$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json) Hash identifier: 1sGn3TBuTi+k0Y8eB6UkCF8UYms3lWukjNnBp+Xt6d4= Subject key identifier: C8:40:75:80:64:CC:0E:E0:37:EC:7C:A1:3A:18:AA:19:2E:82:F2:31 Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft Manifest number: E0 Signing time: Sat 17 May 2025 05:01:09 +0000 Manifest this update: Sat 17 May 2025 05:01:08 +0000 Manifest next update: Sat 24 May 2025 05:01:08 +0000 Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: soN7fLo0cvBWqlrAjWdnjTqknNO1y05mv3C1h4nERhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Validity Not Before: May 17 05:01:08 2025 GMT Not After : May 24 05:01:08 2025 GMT Subject: CN=68281814-6f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:3a:bb:5f:c9:13:b9:57:a3:15:0c:a0:51: de:b9:f4:d2:80:41:eb:b8:a5:90:7d:fa:bb:c8:62: f0:52:24:58:47:ee:43:1f:26:4d:a4:31:66:6d:45: 60:0f:ea:4a:58:68:f4:8f:a0:2f:89:d3:3d:2a:3c: 04:cd:3c:09:1c:2d:ce:09:0d:87:80:32:f2:ba:85: 76:d1:43:bc:3b:e6:2d:45:b0:31:a2:0f:27:4b:55: 2b:e4:9d:aa:b5:bd:ef:75:f5:cc:1b:5c:bd:98:80: a1:3e:06:7c:f6:b6:f9:f8:04:c3:fa:65:0b:02:0d: f8:a8:94:3f:df:87:3e:34:cf:2e:44:ed:8c:8f:d0: 95:71:fe:4c:3c:39:e2:b9:c2:a8:0d:bf:02:11:be: 9d:58:f6:6c:bf:e3:fd:67:03:39:21:f1:7c:82:55: d8:04:5f:32:43:03:87:4d:55:a1:bb:09:ac:ab:4d: 25:20:57:99:ea:9d:f8:05:75:fb:8d:ff:34:76:f9: 34:ad:84:7b:43:3e:31:af:3c:2a:73:94:0a:e9:af: 65:c6:01:3d:d5:10:69:b4:27:6d:26:2c:3d:ab:cf: 20:4f:66:6b:36:cd:fd:90:46:9a:48:5e:03:be:8f: e8:d7:51:34:5e:51:4a:7d:53:67:b4:24:01:70:09: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:40:75:80:64:CC:0E:E0:37:EC:7C:A1:3A:18:AA:19:2E:82:F2:31 X509v3 Authority Key Identifier: keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b0:a0:b0:aa:73:cd:cc:21:e2:5b:3e:c8:fe:30:3a:57:a4: 81:de:c9:fa:7b:a7:f8:c6:fa:7d:b9:b0:0e:8d:20:f2:97:53: f2:f5:21:30:68:54:d5:98:dd:e4:b2:24:3d:9d:35:a9:ef:7e: 48:3f:29:5a:97:8e:90:91:c5:ba:b4:9d:2d:27:c0:31:1c:c8: f0:d9:7e:c8:2d:85:3c:0b:10:23:99:44:09:7f:b8:25:e7:f0: fd:20:76:df:08:43:f2:0d:fc:f8:0a:6b:bd:dd:ac:bb:bf:ca: c7:4f:20:37:44:1c:72:be:08:6e:c4:b0:88:b1:42:23:95:17: 09:2c:45:ac:7b:f3:46:f6:69:20:23:75:1b:f7:f3:e1:65:6e: 5c:86:38:d6:09:f6:6b:c7:75:cf:f5:56:5a:c3:10:a0:15:24: ad:ad:3f:c1:d0:83:91:8f:0f:8f:6b:e8:4c:24:c2:7b:8d:26: 3f:3e:ae:24:af:9b:f4:ff:f7:76:2c:2d:fd:52:3d:1d:b1:5b: cd:d2:db:b5:43:b4:3c:cf:83:e1:66:e0:80:d8:44:a9:c9:c0: 56:12:f2:e0:c3:d5:7a:33:44:37:0f:c3:0d:48:1d:34:c9:ce: 28:d6:95:a2:ea:64:2e:51:35:7c:00:60:df:55:e6:01:9b:f2: d0:de:86:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKEMxOUQ2QjZERUIzQTFGOUMzOTg0N0UxNENBQTU1OTk3 QkM5Q0YyNzYwHhcNMjUwNTE3MDUwMTA4WhcNMjUwNTI0MDUwMTA4WjAYMRYwFAYD VQQDEw02ODI4MTgxNC02ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT46u1/JE7lXoxUMoFHeufTSgEHruKWQffq7yGLwUiRYR+5DHyZNpDFmbUVg D+pKWGj0j6AvidM9KjwEzTwJHC3OCQ2HgDLyuoV20UO8O+YtRbAxog8nS1Ur5J2q tb3vdfXMG1y9mIChPgZ89rb5+ATD+mULAg34qJQ/34c+NM8uRO2Mj9CVcf5MPDni ucKoDb8CEb6dWPZsv+P9ZwM5IfF8glXYBF8yQwOHTVWhuwmsq00lIFeZ6p34BXX7 jf80dvk0rYR7Qz4xrzwqc5QK6a9lxgE91RBptCdtJiw9q88gT2ZrNs39kEaaSF4D vo/o11E0XlFKfVNntCQBcAngIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhAdYBk zA7gN+x8oToYqhkugvIxMB8GA1UdIwQYMBaAFMGda23rOh+cOYR+FMqlWZe8nPJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DRURBNTJDNEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1dzVoSDRVeXFWWmw3eWM4 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5YzhuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DRURBNTJDNEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1 dzVoSDRVeXFWWmw3eWM4blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgsKCwqnPNzCHiWz7I/jA6V6SB3sn6e6f4xvp9ubAOjSDyl1Py9SEw aFTVmN3ksiQ9nTWp735IPylal46QkcW6tJ0tJ8AxHMjw2X7ILYU8CxAjmUQJf7gl 5/D9IHbfCEPyDfz4Cmu93ay7v8rHTyA3RBxyvghuxLCIsUIjlRcJLEWse/NG9mkg I3Ub9/PhZW5chjjWCfZrx3XP9VZawxCgFSStrT/B0IORjw+Pa+hMJMJ7jSY/Pq4k r5v0//d2LC39Uj0dsVvN0tu1Q7Q8z4PhZuCA2ESpycBWEvLgw9V6M0Q3D8MNSB00 yc4o1pWi6mQuUTV8AGDfVeYBm/LQ3oYR -----END CERTIFICATE-----Generated at Sat May 17 17:29:49 2025 by rpki-client