$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: 1cCE3CkxCG1ODLWIP11oEF7HqgDvsemgJ3lBfCLexuU= Subject key identifier: 34:BC:65:57:2A:1D:78:CA:3D:38:13:99:26:76:79:65:7D:5C:CC:06 Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 03B7 Signing time: Tue 13 May 2025 01:12:33 +0000 Manifest this update: Tue 13 May 2025 01:12:33 +0000 Manifest next update: Tue 20 May 2025 01:12:33 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: lNBgtkhD2hEWKcogLRwC/poKr3q1eI0zYgEw2U5CmVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: May 13 01:12:33 2025 GMT Not After : May 20 01:12:33 2025 GMT Subject: CN=68229c81-4550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7d:6b:7c:69:ec:10:62:ca:43:49:e3:5a:c2: e5:d3:bf:53:2d:5a:8e:1c:16:41:12:37:41:16:07: f5:ea:11:08:c8:5b:a9:a9:ba:fd:40:5f:a8:ff:02: 7f:4a:d8:b7:ba:67:d6:85:72:c5:ac:4d:f5:c6:ad: 19:9f:ce:1d:d5:40:20:72:37:9f:6f:af:f6:61:a7: 7a:23:5e:63:0e:aa:85:f2:4e:1f:95:65:4c:1e:e4: f4:54:cf:58:95:84:c6:f5:1a:12:1b:40:41:2d:16: 0a:ae:68:d4:07:57:46:24:77:c9:39:7b:d8:4c:99: 3c:59:5f:df:ae:af:e5:38:ad:1e:25:6a:f7:54:d9: 35:5d:4d:ee:9f:15:58:dc:9e:93:a9:79:15:12:09: 51:21:d4:b6:c1:2b:8c:19:f0:9c:62:5c:13:a9:51: b4:d1:6d:46:e4:b2:23:58:88:b6:1d:8e:dd:f3:cd: 4b:c2:e3:3f:1f:97:15:65:50:58:9e:0e:9f:32:bf: 38:f2:0c:5c:59:1d:a9:84:c1:47:76:45:89:23:4f: e5:7f:73:16:bd:3e:80:5b:43:7e:67:3c:ae:af:df: de:c9:dc:35:44:19:18:7b:0e:18:ac:ce:59:ad:f4: b8:b7:89:2e:40:df:47:a7:b8:9b:43:be:96:59:a2: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BC:65:57:2A:1D:78:CA:3D:38:13:99:26:76:79:65:7D:5C:CC:06 X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3f:03:d2:ad:3e:97:fc:81:70:34:17:85:f4:18:51:bc:6e: a4:8a:c7:b7:9a:24:19:da:8e:6d:7a:9c:de:9d:2e:cc:e2:93: 5a:29:e2:89:55:e3:3e:e5:2e:0c:85:40:82:55:70:90:f7:0d: c6:4f:d8:3d:35:1a:ff:72:78:a9:cc:75:0e:77:bf:0b:a9:3f: 3f:cf:22:f5:71:33:7f:c1:e1:36:df:ac:dc:e6:ad:8f:06:f5: 32:29:f2:ba:75:95:17:88:4d:0f:ca:d2:44:e4:00:ec:0c:89: 63:9e:75:a5:99:1b:04:78:30:a6:24:0b:06:3c:46:27:cf:b7: 61:32:71:50:03:df:c5:c1:38:dc:0b:a2:42:91:e7:96:54:7f: 8e:bb:2a:f5:db:a5:0d:1a:7e:f0:d5:ec:05:8b:44:bb:b9:64: 8b:3e:e2:c4:59:70:76:e2:3c:49:3b:f7:cb:df:26:cd:c1:3f: da:48:f4:1a:a3:48:0a:62:aa:b1:12:38:49:26:85:db:95:e5: 23:fa:a0:7c:b3:a2:45:6d:45:08:36:3c:a7:1d:96:e9:25:fe: e6:ac:72:0b:e6:66:a9:4b:a5:3e:56:97:7f:e7:1a:37:9b:0f: eb:d0:69:75:2c:4e:f0:dd:68:38:88:e3:3e:ce:47:0b:87:c8: a5:ef:0c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjUwNTEzMDExMjMzWhcNMjUwNTIwMDExMjMzWjAYMRYwFAYD VQQDEw02ODIyOWM4MS00NTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3H1rfGnsEGLKQ0njWsLl079TLVqOHBZBEjdBFgf16hEIyFupqbr9QF+o/wJ/ Sti3umfWhXLFrE31xq0Zn84d1UAgcjefb6/2Yad6I15jDqqF8k4flWVMHuT0VM9Y lYTG9RoSG0BBLRYKrmjUB1dGJHfJOXvYTJk8WV/frq/lOK0eJWr3VNk1XU3unxVY 3J6TqXkVEglRIdS2wSuMGfCcYlwTqVG00W1G5LIjWIi2HY7d881LwuM/H5cVZVBY ng6fMr848gxcWR2phMFHdkWJI0/lf3MWvT6AW0N+Zzyur9/eydw1RBkYew4YrM5Z rfS4t4kuQN9Hp7ibQ76WWaItSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS8ZVcq HXjKPTgTmSZ2eWV9XMwGMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqPwPSrT6X/IFwNBeF9BhRvG6kise3miQZ2o5tepzenS7M4pNaKeKJ VeM+5S4MhUCCVXCQ9w3GT9g9NRr/cnipzHUOd78LqT8/zyL1cTN/weE236zc5q2P BvUyKfK6dZUXiE0PytJE5ADsDIljnnWlmRsEeDCmJAsGPEYnz7dhMnFQA9/FwTjc C6JCkeeWVH+Ouyr126UNGn7w1ewFi0S7uWSLPuLEWXB24jxJO/fL3ybNwT/aSPQa o0gKYqqxEjhJJoXbleUj+qB8s6JFbUUINjynHZbpJf7mrHIL5mapS6U+Vpd/5xo3 mw/r0Gl1LE7w3Wg4iOM+zkcLh8il7wxU -----END CERTIFICATE-----Generated at Tue May 13 06:35:04 2025 by rpki-client