$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft File: wvw-GxtUPr1I39pZHcJRgiT5W38.mft (raw, json) Hash identifier: m2+jCC8S+dMaolyO5duau5RAhWHucn6NsBeqHl+PsIg= Subject key identifier: 4C:8A:94:AF:A7:41:54:45:37:2F:22:F6:6E:65:7D:C5:F3:AB:1F:1C Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F Certificate issuer: /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft Manifest number: 0223 Signing time: Tue 13 May 2025 01:45:09 +0000 Manifest this update: Tue 13 May 2025 01:45:08 +0000 Manifest next update: Tue 20 May 2025 01:45:08 +0000 Files and hashes: 1: wvw-GxtUPr1I39pZHcJRgiT5W38.crl (hash: mL8mqI0zX+dICmuf1Ri7bfUsyh/oT9D/h8mPqJFMW/o=) 2: 6B0DCABA80D111EFA7138B77C4F9AE02.roa (hash: XrzD9gHCwm8eB2YxyR3P7eTPrT9KRU3rPXHkNDhO2w8=) 3: B0EBD14E80D111EFABEC5878C4F9AE02.roa (hash: KwzZR+D6Yo3n0RMq2SPd2PCh/+pc1niACNwCgSeZryU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171524, serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Validity Not Before: May 13 01:45:08 2025 GMT Not After : May 20 01:45:08 2025 GMT Subject: CN=6822a424-c93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:60:67:ad:c7:0e:8f:80:27:d1:e5:40:19:22: 08:b7:bc:b8:72:cb:ef:59:70:2d:9c:3b:d1:98:03: 43:84:f0:b4:aa:81:56:e9:b9:06:f0:09:c3:75:52: 1f:31:9f:e3:bf:23:39:87:8e:5b:a6:f1:71:31:2a: 5e:70:f8:f9:ef:12:75:b9:17:a7:10:77:7a:e7:69: 68:e0:c3:75:1b:fe:b4:72:dd:fc:ab:03:ef:65:51: 8a:76:64:0c:74:5a:fb:b9:78:a8:02:c3:a3:4b:25: ed:c1:1b:b4:ef:e4:9a:1e:1a:ed:1c:fa:01:0f:0e: 07:65:0e:88:c7:22:35:94:c4:7d:95:a9:1d:17:aa: 51:12:7c:95:3e:15:ea:86:51:24:1b:59:a6:2a:a5: 0d:7d:64:c7:42:88:ae:eb:d2:95:1c:aa:13:22:b0: 2b:6e:ea:70:d5:1d:7a:a9:0c:9a:47:71:2a:7b:7a: 0c:d3:5c:0b:a6:28:a7:ca:95:c7:f6:39:ef:21:48: 3a:51:b7:c1:cc:26:da:ef:04:4f:4d:04:8c:b1:24: 6f:52:10:88:2f:70:31:7a:c6:67:f8:8b:ec:ee:81: 4e:eb:8f:3d:84:07:dd:7c:94:db:1e:f2:25:c3:1e: 26:83:59:12:bd:9f:3e:cb:fd:a4:7e:af:5b:f1:6f: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8A:94:AF:A7:41:54:45:37:2F:22:F6:6E:65:7D:C5:F3:AB:1F:1C X509v3 Authority Key Identifier: keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:30:5c:7f:28:06:43:fa:01:bf:23:3f:76:e7:a1:03:14:40: 1d:7f:c5:ec:90:b5:39:71:74:a3:67:cf:93:b2:12:1c:e1:01: 31:e8:17:68:6a:a5:e4:64:5c:0f:da:ab:5d:39:0e:7b:f6:bd: 3c:07:9b:c5:67:4c:c7:04:c5:07:37:1c:1e:c3:e5:ae:b2:18: a4:38:a0:83:8d:cb:30:b0:ab:90:91:79:d8:45:a5:ba:4d:72: 3e:f1:4a:9a:28:24:34:db:e5:75:45:5a:54:bf:ee:bb:e1:d1: b5:32:b3:9d:a0:18:aa:02:7f:d3:2b:1d:9f:d4:b6:3d:ce:a4: 9e:96:c8:f9:5f:47:51:88:eb:35:8b:e8:67:3d:ce:1d:d2:cd: d5:6b:1e:b3:c1:fe:4d:c8:d1:16:0a:c1:dd:a0:0c:2c:33:ca: a2:bc:b4:e6:aa:32:a0:de:9b:e5:4c:36:18:07:00:69:cd:fd: 93:a6:04:80:6a:cc:e3:84:74:74:78:56:46:d3:bf:fd:21:97: 05:0f:57:49:56:cb:d0:8d:46:8b:d1:52:78:e4:ea:aa:fc:37: 6f:5a:51:d6:42:fa:f3:c0:b5:9b:1d:f9:7a:2e:56:01:e2:3f: 2b:60:15:3e:1b:e0:3e:e4:be:7b:93:9d:39:c9:58:7d:a4:a9: 9b:dc:ba:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1MjQxMTAvBgNVBAUTKEMyRkMzRTFCMUI1NDNFQkQ0OERGREE1OTFEQzI1MTgy MjRGOTVCN0YwHhcNMjUwNTEzMDE0NTA4WhcNMjUwNTIwMDE0NTA4WjAYMRYwFAYD VQQDEw02ODIyYTQyNC1jOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42BnrccOj4An0eVAGSIIt7y4csvvWXAtnDvRmANDhPC0qoFW6bkG8AnDdVIf MZ/jvyM5h45bpvFxMSpecPj57xJ1uRenEHd652lo4MN1G/60ct38qwPvZVGKdmQM dFr7uXioAsOjSyXtwRu07+SaHhrtHPoBDw4HZQ6IxyI1lMR9lakdF6pREnyVPhXq hlEkG1mmKqUNfWTHQoiu69KVHKoTIrArbupw1R16qQyaR3Eqe3oM01wLpiinypXH 9jnvIUg6UbfBzCba7wRPTQSMsSRvUhCIL3AxesZn+Ivs7oFO6489hAfdfJTbHvIl wx4mg1kSvZ8+y/2kfq9b8W98hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyKlK+n QVRFNy8i9m5lfcXzqx8cMB8GA1UdIwQYMBaAFML8PhsbVD69SN/aWR3CUYIk+Vt/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTUyNC80OTFGMDJERTJD NzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVByMUkzOXBaSGNKUmdpVDVX MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2dy1HeHRVUHIxSTM5cFpIY0pSZ2lUNVczOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTUyNC80OTFGMDJERTJDNzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVBy MUkzOXBaSGNKUmdpVDVXMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGMFx/KAZD+gG/Iz9256EDFEAdf8XskLU5cXSjZ8+TshIc4QEx6Bdo aqXkZFwP2qtdOQ579r08B5vFZ0zHBMUHNxwew+WushikOKCDjcswsKuQkXnYRaW6 TXI+8UqaKCQ02+V1RVpUv+674dG1MrOdoBiqAn/TKx2f1LY9zqSelsj5X0dRiOs1 i+hnPc4d0s3Vax6zwf5NyNEWCsHdoAwsM8qivLTmqjKg3pvlTDYYBwBpzf2TpgSA aszjhHR0eFZG07/9IZcFD1dJVsvQjUaL0VJ45Oqq/DdvWlHWQvrzwLWbHfl6LlYB 4j8rYBU+G+A+5L57k505yVh9pKmb3Lpw -----END CERTIFICATE-----Generated at Wed May 14 14:49:01 2025 by rpki-client