$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft File: wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json) Hash identifier: hbWi1UV59nXnn+h9QSp7zEAswZD60vsBjvd3fT8mmd4= Subject key identifier: F1:37:59:99:85:83:09:1F:57:47:BD:E2:5D:45:C5:ED:3B:1E:21:07 Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft Manifest number: 01BC Signing time: Sun 11 May 2025 02:07:49 +0000 Manifest this update: Sun 11 May 2025 02:07:48 +0000 Manifest next update: Sun 18 May 2025 02:07:48 +0000 Files and hashes: 1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: jvY3mj6DYAB4uVpH/CnnTXxpHM3o8y5WqRse7jqepbE=) 2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: IXWkWs++k8QNiBEV5gRLUUd6hmjdG0gw9M6G9nB2OC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Validity Not Before: May 11 02:07:48 2025 GMT Not After : May 18 02:07:48 2025 GMT Subject: CN=68200675-ba9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:0d:43:d4:1d:c0:0c:30:9c:70:c1:49:29: ec:1a:ea:f4:61:0a:d2:f7:90:04:cc:8b:3f:12:e2: 90:59:ba:8b:40:87:a5:d2:aa:8b:c0:13:99:20:27: a2:99:15:6d:96:e9:25:18:77:19:43:16:e0:db:df: 65:32:3a:84:ff:82:6f:db:ac:ab:15:69:72:ff:f3: 47:a1:10:04:23:37:2a:71:9b:c8:44:aa:7c:90:48: cc:b1:37:ad:31:48:6b:0e:33:de:1a:91:15:e3:0b: db:fd:12:c0:01:a7:2d:13:9d:a3:9b:98:3c:09:17: 92:00:63:15:88:02:36:ff:2d:a7:ca:73:5a:03:29: 4d:fa:2f:6a:be:43:38:03:c0:ec:5d:cc:0e:32:ac: 95:29:a6:a1:c9:46:62:23:75:4d:91:51:d6:ae:12: 12:d1:f7:37:8f:8e:ce:7b:47:ef:e0:81:50:f4:e2: 43:13:49:dc:0f:ad:c1:77:1b:cf:08:cc:a9:3a:dc: fe:e5:1d:e9:cd:3a:fc:d1:cd:8e:d5:d4:a6:31:c2: 3c:2f:c5:89:1e:82:6d:e9:e9:3d:1a:46:ee:84:76: ce:88:07:7e:06:eb:df:38:14:4e:b2:21:74:5d:43: 8b:6a:5b:82:9f:33:9b:30:67:d9:81:6a:04:fa:cc: 29:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:37:59:99:85:83:09:1F:57:47:BD:E2:5D:45:C5:ED:3B:1E:21:07 X509v3 Authority Key Identifier: keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:93:5f:06:35:74:8b:b8:8c:e0:91:46:a0:09:98:3d:7d:87: 32:37:8a:b1:04:c3:5b:3c:d0:9e:e8:dd:ee:62:d1:a7:f9:f4: 17:e7:00:4b:02:9a:3b:40:1f:b8:8a:38:e6:74:62:1f:a7:40: 6e:e2:28:89:53:7b:f6:15:07:2e:4b:65:ad:76:b3:36:cd:36: 7b:f9:26:1b:3e:89:12:11:3a:0c:30:93:a3:d2:09:e7:d7:e9: cd:83:b0:4d:25:90:5c:d6:8f:ab:7d:29:02:64:0b:78:dd:7d: 80:7f:52:77:64:2b:91:97:c7:17:40:18:be:ac:1a:d5:5b:3a: 13:cd:4b:71:c5:87:ce:fa:1f:e7:fc:31:15:5c:f0:a6:8b:05: dd:44:8a:eb:4b:75:d2:8b:51:60:df:ff:60:3e:12:11:7c:a7: 38:aa:30:89:0a:57:ef:4c:59:03:b3:1c:b2:6a:af:45:e0:0c: 78:a7:14:ae:5e:ac:66:88:40:d9:bc:c7:41:38:2e:86:01:48: bc:bd:7e:12:d6:73:52:b9:47:eb:64:c1:cd:50:89:37:49:8a: 1d:e0:df:c0:b8:ba:58:79:77:ac:7f:3c:27:0f:a7:d5:19:26: 7f:89:d7:c9:d1:0c:6f:f0:2e:78:28:a5:ac:97:27:76:43:58: 52:56:b9:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5MjNEQTg5MTA2 OUM5MDAzRjQwHhcNMjUwNTExMDIwNzQ4WhcNMjUwNTE4MDIwNzQ4WjAYMRYwFAYD VQQDEw02ODIwMDY3NS1iYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq44NQ9QdwAwwnHDBSSnsGur0YQrS95AEzIs/EuKQWbqLQIel0qqLwBOZICei mRVtluklGHcZQxbg299lMjqE/4Jv26yrFWly//NHoRAEIzcqcZvIRKp8kEjMsTet MUhrDjPeGpEV4wvb/RLAAactE52jm5g8CReSAGMViAI2/y2nynNaAylN+i9qvkM4 A8DsXcwOMqyVKaahyUZiI3VNkVHWrhIS0fc3j47Oe0fv4IFQ9OJDE0ncD63BdxvP CMypOtz+5R3pzTr80c2O1dSmMcI8L8WJHoJt6ek9GkbuhHbOiAd+BuvfOBROsiF0 XUOLaluCnzObMGfZgWoE+swp4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPE3WZmF gwkfV0e94l1Fxe07HiEHMB8GA1UdIwQYMBaAFMCu9iWvnVBK6Ef2kj2okQackAP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQzNi9GQzEzQTNFNDkx QUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVFcm9SX2FTUGFpUkJweVFB X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUQzNi9GQzEzQTNFNDkxQUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVF cm9SX2FTUGFpUkJweVFBX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfk18GNXSLuIzgkUagCZg9fYcyN4qxBMNbPNCe6N3uYtGn+fQX5wBL Apo7QB+4ijjmdGIfp0Bu4iiJU3v2FQcuS2WtdrM2zTZ7+SYbPokSEToMMJOj0gnn 1+nNg7BNJZBc1o+rfSkCZAt43X2Af1J3ZCuRl8cXQBi+rBrVWzoTzUtxxYfO+h/n /DEVXPCmiwXdRIrrS3XSi1Fg3/9gPhIRfKc4qjCJClfvTFkDsxyyaq9F4Ax4pxSu XqxmiEDZvMdBOC6GAUi8vX4S1nNSuUfrZMHNUIk3SYod4N/AuLpYeXesfzwnD6fV GSZ/idfJ0Qxv8C54KKWslyd2Q1hSVrkg -----END CERTIFICATE-----Generated at Sun May 11 14:03:41 2025 by rpki-client