$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft File: WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json) Hash identifier: +DcbOpw3ZbmsfyAPczCMds9DCB4iUvQ35jEbML/myPU= Subject key identifier: 30:8B:F0:6D:C3:7D:A8:7D:76:C5:A7:20:4D:01:99:98:C8:EE:CA:CB Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 Certificate issuer: /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft Manifest number: 5E Signing time: Tue 13 May 2025 06:19:37 +0000 Manifest this update: Tue 13 May 2025 06:19:37 +0000 Manifest next update: Tue 20 May 2025 06:19:37 +0000 Files and hashes: 1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: NG1renLKp99oqSW+NThb2eUacLFm+2JDEtopaSDpLyQ=) 2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: xTT8Qi7eRLtjGj1MJV5lOZ1nPkMc9OMOKapYnFfPneA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Validity Not Before: May 13 06:19:37 2025 GMT Not After : May 20 06:19:37 2025 GMT Subject: CN=6822e479-c661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8b:08:5c:18:b6:63:d7:8d:5f:c6:73:b8:46: d4:76:15:a3:44:53:18:d9:00:21:77:c4:83:4f:b9: 28:0a:17:bb:4a:99:f7:32:58:89:35:ce:f7:74:dd: f5:1a:2c:e8:0e:a9:98:2b:17:b0:df:b7:47:2f:53: 88:d2:40:2e:1a:77:9c:97:65:ba:4f:34:7d:cf:04: 32:ea:77:53:82:3f:2a:5f:30:da:39:1e:47:4a:5e: 40:17:4f:37:18:2a:ef:86:03:5d:21:b5:75:79:47: 61:53:58:52:94:70:23:ad:ce:f4:6e:1a:5c:a1:68: ef:71:ed:f2:23:d0:29:3e:93:96:0e:e7:3b:ff:9a: ef:5e:8c:3a:c8:86:65:00:99:19:fa:ee:2f:78:50: cf:6a:ab:47:4c:73:a1:a6:73:cb:93:b9:75:1b:91: 97:b0:cd:2a:33:77:81:92:c2:a7:eb:4c:c9:56:6d: e7:88:7c:ac:da:34:ee:53:22:d6:a5:d8:7d:1a:78: ec:26:87:b8:3c:ae:17:b1:45:ad:86:f8:c4:f1:a8: 56:e0:6f:ed:5f:0c:5e:63:bc:f2:fd:3a:43:9c:5c: 29:c1:99:00:c2:5f:16:dd:3b:44:61:38:16:6b:19: 92:72:ed:fb:c1:ee:f7:a5:40:4c:aa:c8:5c:d0:55: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8B:F0:6D:C3:7D:A8:7D:76:C5:A7:20:4D:01:99:98:C8:EE:CA:CB X509v3 Authority Key Identifier: keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c1:99:33:d6:60:ee:0c:53:6e:42:97:96:90:5e:a9:4e:fd: 4c:85:99:d2:a0:64:85:99:3d:78:0d:45:33:87:b1:69:5c:a3: ae:21:55:93:40:c4:25:9e:6b:ca:56:11:ad:66:c3:dd:0f:de: 44:40:e3:fe:dd:90:46:da:4e:e0:3c:3f:39:b2:5e:b7:5c:71: 97:b8:b0:06:74:b5:5a:da:ea:28:47:ec:ce:43:26:0c:b6:5c: ad:eb:00:2b:97:2e:be:36:3a:0d:5d:50:88:ec:91:7c:07:9b: 65:40:aa:97:f5:cc:89:b0:ad:96:4e:52:0e:f9:a4:48:65:e9: e3:01:cc:f6:8e:76:6a:00:eb:8f:7b:58:ae:05:86:83:47:19: f5:50:e0:f6:13:ee:ef:00:d6:67:2b:d7:c4:af:8d:f4:5d:f1: 4a:f9:3f:e7:88:54:3b:5c:aa:d8:3e:89:61:81:16:d7:f2:16: 49:88:03:60:3c:29:8b:a2:62:fb:a8:63:52:13:b9:dc:f1:89: 78:44:e5:9c:94:88:0b:f2:78:9f:3e:fb:c7:d0:1f:e5:b5:0f: a0:62:39:06:bc:12:e2:a0:9b:35:50:6d:76:3b:3f:0b:84:8f: a0:b8:0c:6b:46:ac:29:f7:f2:8d:8a:b3:e1:50:2b:41:86:74: 40:7f:37:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzRGRDExMC8GA1UEBRMoNTk5MEY0QzNCQjIzNDM2Qzk1MTAwQjQ4NDhEQzkxODZB QTQ5NTMxOTAeFw0yNTA1MTMwNjE5MzdaFw0yNTA1MjAwNjE5MzdaMBgxFjAUBgNV BAMTDTY4MjJlNDc5LWM2NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgiwhcGLZj141fxnO4RtR2FaNEUxjZACF3xINPuSgKF7tKmfcyWIk1zvd03fUa LOgOqZgrF7Dft0cvU4jSQC4ad5yXZbpPNH3PBDLqd1OCPypfMNo5HkdKXkAXTzcY Ku+GA10htXV5R2FTWFKUcCOtzvRuGlyhaO9x7fIj0Ck+k5YO5zv/mu9ejDrIhmUA mRn67i94UM9qq0dMc6Gmc8uTuXUbkZewzSozd4GSwqfrTMlWbeeIfKzaNO5TItal 2H0aeOwmh7g8rhexRa2G+MTxqFbgb+1fDF5jvPL9OkOcXCnBmQDCXxbdO0RhOBZr GZJy7fvB7velQEyqyFzQVfKfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMIvwbcN9 qH12xacgTQGZmMjuysswHwYDVR0jBBgwFoAUWZD0w7sjQ2yVEAtISNyRhqpJUxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDNEZEL0E1N0NBQkVDQTU1 NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5VkVBdElTTnlSaHFwSlV4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV1pEMHc3c2pRMnlWRUF0SVNOeVJocXBKVXhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND NEZEL0E1N0NBQkVDQTU1NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5 VkVBdElTTnlSaHFwSlV4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABPBmTPWYO4MU25Cl5aQXqlO/UyFmdKgZIWZPXgNRTOHsWlco64hVZNA xCWea8pWEa1mw90P3kRA4/7dkEbaTuA8PzmyXrdccZe4sAZ0tVra6ihH7M5DJgy2 XK3rACuXLr42Og1dUIjskXwHm2VAqpf1zImwrZZOUg75pEhl6eMBzPaOdmoA6497 WK4FhoNHGfVQ4PYT7u8A1mcr18SvjfRd8Ur5P+eIVDtcqtg+iWGBFtfyFkmIA2A8 KYuiYvuoY1ITudzxiXhE5ZyUiAvyeJ8++8fQH+W1D6BiOQa8EuKgmzVQbXY7PwuE j6C4DGtGrCn38o2Ks+FQK0GGdEB/N78= -----END CERTIFICATE-----Generated at Wed May 14 17:41:57 2025 by rpki-client