$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json) Hash identifier: tKm4Y+oNuKEQ9c8u4lOkbbPd0DSX8kPJjVMivOmzrXY= Subject key identifier: 17:7A:2E:71:53:57:95:04:E3:19:55:65:DC:C4:3F:C8:78:88:EF:E6 Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft Manifest number: 02B6 Signing time: Sun 11 May 2025 00:59:54 +0000 Manifest this update: Sun 11 May 2025 00:59:53 +0000 Manifest next update: Sun 18 May 2025 00:59:53 +0000 Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: DB4gR4vjzsuil7k6f0brPToW3ByjxEVSn82UbpYKW7E=) 2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: AUauGFsDFbTkxG/ElUZSjeF53FqLNbIQuI1Fh9dzIQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: May 11 00:59:53 2025 GMT Not After : May 18 00:59:53 2025 GMT Subject: CN=681ff689-0076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:34:e8:42:e2:61:a6:4a:81:6c:c5:45:ef: a1:3a:fd:2e:3d:75:2b:c2:06:1e:21:1b:c9:ea:52: f1:54:84:4a:f1:f0:4c:e8:73:94:56:6a:5f:2e:db: 3d:f3:a8:be:ad:1c:16:9c:64:40:b7:e1:02:a6:90: 8e:c9:fe:42:b6:9c:76:00:53:0b:6c:a3:ea:dd:63: e7:0f:ed:b6:d5:8b:c4:c3:4e:1c:83:c4:cb:99:a6: 08:17:a5:10:13:07:04:db:0b:a0:12:08:2c:02:52: f9:a2:76:0b:d9:ff:97:7d:12:24:1d:9d:2a:ef:92: c5:50:fd:91:36:45:6c:b2:0c:28:32:a1:0a:72:d4: 0a:b6:8c:7f:a7:51:0e:22:f8:64:2a:cd:3c:9c:eb: 07:b4:fc:d4:b8:f1:7e:6a:3a:f5:b3:b7:df:27:ec: 97:0b:5c:65:80:b2:e8:99:01:e3:71:29:24:43:00: 47:b7:00:91:9b:a8:e2:53:90:0c:ab:1e:a8:a8:ba: 63:73:1a:6d:af:b5:7a:a0:ba:b3:57:fe:91:55:e0: 74:d5:45:3a:ab:69:2d:dc:a2:08:04:4f:4e:9b:bc: 9f:bd:f9:3c:f1:b7:b0:a1:0c:35:b1:22:a3:3d:71: cf:c3:61:9a:51:78:4d:b8:d2:b8:5d:7b:fd:c3:4d: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7A:2E:71:53:57:95:04:E3:19:55:65:DC:C4:3F:C8:78:88:EF:E6 X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4c:88:92:43:10:ad:a5:82:64:7a:c4:89:1c:64:85:94:04: 96:33:b9:af:e3:0f:5c:33:a3:c7:72:e4:94:c5:f5:56:42:34: fa:22:e0:4a:b3:1e:75:fd:57:a5:9c:ba:4c:df:56:2e:21:1e: 4d:bd:90:08:62:83:8f:60:64:f7:6a:61:f6:06:48:5d:7f:fc: c6:0c:e2:93:d5:9e:f0:7c:8d:12:77:8d:44:42:da:b2:f8:47: 34:fd:34:eb:d1:66:44:7b:b9:42:e6:52:5e:fa:fb:51:88:29: fe:d5:d2:1f:a3:83:60:1c:8b:7e:60:61:c4:57:a1:8a:65:ab: 54:9a:43:6c:2b:52:6f:ad:70:19:72:0f:2c:8c:ad:a1:94:fc: 54:e5:0f:2f:40:04:0d:45:b7:ff:0f:69:d1:28:2b:9f:c4:97: ef:ba:97:03:16:6d:ce:1c:1e:8e:48:92:88:3e:39:cf:b5:de: f0:54:a5:55:05:75:b2:6c:18:b2:b8:23:3c:b5:cb:22:2c:50: 75:43:f3:e1:39:ee:8b:dd:f1:f1:a2:4c:2e:d6:96:fe:d3:b6: 33:9c:69:21:a8:30:4e:02:f4:65:5d:07:8f:61:01:74:c0:92: b5:da:5a:07:83:b5:67:e2:f9:32:46:88:26:da:e6:ce:dd:da: 06:6f:58:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjUwNTExMDA1OTUzWhcNMjUwNTE4MDA1OTUzWjAYMRYwFAYD VQQDEw02ODFmZjY4OS0wMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshk06ELiYaZKgWzFRe+hOv0uPXUrwgYeIRvJ6lLxVIRK8fBM6HOUVmpfLts9 86i+rRwWnGRAt+ECppCOyf5Ctpx2AFMLbKPq3WPnD+221YvEw04cg8TLmaYIF6UQ EwcE2wugEggsAlL5onYL2f+XfRIkHZ0q75LFUP2RNkVssgwoMqEKctQKtox/p1EO IvhkKs08nOsHtPzUuPF+ajr1s7ffJ+yXC1xlgLLomQHjcSkkQwBHtwCRm6jiU5AM qx6oqLpjcxptr7V6oLqzV/6RVeB01UU6q2kt3KIIBE9Om7yfvfk88bewoQw1sSKj PXHPw2GaUXhNuNK4XXv9w00X2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd6LnFT V5UE4xlVZdzEP8h4iO/mMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5 ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgTIiSQxCtpYJkesSJHGSFlASWM7mv4w9cM6PHcuSUxfVWQjT6IuBK sx51/VelnLpM31YuIR5NvZAIYoOPYGT3amH2Bkhdf/zGDOKT1Z7wfI0Sd41EQtqy +Ec0/TTr0WZEe7lC5lJe+vtRiCn+1dIfo4NgHIt+YGHEV6GKZatUmkNsK1JvrXAZ cg8sjK2hlPxU5Q8vQAQNRbf/D2nRKCufxJfvupcDFm3OHB6OSJKIPjnPtd7wVKVV BXWybBiyuCM8tcsiLFB1Q/PhOe6L3fHxokwu1pb+07YznGkhqDBOAvRlXQePYQF0 wJK12loHg7Vn4vkyRogm2ubO3doGb1gW -----END CERTIFICATE-----Generated at Sun May 11 22:11:15 2025 by rpki-client