$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: Gv89/mNT5gs0NFa0aiTw7mVaVsKZhekUmpsqwx0Jb4A= Subject key identifier: 04:92:CB:75:EA:DB:92:F6:74:F5:BB:5F:E3:17:60:70:11:20:43:79 Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 0114 Signing time: Thu 15 May 2025 04:30:28 +0000 Manifest this update: Thu 15 May 2025 04:30:28 +0000 Manifest next update: Thu 22 May 2025 04:30:28 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: xQY7PdboPiuce6uZFGSfurYrs6Kr3DCBFEJ1gRX9jRg=) 2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: 5Uer3p+UX/po6o30wmY0vuoN+A26JLu6gVA8EPsZ9Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: May 15 04:30:28 2025 GMT Not After : May 22 04:30:28 2025 GMT Subject: CN=68256de4-2dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:04:5a:81:59:ff:b5:d1:6c:d5:f0:58:a3: 9b:ae:23:f6:df:b2:b7:d3:3e:b2:7d:33:66:f4:3e: 19:9b:83:d1:5e:85:2c:e8:78:2a:de:81:51:a7:96: 70:8d:29:e0:46:18:d3:d0:76:03:73:91:67:28:02: 72:20:8e:1d:fa:42:33:6c:c4:ef:56:0d:91:a2:a3: 97:d5:75:ea:11:23:07:4a:fa:0c:43:26:bd:49:22: 12:d7:7e:d1:ea:8c:05:94:ca:86:9b:22:24:b2:59: 41:65:ac:37:68:3c:a1:ab:d1:05:d2:8b:b2:95:d3: 79:18:0d:6d:8b:14:35:20:48:68:22:06:21:ae:68: f1:70:c2:41:9d:6d:c0:50:fd:d5:8f:6c:ce:5a:30: 76:41:0a:7e:6a:63:16:7a:bd:da:ab:a8:4d:c7:b4: c9:ee:f0:2f:9c:48:17:e2:ef:f1:42:32:a3:3b:e8: a7:9c:00:7e:60:69:90:22:1f:c3:cb:de:ea:9a:0a: 80:05:f2:36:88:42:77:6a:fb:79:b0:b6:01:d7:ad: 33:98:ae:86:df:42:a3:85:a6:98:26:62:e5:d2:72: d2:ea:e6:2a:9a:9d:37:f7:1b:6d:aa:27:cf:a8:92: 68:27:9c:11:82:b7:de:91:cc:da:85:fe:58:c4:f0: d2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:92:CB:75:EA:DB:92:F6:74:F5:BB:5F:E3:17:60:70:11:20:43:79 X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:68:34:79:c8:42:85:c0:0d:26:ea:57:af:33:95:e5:83:1c: a9:3f:85:d3:e3:3d:b4:b0:55:3e:62:00:23:df:2e:f9:b7:d9: 77:ae:39:35:06:24:0c:1d:cb:43:4c:f3:94:ed:47:39:03:4b: 16:c3:b1:43:c7:2e:f6:05:e9:42:59:06:8d:9b:80:30:27:ba: 59:e4:14:6a:c3:7c:93:cd:ed:cd:cf:73:37:1a:b6:5d:90:f4: 34:45:a2:4c:89:3d:75:9a:1a:39:76:75:dc:80:11:0b:de:c9: 05:e4:e0:40:26:1f:7f:98:d3:f1:48:64:95:ca:26:91:1c:b1: 54:99:5d:00:91:0f:13:c8:67:8b:bf:a7:da:0b:8b:df:71:28: ad:73:29:f6:a8:f1:d1:2b:6b:9d:9f:be:b0:bc:8b:b1:ad:75: e3:4b:ea:eb:94:50:09:9a:e0:73:b5:7c:4e:a1:7c:ba:be:f1: c7:8c:d5:f0:ed:d1:23:a4:06:b9:26:ee:6c:7e:7a:d7:0f:3d: 37:33:14:1a:46:c2:17:fd:5f:3f:f9:fb:2e:0c:61:2f:5d:58: 58:c7:ef:9e:c2:95:8d:61:80:bf:04:48:d3:bc:0f:23:b6:eb: 34:b7:4d:e9:8e:19:a6:a4:87:81:1e:a4:88:a5:ed:3e:78:2f: fc:34:d7:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjUwNTE1MDQzMDI4WhcNMjUwNTIyMDQzMDI4WjAYMRYwFAYD VQQDEw02ODI1NmRlNC0yZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZcEWoFZ/7XRbNXwWKObriP237K30z6yfTNm9D4Zm4PRXoUs6Hgq3oFRp5Zw jSngRhjT0HYDc5FnKAJyII4d+kIzbMTvVg2RoqOX1XXqESMHSvoMQya9SSIS137R 6owFlMqGmyIksllBZaw3aDyhq9EF0ouyldN5GA1tixQ1IEhoIgYhrmjxcMJBnW3A UP3Vj2zOWjB2QQp+amMWer3aq6hNx7TJ7vAvnEgX4u/xQjKjO+innAB+YGmQIh/D y97qmgqABfI2iEJ3avt5sLYB160zmK6G30KjhaaYJmLl0nLS6uYqmp039xttqifP qJJoJ5wRgrfekczahf5YxPDSMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASSy3Xq 25L2dPW7X+MXYHARIEN5MB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAaDR5yEKFwA0m6levM5XlgxypP4XT4z20sFU+YgAj3y75t9l3rjk1 BiQMHctDTPOU7Uc5A0sWw7FDxy72BelCWQaNm4AwJ7pZ5BRqw3yTze3Nz3M3GrZd kPQ0RaJMiT11mho5dnXcgBEL3skF5OBAJh9/mNPxSGSVyiaRHLFUmV0AkQ8TyGeL v6faC4vfcSitcyn2qPHRK2udn76wvIuxrXXjS+rrlFAJmuBztXxOoXy6vvHHjNXw 7dEjpAa5Ju5sfnrXDz03MxQaRsIX/V8/+fsuDGEvXVhYx++ewpWNYYC/BEjTvA8j tus0t03pjhmmpIeBHqSIpe0+eC/8NNf1 -----END CERTIFICATE-----Generated at Fri May 16 13:08:21 2025 by rpki-client