$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json) Hash identifier: RCuC/1SH0zgMjYfr0pvu/pZTF3iSH7OOtZWZ8LX1heU= Subject key identifier: B0:94:C4:DE:11:8B:EE:F6:3E:50:AD:D2:65:6A:96:4C:28:36:06:89 Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft Manifest number: 0440 Signing time: Tue 13 May 2025 00:02:32 +0000 Manifest this update: Tue 13 May 2025 00:02:32 +0000 Manifest next update: Tue 20 May 2025 00:02:32 +0000 Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: Db4TwGHLMdvkN9RqA7h406XgahxTO49ndgETPFhZA5w=) 2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Validity Not Before: May 13 00:02:32 2025 GMT Not After : May 20 00:02:32 2025 GMT Subject: CN=68228c18-bc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:b6:f6:9b:2a:e5:18:72:3a:7b:20:80:d5: 13:a2:51:19:4e:7c:ba:6c:c3:9c:b8:53:42:51:e5: 16:44:70:17:3a:9f:77:d7:71:af:f5:db:ee:db:a2: 28:91:00:11:da:f2:b8:f8:72:54:bd:a6:79:0a:59: ac:43:5e:4d:c9:06:6f:21:e3:32:0f:bf:f4:39:29: 8c:08:59:21:3e:74:0f:63:3f:f0:13:f8:c2:31:9a: e2:c2:c3:2e:b3:d2:36:26:d8:52:5e:db:50:df:6e: ae:b4:8a:81:eb:d1:be:26:02:90:a8:09:e6:e9:45: 20:8e:57:a6:ba:77:50:8e:ae:de:7a:1f:81:80:ac: 32:57:11:67:e8:27:76:f4:f2:0b:d5:ae:86:ad:da: 8a:38:17:92:eb:ca:21:8c:c7:96:5e:a5:4c:62:d8: c0:38:52:8a:78:14:b3:70:73:b1:87:8c:f3:1a:eb: 04:c0:fb:e1:f5:9a:5c:7c:c3:d4:9c:82:66:37:af: 46:93:70:42:75:c9:30:f8:8a:80:d7:cf:67:f9:4c: 28:d0:02:ce:bd:5b:5f:01:6a:d0:e1:51:61:5d:f7: b7:31:8a:39:fe:d4:b7:41:4b:31:02:78:4d:5e:93: 81:ac:35:f2:77:bd:42:d7:48:7c:83:f4:d2:a3:f3: 03:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:94:C4:DE:11:8B:EE:F6:3E:50:AD:D2:65:6A:96:4C:28:36:06:89 X509v3 Authority Key Identifier: keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:97:d5:f7:11:aa:42:4d:17:37:be:af:fa:2d:10:be:d0:cc: 38:e8:ad:bf:0a:e9:bf:1e:44:66:35:8a:ea:fe:50:c7:91:12: e6:db:a2:e0:f0:88:51:36:2d:7b:06:5d:72:f1:20:6d:11:9a: b5:e1:98:5f:70:3d:b9:d2:28:51:b3:c8:37:3e:ee:bb:a4:6a: 57:fd:67:bc:75:5f:0d:7e:3c:91:a8:c0:4d:d1:3c:47:49:b1: 71:19:4c:99:f2:f4:b4:b1:0e:15:1d:36:63:9e:73:53:6c:aa: 5e:3e:35:79:05:dc:b5:8d:91:f1:ae:ec:d5:31:f6:33:9c:fb: 93:ff:5a:25:02:d2:a2:ab:2e:7f:32:16:46:07:5b:a3:01:5f: 52:ea:97:06:7b:e8:7e:cf:d4:8e:e9:96:e8:7b:cc:c1:55:70: 0c:26:09:16:06:03:f0:29:89:50:b2:a6:48:60:17:b1:35:67: 55:a4:db:da:bf:98:c4:b4:f1:95:19:ce:13:1b:6c:4f:b1:1a: 73:30:79:ae:49:a1:5a:ab:a7:32:88:a9:bd:f3:4e:0a:58:31: 99:45:98:95:e7:47:4a:d8:e3:70:6f:f0:40:16:20:98:ab:89: 34:76:dd:ae:ba:72:dc:d8:60:3b:8a:67:ca:fd:91:91:9c:22: 50:4a:63:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0 QjFEOURBQTIwHhcNMjUwNTEzMDAwMjMyWhcNMjUwNTIwMDAwMjMyWjAYMRYwFAYD VQQDEw02ODIyOGMxOC1iYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK629psq5RhyOnsggNUTolEZTny6bMOcuFNCUeUWRHAXOp9313Gv9dvu26Io kQAR2vK4+HJUvaZ5ClmsQ15NyQZvIeMyD7/0OSmMCFkhPnQPYz/wE/jCMZriwsMu s9I2JthSXttQ326utIqB69G+JgKQqAnm6UUgjlemundQjq7eeh+BgKwyVxFn6Cd2 9PIL1a6GrdqKOBeS68ohjMeWXqVMYtjAOFKKeBSzcHOxh4zzGusEwPvh9ZpcfMPU nIJmN69Gk3BCdckw+IqA189n+Uwo0ALOvVtfAWrQ4VFhXfe3MYo5/tS3QUsxAnhN XpOBrDXyd71C10h8g/TSo/MDaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCUxN4R i+72PlCt0mVqlkwoNgaJMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsl9X3EapCTRc3vq/6LRC+0Mw46K2/Cum/HkRmNYrq/lDHkRLm26Lg 8IhRNi17Bl1y8SBtEZq14ZhfcD250ihRs8g3Pu67pGpX/We8dV8NfjyRqMBN0TxH SbFxGUyZ8vS0sQ4VHTZjnnNTbKpePjV5Bdy1jZHxruzVMfYznPuT/1olAtKiqy5/ MhZGB1ujAV9S6pcGe+h+z9SO6Zboe8zBVXAMJgkWBgPwKYlQsqZIYBexNWdVpNva v5jEtPGVGc4TG2xPsRpzMHmuSaFaq6cyiKm9804KWDGZRZiV50dK2ONwb/BAFiCY q4k0dt2uunLc2GA7imfK/ZGRnCJQSmOR -----END CERTIFICATE-----Generated at Wed May 14 20:35:48 2025 by rpki-client