$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json) Hash identifier: ISsvvXG7KXAD23B/VRLOg1YCUwc5WvBwTsG0uBmkh6Y= Subject key identifier: 14:8F:F6:10:72:9F:2A:82:52:9B:07:56:04:6C:01:D1:4B:EF:F1:EE Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0E7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft Manifest number: 0E61 Signing time: Fri 16 May 2025 17:59:15 +0000 Manifest this update: Fri 16 May 2025 17:59:14 +0000 Manifest next update: Fri 23 May 2025 17:59:14 +0000 Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: J8wkQBiHBMPY42NYqJdqiZJnZapqL4icciX7jHjFCJw=) 2: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: m0l23vJryclykCD48Z3CE8U9M7wFbCoJly5IlJCZMlg=) 3: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 1zS8XWzZTz7+tGBFQYN1Yj55+aHf93rbvK5YUu69PHI=) 4: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: Ec1bkGQTqxF1oTL6UjSssM5GunX3miqPVFaIr/V5Yp8=) 5: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: rsXfvz54a2T+jOGss3629AVS3vLaxkP1937oobR11UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3710 (0xe7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: May 16 17:59:14 2025 GMT Not After : May 23 17:59:14 2025 GMT Subject: CN=68277cf2-6a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bd:4f:17:e9:d8:4d:04:81:ce:3e:d8:06:52: 67:e9:99:5e:e6:0e:44:d2:66:60:15:ea:92:79:4d: be:78:df:fc:9c:c3:e1:b9:ac:4b:2e:e4:1f:51:e8: 2c:5f:cd:38:7d:0d:a9:83:16:81:b4:af:b7:16:26: 6f:d7:3a:40:12:81:7e:8f:fc:3c:f4:46:d1:d2:b1: 9a:a1:da:ab:57:c7:b8:dc:85:63:e0:2a:d3:c9:06: c4:ba:26:c1:22:a6:2e:6d:ac:89:44:a7:c2:2c:73: 08:e7:ef:32:a1:2f:cc:67:72:33:d0:68:c6:26:57: 38:c0:8d:e1:8f:fe:ee:05:50:7d:64:d6:33:3e:77: 1f:82:10:f0:fc:b0:5f:e3:c5:7d:6f:08:a7:a5:1e: 98:0f:8a:95:99:20:63:71:c0:3a:fe:c4:11:4e:18: 70:b3:b3:d1:03:6e:60:7f:18:99:69:81:80:60:7b: fd:23:5c:1d:1f:2c:ac:20:5e:81:f6:8c:19:bb:07: ba:be:bc:af:2c:5b:07:d2:0f:cb:ca:ff:0c:b8:fa: c0:df:6b:72:df:68:f9:15:93:34:fc:03:d7:eb:26: 5a:ae:15:68:1c:8e:2f:82:d9:9f:27:8e:85:27:be: 32:a1:f3:43:ef:71:22:d1:a0:5b:b4:7d:c8:fc:0e: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8F:F6:10:72:9F:2A:82:52:9B:07:56:04:6C:01:D1:4B:EF:F1:EE X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:57:b1:64:b1:4e:b8:85:69:7d:b7:b4:7f:90:8f:dc:fc:2e: c3:eb:60:b9:08:d4:4d:b2:34:ca:83:b1:64:c7:72:7a:f1:1c: 75:a8:e6:d7:7c:11:a1:2c:78:70:7d:fb:2f:e7:24:9d:38:49: f4:29:f5:f7:0f:2b:45:69:43:eb:cc:3f:d5:a8:fd:f0:7f:8a: da:de:fa:77:ad:85:e5:16:ae:11:93:bc:36:23:a0:0f:57:89: c1:c6:61:a5:58:73:ea:28:fe:cc:3c:10:71:48:63:fd:79:e4: bb:e5:fb:94:c9:aa:4f:30:db:16:df:ab:a5:c8:d7:1d:03:73: 6d:58:9b:62:90:78:56:a9:32:9f:03:d1:c2:11:ec:b3:ea:57: c5:0c:08:0d:a0:ae:66:4a:60:12:77:fc:06:c5:96:75:3c:90: 03:fd:f1:4a:ff:67:b2:4e:fa:76:ff:a4:40:57:92:12:e5:f3: e3:7c:6c:d7:2c:ae:ff:17:fe:42:b4:28:22:91:6d:9f:e6:1c: 53:75:23:1d:08:40:5b:98:d8:5e:cb:ce:e8:57:2e:ed:93:27: 3e:c6:55:7d:02:d6:ad:c8:fd:fb:1e:29:27:28:03:2c:d8:7d: 6e:3f:eb:8f:73:cb:dd:69:35:95:8c:48:f9:75:0b:df:cf:fe: 2c:ff:ca:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjUwNTE2MTc1OTE0WhcNMjUwNTIzMTc1OTE0WjAYMRYwFAYD VQQDEw02ODI3N2NmMi02YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8b1PF+nYTQSBzj7YBlJn6Zle5g5E0mZgFeqSeU2+eN/8nMPhuaxLLuQfUegs X804fQ2pgxaBtK+3FiZv1zpAEoF+j/w89EbR0rGaodqrV8e43IVj4CrTyQbEuibB IqYubayJRKfCLHMI5+8yoS/MZ3Iz0GjGJlc4wI3hj/7uBVB9ZNYzPncfghDw/LBf 48V9bwinpR6YD4qVmSBjccA6/sQRThhws7PRA25gfxiZaYGAYHv9I1wdHyysIF6B 9owZuwe6vryvLFsH0g/Lyv8MuPrA32ty32j5FZM0/APX6yZarhVoHI4vgtmfJ46F J74yofND73Ei0aBbtH3I/A44iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSP9hBy nyqCUpsHVgRsAdFL7/HuMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS9GMTlBN0M5NDlDMUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6 SWJpdXhNX04zYTJKWDhSOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtV7FksU64hWl9t7R/kI/c/C7D62C5CNRNsjTKg7Fkx3J68Rx1qObX fBGhLHhwffsv5ySdOEn0KfX3DytFaUPrzD/VqP3wf4ra3vp3rYXlFq4Rk7w2I6AP V4nBxmGlWHPqKP7MPBBxSGP9eeS75fuUyapPMNsW36ulyNcdA3NtWJtikHhWqTKf A9HCEeyz6lfFDAgNoK5mSmASd/wGxZZ1PJAD/fFK/2eyTvp2/6RAV5IS5fPjfGzX LK7/F/5CtCgikW2f5hxTdSMdCEBbmNhey87oVy7tkyc+xlV9AtatyP37HiknKAMs 2H1uP+uPc8vdaTWVjEj5dQvfz/4s/8qV -----END CERTIFICATE-----Generated at Sat May 17 00:08:48 2025 by rpki-client