$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: A+WUTYuxDlz0bXntazdA8pvmK6QZ5WpUdF0h59nQRjg= Subject key identifier: 0D:BD:03:EF:CF:C6:61:DC:42:38:D6:4E:D7:AC:82:28:16:59:29:02 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: 49 Signing time: Sun 11 May 2025 06:05:37 +0000 Manifest this update: Sun 11 May 2025 06:05:36 +0000 Manifest next update: Sun 18 May 2025 06:05:36 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: 4VzhphQ+t5lnvPY877VABw9V40NeAC3adx6FBGEGCSc=) 2: 853312D2C0DD11EFB5F0D24AC4F9AE02.roa (hash: FGrsxVel52tLC2c3tTf2jw58e+atsnyXCQDnNztZqg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: May 11 06:05:36 2025 GMT Not After : May 18 06:05:36 2025 GMT Subject: CN=68203e30-47ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:41:57:be:ff:3d:c8:18:81:b1:e6:fb:bb: 11:69:fa:7e:0f:3e:b0:90:a0:0b:fc:a9:b6:65:75: 60:88:b7:19:95:a0:d0:2c:b9:e7:c2:87:9d:48:8c: bc:46:99:7c:dc:35:da:2c:68:f3:2e:e8:b5:21:3e: 3d:2f:c9:f9:4f:82:ce:aa:45:8a:6a:cc:9a:cd:53: 49:4a:c6:0c:74:95:71:0d:3b:ac:7e:79:26:49:12: 4d:64:c7:ac:f2:a7:2a:9b:e9:9b:67:47:26:90:6f: 93:38:48:d2:b7:23:6a:ad:20:09:4a:98:e7:d2:c9: 10:95:c0:cf:c2:ff:e8:e7:a4:0b:bb:ef:1c:ed:49: f7:60:cf:9a:fb:4d:fc:76:00:96:91:33:cd:75:82: 47:7e:d8:3b:dc:ad:31:39:8c:52:1b:75:c5:9e:69: 33:58:d9:81:5b:29:e7:c9:c6:77:29:61:ed:6e:16: de:14:69:c1:ec:51:63:9c:5c:e3:a5:13:0c:8d:bc: c6:23:98:0d:e4:77:59:96:71:00:02:bb:09:87:5a: cf:48:a4:cf:4f:a6:91:61:41:c8:28:af:68:47:22: 41:1e:db:8d:4f:f2:d5:8c:b2:b7:3f:9b:d3:5f:56: 6e:55:c8:70:6f:26:88:05:96:6d:54:52:63:85:4c: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BD:03:EF:CF:C6:61:DC:42:38:D6:4E:D7:AC:82:28:16:59:29:02 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:d4:86:92:ac:d4:dc:67:c0:51:96:2a:f5:4a:8e:6f:e4:c9: ec:7d:a1:1d:b1:bf:e6:bb:f2:16:28:f5:16:33:e4:ee:9f:20: cc:e3:58:f1:a8:3e:78:13:c1:fc:88:8e:24:54:e0:7a:fd:1c: 1d:f8:ba:b0:03:00:eb:81:83:58:95:03:df:3d:59:1c:b4:13: d5:06:c3:7f:73:df:d6:07:67:fc:4c:f3:82:76:26:27:d8:cf: 2e:05:47:df:fb:36:65:8c:9e:c0:cc:bc:52:33:2d:57:37:5a: 6e:21:a7:98:15:7f:34:af:14:42:8a:27:60:29:16:df:73:4b: f8:b9:f1:eb:c5:7c:73:8f:be:b1:07:1e:6c:47:0f:ff:0b:81: fb:3b:37:6d:29:9b:b7:fb:41:03:f2:c3:d2:9d:0a:9c:50:24: e0:21:1f:ea:ef:a0:ab:64:8c:1a:2f:85:66:a5:df:84:12:de: a5:da:60:a6:53:58:a5:19:42:f4:07:0c:74:e9:60:28:08:2e: b9:27:10:ab:db:86:a1:50:cf:b8:80:a4:df:c5:8b:44:bb:7f: 16:75:b0:ca:7f:94:10:b4:b5:23:88:cc:f5:21:71:fa:cf:5d: 0b:10:30:2c:3c:69:96:5b:dd:10:0e:85:19:67:10:a1:1a:df: f2:2e:ab:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzkwOTExMC8GA1UEBRMoNTlGOUQ0OEREOTE2OTA5NzgzRTMxNzcxRDhBRDdFQ0Iz MERDM0JBMjAeFw0yNTA1MTEwNjA1MzZaFw0yNTA1MTgwNjA1MzZaMBgxFjAUBgNV BAMTDTY4MjAzZTMwLTQ3YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+cEFXvv89yBiBseb7uxFp+n4PPrCQoAv8qbZldWCItxmVoNAsuefCh51IjLxG mXzcNdosaPMu6LUhPj0vyflPgs6qRYpqzJrNU0lKxgx0lXENO6x+eSZJEk1kx6zy pyqb6ZtnRyaQb5M4SNK3I2qtIAlKmOfSyRCVwM/C/+jnpAu77xztSfdgz5r7Tfx2 AJaRM811gkd+2DvcrTE5jFIbdcWeaTNY2YFbKefJxncpYe1uFt4UacHsUWOcXOOl EwyNvMYjmA3kd1mWcQACuwmHWs9IpM9PppFhQcgor2hHIkEe241P8tWMsrc/m9Nf Vm5VyHBvJogFlm1UUmOFTJ/vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDb0D78/G YdxCONZO16yCKBZZKQIwHwYDVR0jBBgwFoAUWfnUjdkWkJeD4xdx2K1+yzDcO6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOTA5L0ZGN0M1RkRDQzBE QjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2ZuVWpka1drSmVENHhkeDJLMS15ekRjTzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD OTA5L0ZGN0M1RkRDQzBEQjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0pl RDR4ZHgySzEteXpEY082SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADjUhpKs1NxnwFGWKvVKjm/kyex9oR2xv+a78hYo9RYz5O6fIMzjWPGo PngTwfyIjiRU4Hr9HB34urADAOuBg1iVA989WRy0E9UGw39z39YHZ/xM84J2JifY zy4FR9/7NmWMnsDMvFIzLVc3Wm4hp5gVfzSvFEKKJ2ApFt9zS/i58evFfHOPvrEH HmxHD/8Lgfs7N20pm7f7QQPyw9KdCpxQJOAhH+rvoKtkjBovhWal34QS3qXaYKZT WKUZQvQHDHTpYCgILrknEKvbhqFQz7iApN/Fi0S7fxZ1sMp/lBC0tSOIzPUhcfrP XQsQMCw8aZZb3RAOhRlnEKEa3/Iuq1g= -----END CERTIFICATE-----Generated at Mon May 12 10:18:47 2025 by rpki-client