$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft File: wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json) Hash identifier: NKPcc6ujanPk7oR+leD293ajSD0HkWARfzDDy1vr7MA= Subject key identifier: F1:C2:E2:01:2B:2B:70:A2:41:99:BF:41:62:57:70:44:6D:F3:3E:CD Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF Certificate issuer: /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft Manifest number: 090A Signing time: Sat 10 May 2025 20:19:17 +0000 Manifest this update: Sat 10 May 2025 20:19:17 +0000 Manifest next update: Sat 17 May 2025 20:19:17 +0000 Files and hashes: 1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: X0YSS3ZvpKsXFP9tP0U5J1nRYI7MP4ouNBU2A35/8/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Validity Not Before: May 10 20:19:17 2025 GMT Not After : May 17 20:19:17 2025 GMT Subject: CN=681fb4c5-a3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:4e:db:ce:35:7f:68:90:9a:6e:f1:24:14: e0:94:13:d0:28:0d:e9:c3:a8:74:e5:f3:ba:a6:e5: fb:4c:6e:d1:66:b2:80:bd:7a:ea:b7:97:c8:10:7d: 5d:fa:88:50:21:4e:70:6f:48:35:64:aa:aa:e5:33: e1:29:e2:06:21:74:f5:e2:9c:ff:51:8e:a3:52:08: 56:fb:7a:da:4b:8c:90:16:3e:25:a6:7d:03:27:c2: 35:21:21:99:39:64:99:94:c3:da:a7:f8:fc:56:63: 43:e9:c1:0f:9b:bc:fe:7c:65:98:f8:50:42:86:c0: 3c:d0:9f:15:71:ef:d7:c9:3e:92:62:d6:1f:e2:82: 02:d8:b2:fc:eb:b0:1e:9d:2c:f0:38:65:da:1e:b9: fa:17:5e:45:26:1b:86:8e:68:f7:02:39:2f:84:22: 4c:ab:49:b5:fe:ca:38:56:0e:ec:a5:bf:36:f8:1d: 1e:31:7f:11:6b:ac:f7:ff:3e:92:e4:0c:bd:03:c4: d2:fa:c7:15:05:b1:5f:4b:11:98:31:d4:73:d0:2e: fa:0d:2c:00:6b:5c:86:0e:2e:ea:fc:44:9e:dc:38: 59:a5:31:9e:8e:2c:9b:d1:c6:e0:49:d7:b3:fb:87: 8c:84:90:43:e4:e7:c5:46:ba:c4:a4:2a:18:6c:4d: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C2:E2:01:2B:2B:70:A2:41:99:BF:41:62:57:70:44:6D:F3:3E:CD X509v3 Authority Key Identifier: keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:18:cb:e0:f8:e6:91:00:8d:20:34:c0:48:e3:6e:f1:a9:63: be:8c:36:08:e6:67:60:c9:fd:f8:9b:c1:3e:10:de:0a:dd:47: da:ee:e2:56:34:5f:34:3b:8b:1a:a4:73:56:38:b7:94:b3:78: 57:98:18:4f:6a:5e:e2:2d:9a:66:c0:c6:4b:eb:dd:9a:80:11: 2b:4c:f3:c5:65:71:19:ba:27:a3:39:f3:5f:75:5e:d3:1f:ee: 68:f0:db:c2:b4:2d:d5:55:5e:69:ca:55:7a:ae:b0:21:f6:3b: 5b:66:10:5a:b5:e5:41:b6:37:c4:2b:d0:7a:4a:a1:e8:88:34: 05:ed:96:c3:67:2b:8d:5b:34:bd:4a:a1:9c:52:d3:2e:35:c2: 89:a3:72:1c:36:1f:b8:cd:7f:25:b0:26:a9:e3:4e:80:3e:d1: 80:0c:34:88:b0:4c:1d:2e:86:31:1f:db:1c:22:ca:ac:e6:ae: 1b:e9:f2:5c:94:cb:7f:a6:b2:02:fb:df:f1:c8:1b:47:76:f9: a7:15:08:28:49:fd:19:03:69:ce:84:a1:8b:ba:49:1e:f9:c3: 67:2c:3f:9d:a9:65:7e:10:7b:d2:09:84:82:bb:98:c8:6a:bc: 7a:0f:3f:5e:c7:a7:a6:43:2e:b1:a2:7b:39:a1:30:ad:b8:29: 3f:08:1d:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKEMwMzA1NkY2ODA5OTY0N0FGNzU4NUU1M0Y2QTk4RUNG RjNEOTg4REYwHhcNMjUwNTEwMjAxOTE3WhcNMjUwNTE3MjAxOTE3WjAYMRYwFAYD VQQDEw02ODFmYjRjNS1hM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwhO2841f2iQmm7xJBTglBPQKA3pw6h05fO6puX7TG7RZrKAvXrqt5fIEH1d +ohQIU5wb0g1ZKqq5TPhKeIGIXT14pz/UY6jUghW+3raS4yQFj4lpn0DJ8I1ISGZ OWSZlMPap/j8VmND6cEPm7z+fGWY+FBChsA80J8Vce/XyT6SYtYf4oIC2LL867Ae nSzwOGXaHrn6F15FJhuGjmj3AjkvhCJMq0m1/so4Vg7spb82+B0eMX8Ra6z3/z6S 5Ay9A8TS+scVBbFfSxGYMdRz0C76DSwAa1yGDi7q/ESe3DhZpTGejiyb0cbgSdez +4eMhJBD5OfFRrrEpCoYbE1URQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHC4gEr K3CiQZm/QWJXcERt8z7NMB8GA1UdIwQYMBaAFMAwVvaAmWR691heU/apjs/z2Yjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpIcjNXRjVUOXFtT3pfUFpp TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEQlc5b0NaWkhyM1dGNVQ5cW1Pel9QWmlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpI cjNXRjVUOXFtT3pfUFppTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+GMvg+OaRAI0gNMBI427xqWO+jDYI5mdgyf34m8E+EN4K3Ufa7uJW NF80O4sapHNWOLeUs3hXmBhPal7iLZpmwMZL692agBErTPPFZXEZuiejOfNfdV7T H+5o8NvCtC3VVV5pylV6rrAh9jtbZhBateVBtjfEK9B6SqHoiDQF7ZbDZyuNWzS9 SqGcUtMuNcKJo3IcNh+4zX8lsCap406APtGADDSIsEwdLoYxH9scIsqs5q4b6fJc lMt/prIC+9/xyBtHdvmnFQgoSf0ZA2nOhKGLukke+cNnLD+dqWV+EHvSCYSCu5jI arx6Dz9ex6emQy6xons5oTCtuCk/CB17 -----END CERTIFICATE-----Generated at Sun May 11 07:37:24 2025 by rpki-client