$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft File: W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft (raw, json) Hash identifier: 8tw4rnyY9PNKs+wDBVLIddGhGVfoCSZdww7GibQQ6Ac= Subject key identifier: B6:9B:87:44:34:30:FB:2B:56:FD:B6:7A:46:82:36:24:53:45:D0:C2 Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF Certificate issuer: /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft Manifest number: 0530 Signing time: Sat 10 May 2025 23:05:56 +0000 Manifest this update: Sat 10 May 2025 23:05:55 +0000 Manifest next update: Sat 17 May 2025 23:05:55 +0000 Files and hashes: 1: W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl (hash: xhO9lpjvyD0dPvRGClWSu3IXpNznHVIORlY24XMg3oI=) 2: 4A4C8CD0F67311EBA0F18818C4F9AE02.roa (hash: 3gaCcI2B39Ypqww+a42sCy+UnmO00x0eV5GOdvcimLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B714, serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF Validity Not Before: May 10 23:05:55 2025 GMT Not After : May 17 23:05:55 2025 GMT Subject: CN=681fdbd4-dec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:9f:39:6d:a6:61:28:fc:f1:25:56:05:aa: 05:27:5c:3e:c7:c8:eb:62:50:bf:c9:44:f6:0e:30: 1b:c4:7c:ce:8e:03:df:d0:9e:d0:71:b1:94:52:99: 18:39:f5:d5:e2:7a:95:37:01:73:8b:e1:70:71:25: 0c:38:b5:7a:f0:57:6a:ec:6a:98:e4:97:40:2e:ab: 75:5d:ad:b6:2f:af:57:33:f4:83:45:53:76:cc:34: 55:b1:1a:d0:78:51:9c:ca:fc:c0:ba:82:09:bb:ef: 47:8b:47:10:6d:45:60:28:6c:6e:2b:d4:8f:d2:a5: 4c:b9:7c:df:1a:33:b4:33:70:1b:bf:d0:62:fb:f4: c2:42:d3:97:9b:38:70:ab:5d:69:ba:55:83:0d:c6: 8e:d8:34:a0:a8:29:be:db:88:d3:34:42:2d:14:3e: b4:57:ee:e5:2b:fe:b7:f6:eb:97:45:75:13:9c:5e: e2:99:b0:ba:dc:14:21:db:19:61:8a:be:e4:36:4c: dc:9d:01:f0:72:48:ec:45:39:a0:87:e4:62:a7:a1: 78:3f:cd:2e:e8:4b:78:84:45:6f:95:3c:d6:e3:49: 70:ec:bc:a8:e9:e8:4a:85:30:ae:60:ca:26:eb:3b: b3:54:69:59:b3:bd:f9:d8:98:c5:a7:74:94:c1:5a: c5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9B:87:44:34:30:FB:2B:56:FD:B6:7A:46:82:36:24:53:45:D0:C2 X509v3 Authority Key Identifier: keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4c:13:09:a6:8c:02:df:b9:e0:d4:c5:89:bd:03:ec:86:dc: f9:a2:a0:a7:3d:18:06:b5:e9:c2:22:65:64:be:63:4f:ad:50: ef:9c:42:ff:e0:35:4a:50:9f:be:8b:4e:a6:64:d8:cf:74:04: 6f:31:57:0c:77:40:4a:16:41:fb:cc:d2:81:7a:39:51:0a:16: 53:4e:ec:b6:4a:fa:ae:4a:a0:f0:6b:28:c5:45:a1:7b:d5:d5: 75:3e:8d:fc:ab:04:1a:83:5f:7b:88:96:65:b2:87:f4:7d:20: 67:77:3b:a8:34:88:eb:be:0d:d7:9d:ee:eb:e0:26:b7:71:3c: ec:fe:77:b1:1c:64:a2:36:5c:08:29:4b:6b:85:4e:ba:69:b4: a6:3b:4f:37:16:c8:04:11:42:8b:ff:0c:26:7a:c8:d9:fb:c1: ed:b7:e3:25:a1:0b:b9:9d:fa:02:54:bb:67:2e:a7:c0:32:74: f2:41:4c:38:a8:64:21:08:1d:08:b1:7a:5b:56:f0:0e:c2:35: af:43:69:8b:f0:58:87:7e:5c:28:79:7a:2e:24:c2:e9:78:6c: ae:e7:dd:1c:72:a6:8d:ff:52:47:7d:9f:35:31:e5:3d:b3:40: 98:e4:77:dd:3c:24:d5:46:a6:e9:94:6e:c2:95:48:8c:62:15: 2c:78:4a:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3MTQxMTAvBgNVBAUTKDVCRTk3RkE0RDM0QjNFRDMxREJENjQ4NjBFMTgwMDkz RkVBMTExREYwHhcNMjUwNTEwMjMwNTU1WhcNMjUwNTE3MjMwNTU1WjAYMRYwFAYD VQQDEw02ODFmZGJkNC1kZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PefOW2mYSj88SVWBaoFJ1w+x8jrYlC/yUT2DjAbxHzOjgPf0J7QcbGUUpkY OfXV4nqVNwFzi+FwcSUMOLV68Fdq7GqY5JdALqt1Xa22L69XM/SDRVN2zDRVsRrQ eFGcyvzAuoIJu+9Hi0cQbUVgKGxuK9SP0qVMuXzfGjO0M3Abv9Bi+/TCQtOXmzhw q11pulWDDcaO2DSgqCm+24jTNEItFD60V+7lK/639uuXRXUTnF7imbC63BQh2xlh ir7kNkzcnQHwckjsRTmgh+Rip6F4P80u6Et4hEVvlTzW40lw7Lyo6ehKhTCuYMom 6zuzVGlZs7352JjFp3SUwVrFvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLabh0Q0 MPsrVv22ekaCNiRTRdDCMB8GA1UdIwQYMBaAFFvpf6TTSz7THb1khg4YAJP+oRHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjcxNC82NDA0QzAxOEY2 NzExMUVCOEI2M0ExMTdDNEY5QUUwMi9XLWxfcE5OTFB0TWR2V1NHRGhnQWtfNmhF ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ctbF9wTk5MUHRNZHZXU0dEaGdBa182aEVkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjcxNC82NDA0QzAxOEY2NzExMUVCOEI2M0ExMTdDNEY5QUUwMi9XLWxfcE5OTFB0 TWR2V1NHRGhnQWtfNmhFZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByTBMJpowC37ng1MWJvQPshtz5oqCnPRgGtenCImVkvmNPrVDvnEL/ 4DVKUJ++i06mZNjPdARvMVcMd0BKFkH7zNKBejlRChZTTuy2SvquSqDwayjFRaF7 1dV1Po38qwQag197iJZlsof0fSBndzuoNIjrvg3Xne7r4Ca3cTzs/nexHGSiNlwI KUtrhU66abSmO083FsgEEUKL/wwmesjZ+8Htt+MloQu5nfoCVLtnLqfAMnTyQUw4 qGQhCB0IsXpbVvAOwjWvQ2mL8FiHflwoeXouJMLpeGyu590ccqaN/1JHfZ81MeU9 s0CY5HfdPCTVRqbplG7ClUiMYhUseEpY -----END CERTIFICATE-----Generated at Sun May 11 00:38:44 2025 by rpki-client