$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json) Hash identifier: qtT+6A3LwKw3KPOf6Valqe+ic69aFy3Ep0NBkLFl+7c= Subject key identifier: 53:9B:A5:D1:5D:99:CE:D3:66:92:3F:97:6D:8A:39:55:A1:83:AE:0C Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft Manifest number: 016A Signing time: Sun 11 May 2025 02:49:55 +0000 Manifest this update: Sun 11 May 2025 02:49:54 +0000 Manifest next update: Sun 18 May 2025 02:49:54 +0000 Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: iM/KpYjRXtLeslg129u/IJ2v7g1whN4YAx+cJFIBHj8=) 2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: LvsVsArM6WgAwVg4l/iixUJeke5f36Ab2xwAtLEZPnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Validity Not Before: May 11 02:49:54 2025 GMT Not After : May 18 02:49:54 2025 GMT Subject: CN=68201052-ccd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:d3:59:a4:a4:d1:e6:ce:35:81:bd:3c:7c: f4:b7:3b:4f:31:b7:ed:94:ab:5a:d3:43:7a:de:28: 25:88:b3:74:14:42:c5:0e:14:0a:a5:e7:45:f2:9c: 8c:5f:cd:f1:a9:57:01:98:c7:a4:40:bc:03:39:dd: db:d0:db:90:55:b6:5c:4d:e6:ea:4b:f6:b7:56:a1: 98:12:64:aa:5e:ab:a9:86:6f:9e:c5:f7:c7:90:a8: 59:f9:38:7d:7d:dc:55:5a:ac:6f:d1:62:5e:d3:1a: bd:85:59:47:74:7b:38:4f:19:29:51:6b:b1:65:47: 68:76:de:d1:6f:ec:5e:da:63:8c:4a:b8:2b:e6:35: fd:ec:c8:74:14:d1:0e:68:ee:86:b3:c8:ab:19:82: 98:ad:85:47:49:39:fd:75:11:63:2a:e0:35:30:29: 2f:c6:74:c8:f8:ef:da:40:26:0f:59:a5:36:77:8e: 74:2c:7a:5a:8c:ca:b8:af:10:14:c7:89:fa:6b:56: 40:ce:8e:21:ff:04:b4:3f:28:44:94:54:be:f0:84: e3:c7:56:22:e2:6e:57:09:ed:44:8d:c2:27:13:05: 38:cf:03:ca:18:bb:5a:fa:9a:50:98:2a:56:97:ad: 88:47:fc:05:ec:92:a6:d9:6f:1c:b5:f8:0a:64:be: de:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9B:A5:D1:5D:99:CE:D3:66:92:3F:97:6D:8A:39:55:A1:83:AE:0C X509v3 Authority Key Identifier: keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:fc:9b:57:8c:fb:4e:29:4e:3e:5e:43:36:99:b3:1c:4c:d0: c3:57:6c:81:be:d1:36:42:ca:6e:d3:9f:e1:4a:36:cf:91:c1: 15:52:22:97:8a:7e:9f:37:17:01:1a:2a:ea:94:bf:46:73:a0: 7e:7c:78:28:98:e3:b3:46:83:ef:d5:de:d2:b2:0e:bf:ba:9f: c4:f4:39:fa:d8:99:ee:b9:97:7b:c4:31:1f:46:14:c4:8b:8d: e4:b8:44:f2:ab:85:99:91:72:5a:5c:9a:d9:28:22:a0:64:77: 59:83:b9:7c:78:32:7a:b1:40:87:d8:bc:49:da:0d:1e:34:bb: 4b:c6:73:9c:ed:52:3d:d9:c5:f3:d7:81:b0:00:10:a7:97:ba: 84:01:28:4c:b9:dc:e4:b1:84:07:7b:78:a0:d7:3b:ea:25:77: 49:3c:80:e2:5c:e1:08:39:47:e6:fd:87:f5:0b:f0:ce:d9:b1: b6:36:73:23:53:f7:5c:0c:68:55:10:31:75:c6:81:76:e1:66: af:d8:8c:db:95:c2:3f:9d:31:02:d6:ea:97:be:87:48:d0:3e: 1d:c5:0e:23:85:7b:89:dc:04:f8:86:9e:db:de:0e:f7:33:30: d8:a3:cb:ee:b9:87:c0:9c:da:61:ca:72:65:0c:2b:07:0f:64: e4:0f:9e:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGRDAxMTAvBgNVBAUTKDU5QjZENkNENzMwNUYyREVFQzJCOEU2MTNDNUQ4RjQ5 NDI1RTAwMzkwHhcNMjUwNTExMDI0OTU0WhcNMjUwNTE4MDI0OTU0WjAYMRYwFAYD VQQDEw02ODIwMTA1Mi1jY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/LTWaSk0ebONYG9PHz0tztPMbftlKta00N63igliLN0FELFDhQKpedF8pyM X83xqVcBmMekQLwDOd3b0NuQVbZcTebqS/a3VqGYEmSqXquphm+exffHkKhZ+Th9 fdxVWqxv0WJe0xq9hVlHdHs4TxkpUWuxZUdodt7Rb+xe2mOMSrgr5jX97Mh0FNEO aO6Gs8irGYKYrYVHSTn9dRFjKuA1MCkvxnTI+O/aQCYPWaU2d450LHpajMq4rxAU x4n6a1ZAzo4h/wS0PyhElFS+8ITjx1Yi4m5XCe1EjcInEwU4zwPKGLta+ppQmCpW l62IR/wF7JKm2W8ctfgKZL7evQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFObpdFd mc7TZpI/l22KOVWhg64MMB8GA1UdIwQYMBaAFFm21s1zBfLe7CuOYTxdj0lCXgA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUZEMC8zODMzNDQ3ODA5 Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0N3NLNDVoUEYyUFNVSmVB RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1diYld6WE1GOHQ3c0s0NWhQRjJQU1VKZUFEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUZEMC8zODMzNDQ3ODA5Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0 N3NLNDVoUEYyUFNVSmVBRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY/JtXjPtOKU4+XkM2mbMcTNDDV2yBvtE2Qspu05/hSjbPkcEVUiKX in6fNxcBGirqlL9Gc6B+fHgomOOzRoPv1d7Ssg6/up/E9Dn62JnuuZd7xDEfRhTE i43kuETyq4WZkXJaXJrZKCKgZHdZg7l8eDJ6sUCH2LxJ2g0eNLtLxnOc7VI92cXz 14GwABCnl7qEAShMudzksYQHe3ig1zvqJXdJPIDiXOEIOUfm/Yf1C/DO2bG2NnMj U/dcDGhVEDF1xoF24Wav2IzblcI/nTEC1uqXvodI0D4dxQ4jhXuJ3AT4hp7b3g73 MzDYo8vuuYfAnNphynJlDCsHD2TkD57N -----END CERTIFICATE-----Generated at Mon May 12 06:36:48 2025 by rpki-client