$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json) Hash identifier: Fu0jTOgho6uhkWAFGMAy/Lvzl9TJ+4GsEeeU4+NNXnw= Subject key identifier: B4:9A:D6:6E:47:FC:F9:C9:69:80:05:F2:C1:A4:83:C9:40:70:DD:F2 Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Certificate serial: 1784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft Manifest number: 174F Signing time: Mon 12 May 2025 16:33:36 +0000 Manifest this update: Mon 12 May 2025 16:33:36 +0000 Manifest next update: Mon 19 May 2025 16:33:36 +0000 Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: j2FRvmhGRb1jUP8F1Q0UN1h6Q9Tut3AOWvDvBo4F7Cw=) 2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: TYrZ+B6VIzKW11uXjXFH3B1vYwvh9CEWEvcjwdCYyoM=) 3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: PrshPG5oG7Q/ksTfEH95reK4a0iC1d8YmqXN8qzwXXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6020 (0x1784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Validity Not Before: May 12 16:33:36 2025 GMT Not After : May 19 16:33:36 2025 GMT Subject: CN=682222e0-8a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:9a:c1:72:9d:25:55:f1:a9:c3:10:a2:50: 40:7f:51:c3:1a:8e:60:5d:e1:2e:7b:89:69:ce:8b: a6:f2:3b:a6:a8:8f:27:2f:1c:ec:c7:fb:54:a5:00: b7:6f:14:be:2f:3c:aa:46:20:c7:d0:e2:68:76:e9: ff:c9:a1:42:96:cb:c0:65:32:91:d9:77:15:98:27: 56:5e:d5:65:73:6e:83:26:76:24:10:f7:d4:80:29: 62:dd:17:e3:d6:ee:4e:89:31:5d:b6:f1:61:f1:43: 6f:0d:5c:fd:7f:60:1b:2e:07:f7:26:3b:f5:96:2e: fc:5e:dd:f6:80:c8:5c:4e:a4:80:89:03:1e:78:45: 11:e2:a1:b2:b9:05:bf:0f:b4:95:9b:a5:d3:a1:a3: 60:26:b8:b3:c4:f8:cb:3f:9f:a9:ff:6b:9e:3f:71: ef:40:bf:f0:b5:6a:75:c7:74:9b:54:d9:64:89:cb: bb:4f:5b:52:6d:94:b3:32:3c:be:7a:98:b2:9e:e2: 83:e9:fe:6a:94:d5:c5:5c:76:79:33:67:17:87:38: d3:2e:74:60:6f:98:4f:d5:86:fb:ee:1a:33:33:6b: fc:53:65:b0:c9:aa:0b:18:5e:fc:f4:b4:d8:17:ac: aa:b3:cf:b3:3a:2b:1b:11:02:9e:96:ec:2e:6d:c0: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9A:D6:6E:47:FC:F9:C9:69:80:05:F2:C1:A4:83:C9:40:70:DD:F2 X509v3 Authority Key Identifier: keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f6:05:51:44:73:7a:84:fa:e6:41:9c:8e:37:34:10:e3:b7: be:d7:c8:1a:e9:e2:57:c5:16:11:cb:b1:0a:34:14:7e:fa:38: a1:b0:81:9e:46:8f:5c:f9:f3:ef:67:d5:15:5a:3b:48:e5:82: 57:7c:30:1d:b1:c6:0b:23:a2:91:8c:05:18:c0:80:57:e9:0a: 80:b3:3e:7c:f8:0a:8f:ec:0e:a6:41:20:bb:fb:7a:f4:5b:05: 40:7a:0b:e4:01:32:b5:eb:54:af:0c:7b:91:90:0f:a5:e1:83: 22:5a:e4:70:4a:8c:d1:be:fe:8c:93:cf:7e:07:af:0a:2c:91: d5:0c:63:0f:2c:ae:95:18:1a:f3:30:ef:63:c4:ad:19:f7:d0: 0a:1e:57:12:39:a3:f6:6a:4f:13:c1:3b:73:95:f6:bf:28:0a: 80:b9:ff:be:c3:c6:33:b6:c3:6a:4b:b3:a5:6f:c1:b9:77:bf: ec:18:e0:1f:b9:48:9e:91:98:96:e4:51:ed:ab:55:a1:a8:a2: 8d:b4:04:45:bb:a3:67:d8:4b:0c:45:cf:8d:ee:04:11:30:26: 04:0a:32:b0:4d:95:8c:d5:5f:24:b6:d0:d7:d0:93:fb:bb:14: 52:a2:eb:72:42:8a:2a:49:79:ce:d1:f1:66:d5:28:04:ea:d7: 1d:90:ea:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC Qzc5QjlGQzIwHhcNMjUwNTEyMTYzMzM2WhcNMjUwNTE5MTYzMzM2WjAYMRYwFAYD VQQDEw02ODIyMjJlMC04YTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJKawXKdJVXxqcMQolBAf1HDGo5gXeEue4lpzoum8jumqI8nLxzsx/tUpQC3 bxS+LzyqRiDH0OJodun/yaFClsvAZTKR2XcVmCdWXtVlc26DJnYkEPfUgCli3Rfj 1u5OiTFdtvFh8UNvDVz9f2AbLgf3Jjv1li78Xt32gMhcTqSAiQMeeEUR4qGyuQW/ D7SVm6XToaNgJrizxPjLP5+p/2ueP3HvQL/wtWp1x3SbVNlkicu7T1tSbZSzMjy+ epiynuKD6f5qlNXFXHZ5M2cXhzjTLnRgb5hP1Yb77hozM2v8U2WwyaoLGF789LTY F6yqs8+zOisbEQKeluwubcDHEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSa1m5H /PnJaYAF8sGkg8lAcN3yMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhFMi80QzkwOEEyMkUwQjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQ WklER00xSUhhVU84ZWJuOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB49gVRRHN6hPrmQZyONzQQ47e+18ga6eJXxRYRy7EKNBR++jihsIGe Ro9c+fPvZ9UVWjtI5YJXfDAdscYLI6KRjAUYwIBX6QqAsz58+AqP7A6mQSC7+3r0 WwVAegvkATK161SvDHuRkA+l4YMiWuRwSozRvv6Mk89+B68KLJHVDGMPLK6VGBrz MO9jxK0Z99AKHlcSOaP2ak8TwTtzlfa/KAqAuf++w8YztsNqS7Olb8G5d7/sGOAf uUiekZiW5FHtq1WhqKKNtARFu6Nn2EsMRc+N7gQRMCYECjKwTZWM1V8kttDX0JP7 uxRSoutyQooqSXnO0fFm1SgE6tcdkOrv -----END CERTIFICATE-----Generated at Tue May 13 08:25:51 2025 by rpki-client