$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json) Hash identifier: zcIkRsOJyL3HPQIUkWD4woTf5Gtl2WhM4NzefqXLohY= Subject key identifier: BA:16:1B:72:2C:36:98:78:15:E4:27:C9:13:44:8F:A7:52:C3:8D:5E Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft Manifest number: 018B Signing time: Fri 09 May 2025 02:44:13 +0000 Manifest this update: Fri 09 May 2025 02:44:13 +0000 Manifest next update: Fri 16 May 2025 02:44:13 +0000 Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: UX9+95k9D2V69utcSTIOJ2wYIGkl7Fujzd0sFlUUcM4=) 2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: 8W11lhJNXDI/B18v0915hoFQti7BAopL/ni44iL17Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Validity Not Before: May 9 02:44:13 2025 GMT Not After : May 16 02:44:13 2025 GMT Subject: CN=681d6bfd-4bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:ef:e4:7f:85:15:b8:c5:3f:cd:1f:42:47: 43:7d:62:2b:a8:6d:57:7b:ac:37:8d:fc:05:0c:be: f1:db:86:86:56:6b:3a:2b:4f:14:eb:6c:08:11:78: 6f:1b:61:42:15:4a:69:4d:3f:0f:d3:a5:bb:bc:db: b0:e3:cf:af:fa:ee:f0:21:22:e1:15:a1:4d:03:3e: 25:d9:a5:00:af:59:68:b9:c3:02:c0:78:28:5b:bf: d0:28:24:93:b2:6e:bd:ad:cb:cd:1d:ef:9c:8c:5c: 73:5a:2e:3d:40:e4:6f:6d:3d:e8:c4:2c:ee:59:c7: aa:00:a1:3c:62:9e:73:d5:05:71:ac:13:2b:25:40: d4:ad:f7:5c:b2:9c:b3:f9:5a:12:df:b8:c7:8b:08: 96:8e:e5:81:10:e4:14:37:ef:f9:85:46:49:fe:cd: 3c:53:7f:70:60:a0:dc:a3:c0:d2:e1:1c:4c:93:83: a4:3e:de:a6:00:bc:78:87:03:bb:d0:41:21:8b:19: 5c:2d:5c:bd:09:0f:fe:be:d7:35:c6:55:de:1f:99: 69:f9:9e:01:05:e4:fb:e7:a6:d7:ea:61:19:ff:c9: 26:d7:bb:c8:69:b9:06:b6:48:1a:b4:45:11:e6:e4: 4a:d8:aa:a3:b5:3c:e8:0a:8d:32:15:02:70:66:72: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:16:1B:72:2C:36:98:78:15:E4:27:C9:13:44:8F:A7:52:C3:8D:5E X509v3 Authority Key Identifier: keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4a:d4:40:1d:dc:e7:85:4b:66:40:d4:a1:41:cc:af:64:8a: 65:5b:f3:45:0e:04:0f:2f:2d:41:08:34:3d:19:06:5a:64:aa: 4e:2e:bb:0f:aa:52:ab:bb:5d:85:3f:dd:d8:ab:75:91:78:2f: b4:f3:b7:5e:8a:0a:79:75:ee:8f:5f:1e:68:72:5d:1f:a9:0a: d3:a3:6a:98:ae:ae:29:04:5d:41:05:ef:8e:e9:ab:54:db:cd: 23:53:25:89:d5:d2:f0:53:e9:d3:96:f0:51:67:e7:fa:5b:7e: d0:5d:1c:7d:bd:96:ef:be:e3:c2:21:d2:94:c7:d5:3d:ce:3d: d0:e7:aa:0f:35:ed:89:ef:6a:1a:ed:e4:13:a5:22:fc:04:b8: df:9a:41:2e:54:b0:d1:f1:44:bb:a1:11:e4:67:d9:00:ca:62: d4:d1:b9:80:44:a8:b7:a5:b9:4f:9f:ee:62:8d:ce:25:95:bb: 59:81:bf:f0:fc:f5:f0:b8:ad:44:2e:b8:99:33:e8:de:f9:a8: 0c:93:ff:91:3b:fa:90:63:ab:48:c5:f6:48:3c:71:1a:81:39: 53:64:4e:1f:c2:41:06:8a:67:88:03:1a:ee:b3:75:a0:cb:2d: bc:b1:b3:59:4e:5e:1d:67:cd:87:8a:b9:f4:ba:4f:f2:92:ad: 12:7c:73:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNUYxMTAvBgNVBAUTKEMwNkZGMDA1REUxRDVFRjEzQkE4RjBDMjYwRTk2MzAz NEE1QTIyQ0EwHhcNMjUwNTA5MDI0NDEzWhcNMjUwNTE2MDI0NDEzWjAYMRYwFAYD VQQDEw02ODFkNmJmZC00YmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxPv5H+FFbjFP80fQkdDfWIrqG1Xe6w3jfwFDL7x24aGVms6K08U62wIEXhv G2FCFUppTT8P06W7vNuw48+v+u7wISLhFaFNAz4l2aUAr1loucMCwHgoW7/QKCST sm69rcvNHe+cjFxzWi49QORvbT3oxCzuWceqAKE8Yp5z1QVxrBMrJUDUrfdcspyz +VoS37jHiwiWjuWBEOQUN+/5hUZJ/s08U39wYKDco8DS4RxMk4OkPt6mALx4hwO7 0EEhixlcLVy9CQ/+vtc1xlXeH5lp+Z4BBeT756bX6mEZ/8km17vIabkGtkgatEUR 5uRK2KqjtTzoCo0yFQJwZnImDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoWG3Is Nph4FeQnyRNEj6dSw41eMB8GA1UdIwQYMBaAFMBv8AXeHV7xO6jwwmDpYwNKWiLK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1Ri9GNzQ1NUFBQUQy QjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2RTdxUERDWU9sakEwcGFJ c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dHX3dCZDRkWHZFN3FQRENZT2xqQTBwYUlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1Ri9GNzQ1NUFBQUQyQjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2 RTdxUERDWU9sakEwcGFJc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8StRAHdznhUtmQNShQcyvZIplW/NFDgQPLy1BCDQ9GQZaZKpOLrsP qlKru12FP93Yq3WReC+087deigp5de6PXx5ocl0fqQrTo2qYrq4pBF1BBe+O6atU 280jUyWJ1dLwU+nTlvBRZ+f6W37QXRx9vZbvvuPCIdKUx9U9zj3Q56oPNe2J72oa 7eQTpSL8BLjfmkEuVLDR8US7oRHkZ9kAymLU0bmARKi3pblPn+5ijc4llbtZgb/w /PXwuK1ELriZM+je+agMk/+RO/qQY6tIxfZIPHEagTlTZE4fwkEGimeIAxrus3Wg yy28sbNZTl4dZ82Hirn0uk/ykq0SfHPj -----END CERTIFICATE-----Generated at Sat May 10 04:45:44 2025 by rpki-client