$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft File: wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json) Hash identifier: FghrzYIhijtj3aSzoF80iBR2O23XifiiUF7sf+nWgUM= Subject key identifier: B6:66:A8:E5:E9:0B:41:3B:F5:A9:48:E0:86:D5:E6:C4:99:30:0E:88 Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Certificate serial: 05D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft Manifest number: 05D1 Signing time: Mon 12 May 2025 22:47:23 +0000 Manifest this update: Mon 12 May 2025 22:47:23 +0000 Manifest next update: Mon 19 May 2025 22:47:23 +0000 Files and hashes: 1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: p1Z0nS8i5i8q8N4jNm8XvI5zwc37ybYU4C6XqdXnCp8=) 2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: +jdUATyzrg608TDOhz1zYfT+JhyRhNUXrYXFBCFtcqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1494 (0x5d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Validity Not Before: May 12 22:47:23 2025 GMT Not After : May 19 22:47:23 2025 GMT Subject: CN=68227a7b-4d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:6a:d2:e7:2d:af:96:0e:72:f6:97:1d:cb: ff:a3:20:df:b7:cc:d3:8c:b4:b6:4e:a9:bf:0d:47: 9c:f9:04:9b:7e:54:7b:bc:5f:ae:c7:02:19:5a:c0: c3:9b:ea:b3:d2:b5:5b:4e:40:30:c5:78:ce:b9:a8: ce:e4:cb:85:f5:a2:c1:e2:1a:d8:3c:dc:c8:83:c8: 44:c7:bb:0a:0d:14:8c:d9:21:c3:50:b8:73:0f:56: c6:c8:d7:ec:43:15:8f:f4:6f:05:0f:b0:04:50:4a: 58:11:37:4b:7e:65:c7:f9:78:0d:2c:80:41:5f:96: 23:f4:3f:c7:17:c3:95:d7:60:50:a0:46:d6:a5:39: 97:44:ec:66:b8:c6:66:df:bb:5d:27:a4:df:b4:c3: d9:75:be:a9:ea:be:f7:93:03:64:a4:fa:6e:f5:7d: 3b:9f:5c:c2:75:1a:92:d8:f8:27:4a:2b:03:42:fd: 79:04:c3:36:c6:d5:94:b4:02:3c:1b:f7:d9:60:7d: 48:01:3d:bd:13:64:64:b0:3c:2c:bb:62:35:d2:83: db:49:ad:db:a4:b6:f5:d9:2c:87:9d:94:0c:b2:a5: 2c:0d:ce:97:08:0f:ee:72:ae:e3:55:f4:89:a1:b9: 80:23:e5:73:28:16:60:44:23:54:68:b1:c2:f4:f6: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:66:A8:E5:E9:0B:41:3B:F5:A9:48:E0:86:D5:E6:C4:99:30:0E:88 X509v3 Authority Key Identifier: keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:59:07:14:ff:bc:21:f7:40:68:87:5c:8f:4b:d1:74:8f:ac: 0a:b6:52:60:5b:78:e8:a9:bc:e3:e3:29:29:6f:46:49:0a:93: 70:e5:81:28:f3:a4:94:06:5c:14:6b:85:1e:ab:eb:d2:75:08: b0:d5:7e:c7:33:45:db:81:8c:10:76:c9:a2:a4:2a:9f:4c:21: a4:87:32:bf:34:1a:c6:2e:4e:2c:92:00:d8:1b:d0:fc:08:3c: 3a:1c:f5:d0:e1:98:4e:3c:a0:48:72:22:cd:43:56:f5:df:e3: f3:23:44:61:b8:e8:8e:d1:d9:4e:ad:83:58:a5:ba:8f:48:52: 95:2d:44:ee:ba:5d:e3:fc:03:9f:8e:03:34:71:35:7f:5c:65: 65:1d:89:6e:42:38:71:f2:e6:6f:a0:80:17:17:e3:4c:a8:d7: 5e:23:63:d0:5b:40:3f:c8:db:87:56:86:fb:d8:84:e1:fd:33: 40:6b:ee:1c:19:34:5b:9a:d3:ae:aa:8e:5c:08:15:cc:33:f7: 8a:9e:de:df:c0:ed:7b:96:aa:4f:91:fc:83:88:77:51:78:4b: 95:fe:fa:34:1b:6e:38:fb:a9:f0:78:95:f6:2b:9d:d1:bd:2f: 0a:78:16:69:c6:1f:88:36:89:14:c2:cb:49:8c:2f:c3:83:16: 89:85:2a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjgxMTAvBgNVBAUTKEMwM0EyRTY4OTYwMzIwNEEwMkIzOEJFRjdCOTA4M0Ix MDI3NjI2OTEwHhcNMjUwNTEyMjI0NzIzWhcNMjUwNTE5MjI0NzIzWjAYMRYwFAYD VQQDEw02ODIyN2E3Yi00ZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9xq0uctr5YOcvaXHcv/oyDft8zTjLS2Tqm/DUec+QSbflR7vF+uxwIZWsDD m+qz0rVbTkAwxXjOuajO5MuF9aLB4hrYPNzIg8hEx7sKDRSM2SHDULhzD1bGyNfs QxWP9G8FD7AEUEpYETdLfmXH+XgNLIBBX5Yj9D/HF8OV12BQoEbWpTmXROxmuMZm 37tdJ6TftMPZdb6p6r73kwNkpPpu9X07n1zCdRqS2PgnSisDQv15BMM2xtWUtAI8 G/fZYH1IAT29E2RksDwsu2I10oPbSa3bpLb12SyHnZQMsqUsDc6XCA/ucq7jVfSJ obmAI+VzKBZgRCNUaLHC9PbEpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZmqOXp C0E79alI4IbV5sSZMA6IMB8GA1UdIwQYMBaAFMA6LmiWAyBKArOL73uQg7ECdiaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCOC9DODdEQTBBNEI3 RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElFb0NzNHZ2ZTVDRHNRSjJK cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEb3VhSllESUVvQ3M0dnZlNUNEc1FKMkpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCOC9DODdEQTBBNEI3RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElF b0NzNHZ2ZTVDRHNRSjJKcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKWQcU/7wh90Boh1yPS9F0j6wKtlJgW3joqbzj4ykpb0ZJCpNw5YEo 86SUBlwUa4Ueq+vSdQiw1X7HM0XbgYwQdsmipCqfTCGkhzK/NBrGLk4skgDYG9D8 CDw6HPXQ4ZhOPKBIciLNQ1b13+PzI0RhuOiO0dlOrYNYpbqPSFKVLUTuul3j/AOf jgM0cTV/XGVlHYluQjhx8uZvoIAXF+NMqNdeI2PQW0A/yNuHVob72ITh/TNAa+4c GTRbmtOuqo5cCBXMM/eKnt7fwO17lqpPkfyDiHdReEuV/vo0G244+6nweJX2K53R vS8KeBZpxh+INokUwstJjC/DgxaJhSr5 -----END CERTIFICATE-----Generated at Tue May 13 04:51:12 2025 by rpki-client