$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: TauO0zMjHCyzUpdaQGeXJ02NZWZDGKFyddKYb/+gtAo= Subject key identifier: 4D:F5:19:2B:3A:3B:E0:1C:48:D2:5A:00:00:9F:F4:41:45:48:40:F9 Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 04B0 Signing time: Wed 14 May 2025 23:56:35 +0000 Manifest this update: Wed 14 May 2025 23:56:34 +0000 Manifest next update: Wed 21 May 2025 23:56:34 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: IeaLJZpkSwAvsctXlnBAT7k2hMQSUv2KeSnf3c9wC5c=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: May 14 23:56:34 2025 GMT Not After : May 21 23:56:34 2025 GMT Subject: CN=68252db2-3d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:77:25:2d:e3:cc:74:9e:ba:fe:3c:f2:ac: 19:3d:4e:e9:e6:da:9b:fe:7a:01:64:a1:55:11:c6: fa:f6:32:7e:8d:01:97:aa:12:52:5d:dc:3a:7a:66: d4:e0:ea:a9:c7:59:c8:b8:eb:6c:50:8a:38:39:d5: 74:a4:a5:d5:d6:7e:75:91:17:1a:c3:96:c2:8d:c2: 0a:b3:e4:aa:98:71:db:e7:6d:0b:02:33:59:e8:60: 3a:3a:3f:2e:66:a9:87:a4:1e:18:fa:61:5d:db:43: 49:20:b6:a9:c1:6a:e0:ec:cf:72:6b:b2:2c:7d:aa: d4:02:59:6a:98:3c:b2:48:9a:f9:bd:ae:fd:6a:22: c9:1c:37:ae:ab:6a:2e:8c:4a:e2:11:28:97:84:09: 37:62:8d:ff:aa:63:da:1c:a8:53:b7:dc:50:81:8b: 0d:52:7c:04:b1:ac:6a:14:ea:8e:b9:b7:f6:09:b9: 85:93:53:ad:c0:95:3d:48:21:f6:05:42:cd:d3:21: fa:b8:30:70:a2:13:87:f3:42:4c:a0:fa:cf:a3:97: d2:6f:a4:28:98:4e:14:c9:0f:b6:e9:18:98:99:81: 38:b4:1c:31:b0:2c:60:bd:d2:82:2d:53:26:66:26: 02:a8:5d:8f:2a:ed:db:ab:38:6f:8a:9c:99:a3:1a: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F5:19:2B:3A:3B:E0:1C:48:D2:5A:00:00:9F:F4:41:45:48:40:F9 X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a7:1f:22:91:85:79:6b:64:aa:d8:c7:33:78:b8:60:f8:4a: 23:07:8c:63:d6:ea:75:35:53:27:fa:21:ac:bf:cd:28:a8:c7: 83:35:94:28:6d:9d:f7:f6:86:a1:31:ba:79:e0:74:c5:57:71: a9:c0:01:43:44:e5:83:54:08:56:b5:41:dc:16:c5:f4:81:f3: b1:fa:e8:6e:c6:31:fd:60:63:bd:30:e4:63:8b:ec:f1:4b:17: 31:60:c5:61:e7:d8:59:3b:61:e4:95:31:87:2f:a0:6c:1a:20: 23:c3:61:46:c6:1c:fe:62:1c:56:ab:bc:1c:b8:3e:77:d9:43: 1b:d5:33:4c:1f:0e:24:af:75:5f:91:85:a1:1b:80:44:15:59: a7:f1:50:a2:fd:ae:bb:f2:00:76:3f:60:97:f5:2a:08:96:4a: 4a:14:86:99:50:23:3f:e5:84:c2:54:60:73:00:23:76:d5:45: 97:6b:e7:bc:ee:7e:4c:4c:39:22:fd:73:41:06:2b:4b:dd:7f: 0f:7e:a4:eb:e1:12:28:36:3e:99:b6:2b:0a:26:89:f6:98:47: 64:b9:e0:2a:88:e1:72:4d:6d:7f:1e:b2:d0:eb:70:7d:04:d6: c0:37:92:cf:1d:d8:1a:30:22:90:e1:c8:e0:1d:ff:5d:d2:8e: 20:e9:b9:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjUwNTE0MjM1NjM0WhcNMjUwNTIxMjM1NjM0WjAYMRYwFAYD VQQDEw02ODI1MmRiMi0zZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO13JS3jzHSeuv488qwZPU7p5tqb/noBZKFVEcb69jJ+jQGXqhJSXdw6embU 4Oqpx1nIuOtsUIo4OdV0pKXV1n51kRcaw5bCjcIKs+SqmHHb520LAjNZ6GA6Oj8u ZqmHpB4Y+mFd20NJILapwWrg7M9ya7IsfarUAllqmDyySJr5va79aiLJHDeuq2ou jEriESiXhAk3Yo3/qmPaHKhTt9xQgYsNUnwEsaxqFOqOubf2CbmFk1OtwJU9SCH2 BULN0yH6uDBwohOH80JMoPrPo5fSb6QomE4UyQ+26RiYmYE4tBwxsCxgvdKCLVMm ZiYCqF2PKu3bqzhvipyZoxr5aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE31GSs6 O+AcSNJaAACf9EFFSED5MB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFpx8ikYV5a2Sq2MczeLhg+EojB4xj1up1NVMn+iGsv80oqMeDNZQo bZ339oahMbp54HTFV3GpwAFDROWDVAhWtUHcFsX0gfOx+uhuxjH9YGO9MORji+zx SxcxYMVh59hZO2HklTGHL6BsGiAjw2FGxhz+YhxWq7wcuD532UMb1TNMHw4kr3Vf kYWhG4BEFVmn8VCi/a678gB2P2CX9SoIlkpKFIaZUCM/5YTCVGBzACN21UWXa+e8 7n5MTDki/XNBBitL3X8PfqTr4RIoNj6ZtisKJon2mEdkueAqiOFyTW1/HrLQ63B9 BNbAN5LPHdgaMCKQ4cjgHf9d0o4g6bn5 -----END CERTIFICATE-----Generated at Fri May 16 06:12:00 2025 by rpki-client