$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft File: WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json) Hash identifier: PRhyx6NS2q6L2sufi+Q5vZbe5yV/qpfPnsTJoXoYjKE= Subject key identifier: 6E:75:C3:F8:1B:66:C0:84:86:B8:F2:CA:70:99:07:88:A0:B1:77:3D Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft Manifest number: 01BC Signing time: Mon 05 May 2025 02:15:26 +0000 Manifest this update: Mon 05 May 2025 02:15:25 +0000 Manifest next update: Mon 12 May 2025 02:15:25 +0000 Files and hashes: 1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: CuwxYOc2rhzaGY0JoSTtcz5LZfMMpppBGxtJ0Csi3UU=) 2: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (hash: NtempH4sH10J4xA32EJi0/pMUNSLL5Y5TyDjBhb9q5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D65B, serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Validity Not Before: May 5 02:15:25 2025 GMT Not After : May 12 02:15:25 2025 GMT Subject: CN=68181f3e-b752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:52:d1:2f:3c:10:55:9f:36:28:a5:f5:57:a0: 97:9e:23:af:95:c8:c6:c4:cc:73:8e:94:a4:d6:f4: 5f:65:3b:b2:85:2a:be:1f:59:12:61:91:55:80:78: c1:28:0b:e4:33:74:8c:ce:5a:6d:6e:2c:f4:8a:d3: 00:cf:85:59:3b:21:ca:ea:59:b2:8a:55:1e:b1:8c: f4:7e:21:d7:38:af:f9:a4:3b:f8:44:ed:11:f4:7c: 50:a3:4f:f1:a2:e8:9d:d7:81:d9:87:f3:2c:65:8d: f5:e1:59:2d:68:27:3a:c6:e1:41:83:d3:7b:50:aa: 7a:a1:a5:e2:06:93:f9:3b:91:7c:74:17:24:a1:ed: db:30:58:e9:05:16:fa:34:28:d1:50:51:5f:75:9d: 63:5b:80:9f:a8:b8:67:c5:0c:6d:39:00:f1:78:6c: 28:c2:5a:d2:3b:3a:06:99:3c:7c:a8:7e:2a:98:93: a8:02:3d:de:e0:59:4e:18:60:79:d0:6d:c7:ab:66: f1:4d:6d:9e:27:73:d6:8c:74:f5:3d:ce:42:b8:88: 83:77:c4:a8:89:29:1b:3b:63:71:b7:84:66:d0:e2: fe:7f:5d:b3:3e:47:64:9e:d8:f4:0d:1c:df:34:37: ad:a2:c6:47:e3:9f:e9:93:66:91:11:82:09:33:f8: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:75:C3:F8:1B:66:C0:84:86:B8:F2:CA:70:99:07:88:A0:B1:77:3D X509v3 Authority Key Identifier: keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:e8:b3:43:16:d8:23:e3:a1:a8:26:85:1b:93:ea:5a:2a:f7: 42:6e:f7:de:bf:f7:98:40:25:3a:fa:5a:36:9b:f9:89:67:2c: 08:08:f2:b6:ba:3f:3a:93:96:09:ff:91:77:d8:08:c9:fa:09: 0d:96:2c:c1:ae:6a:8c:fc:60:b3:07:39:93:95:c4:7a:0f:bc: 5b:21:6b:9d:e8:40:b9:c8:cc:cc:8e:8d:1e:26:8c:67:6c:77: a8:4b:bb:e7:d4:42:a8:78:5a:5c:60:2b:f2:07:02:ab:0b:2d: 7d:2e:e5:ed:34:60:a2:0a:45:ea:9c:82:73:82:c4:d1:b8:e0: 7c:1b:c4:ff:95:3e:63:44:84:e9:b6:9f:04:9d:96:25:e1:9e: 96:81:f1:39:ca:04:8e:f2:a9:57:e8:2a:02:86:1b:6c:a2:6e: 1f:fd:3d:92:bb:9d:67:71:88:e5:c1:02:ca:9f:f6:a8:ee:94: 02:81:d8:12:3a:e7:b1:06:97:47:b2:eb:31:b2:b6:4c:cd:ed: 0f:ce:07:97:1c:48:a1:f8:25:02:fc:53:8b:1d:fc:9f:5b:5e: 7f:3c:27:8f:35:29:ee:08:82:63:d8:88:79:f1:83:7c:35:47: 70:cf:27:ac:dc:9d:95:6c:aa:3a:22:1c:5b:be:3f:57:cb:75: 3b:ea:19:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NUIxMTAvBgNVBAUTKDU4MTMzMkY1RDNFQjg4MkE1QzI1MkZERkQ5ODBCNjBB MUEzNzhFNDEwHhcNMjUwNTA1MDIxNTI1WhcNMjUwNTEyMDIxNTI1WjAYMRYwFAYD VQQDEw02ODE4MWYzZS1iNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lLRLzwQVZ82KKX1V6CXniOvlcjGxMxzjpSk1vRfZTuyhSq+H1kSYZFVgHjB KAvkM3SMzlptbiz0itMAz4VZOyHK6lmyilUesYz0fiHXOK/5pDv4RO0R9HxQo0/x ouid14HZh/MsZY314VktaCc6xuFBg9N7UKp6oaXiBpP5O5F8dBckoe3bMFjpBRb6 NCjRUFFfdZ1jW4CfqLhnxQxtOQDxeGwowlrSOzoGmTx8qH4qmJOoAj3e4FlOGGB5 0G3Hq2bxTW2eJ3PWjHT1Pc5CuIiDd8SoiSkbO2Nxt4Rm0OL+f12zPkdkntj0DRzf NDetosZH45/pk2aREYIJM/htPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG51w/gb ZsCEhrjyynCZB4igsXc9MB8GA1UdIwQYMBaAFFgTMvXT64gqXCUv39mAtgoaN45B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Qi9DRjRDRjEzQUE1 RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlDcGNKU19mMllDMkNobzNq a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2prRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Qi9DRjRDRjEzQUE1RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlD cGNKU19mMllDMkNobzNqa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX6LNDFtgj46GoJoUbk+paKvdCbvfev/eYQCU6+lo2m/mJZywICPK2 uj86k5YJ/5F32AjJ+gkNlizBrmqM/GCzBzmTlcR6D7xbIWud6EC5yMzMjo0eJoxn bHeoS7vn1EKoeFpcYCvyBwKrCy19LuXtNGCiCkXqnIJzgsTRuOB8G8T/lT5jRITp tp8EnZYl4Z6WgfE5ygSO8qlX6CoChhtsom4f/T2Su51ncYjlwQLKn/ao7pQCgdgS OuexBpdHsusxsrZMze0PzgeXHEih+CUC/FOLHfyfW15/PCePNSnuCIJj2Ih58YN8 NUdwzyes3J2VbKo6Ihxbvj9Xy3U76hlu -----END CERTIFICATE-----Generated at Mon May 5 16:26:39 2025 by rpki-client