:03:36 2025 GMT Not After : May 1 23:03:36 2025 GMT Subject: CN=680ac348-6a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:df:46:81:02:38:cd:27:76:4b:5a:18:6f: fa:74:d6:57:13:30:75:51:1e:b4:81:25:57:72:be: 0f:05:b7:d1:33:6e:37:0d:95:af:49:a0:00:93:44: 2c:ed:c7:00:38:aa:bd:3f:b9:01:ea:4d:82:d5:3a: 4b:2f:21:ff:99:f8:74:c0:0b:fb:46:bf:ce:62:64: bb:88:d7:2c:c9:7c:0d:2b:13:dd:f6:dd:77:0c:b8: 05:58:90:05:dc:a1:b1:1d:f4:2c:6b:7d:a8:54:ad: 82:10:a0:2e:2d:7f:ce:21:03:ec:1c:65:28:6c:01: c4:d4:7b:b3:8c:31:96:ef:25:ed:bd:6f:f5:89:2a: 74:1b:12:5b:d6:41:45:91:86:c3:93:61:cf:ee:14: 6b:20:d8:dd:9c:2b:20:92:e1:dd:dd:b3:1e:6e:c0: 6c:87:d6:79:a9:ad:ef:1c:f5:79:1d:50:a6:e0:6e: ad:93:37:a3:26:f4:cc:38:34:0a:3f:c9:22:75:64: 56:10:19:fa:e4:c9:4d:2f:e6:2a:ee:68:d5:fd:03: 88:aa:fd:d8:ff:e1:de:4f:72:84:6b:cd:0b:f2:b9: 3c:6f:28:c7:a2:ed:06:49:26:c4:f5:8f:89:51:be: 8b:76:5c:4c:db:11:44:8e:78:c8:a2:0a:b9:2d:32: 23:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E3:FA:5C:D3:92:99:79:86:EF:C4:BA:68:85:A7:BF:67:9E:44:3E X509v3 Authority Key Identifier: keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:16:57:d9:3f:c3:9c:c3:d2:08:37:aa:f2:4a:a4:30:b7:87: 02:94:f9:a6:36:36:c0:97:79:82:32:4d:97:4a:31:23:52:62: c4:f7:47:ef:e1:1a:3a:48:1d:85:6a:ac:9b:a8:61:a2:92:97: ba:e7:f2:1a:d4:29:a4:d9:19:fa:c0:d9:17:5c:7a:cf:a2:04: dd:44:3a:39:c0:db:85:7e:62:f2:0c:6a:b5:89:59:00:27:5a: 9a:c6:dd:10:ab:20:92:32:87:37:93:25:a6:60:48:57:b3:ba: 8f:6b:96:66:88:03:54:d7:28:f2:dd:5b:45:80:ab:fe:ad:22: a2:71:9c:b9:87:9f:d0:b5:fe:f7:ee:4d:cb:0a:25:5e:c3:e1: 14:6d:12:35:bd:34:60:5b:bb:d8:21:c6:b0:dd:b5:52:0e:3a: 25:c6:d5:93:45:c3:92:62:c3:66:3a:12:31:1b:41:a8:db:33: 72:59:cd:b7:b7:78:c3:b3:5f:cd:bf:9b:28:3a:4d:3c:d1:e2: 92:90:46:59:46:b2:99:5c:f9:12:96:40:aa:06:19:ae:ae:c8: bb:37:a0:2d:53:32:02:b1:21:96:b6:aa:32:2b:b4:4b:aa:1f: 22:94:a0:5d:96:43:cc:a6:6c:f5:90:37:95:e9:7d:05:f4:a3: 21:14:7b:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5RUUxMTAvBgNVBAUTKEMwQjE2MDM5QzQ2Q0RGMEM4OEQ5QTc0QTgyRDlFNDU5 QTNBOENBRTYwHhcNMjUwNDI0MjMwMzM2WhcNMjUwNTAxMjMwMzM2WjAYMRYwFAYD VQQDEw02ODBhYzM0OC02YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8PfRoECOM0ndktaGG/6dNZXEzB1UR60gSVXcr4PBbfRM243DZWvSaAAk0Qs 7ccAOKq9P7kB6k2C1TpLLyH/mfh0wAv7Rr/OYmS7iNcsyXwNKxPd9t13DLgFWJAF 3KGxHfQsa32oVK2CEKAuLX/OIQPsHGUobAHE1HuzjDGW7yXtvW/1iSp0GxJb1kFF kYbDk2HP7hRrINjdnCsgkuHd3bMebsBsh9Z5qa3vHPV5HVCm4G6tkzejJvTMODQK P8kidWRWEBn65MlNL+Yq7mjV/QOIqv3Y/+HeT3KEa80L8rk8byjHou0GSSbE9Y+J Ub6LdlxM2xFEjnjIogq5LTIjxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjj+lzT kpl5hu/EumiFp79nnkQ+MB8GA1UdIwQYMBaAFMCxYDnEbN8MiNmnSoLZ5FmjqMrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTlFRS9BMDhCNkE1Q0Qz NkExMUVCODhCMUVCMzNDNEY5QUUwMi93TEZnT2NSczN3eUkyYWRLZ3Rua1dhT295 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMRmdPY1JzM3d5STJhZEtndG5rV2FPb3l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTlFRS9BMDhCNkE1Q0QzNkExMUVCODhCMUVCMzNDNEY5QUUwMi93TEZnT2NSczN3 eUkyYWRLZ3Rua1dhT295dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWFlfZP8Ocw9IIN6rySqQwt4cClPmmNjbAl3mCMk2XSjEjUmLE90fv 4Ro6SB2FaqybqGGikpe65/Ia1Cmk2Rn6wNkXXHrPogTdRDo5wNuFfmLyDGq1iVkA J1qaxt0QqyCSMoc3kyWmYEhXs7qPa5ZmiANU1yjy3VtFgKv+rSKicZy5h5/Qtf73 7k3LCiVew+EUbRI1vTRgW7vYIcaw3bVSDjolxtWTRcOSYsNmOhIxG0Go2zNyWc23 t3jDs1/Nv5soOk080eKSkEZZRrKZXPkSlkCqBhmursi7N6AtUzICsSGWtqoyK7RL qh8ilKBdlkPMpmz1kDeV6X0F9KMhFHtf -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:32 2025 by rpki-client