$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft File: WFBPIARWFTaBikTQvkFutQVej0g.mft (raw, json) Hash identifier: OdFwx8QzoK5ezPt5O3M+RqxTpelmlekyqmosUIednSY= Subject key identifier: 8F:F8:D2:DE:FB:08:AF:9D:E3:7C:F5:77:4E:EB:FC:49:8F:31:7D:31 Authority key identifier: 58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 Certificate issuer: /CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Certificate serial: 1945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft Manifest number: 2C10 Signing time: Thu 24 Apr 2025 16:27:43 +0000 Manifest this update: Thu 24 Apr 2025 16:27:43 +0000 Manifest next update: Thu 01 May 2025 16:27:43 +0000 Files and hashes: 1: WFBPIARWFTaBikTQvkFutQVej0g.crl (hash: jjhljFylk5NOKY4ilAtCqBksz6q3fK7hR3yxkDmdy6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6469 (0x1945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Validity Not Before: Apr 24 16:27:43 2025 GMT Not After : May 1 16:27:43 2025 GMT Subject: CN=680a667f-0990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:b0:6d:59:90:60:f8:9f:96:e6:86:6f:4c: 38:4d:81:2a:9c:56:85:06:14:be:1b:f9:62:bd:57: 00:ce:ed:59:66:90:7e:23:0a:1d:55:79:09:f6:c0: 86:54:e8:3a:65:b1:29:80:2a:03:41:64:fa:81:af: 21:68:69:ee:2c:91:3f:c8:32:ad:67:66:ca:43:44: 44:e9:6c:f9:e5:ed:6d:af:89:ea:f8:31:bc:54:c9: a9:bc:9e:9f:8d:c9:19:a4:85:e3:02:b0:dd:73:8a: 32:d9:c2:b8:79:9d:a1:b6:0e:6a:5b:e5:38:37:90: c0:18:93:02:f1:6d:62:76:35:52:d2:8c:2a:e1:00: b3:3a:dc:17:d4:a5:3a:02:4b:56:0c:4a:6a:83:8e: 70:2e:c7:59:11:7e:56:66:9e:e0:85:3b:f0:c9:66: e7:b4:5e:39:32:4e:1c:09:4f:3a:12:e1:48:ec:27: 0e:f1:6a:4c:ea:4b:e5:e5:1f:3f:19:65:a3:03:47: 61:db:ce:83:a4:85:19:90:3a:29:61:69:e6:d3:06: 49:c6:dc:6d:8e:77:76:1a:36:41:27:bf:df:33:5a: ed:c5:8b:ea:87:ab:c3:b4:77:5d:a0:cc:ed:ab:9e: 67:db:8a:12:f0:11:b6:c0:b8:6b:83:0a:0e:1b:f2: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F8:D2:DE:FB:08:AF:9D:E3:7C:F5:77:4E:EB:FC:49:8F:31:7D:31 X509v3 Authority Key Identifier: keyid:58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:01:89:16:d6:04:e9:12:d7:39:ea:12:4b:ae:45:17:f6:59: 64:2c:15:d7:c8:ce:73:a6:cb:58:d6:f1:2a:64:1b:31:3e:6b: 45:98:6d:05:46:7d:54:32:52:c7:c0:7c:d4:9b:3b:19:07:47: ad:ce:cc:62:b7:c7:e7:69:d8:f8:f5:a7:14:d7:7f:0a:d4:75: 55:9c:9a:f0:71:6d:98:c1:75:6e:80:8d:bc:be:d1:7f:c7:a5: 42:2c:ad:64:83:7e:28:6b:a4:f9:ef:7d:de:a4:b2:de:31:c7: 5f:92:fc:a4:3e:b6:cc:d8:22:95:5e:83:90:48:2f:36:01:f8: a3:8c:97:4e:aa:b6:14:4a:50:1d:73:64:98:8d:7c:ac:f7:17: dd:8b:96:41:49:0a:81:2b:49:60:2b:4e:4e:93:22:03:24:b6: e2:9b:6d:e0:f8:7b:35:ec:68:32:46:ac:06:1c:e3:7d:54:3e: fd:98:a9:04:6b:78:1c:51:54:b8:79:b0:d3:d8:36:2f:53:f2: 68:4c:9a:fb:ab:85:bf:a1:d9:2b:f7:ca:51:60:2c:61:39:d4: 76:9f:2f:69:2a:3a:7d:9b:69:a5:9d:60:6e:0b:57:f2:60:04: 7f:66:de:c1:b7:94:f3:9b:e7:46:08:61:c0:31:4d:6d:88:bd: 76:64:77:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKDU4NTA0RjIwMDQ1NjE1MzY4MThBNDREMEJFNDE2RUI1 MDU1RThGNDgwHhcNMjUwNDI0MTYyNzQzWhcNMjUwNTAxMTYyNzQzWjAYMRYwFAYD VQQDEw02ODBhNjY3Zi0wOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEqwbVmQYPifluaGb0w4TYEqnFaFBhS+G/livVcAzu1ZZpB+IwodVXkJ9sCG VOg6ZbEpgCoDQWT6ga8haGnuLJE/yDKtZ2bKQ0RE6Wz55e1tr4nq+DG8VMmpvJ6f jckZpIXjArDdc4oy2cK4eZ2htg5qW+U4N5DAGJMC8W1idjVS0owq4QCzOtwX1KU6 AktWDEpqg45wLsdZEX5WZp7ghTvwyWbntF45Mk4cCU86EuFI7CcO8WpM6kvl5R8/ GWWjA0dh286DpIUZkDopYWnm0wZJxtxtjnd2GjZBJ7/fM1rtxYvqh6vDtHddoMzt q55n24oS8BG2wLhrgwoOG/L2SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/40t77 CK+d43z1d07r/EmPMX0xMB8GA1UdIwQYMBaAFFhQTyAEVhU2gYpE0L5BbrUFXo9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZUYUJpa1RRdmtGdXRRVmVq MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGQlBJQVJXRlRhQmlrVFF2a0Z1dFFWZWowZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZU YUJpa1RRdmtGdXRRVmVqMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwAYkW1gTpEtc56hJLrkUX9llkLBXXyM5zpstY1vEqZBsxPmtFmG0F Rn1UMlLHwHzUmzsZB0etzsxit8fnadj49acU138K1HVVnJrwcW2YwXVugI28vtF/ x6VCLK1kg34oa6T5733epLLeMcdfkvykPrbM2CKVXoOQSC82AfijjJdOqrYUSlAd c2SYjXys9xfdi5ZBSQqBK0lgK05OkyIDJLbim23g+Hs17GgyRqwGHON9VD79mKkE a3gcUVS4ebDT2DYvU/JoTJr7q4W/odkr98pRYCxhOdR2ny9pKjp9m2mlnWBuC1fy YAR/Zt7Bt5Tzm+dGCGHAMU1tiL12ZHeN -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:09 2025 by rpki-client