$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: XrhfnUnLG3qKmi/JSFXX6gVm3/gutOssd4YHjINcZPc= Subject key identifier: D1:63:3F:DD:3F:CC:E2:E3:3D:EB:A9:EE:41:6B:E8:43:29:78:98:99 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 058D Signing time: Mon 12 May 2025 23:01:58 +0000 Manifest this update: Mon 12 May 2025 23:01:58 +0000 Manifest next update: Mon 19 May 2025 23:01:58 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: z91v8gyumE6VV7JCuFmuMO0IeBQnTgGXMcfNcRbKhYI=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: KjSC+EBY/UPIqhkSiTjfbrlSvd1G9oxKPCBMNEBLTuc=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: May 12 23:01:58 2025 GMT Not After : May 19 23:01:58 2025 GMT Subject: CN=68227de6-8457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:25:6a:80:4c:e8:f9:36:24:a3:76:92:6b: fe:24:68:a3:82:95:9a:5f:89:7b:c8:e3:ae:ef:c4: d4:37:09:05:20:33:62:4e:b3:91:27:83:f4:81:07: 06:64:33:0e:a1:46:5f:bd:33:71:02:73:22:f2:89: 6b:d1:13:4c:11:82:30:14:f2:61:0c:8f:20:85:4b: 12:28:63:76:df:0b:4f:52:8f:6e:ba:5d:ee:c4:12: 6b:6d:37:ef:4b:e9:b9:57:32:bd:39:32:47:17:1f: 3d:10:17:59:a6:8a:41:06:d6:a0:61:68:62:2c:52: 60:46:b9:0a:53:27:18:f6:87:e9:cc:3a:9b:f5:09: 00:c0:60:39:27:eb:6d:08:18:f3:45:93:e4:10:50: ac:e8:e6:06:74:9e:ae:dd:1c:9c:91:1b:7a:9a:82: 4b:2a:e6:25:e7:e0:27:21:10:41:87:8d:ee:86:45: d4:2d:fd:4b:91:5f:f3:72:5b:40:aa:a9:fc:35:24: fb:89:4c:6a:d6:f0:27:37:dc:9b:ba:8a:82:a5:4d: a2:a6:3c:04:34:09:08:33:a2:9c:8d:db:2a:e4:c0: 51:52:5b:d9:da:fb:d4:9a:b7:8a:11:25:29:4a:bc: 33:2b:b0:47:cb:67:67:4a:f0:75:98:8e:dc:1c:2e: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:63:3F:DD:3F:CC:E2:E3:3D:EB:A9:EE:41:6B:E8:43:29:78:98:99 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a4:f5:da:34:bc:d9:13:a7:a4:1c:ef:4c:fd:9d:3d:1d:a6: 87:5a:d3:c3:57:dc:4c:bd:5c:08:b8:13:02:67:92:50:41:0d: 29:d1:f0:18:25:d1:80:3b:a3:a9:ae:cf:00:8a:45:7f:8f:ec: ad:fc:8f:e5:a9:3c:21:1f:7a:15:e4:34:d3:df:9d:6e:8f:44: 3f:d0:67:19:3a:01:c0:7c:75:cc:97:79:65:4f:3c:e5:f7:bb: 86:96:0e:f8:09:cc:37:95:fc:97:11:2a:15:7c:a7:1d:cf:87: c0:eb:78:8f:8a:b6:5d:ec:c2:7e:82:48:a0:f2:26:27:77:7f: c1:0b:10:69:07:ea:bb:f2:29:ff:1c:e4:1e:67:53:ca:1c:3e: b7:10:26:81:01:2f:bc:f1:d2:c1:50:8e:5f:ca:0a:fa:6d:80: 98:9d:22:09:53:54:ab:67:3a:04:02:a8:16:ee:7a:19:1f:4c: bd:2a:58:9d:de:53:fa:39:5c:fc:e2:45:45:7d:57:1c:69:92: 32:71:b9:38:68:f5:03:aa:8e:6b:7c:11:26:79:d5:fb:4a:8a: 6f:f8:27:85:ef:a5:c4:f8:d3:bb:a9:0e:4a:af:28:05:86:ed: 0e:13:61:24:ce:5c:75:0a:46:d2:99:36:e9:49:fa:82:0b:68: b1:2c:99:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwNTEyMjMwMTU4WhcNMjUwNTE5MjMwMTU4WjAYMRYwFAYD VQQDEw02ODIyN2RlNi04NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwslaoBM6Pk2JKN2kmv+JGijgpWaX4l7yOOu78TUNwkFIDNiTrORJ4P0gQcG ZDMOoUZfvTNxAnMi8olr0RNMEYIwFPJhDI8ghUsSKGN23wtPUo9uul3uxBJrbTfv S+m5VzK9OTJHFx89EBdZpopBBtagYWhiLFJgRrkKUycY9ofpzDqb9QkAwGA5J+tt CBjzRZPkEFCs6OYGdJ6u3RyckRt6moJLKuYl5+AnIRBBh43uhkXULf1LkV/zcltA qqn8NST7iUxq1vAnN9ybuoqCpU2ipjwENAkIM6Kcjdsq5MBRUlvZ2vvUmreKESUp SrwzK7BHy2dnSvB1mI7cHC5DbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFjP90/ zOLjPeup7kFr6EMpeJiZMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWpPXaNLzZE6ekHO9M/Z09HaaHWtPDV9xMvVwIuBMCZ5JQQQ0p0fAY JdGAO6Oprs8AikV/j+yt/I/lqTwhH3oV5DTT351uj0Q/0GcZOgHAfHXMl3llTzzl 97uGlg74Ccw3lfyXESoVfKcdz4fA63iPirZd7MJ+gkig8iYnd3/BCxBpB+q78in/ HOQeZ1PKHD63ECaBAS+88dLBUI5fygr6bYCYnSIJU1SrZzoEAqgW7noZH0y9Klid 3lP6OVz84kVFfVccaZIycbk4aPUDqo5rfBEmedX7Sopv+CeF76XE+NO7qQ5KrygF hu0OE2Ekzlx1CkbSmTbpSfqCC2ixLJmF -----END CERTIFICATE-----Generated at Tue May 13 12:41:45 2025 by rpki-client