$ rpki-client -vvf rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft File: wrgcmpNbsrM71p-3mzTuMmc5nbY.mft (raw, json) Hash identifier: EODEAX2LTtv3ujGIzNFgF0gVrE6WW8M3DV5IHc5D9Og= Subject key identifier: 4F:D0:C8:12:39:D6:D2:5C:47:7F:41:89:2E:19:4B:1A:DD:2E:0D:C1 Authority key identifier: C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6 Certificate issuer: /CN=A9180882/serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft Manifest number: 01A0 Signing time: Thu 15 May 2025 02:47:11 +0000 Manifest this update: Thu 15 May 2025 02:47:11 +0000 Manifest next update: Thu 22 May 2025 02:47:11 +0000 Files and hashes: 1: wrgcmpNbsrM71p-3mzTuMmc5nbY.crl (hash: ssGBy0CgHrbDxX/xFJiq7smikXlxOzw5n2f8zh+vrh0=) 2: EAD89080BA8B11EDB9005884C4F9AE02.roa (hash: cK40QtT2CNNImNuy8pJFpePuMkD3LPBAr2rQnfOdgKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180882, serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6 Validity Not Before: May 15 02:47:11 2025 GMT Not After : May 22 02:47:11 2025 GMT Subject: CN=682555af-cf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:02:5f:4c:ea:9a:5c:a6:30:90:67:b7:48: d7:52:2b:08:6a:f6:f2:99:7d:d9:92:db:bc:9d:ad: db:d2:73:7b:c4:1d:1b:58:1d:98:e9:78:71:1e:13: e6:81:4c:73:eb:fd:50:95:83:7a:7b:f2:2d:59:eb: 70:ba:43:70:a1:0d:49:34:04:86:55:dd:34:ce:f0: 9e:99:70:5f:f8:01:45:c5:51:85:d5:87:90:85:61: 3f:3d:45:a1:83:32:3e:1d:34:f1:07:04:1a:63:37: 64:1a:fd:68:9b:61:38:d8:97:5d:45:b0:38:ca:3d: d2:7c:77:8f:43:4a:61:e1:19:f7:bd:83:c5:26:bd: e6:5f:3f:5b:5c:d9:37:44:8d:d1:b7:8b:a2:fd:49: 5b:9e:b7:f6:67:bc:76:56:ef:42:5a:0e:ac:dd:06: 01:1d:b2:d1:12:65:80:22:d1:3f:a2:83:6a:ae:5e: fb:97:16:a1:df:fd:60:47:a1:fd:9a:0a:c7:45:64: 00:2e:9c:a0:51:57:ac:09:18:c0:57:56:75:99:65: fb:94:da:4d:69:be:e2:86:4a:87:96:05:6b:94:39: ee:5e:8f:0b:96:c1:fe:7d:e3:6d:39:30:dc:2f:5a: 80:3b:c7:b9:42:30:ef:11:9b:6b:95:44:e2:d0:d6: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D0:C8:12:39:D6:D2:5C:47:7F:41:89:2E:19:4B:1A:DD:2E:0D:C1 X509v3 Authority Key Identifier: keyid:C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:bb:ed:d3:dd:6d:3e:2f:f5:ae:85:e0:79:43:ed:86:27:8e: 16:13:a9:28:27:f9:88:f5:b6:bc:a6:fa:58:e7:83:d4:5d:43: d5:7d:1b:e0:7c:c3:7b:ac:e7:f4:89:6f:b5:64:2e:b1:28:d9: dd:f4:06:39:db:75:80:40:50:d4:a2:1c:a8:04:ba:f9:24:79: 14:6e:66:2d:1c:31:83:a8:f7:34:e7:27:e7:5a:18:c5:ec:db: 7f:1a:65:6d:da:71:a9:65:6d:07:36:94:06:b7:c7:be:da:cd: 2f:a7:15:c7:a6:ac:5b:a9:ad:9a:03:d4:3f:6d:48:34:01:da: 32:00:2f:b6:b5:09:f5:bd:41:db:2d:6d:8f:e3:70:87:60:07: e2:0b:68:6d:57:d1:0f:f1:72:63:93:c1:01:92:51:3a:3d:25: 54:f3:6a:4d:4b:67:84:7e:38:62:fd:1c:e8:ee:90:52:a0:02: df:03:2e:95:86:dd:85:29:68:29:4d:bd:50:d6:f2:30:22:71: 11:a0:80:66:f8:5b:d8:e1:30:96:6a:29:be:79:fd:53:8e:a9: ff:b7:ab:de:41:b5:09:f1:d1:42:24:54:8e:3e:ab:3a:05:c7: 2d:1e:43:d4:98:78:88:3c:7b:d7:f1:ae:fb:ed:61:a1:7a:f8: 75:ad:a9:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA4ODIxMTAvBgNVBAUTKEMyQjgxQzlBOTM1QkIyQjMzQkQ2OUZCNzlCMzRFRTMy NjczOTlEQjYwHhcNMjUwNTE1MDI0NzExWhcNMjUwNTIyMDI0NzExWjAYMRYwFAYD VQQDEw02ODI1NTVhZi1jZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvUCX0zqmlymMJBnt0jXUisIavbymX3Zktu8na3b0nN7xB0bWB2Y6XhxHhPm gUxz6/1QlYN6e/ItWetwukNwoQ1JNASGVd00zvCemXBf+AFFxVGF1YeQhWE/PUWh gzI+HTTxBwQaYzdkGv1om2E42JddRbA4yj3SfHePQ0ph4Rn3vYPFJr3mXz9bXNk3 RI3Rt4ui/Ulbnrf2Z7x2Vu9CWg6s3QYBHbLREmWAItE/ooNqrl77lxah3/1gR6H9 mgrHRWQALpygUVesCRjAV1Z1mWX7lNpNab7ihkqHlgVrlDnuXo8LlsH+feNtOTDc L1qAO8e5QjDvEZtrlUTi0NZ5eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/QyBI5 1tJcR39BiS4ZSxrdLg3BMB8GA1UdIwQYMBaAFMK4HJqTW7KzO9aft5s07jJnOZ22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDg4Mi9ERjNBQjQ2Q0I3 MkQxMUVEODVERDMwMTdDNEY5QUUwMi93cmdjbXBOYnNyTTcxcC0zbXpUdU1tYzVu YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dyZ2NtcE5ic3JNNzFwLTNtelR1TW1jNW5iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDg4Mi9ERjNBQjQ2Q0I3MkQxMUVEODVERDMwMTdDNEY5QUUwMi93cmdjbXBOYnNy TTcxcC0zbXpUdU1tYzVuYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3u+3T3W0+L/WuheB5Q+2GJ44WE6koJ/mI9ba8pvpY54PUXUPVfRvg fMN7rOf0iW+1ZC6xKNnd9AY523WAQFDUohyoBLr5JHkUbmYtHDGDqPc05yfnWhjF 7Nt/GmVt2nGpZW0HNpQGt8e+2s0vpxXHpqxbqa2aA9Q/bUg0AdoyAC+2tQn1vUHb LW2P43CHYAfiC2htV9EP8XJjk8EBklE6PSVU82pNS2eEfjhi/Rzo7pBSoALfAy6V ht2FKWgpTb1Q1vIwInERoIBm+FvY4TCWaim+ef1Tjqn/t6veQbUJ8dFCJFSOPqs6 BcctHkPUmHiIPHvX8a777WGhevh1ranm -----END CERTIFICATE-----Generated at Thu May 15 18:17:06 2025 by rpki-client