$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: KbeohynayeGy7NSqfuHCF0K0r4pBX+zjDKeud0V7ah0= Subject key identifier: 90:54:BA:EC:71:9E:D4:99:B5:8A:A5:BC:89:4E:6A:91:4C:F3:82:4B Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 42 Signing time: Sat 03 May 2025 06:44:35 +0000 Manifest this update: Sat 03 May 2025 06:44:34 +0000 Manifest next update: Sat 10 May 2025 06:44:34 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: gU7Zwzv2YloZRv44Pjbr4pdAn6l0AlMeVpZhPfJksqg=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: May 3 06:44:34 2025 GMT Not After : May 10 06:44:34 2025 GMT Subject: CN=6815bb52-fcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:30:3d:d3:23:05:61:c0:6f:46:61:df:14: bb:5d:1a:b1:60:38:40:6b:23:5b:1e:b7:3c:0f:a1: 8c:40:d1:00:2f:d0:9c:3b:b2:6b:c1:c3:c6:36:1b: 19:83:53:1a:d7:c9:7c:0b:f0:6e:03:02:be:8b:44: 50:9c:97:51:6a:5f:03:da:45:a7:4f:90:0c:29:e9: cc:0a:db:1d:ba:96:3a:82:2c:b5:74:d5:d2:81:1b: 1e:c5:1d:ab:d6:ca:ce:11:01:c0:e5:f8:48:2f:ad: e7:c5:a1:31:62:6f:17:88:08:fc:82:d8:5a:1c:94: 3f:67:fa:fc:ec:ab:08:1c:b7:fe:b9:74:cc:e6:a7: 64:97:7a:a1:77:ae:e8:17:95:37:d3:85:1a:d9:dc: 10:19:31:21:a9:03:d4:9b:06:40:e4:cd:23:f4:dc: fd:0e:0a:7e:83:39:1a:6b:11:70:7b:32:a1:74:d5: 56:56:9b:11:58:a6:7a:bf:b3:00:b4:09:d8:a0:c1: 71:b8:5f:0b:f0:ba:cf:b8:de:af:c2:bc:83:b2:51: ea:9d:2b:5f:8d:eb:72:37:1e:88:f6:a7:06:ea:17: 12:ea:a3:4c:de:fe:85:21:19:aa:7e:24:c2:3e:ce: 4c:2c:b4:3d:ec:35:b6:65:f0:89:a9:24:15:f5:63: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:BA:EC:71:9E:D4:99:B5:8A:A5:BC:89:4E:6A:91:4C:F3:82:4B X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d3:4e:e3:b6:f9:96:52:33:cd:e9:37:d9:79:d3:9d:34:f0: 70:dc:c1:f8:92:fd:50:02:49:f5:40:0c:5c:c4:73:c9:26:b8: 36:3e:6f:03:22:78:9b:f6:c5:66:41:d1:ff:94:4e:e5:c6:0c: ed:61:ac:5e:2f:aa:cb:a3:f1:a3:d8:2a:9a:f5:c3:e9:de:23: 01:18:85:e3:c5:93:fb:85:f1:c3:81:4b:df:8a:ea:0d:1d:8d: 9c:4b:56:fe:89:29:27:c0:fb:c5:38:11:da:59:b4:73:eb:41: 48:fd:13:63:af:3a:2f:b0:03:c0:71:a6:8b:43:3f:37:ec:ff: ad:31:dd:bd:20:54:fe:55:2c:a5:83:d5:81:c7:fb:32:a6:f3: 8f:e2:46:63:b9:9d:39:46:1b:18:0d:c4:5e:5f:e4:c3:c1:c7: 6a:d5:fa:6c:91:ec:bf:8b:79:2c:4c:8b:39:93:75:8a:86:a3: 22:2a:ec:48:c9:eb:9c:82:37:0f:1e:85:2a:9f:af:48:29:70: 95:61:a3:05:f3:a8:69:10:9a:15:ef:3d:2c:c7:72:64:aa:a5: 22:db:fc:e1:21:b5:82:d1:17:4d:f9:d3:aa:12:ed:08:1e:cb: b7:92:26:f5:ed:73:7f:05:e1:66:22:f8:fe:96:01:d3:73:2d: 84:49:c3:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQzFCNzY2REEyOUVEMjkzRERGQTVDQ0VCMEFFNDI5NzQ1 NDQ0RDYxNTAeFw0yNTA1MDMwNjQ0MzRaFw0yNTA1MTAwNjQ0MzRaMBgxFjAUBgNV BAMTDTY4MTViYjUyLWZjYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAjDA90yMFYcBvRmHfFLtdGrFgOEBrI1setzwPoYxA0QAv0Jw7smvBw8Y2GxmD UxrXyXwL8G4DAr6LRFCcl1FqXwPaRadPkAwp6cwK2x26ljqCLLV01dKBGx7FHavW ys4RAcDl+EgvrefFoTFibxeICPyC2FoclD9n+vzsqwgct/65dMzmp2SXeqF3rugX lTfThRrZ3BAZMSGpA9SbBkDkzSP03P0OCn6DORprEXB7MqF01VZWmxFYpnq/swC0 CdigwXG4Xwvwus+43q/CvIOyUeqdK1+N63I3Hoj2pwbqFxLqo0ze/oUhGap+JMI+ zkwstD3sNbZl8ImpJBX1Y/VzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkFS67HGe 1Jm1iqW8iU5qkUzzgkswHwYDVR0jBBgwFoAUwbdm2intKT3fpczrCuQpdFRE1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzFBRjdERjZBQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2JkbTJpbnRLVDNmcGN6ckN1UXBkRlJFMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzFBRjdERjZBQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1Qz ZnBjenJDdVFwZEZSRTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMTTTuO2+ZZSM83pN9l505008HDcwfiS/VACSfVADFzEc8kmuDY+bwMi eJv2xWZB0f+UTuXGDO1hrF4vqsuj8aPYKpr1w+neIwEYhePFk/uF8cOBS9+K6g0d jZxLVv6JKSfA+8U4EdpZtHPrQUj9E2OvOi+wA8BxpotDPzfs/60x3b0gVP5VLKWD 1YHH+zKm84/iRmO5nTlGGxgNxF5f5MPBx2rV+myR7L+LeSxMizmTdYqGoyIq7EjJ 65yCNw8ehSqfr0gpcJVhowXzqGkQmhXvPSzHcmSqpSLb/OEhtYLRF03506oS7Qge y7eSJvXtc38F4WYi+P6WAdNzLYRJw7M= -----END CERTIFICATE-----Generated at Mon May 5 03:17:22 2025 by rpki-client