$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json) Hash identifier: N+RcUuseZ4QeRSvx9qyVUkX0C/RbaO9uUBbOaknEa+0= Subject key identifier: 67:62:F6:2A:54:98:A3:77:7E:51:DF:E4:04:C2:F2:95:8F:58:73:1A Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Certificate serial: 12FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft Manifest number: 12E9 Signing time: Sun 04 May 2025 16:58:07 +0000 Manifest this update: Sun 04 May 2025 16:58:06 +0000 Manifest next update: Sun 11 May 2025 16:58:06 +0000 Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: 2Y396jADcoYDXjkeu6R9Y6EHK8rs7Ng51J+L1C+BiVg=) 2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: mWJcvoB56xtTVL8jsG+OSQ9sF5v7r1+9ESUNzFxge8k=) 3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: 9g+f1SJF42ygeVyvheaF7ZLxnRH6Cv+HITF3QrrONoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4860 (0x12fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Validity Not Before: May 4 16:58:06 2025 GMT Not After : May 11 16:58:06 2025 GMT Subject: CN=68179c9f-ebb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:d4:8a:45:06:70:8c:72:85:89:2d:b4:d7: 60:75:f8:a4:5a:b2:97:12:03:b6:e6:d7:cb:fd:7c: ae:34:40:bc:e6:76:c0:74:bf:52:d0:c1:43:cd:43: f9:f7:e0:66:21:b0:7d:20:df:04:2c:4d:ae:06:15: f5:d6:95:b4:ee:fa:76:be:36:5f:88:57:ed:12:78: a2:b8:02:00:e6:b2:d0:d2:7a:2d:5e:b8:e1:2d:35: 95:cd:80:aa:6d:e5:c5:58:46:e1:bc:00:db:16:97: 16:e8:34:d0:d7:e4:61:80:c3:98:b3:2d:96:85:95: fa:21:18:c3:e9:91:ea:62:7f:ef:e1:53:e5:34:f3: 63:2d:43:ab:40:67:a8:9d:4c:bc:8c:e8:a9:0d:93: 95:69:d7:cb:35:5f:7c:23:28:8b:31:fd:ce:32:0d: a8:05:55:3f:19:f6:ab:b1:4a:f5:68:1a:e3:4f:85: 67:62:96:73:65:43:e9:07:36:57:b8:29:08:ac:a1: a5:91:5e:4a:07:64:b3:c6:13:fd:4d:79:a6:a4:bf: 80:01:7a:56:f7:e0:77:72:32:ee:99:ef:7a:b1:fb: ec:8b:19:13:0e:4b:f6:62:e6:96:2b:b3:76:8a:de: 7c:e8:02:0a:fa:1f:36:be:40:a1:ff:35:37:e8:9b: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:62:F6:2A:54:98:A3:77:7E:51:DF:E4:04:C2:F2:95:8F:58:73:1A X509v3 Authority Key Identifier: keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ab:6c:47:c6:1a:33:28:f6:ee:20:0b:f2:19:5a:f3:16:76: 1f:97:16:2e:56:2f:74:b6:a4:6e:49:e2:86:69:f8:39:43:da: af:e2:1c:a4:16:c5:4c:0a:c9:27:72:51:51:6d:9e:f5:1b:44: 94:15:25:1f:49:38:95:8a:44:e0:eb:65:d8:67:ff:4b:7e:24: 08:d9:43:71:27:d7:84:2d:b9:6a:af:ff:72:e2:7e:80:f4:44: d9:5a:eb:44:ea:47:16:e5:8e:5f:a2:8d:cc:be:a9:8d:75:3d: 6d:f8:78:7b:cb:47:bb:f9:78:62:07:df:b7:14:bc:c1:5a:ec: ba:fd:1d:ae:59:52:05:32:a1:c4:4e:1f:2b:c2:20:a0:bc:19: 5f:6e:96:ae:86:2e:b7:72:fd:51:1a:7f:2e:e9:d9:ea:c7:2e: c3:9a:99:ca:1e:6d:a0:af:15:20:b6:2f:22:75:60:9a:bd:94: 36:f7:6a:bc:aa:f0:f8:f0:a7:b7:fb:23:52:27:e2:ad:52:c9: 5c:f8:e3:2e:c0:c8:03:d0:6f:b5:f7:43:c2:02:9a:d8:be:3b: db:bb:4c:af:9c:2b:f1:5a:31:0b:4e:87:91:ba:5b:1f:7b:f7: d8:cf:2e:15:9b:e6:f7:d1:a7:bc:06:80:8d:85:93:93:e8:83: 9b:f4:52:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2 N0M2ODkyQjcwHhcNMjUwNTA0MTY1ODA2WhcNMjUwNTExMTY1ODA2WjAYMRYwFAYD VQQDEw02ODE3OWM5Zi1lYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgLUikUGcIxyhYkttNdgdfikWrKXEgO25tfL/XyuNEC85nbAdL9S0MFDzUP5 9+BmIbB9IN8ELE2uBhX11pW07vp2vjZfiFftEniiuAIA5rLQ0notXrjhLTWVzYCq beXFWEbhvADbFpcW6DTQ1+RhgMOYsy2WhZX6IRjD6ZHqYn/v4VPlNPNjLUOrQGeo nUy8jOipDZOVadfLNV98IyiLMf3OMg2oBVU/GfarsUr1aBrjT4VnYpZzZUPpBzZX uCkIrKGlkV5KB2SzxhP9TXmmpL+AAXpW9+B3cjLume96sfvsixkTDkv2YuaWK7N2 it586AIK+h82vkCh/zU36JsrLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdi9ipU mKN3flHf5ATC8pWPWHMaMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1 QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA4Ri9BOEYyMDMwOEI1QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRt bzl5SG5qeWZ5eVpueG9rcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIq2xHxhozKPbuIAvyGVrzFnYflxYuVi90tqRuSeKGafg5Q9qv4hyk FsVMCsknclFRbZ71G0SUFSUfSTiVikTg62XYZ/9LfiQI2UNxJ9eELblqr/9y4n6A 9ETZWutE6kcW5Y5foo3MvqmNdT1t+Hh7y0e7+XhiB9+3FLzBWuy6/R2uWVIFMqHE Th8rwiCgvBlfbpauhi63cv1RGn8u6dnqxy7DmpnKHm2grxUgti8idWCavZQ292q8 qvD48Ke3+yNSJ+KtUslc+OMuwMgD0G+190PCAprYvjvbu0yvnCvxWjELToeRulsf e/fYzy4Vm+b30ae8BoCNhZOT6IOb9FL5 -----END CERTIFICATE-----Generated at Mon May 5 07:31:47 2025 by rpki-client