$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft File: wEyBplFeUCbiG-aMudUdQTmoWpI.mft (raw, json) Hash identifier: NAzQCTg86WONgfl0/NXXoAh/EGEaQag+EXeLw7oRjJo= Subject key identifier: B8:B1:03:D2:E0:2F:D0:26:91:D2:4A:94:20:68:51:9F:00:1A:4A:57 Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 Certificate issuer: /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft Manifest number: 04B0 Signing time: Sat 10 May 2025 23:29:28 +0000 Manifest this update: Sat 10 May 2025 23:29:28 +0000 Manifest next update: Sat 17 May 2025 23:29:28 +0000 Files and hashes: 1: wEyBplFeUCbiG-aMudUdQTmoWpI.crl (hash: vjDtbhf83ed4olUddaczDXEUXoQOpZLIZNCFsL9pwH8=) 2: 861D1DB82C4411EC9539C124C4F9AE02.roa (hash: L7nlhQmvIweH/CDk6Porr52Om6tp3xqWvQb2+9BsORw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150984, serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Validity Not Before: May 10 23:29:28 2025 GMT Not After : May 17 23:29:28 2025 GMT Subject: CN=681fe158-aecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:2b:bc:62:80:f0:90:56:0f:af:2f:ef:7b: 3c:96:86:ae:19:a8:9a:f5:cf:fd:aa:d8:df:dd:d5: 11:7c:e9:3c:0f:7d:3f:12:71:36:d0:80:46:f1:17: e1:74:c5:b5:ee:2a:79:90:00:1c:58:d4:52:cc:e5: ed:fb:e6:2f:c5:7e:4b:0a:15:dc:3f:c5:57:eb:a2: 17:fa:c9:e1:e7:61:3b:00:fa:04:ad:02:e4:99:b4: 21:1a:fe:3e:ca:0d:0a:56:20:29:08:25:23:af:a8: 8f:31:05:fd:42:5f:92:8b:7f:95:8c:20:f8:4f:4f: 75:ac:ff:24:54:ce:94:ef:8f:eb:de:c8:1e:f3:8a: 6b:92:f7:f6:99:59:21:2c:5c:a0:05:24:56:f0:ae: b0:0c:76:63:ce:be:fd:f8:ef:31:19:c2:3a:34:c3: 27:7b:e7:5a:67:b8:b6:2c:2a:84:ce:3c:4c:c4:25: 42:ea:77:e7:48:31:b6:09:70:79:c8:d7:89:69:7f: 23:7b:ef:27:3d:b1:36:0e:a9:79:fa:3b:01:a4:8b: b1:01:2f:3e:8e:82:dc:e8:4a:47:55:c9:74:8f:6a: 5c:f5:90:ee:70:8a:71:64:fa:f2:66:db:c5:dc:3c: 78:a2:78:ec:35:aa:57:ab:ff:1f:08:a5:8f:da:41: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:03:D2:E0:2F:D0:26:91:D2:4A:94:20:68:51:9F:00:1A:4A:57 X509v3 Authority Key Identifier: keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:07:aa:87:da:09:e9:da:25:88:e9:0f:e0:d8:14:c0:90:a0: ad:73:38:14:fa:7d:90:a0:22:05:b8:12:7e:f9:e8:46:b3:50: df:b7:e7:46:5a:ef:81:a9:25:13:54:6d:a2:06:46:bb:a4:b1: 16:ed:47:bb:34:b6:94:fe:f3:59:e2:57:f6:e1:61:92:83:36: 7a:e1:d2:f9:7e:dd:c4:77:a4:34:87:5e:28:7a:7d:3f:28:a7: 81:72:95:df:21:f3:b2:13:80:8a:27:e3:df:36:59:56:16:c1: 1c:ac:a0:e0:0f:4b:f3:43:f6:1b:dc:66:64:9f:99:e5:88:53: 44:7d:bb:32:4e:4a:5b:fb:b8:d9:46:2c:f9:07:34:10:2c:69: 8f:06:be:cf:eb:cd:1b:18:b8:50:83:ad:ce:94:38:e1:c8:c3: a6:9a:57:9b:98:98:9d:9b:f2:5b:37:14:d0:4b:88:90:4e:3e: ef:e5:64:33:d7:a8:f1:ef:85:11:4e:d4:e0:24:36:f2:aa:b8: 6b:ad:ae:be:7a:9c:0d:e1:6a:46:43:3f:3f:b6:96:10:bc:14: 4b:bc:92:f4:38:15:6c:29:96:12:9c:ae:28:6e:16:34:72:52: 16:0e:28:81:52:61:12:ad:dc:f0:da:aa:9e:5e:0b:ce:78:40: 8c:5d:39:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5ODQxMTAvBgNVBAUTKEMwNEM4MUE2NTE1RTUwMjZFMjFCRTY4Q0I5RDUxRDQx MzlBODVBOTIwHhcNMjUwNTEwMjMyOTI4WhcNMjUwNTE3MjMyOTI4WjAYMRYwFAYD VQQDEw02ODFmZTE1OC1hZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZorvGKA8JBWD68v73s8loauGaia9c/9qtjf3dURfOk8D30/EnE20IBG8Rfh dMW17ip5kAAcWNRSzOXt++YvxX5LChXcP8VX66IX+snh52E7APoErQLkmbQhGv4+ yg0KViApCCUjr6iPMQX9Ql+Si3+VjCD4T091rP8kVM6U74/r3sge84prkvf2mVkh LFygBSRW8K6wDHZjzr79+O8xGcI6NMMne+daZ7i2LCqEzjxMxCVC6nfnSDG2CXB5 yNeJaX8je+8nPbE2Dql5+jsBpIuxAS8+joLc6EpHVcl0j2pc9ZDucIpxZPryZtvF 3Dx4onjsNapXq/8fCKWP2kHHJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLixA9Lg L9AmkdJKlCBoUZ8AGkpXMB8GA1UdIwQYMBaAFMBMgaZRXlAm4hvmjLnVHUE5qFqS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDk4NC80MEU4MjY2QTJD M0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVDYmlHLWFNdWRVZFFUbW9X cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dFeUJwbEZlVUNiaUctYU11ZFVkUVRtb1dwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDk4NC80MEU4MjY2QTJDM0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVD YmlHLWFNdWRVZFFUbW9XcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCB6qH2gnp2iWI6Q/g2BTAkKCtczgU+n2QoCIFuBJ++ehGs1Dft+dG Wu+BqSUTVG2iBka7pLEW7Ue7NLaU/vNZ4lf24WGSgzZ64dL5ft3Ed6Q0h14oen0/ KKeBcpXfIfOyE4CKJ+PfNllWFsEcrKDgD0vzQ/Yb3GZkn5nliFNEfbsyTkpb+7jZ Riz5BzQQLGmPBr7P680bGLhQg63OlDjhyMOmmlebmJidm/JbNxTQS4iQTj7v5WQz 16jx74URTtTgJDbyqrhrra6+epwN4WpGQz8/tpYQvBRLvJL0OBVsKZYSnK4obhY0 clIWDiiBUmESrdzw2qqeXgvOeECMXTl4 -----END CERTIFICATE-----Generated at Sun May 11 12:33:13 2025 by rpki-client