$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: MBfjE9jMON/2iiIYa/jMtPcRrZ01AmZkH+jk+vZh4gU= Subject key identifier: 13:CD:C1:BF:45:09:02:93:07:78:E2:CD:3E:0B:32:77:3E:D2:46:AD Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 0508 Signing time: Sat 10 May 2025 23:16:39 +0000 Manifest this update: Sat 10 May 2025 23:16:39 +0000 Manifest next update: Sat 17 May 2025 23:16:39 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: /0AJk1qbQ50Jh0Bj1Aw86X15Z/DE+ulKSy6uPr3L358=) 2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: PT6HAQnCKQ1h24wBLOcqnEqZNrhbuPQnC+z2D3m/yIA=) 3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: YWeX1DfSGs4BQndSEpvjXp//SRdFsIHjRaQTZ+32G1w=) 4: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: mYVTb3naQfgNMS7fIevSh0fymgDfaPtpkRpDdX0Fp/8=) 5: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: dwJddnm1ntnsj4XMzYCHtwqdcwWHva5rTpsA08hxqqs=) 6: BCE8827C4EB011ECA708A867C4F9AE02.roa (hash: YiFunTZL5LVn069EwrhiVsys5tG1ZsT1/SQk8scoDqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: May 10 23:16:39 2025 GMT Not After : May 17 23:16:39 2025 GMT Subject: CN=681fde57-249f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:bc:b3:13:f2:d9:51:f4:bb:30:51:38:a9: 30:1a:bc:ab:12:12:db:9c:39:c9:11:db:b5:c8:37: 49:24:43:32:d0:e9:24:5c:f5:a8:97:cd:8b:f7:b2: d4:34:35:64:5f:3c:66:a1:ad:bb:aa:22:e6:65:2c: 01:48:57:73:de:73:89:24:6f:79:b4:5d:b0:fd:05: 6e:a1:67:23:69:83:ce:68:91:b5:63:05:63:2d:6f: 41:e8:08:02:b1:5c:63:3a:3f:50:1c:a1:96:dc:bc: bc:28:73:7f:04:de:67:63:17:ba:2c:dc:71:f9:25: a0:03:af:55:1f:ab:5f:7f:38:45:e2:6f:5f:6d:e9: 86:3f:7a:9c:cc:e9:36:d9:89:b0:eb:8c:b3:93:79: c9:d8:80:d3:1e:f8:cb:e3:2c:b7:57:bd:16:18:88: 86:77:dd:aa:60:99:e6:a9:33:62:b8:9b:ed:2a:ae: 75:2f:93:7a:d8:87:bb:26:b9:f5:fd:7a:31:86:b5: b5:64:2f:d5:f2:09:82:9d:ab:ba:06:35:ea:cd:50: 8a:6f:75:a5:46:39:fd:17:df:ac:42:31:de:a9:8d: 68:ae:02:df:aa:8e:b1:54:8f:5d:df:3c:23:b8:bb: ff:a8:b9:46:53:ac:3b:85:3e:e3:8b:31:d9:cc:0f: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CD:C1:BF:45:09:02:93:07:78:E2:CD:3E:0B:32:77:3E:D2:46:AD X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:de:70:75:06:7d:17:dd:29:16:06:fa:38:4d:db:24:b3:38: 42:2c:5b:7b:8d:d2:7e:65:9f:a8:f9:cc:3a:fe:60:5e:16:8c: e9:4c:52:15:e8:d6:23:bc:c7:1c:d5:c6:a5:48:e2:0e:eb:df: ba:8a:5b:91:e2:6a:9c:b2:76:05:11:bc:dd:8c:9b:0d:0c:4a: a7:81:a3:26:2d:a2:75:57:f5:59:aa:c5:25:1a:0b:85:b7:0e: 44:54:f1:fc:9d:5a:26:59:17:92:e8:4a:63:ba:e0:ce:fc:f9: dd:7a:19:f2:bd:71:c6:93:03:88:8d:b1:f9:93:4e:d1:b6:80: d2:f7:bc:1c:2e:cb:cd:bf:b8:02:84:05:9e:03:c6:da:d9:29: a2:23:73:fb:a0:45:58:9a:27:59:1b:c0:96:39:17:79:fe:3e: cf:92:b3:70:a9:a0:09:23:f6:f4:c6:8b:34:30:f5:09:09:60: 8f:16:d8:36:29:d8:8c:d3:70:76:16:1b:95:7d:aa:72:07:2f: d4:36:e1:c6:d2:d8:81:90:ed:c1:79:2d:6a:14:0a:45:6b:30: 53:ea:b9:83:a6:14:a2:4b:1a:ee:7b:9a:c2:8f:89:74:f9:98: 27:68:10:87:38:12:ec:42:52:46:2d:ca:94:14:3f:49:91:5c: 7b:1f:1b:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUwNTEwMjMxNjM5WhcNMjUwNTE3MjMxNjM5WjAYMRYwFAYD VQQDEw02ODFmZGU1Ny0yNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRW8sxPy2VH0uzBROKkwGryrEhLbnDnJEdu1yDdJJEMy0OkkXPWol82L97LU NDVkXzxmoa27qiLmZSwBSFdz3nOJJG95tF2w/QVuoWcjaYPOaJG1YwVjLW9B6AgC sVxjOj9QHKGW3Ly8KHN/BN5nYxe6LNxx+SWgA69VH6tffzhF4m9fbemGP3qczOk2 2Ymw64yzk3nJ2IDTHvjL4yy3V70WGIiGd92qYJnmqTNiuJvtKq51L5N62Ie7Jrn1 /XoxhrW1ZC/V8gmCnau6BjXqzVCKb3WlRjn9F9+sQjHeqY1orgLfqo6xVI9d3zwj uLv/qLlGU6w7hT7jizHZzA+QGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPNwb9F CQKTB3jizT4LMnc+0katMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE3nB1Bn0X3SkWBvo4TdskszhCLFt7jdJ+ZZ+o+cw6/mBeFozpTFIV 6NYjvMcc1calSOIO69+6iluR4mqcsnYFEbzdjJsNDEqngaMmLaJ1V/VZqsUlGguF tw5EVPH8nVomWReS6EpjuuDO/PndehnyvXHGkwOIjbH5k07RtoDS97wcLsvNv7gC hAWeA8ba2SmiI3P7oEVYmidZG8CWORd5/j7PkrNwqaAJI/b0xos0MPUJCWCPFtg2 KdiM03B2FhuVfapyBy/UNuHG0tiBkO3BeS1qFApFazBT6rmDphSiSxrue5rCj4l0 +ZgnaBCHOBLsQlJGLcqUFD9JkVx7HxuA -----END CERTIFICATE-----Generated at Sun May 11 21:58:16 2025 by rpki-client