$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: fbcAw+qFDfFisl0boDFw73uZ3HjLn8PRjzQCvc52P7E= Subject key identifier: 6E:F9:F2:2E:85:AF:86:35:EE:EA:05:97:2C:D7:46:A9:60:93:49:FD Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C08 Signing time: Wed 14 May 2025 18:49:30 +0000 Manifest this update: Wed 14 May 2025 18:49:30 +0000 Manifest next update: Wed 21 May 2025 18:49:30 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: ODykdrF8MU3OePULWuVro7SWxYfhTaRLyazYlW3JNvE=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: May 14 18:49:30 2025 GMT Not After : May 21 18:49:30 2025 GMT Subject: CN=6824e5ba-db91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:71:fb:f8:b6:b4:8d:35:74:96:84:34:09: f4:3d:88:74:a9:b2:86:21:28:72:f0:2b:60:f7:55: 3d:f2:7c:68:2a:90:4b:63:26:c6:59:84:83:8c:9a: fa:9b:3e:fd:c9:b2:6b:dd:d4:7b:d4:a0:6c:3f:0d: 3d:0f:98:2e:02:9b:3f:28:99:3a:1f:38:41:11:33: 26:f8:18:0e:44:99:e0:64:75:17:68:47:6e:61:13: 4f:7b:d2:61:eb:2e:ea:3e:e5:ee:56:70:47:36:a6: f5:9c:0d:c4:c5:3f:e8:bc:97:d4:52:a5:79:73:7e: e4:83:72:8f:ce:df:07:e4:70:56:97:d1:e1:b5:d8: ad:44:1f:6e:e6:22:fe:a0:f6:85:c9:cf:be:c7:37: 63:c4:af:87:e2:da:1c:c7:2c:9d:bb:ff:f0:e3:40: e2:15:01:7d:f9:62:3b:e5:d8:7f:08:57:e7:1c:6f: 43:c3:f4:a3:91:a4:f8:e3:4f:25:2c:b8:e8:f9:9b: 6c:ad:e8:9e:cc:ef:4b:c5:cd:77:42:54:36:56:4b: 21:90:fa:12:bb:30:68:b9:18:8c:c2:d3:8a:94:2e: fc:af:97:73:bf:78:5d:3a:8b:7b:a5:f2:c7:db:ea: 5f:bb:59:fa:bf:cf:ea:9d:16:77:90:16:78:43:ce: df:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F9:F2:2E:85:AF:86:35:EE:EA:05:97:2C:D7:46:A9:60:93:49:FD X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a6:94:94:92:11:34:d8:a7:7f:17:e3:01:7e:e2:ea:dc:51: 30:55:8c:04:16:1b:9c:d9:7e:45:93:fa:6e:14:cc:b3:da:7e: b6:7f:ff:f1:cd:ba:8d:9d:7d:10:e4:e3:a7:28:55:ec:43:27: aa:30:20:40:a0:8b:19:8f:6e:66:09:03:1a:98:c9:44:89:62: cd:df:c9:96:ee:21:ac:68:65:32:80:76:a7:20:a8:3e:bc:b6: 0a:5c:b5:4f:f8:e8:30:cb:3b:88:8c:cd:2b:3d:27:56:54:4c: f0:1c:f4:58:bc:35:99:b3:d9:a3:83:61:19:d8:1d:43:21:8f: d9:e0:4c:12:38:a5:33:75:7d:28:88:6e:d2:46:0c:f8:d6:c4: 46:2e:21:73:57:f2:98:06:d8:df:e3:aa:da:96:c2:f0:c3:82: 15:e4:1f:99:be:7c:bb:fc:57:de:c5:0d:98:17:5b:43:c0:a3: 43:de:00:87:1e:2c:4a:64:ea:20:24:76:1f:c8:1e:20:7b:cf: 96:7e:a3:2c:e6:5d:0b:a0:b0:3e:9a:e6:3f:8c:ab:a9:45:aa: d3:60:41:dc:f5:05:98:88:a5:9a:d6:70:ef:c6:81:22:23:fd: b3:82:84:e8:89:94:2e:68:36:c1:4c:f2:73:d1:9d:35:9f:e7: 63:9b:59:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUwNTE0MTg0OTMwWhcNMjUwNTIxMTg0OTMwWjAYMRYwFAYD VQQDEw02ODI0ZTViYS1kYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqG9x+/i2tI01dJaENAn0PYh0qbKGIShy8Ctg91U98nxoKpBLYybGWYSDjJr6 mz79ybJr3dR71KBsPw09D5guAps/KJk6HzhBETMm+BgORJngZHUXaEduYRNPe9Jh 6y7qPuXuVnBHNqb1nA3ExT/ovJfUUqV5c37kg3KPzt8H5HBWl9HhtditRB9u5iL+ oPaFyc++xzdjxK+H4tocxyydu//w40DiFQF9+WI75dh/CFfnHG9Dw/SjkaT4408l LLjo+ZtsreiezO9Lxc13QlQ2VkshkPoSuzBouRiMwtOKlC78r5dzv3hdOot7pfLH 2+pfu1n6v8/qnRZ3kBZ4Q87fsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG758i6F r4Y17uoFlyzXRqlgk0n9MB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3ppSUkhE02Kd/F+MBfuLq3FEwVYwEFhuc2X5Fk/puFMyz2n62f//x zbqNnX0Q5OOnKFXsQyeqMCBAoIsZj25mCQMamMlEiWLN38mW7iGsaGUygHanIKg+ vLYKXLVP+OgwyzuIjM0rPSdWVEzwHPRYvDWZs9mjg2EZ2B1DIY/Z4EwSOKUzdX0o iG7SRgz41sRGLiFzV/KYBtjf46ralsLww4IV5B+Zvny7/FfexQ2YF1tDwKND3gCH HixKZOogJHYfyB4ge8+WfqMs5l0LoLA+muY/jKupRarTYEHc9QWYiKWa1nDvxoEi I/2zgoToiZQuaDbBTPJz0Z01n+djm1kF -----END CERTIFICATE-----Generated at Wed May 14 20:46:24 2025 by rpki-client