$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft File: Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json) Hash identifier: 1tNLWKWkpPA0kTjUMbKrmxeQ/aKA5DzbqV+OIUmz5ds= Subject key identifier: A1:99:9D:94:94:A7:0F:EA:86:66:67:4D:BE:CF:A4:82:54:02:50:7D Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB Certificate issuer: /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft Manifest number: 073A Signing time: Sat 10 May 2025 22:27:09 +0000 Manifest this update: Sat 10 May 2025 22:27:08 +0000 Manifest next update: Sat 17 May 2025 22:27:08 +0000 Files and hashes: 1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: z7t06Q0JouVIinO3Qs1L+tydJQxpv6+biVJMlXA9D8o=) 2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: aQsHMdafTipMWqWSV46rK02/G7PlIH4QrZ4xAvLOfVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193235, serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Validity Not Before: May 10 22:27:08 2025 GMT Not After : May 17 22:27:08 2025 GMT Subject: CN=681fd2bc-c7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:e5:66:cb:70:5b:09:83:39:ca:60:ef:b1: bf:a6:bc:55:7e:0b:39:0a:15:1e:88:d3:44:25:9a: 72:8d:66:aa:62:05:14:17:0b:18:12:da:fa:5d:37: 76:dc:e7:95:bd:9c:87:43:ad:43:e6:81:2c:8c:cb: dc:62:13:b4:45:d4:89:8c:c8:c0:cb:36:9c:6b:8b: ce:f9:5c:62:f6:a8:08:34:64:d5:6c:1b:fb:9d:07: 33:a4:68:f1:39:b6:28:b5:0e:ae:d7:e2:ad:30:05: 33:12:aa:01:80:3d:09:2b:6f:e2:e9:a1:d9:b3:01: cc:af:ed:bb:40:0a:be:d0:14:e6:09:8e:2a:b3:52: 09:f0:ad:d3:89:9f:46:8a:f7:48:b1:a3:94:e9:ca: 72:c0:73:32:4e:d9:90:b4:49:c3:49:1d:14:1c:09: 8e:10:bf:a8:92:b7:43:eb:d7:88:29:d6:55:35:6f: 11:5e:76:23:43:71:2a:ac:49:ad:f2:0c:bf:f5:32: 67:30:54:3a:70:76:b1:a7:b2:63:62:c3:17:11:86: 30:af:f6:39:ef:27:62:9e:2d:b2:6a:89:e9:96:02: 5b:93:be:05:07:ec:8f:d7:ab:38:d5:c6:40:21:93: b2:c6:b4:96:af:51:e3:67:b4:8d:16:62:3d:0e:55: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:99:9D:94:94:A7:0F:EA:86:66:67:4D:BE:CF:A4:82:54:02:50:7D X509v3 Authority Key Identifier: keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bd:97:5b:79:a9:45:6b:34:57:02:1c:bf:e4:68:02:c6:b3: b6:ce:a8:7b:bd:4c:79:22:fc:ee:0a:48:d6:b6:f0:98:02:52: ff:66:1b:51:16:01:8c:db:c2:e0:e7:94:c1:e8:32:6f:b5:dd: 45:e9:c7:58:d3:a5:a8:0f:02:60:3a:2b:ac:2c:ba:9a:88:7b: c1:47:5c:96:bb:1b:18:1f:01:0a:03:d9:27:f3:af:54:28:ca: db:a5:c6:94:1b:38:8a:f7:45:7a:b5:b7:cf:1b:55:99:d5:d9: 35:ae:b3:13:a8:c6:57:91:ed:e4:d6:6d:3b:e2:40:61:65:d8: 23:6f:1e:81:be:41:3c:34:76:1e:2c:6f:ac:46:85:96:13:9c: 37:6f:9b:33:56:81:3e:c7:ab:60:6a:87:74:e0:b8:2d:d7:0a: 5c:e6:eb:6e:82:ea:29:a7:dc:86:94:06:13:38:b5:f3:d4:57: 22:24:84:9e:46:f4:60:ca:7e:ef:b5:e9:0a:9b:14:aa:70:b5: bd:36:49:0f:78:a0:5c:e9:75:cd:63:5f:da:1d:44:ea:a6:cd: 78:70:bd:2a:ba:6e:db:fa:4d:be:fe:e5:6f:78:c1:68:a3:4f: 11:e9:a1:64:d9:d8:91:fd:d5:29:0f:b3:b6:c0:6a:6c:81:7f: b6:ed:b5:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyMzUxMTAvBgNVBAUTKDVBNTZGODlGNTA4MTJBODEwRkYyREU4NDU0NzBGMTA5 MjcyNEExQUIwHhcNMjUwNTEwMjIyNzA4WhcNMjUwNTE3MjIyNzA4WjAYMRYwFAYD VQQDEw02ODFmZDJiYy1jN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRzlZstwWwmDOcpg77G/prxVfgs5ChUeiNNEJZpyjWaqYgUUFwsYEtr6XTd2 3OeVvZyHQ61D5oEsjMvcYhO0RdSJjMjAyzaca4vO+Vxi9qgINGTVbBv7nQczpGjx ObYotQ6u1+KtMAUzEqoBgD0JK2/i6aHZswHMr+27QAq+0BTmCY4qs1IJ8K3TiZ9G ivdIsaOU6cpywHMyTtmQtEnDSR0UHAmOEL+okrdD69eIKdZVNW8RXnYjQ3EqrEmt 8gy/9TJnMFQ6cHaxp7JjYsMXEYYwr/Y57ydini2yaonplgJbk74FB+yP16s41cZA IZOyxrSWr1HjZ7SNFmI9DlUt5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGZnZSU pw/qhmZnTb7PpIJUAlB9MB8GA1UdIwQYMBaAFFpW+J9QgSqBD/LehFRw8QknJKGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzIzNS9BNEZDM0I1QTlG QTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktvRVA4dDZFVkhEeENTY2tv YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsYjRuMUNCS29FUDh0NkVWSER4Q1Nja29hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzIzNS9BNEZDM0I1QTlGQTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktv RVA4dDZFVkhEeENTY2tvYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqvZdbealFazRXAhy/5GgCxrO2zqh7vUx5IvzuCkjWtvCYAlL/ZhtR FgGM28Lg55TB6DJvtd1F6cdY06WoDwJgOiusLLqaiHvBR1yWuxsYHwEKA9kn869U KMrbpcaUGziK90V6tbfPG1WZ1dk1rrMTqMZXke3k1m074kBhZdgjbx6BvkE8NHYe LG+sRoWWE5w3b5szVoE+x6tgaod04Lgt1wpc5utuguopp9yGlAYTOLXz1FciJISe RvRgyn7vtekKmxSqcLW9NkkPeKBc6XXNY1/aHUTqps14cL0qum7b+k2+/uVveMFo o08R6aFk2diR/dUpD7O2wGpsgX+27bUS -----END CERTIFICATE-----Generated at Sun May 11 22:44:49 2025 by rpki-client