$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: RveCh7LLkIiOlPdpyJ82rRSvvXh6F4sFtFLp0coaLJU= Subject key identifier: 0D:25:94:BD:31:16:3F:83:AA:15:E6:EB:67:FC:07:2A:7B:19:2D:5E Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: 78 Signing time: Tue 13 May 2025 05:56:11 +0000 Manifest this update: Tue 13 May 2025 05:56:11 +0000 Manifest next update: Tue 20 May 2025 05:56:11 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: gtW7a8ZLsC04iQB8VnAchFLSoqvJSj1VOm9HCKBnWWM=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: fkSkf/lrYAP+GPqi/wzsXVOHAz3euOzdB17q/HqvVko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: May 13 05:56:11 2025 GMT Not After : May 20 05:56:11 2025 GMT Subject: CN=6822defb-d18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:da:8f:a0:ef:90:cf:97:c8:16:b5:9c:8a: 9c:35:ca:86:a6:c8:35:75:ce:e4:ff:fb:c8:07:f2: 61:12:8a:a6:d4:02:44:c6:8a:65:d3:e4:d6:cc:8c: bf:e8:04:22:fa:91:a3:70:7e:ea:65:4a:e7:9b:0b: e7:c0:61:a4:28:80:e9:e6:e0:bb:70:fc:4f:28:bf: 4c:cb:43:c3:b0:6c:00:05:30:bc:5d:a3:d3:b8:22: 28:e9:ed:5b:ce:12:33:d5:2a:b3:78:90:a2:e6:70: 8a:2a:a0:24:fc:56:46:ac:2f:de:49:3a:3d:b4:76: e3:ba:d7:17:f4:fa:0d:70:ea:78:1f:91:e7:e3:14: 0f:b6:40:dc:12:36:ce:71:37:37:31:7c:bf:4b:8c: aa:aa:d6:6a:cb:0a:ab:64:c4:cf:b1:54:d5:e1:47: c6:12:be:83:af:68:d0:85:72:09:66:b6:a7:51:d5: 3d:7b:61:48:44:4e:e1:48:8f:d4:f2:16:df:ff:e3: 9e:3e:a0:70:b2:f2:ea:73:38:eb:27:77:11:c8:a3: 72:b0:6e:f6:3f:b5:63:ed:f8:77:91:41:9c:b3:a5: f8:49:3a:48:03:5d:93:4b:39:fa:f6:a5:ba:c9:1f: 4c:ac:29:fd:f0:3e:13:f0:2b:ca:6f:53:dc:cc:e0: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:25:94:BD:31:16:3F:83:AA:15:E6:EB:67:FC:07:2A:7B:19:2D:5E X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:15:55:df:0e:0f:2b:0b:28:c9:52:f3:96:d6:86:bd:6c:80: 79:b1:a8:1d:90:5b:90:ac:1e:9b:bf:29:a5:c2:25:83:3c:ad: cb:84:dc:1f:75:06:55:31:f4:c2:0b:c8:47:a9:79:22:fa:82: 4e:a5:f8:81:b1:fb:fb:ce:63:65:98:04:fb:15:bd:69:d2:de: e8:96:ce:6e:6b:6c:6f:54:24:fb:d7:79:40:67:f0:12:a0:38: 2c:78:14:53:95:b6:5e:ea:7c:d4:81:cc:1b:29:9f:4b:a9:ea: a4:b6:ab:a8:a3:61:95:6c:c0:5f:b2:91:b7:0d:96:54:06:60: f3:1c:d8:cb:b6:64:51:3c:5f:6d:9e:0c:b0:b4:50:56:b0:86: 30:5d:9d:e0:7d:e0:aa:4f:52:59:93:1b:9d:0d:65:7a:50:e7: ba:13:11:4a:54:7b:c9:76:18:7c:4a:6f:5d:56:24:eb:b0:00: a9:16:5e:97:a3:8f:77:5f:7c:64:70:55:52:e6:6a:67:e9:c3: 94:7d:f0:95:2d:74:1e:51:1e:a7:56:7d:e9:2b:80:dc:7a:84: 0a:50:1a:52:31:4a:9d:ca:d8:24:25:1a:83:16:32:5a:94:92: da:f2:21:11:cb:66:4f:d2:41:e3:8c:e1:79:6e:41:55:59:81: e4:9a:86:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjUwRDExMC8GA1UEBRMoNTg2RjkzMzE3NkY2NTQ1NDM1QkIwNjk3RkU1Rjk4MkEy MDkzOTQxQjAeFw0yNTA1MTMwNTU2MTFaFw0yNTA1MjAwNTU2MTFaMBgxFjAUBgNV BAMTDTY4MjJkZWZiLWQxOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyENqPoO+Qz5fIFrWcipw1yoamyDV1zuT/+8gH8mESiqbUAkTGimXT5NbMjL/o BCL6kaNwfuplSuebC+fAYaQogOnm4Ltw/E8ov0zLQ8OwbAAFMLxdo9O4Iijp7VvO EjPVKrN4kKLmcIoqoCT8VkasL95JOj20duO61xf0+g1w6ngfkefjFA+2QNwSNs5x NzcxfL9LjKqq1mrLCqtkxM+xVNXhR8YSvoOvaNCFcglmtqdR1T17YUhETuFIj9Ty Ft//454+oHCy8upzOOsndxHIo3KwbvY/tWPt+HeRQZyzpfhJOkgDXZNLOfr2pbrJ H0ysKf3wPhPwK8pvU9zM4OsdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDSWUvTEW P4OqFebrZ/wHKnsZLV4wHwYDVR0jBBgwFoAUWG+TMXb2VFQ1uwaX/l+YKiCTlBsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTBEL0VGOEUzREFDN0JC QzExRUY5MkVFMUE2NkM0RjlBRTAyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxC cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV0ctVE1YYjJWRlExdXdhWF9sLVlLaUNUbEJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC NTBEL0VGOEUzREFDN0JCQzExRUY5MkVFMUE2NkM0RjlBRTAyL1dHLVRNWGIyVkZR MXV3YVhfbC1ZS2lDVGxCcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgVVd8ODysLKMlS85bWhr1sgHmxqB2QW5CsHpu/KaXCJYM8rcuE3B91 BlUx9MILyEepeSL6gk6l+IGx+/vOY2WYBPsVvWnS3uiWzm5rbG9UJPvXeUBn8BKg OCx4FFOVtl7qfNSBzBspn0up6qS2q6ijYZVswF+ykbcNllQGYPMc2Mu2ZFE8X22e DLC0UFawhjBdneB94KpPUlmTG50NZXpQ57oTEUpUe8l2GHxKb11WJOuwAKkWXpej j3dffGRwVVLmamfpw5R98JUtdB5RHqdWfekrgNx6hApQGlIxSp3K2CQlGoMWMlqU ktryIRHLZk/SQeOM4XluQVVZgeSahsI= -----END CERTIFICATE-----Generated at Tue May 13 12:39:17 2025 by rpki-client