$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json) Hash identifier: Dm+hIsA6onRu4oowezpPOsCKVkm9wUTAelfC1evBwas= Subject key identifier: 83:9F:6C:69:1B:7D:5F:62:FA:41:AA:41:9B:21:9C:D3:04:EC:AA:E7 Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft Manifest number: 02DB Signing time: Sun 11 May 2025 00:54:27 +0000 Manifest this update: Sun 11 May 2025 00:54:27 +0000 Manifest next update: Sun 18 May 2025 00:54:27 +0000 Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: Dm2qv+LoBS8+hZUhCd19WIYnYPqWMohGYR7Jwcy/AdI=) 2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: 0dbqZkJLEDn7V9Hw0/4drKsR2U3rKU1wM+bwlHy41IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Validity Not Before: May 11 00:54:27 2025 GMT Not After : May 18 00:54:27 2025 GMT Subject: CN=681ff543-2ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:33:1b:f8:4a:77:54:90:09:8d:b2:90:1f: 81:7d:cf:a0:62:11:17:a9:48:74:61:e2:3c:b1:61: 0e:33:47:d0:4e:f4:51:82:16:28:e7:25:1e:72:a4: ef:43:6e:5c:45:bf:f4:30:73:49:1a:6e:6d:b3:15: 7c:6e:2f:fc:61:d7:f3:e3:1d:2c:ff:9f:af:c4:71: 20:2b:85:80:97:23:6e:06:5d:a7:96:8c:0b:ed:a8: b4:7c:4e:63:d2:1d:d3:85:1e:f2:93:dd:ae:bb:b6: 7c:20:df:b7:fc:51:a3:24:34:1a:f1:5e:1d:9f:74: 62:61:72:a1:96:ae:89:09:65:01:71:b2:c6:01:5f: f3:5d:24:87:90:78:ba:4d:1c:f3:79:64:a2:12:0e: ca:f0:80:7e:35:d4:fb:8a:7d:56:ab:2c:97:4c:cd: 21:41:4d:00:08:19:5a:89:d7:3c:29:d0:af:31:0c: c2:65:f7:06:3e:eb:36:0d:bc:30:c0:45:de:5c:bc: c9:ad:ba:52:ea:52:24:f9:e4:98:1c:bb:87:91:65: f1:65:9f:2f:c7:05:a8:53:62:09:de:84:f4:9b:96: 3b:90:d0:db:b2:5e:20:d5:24:d2:0a:b7:8f:1d:86: df:97:9f:01:8c:d2:59:8c:a8:be:84:17:cd:44:dd: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9F:6C:69:1B:7D:5F:62:FA:41:AA:41:9B:21:9C:D3:04:EC:AA:E7 X509v3 Authority Key Identifier: keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7a:fd:45:e7:35:52:e9:c2:00:88:d8:d1:51:59:ea:29:af: fc:50:2b:97:e5:49:b2:11:54:d4:a1:0a:26:d2:78:7a:0a:49: e8:cd:40:94:54:78:61:c5:e6:64:72:b1:8e:03:cb:ac:37:7b: 67:e2:fd:7f:70:d8:e5:01:35:0c:f6:3d:da:8a:77:de:0e:73: bc:2b:b5:4f:9d:c3:c1:7e:c4:30:24:25:02:f2:79:a3:d3:3e: 0c:45:0a:98:ee:2c:1f:af:de:4b:25:75:b1:0b:be:50:4b:35: 55:cd:fc:f8:0c:05:1e:90:e2:57:4f:f6:61:d2:1a:56:37:e4: b5:6d:77:24:3b:c0:a2:20:4d:c8:84:d8:25:b5:15:7a:a0:32: 64:85:ed:45:42:ed:a0:3c:f6:0e:c0:6b:e2:b4:23:4e:20:3d: bc:ac:6e:b5:a5:d3:2b:6c:ea:45:92:45:0c:37:3a:d4:7b:25: 80:bc:44:2a:41:75:62:ca:2b:cf:28:d6:d5:e1:d3:da:52:72: e6:e4:ed:fb:d9:c4:80:22:53:fc:91:60:9a:c8:3f:f3:9b:04: 8b:58:99:32:35:ff:00:e3:36:cf:8f:c3:70:9d:3a:93:67:6a: 1f:a0:30:55:a7:9b:d0:86:0d:73:b7:99:3e:af:bc:bd:86:2f: 09:59:c5:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEMEMxMTAvBgNVBAUTKDVCM0I4QkZCMkM5RjJDRTg4MzUxNUZBM0RDRjlEMUMw Q0ZBRDA3QTQwHhcNMjUwNTExMDA1NDI3WhcNMjUwNTE4MDA1NDI3WjAYMRYwFAYD VQQDEw02ODFmZjU0My0yZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV8zG/hKd1SQCY2ykB+Bfc+gYhEXqUh0YeI8sWEOM0fQTvRRghYo5yUecqTv Q25cRb/0MHNJGm5tsxV8bi/8Ydfz4x0s/5+vxHEgK4WAlyNuBl2nlowL7ai0fE5j 0h3ThR7yk92uu7Z8IN+3/FGjJDQa8V4dn3RiYXKhlq6JCWUBcbLGAV/zXSSHkHi6 TRzzeWSiEg7K8IB+NdT7in1WqyyXTM0hQU0ACBlaidc8KdCvMQzCZfcGPus2Dbww wEXeXLzJrbpS6lIk+eSYHLuHkWXxZZ8vxwWoU2IJ3oT0m5Y7kNDbsl4g1STSCreP HYbfl58BjNJZjKi+hBfNRN2s8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOfbGkb fV9i+kGqQZshnNME7KrnMB8GA1UdIwQYMBaAFFs7i/ssnyzog1Ffo9z50cDPrQek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQwQy9CQTg2QkEyMkUz MkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxPaURVVi1qM1BuUndNLXRC NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d6dUwteXlmTE9pRFVWLWozUG5Sd00tdEI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQwQy9CQTg2QkEyMkUzMkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxP aURVVi1qM1BuUndNLXRCNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAev1F5zVS6cIAiNjRUVnqKa/8UCuX5UmyEVTUoQom0nh6CknozUCU VHhhxeZkcrGOA8usN3tn4v1/cNjlATUM9j3ainfeDnO8K7VPncPBfsQwJCUC8nmj 0z4MRQqY7iwfr95LJXWxC75QSzVVzfz4DAUekOJXT/Zh0hpWN+S1bXckO8CiIE3I hNgltRV6oDJkhe1FQu2gPPYOwGvitCNOID28rG61pdMrbOpFkkUMNzrUeyWAvEQq QXViyivPKNbV4dPaUnLm5O372cSAIlP8kWCayD/zmwSLWJkyNf8A4zbPj8NwnTqT Z2ofoDBVp5vQhg1zt5k+r7y9hi8JWcWA -----END CERTIFICATE-----Generated at Sun May 11 19:08:57 2025 by rpki-client