$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: 0XFEeIYBAeSSPDckTM1Drc92SO86vmoqb+9+04XBQgg= Subject key identifier: C4:FA:52:07:D6:07:AF:DD:D4:23:E2:53:99:EE:4E:1E:D3:3C:C0:FE Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 01BF Signing time: Wed 14 May 2025 16:59:56 +0000 Manifest this update: Wed 14 May 2025 16:59:56 +0000 Manifest next update: Wed 21 May 2025 16:59:56 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: FMi1GdYrArVFl+oDOAA0I1Bs4lMTWarJH7ApAlr7dkQ=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: ux/yn18OibC6Db2VOykrM0n0NcvF/7PYrwCoPjjFpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: May 14 16:59:56 2025 GMT Not After : May 21 16:59:56 2025 GMT Subject: CN=6824cc0c-f02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:21:18:57:86:f9:1b:fd:18:65:26:92:eb: c5:5c:66:f9:47:77:65:ac:27:de:ba:ea:ff:0e:c8: 93:79:4b:f2:03:5b:76:19:9c:f3:19:f7:56:b9:ea: 29:bf:34:05:ec:82:f3:67:f5:55:15:99:3e:56:14: 59:b0:eb:41:b9:a5:d2:88:a3:3b:d4:6f:0c:f2:c3: 77:c8:7b:65:1f:43:80:37:0f:ec:a9:8d:86:52:5b: c2:63:06:11:79:5b:57:c7:2f:78:6a:5f:10:e0:4b: 9d:f4:89:d2:93:8d:b5:bb:ef:55:95:38:ba:91:73: dc:3b:f0:8e:9c:97:a3:78:9e:a7:38:20:ec:e9:4d: 1b:1f:9b:53:0e:78:9b:ca:fe:05:3c:97:8b:42:04: 7f:d9:78:6c:95:3b:0f:13:cf:2e:e6:70:b0:c9:6d: 28:53:bc:70:ac:2a:4c:e5:49:56:43:12:0c:62:8e: 5d:60:0b:df:22:e0:bc:92:81:84:f5:5a:7b:11:cd: 46:1f:45:72:59:db:fe:7c:ce:e7:c9:29:49:60:50: 64:c1:03:4d:f9:32:d6:2d:4e:d5:b7:0f:19:89:89: 0c:dd:1a:69:33:99:af:c7:3b:32:2a:b9:a6:8e:64: 54:cd:f3:40:d4:f2:53:e3:3b:fa:54:79:66:47:61: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FA:52:07:D6:07:AF:DD:D4:23:E2:53:99:EE:4E:1E:D3:3C:C0:FE X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:bb:fe:e2:0c:d6:e1:08:9e:1f:6e:3f:52:d5:52:ab:f5:ec: cd:0f:82:de:17:6e:37:f1:27:f5:15:6d:8b:82:8e:b0:fc:6c: ac:3c:e5:3a:5a:4d:aa:d9:5b:79:98:d5:f4:3a:c9:0a:cc:60: 96:7b:74:a1:0d:74:3c:c1:28:dc:15:cf:29:86:6f:38:5b:15: a5:30:e8:09:04:5e:22:5e:7a:8a:1c:d8:37:9a:ac:9c:33:f6: 9b:f7:23:a6:d0:ab:c7:19:fe:6c:db:43:6b:c4:02:68:d1:aa: 8b:2c:7b:d8:70:2a:39:7d:fb:30:23:05:11:0a:0c:15:12:68: 40:67:ee:de:7f:bf:0d:be:17:b1:dc:85:d8:a0:72:53:e8:4b: 85:68:a7:b9:40:43:3f:c7:62:e4:46:39:ba:16:09:a4:9a:dd: 5e:ec:11:16:fe:43:24:d5:92:b1:8f:68:cf:ef:a4:ae:56:08: c2:23:e4:58:53:d6:9d:3e:78:fe:f6:d1:4c:7a:a7:cd:3a:70: 66:c4:6c:9f:33:3b:f0:56:7a:c6:72:5a:02:d7:83:41:ec:7b: 79:5e:b9:db:ca:b6:9e:44:a1:ef:53:f1:62:d6:7d:4d:c1:da: e9:cb:54:7f:27:9a:00:8f:21:ec:a5:9e:00:23:b7:22:b7:a0: 08:92:32:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjUwNTE0MTY1OTU2WhcNMjUwNTIxMTY1OTU2WjAYMRYwFAYD VQQDEw02ODI0Y2MwYy1mMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPohGFeG+Rv9GGUmkuvFXGb5R3dlrCfeuur/DsiTeUvyA1t2GZzzGfdWueop vzQF7ILzZ/VVFZk+VhRZsOtBuaXSiKM71G8M8sN3yHtlH0OANw/sqY2GUlvCYwYR eVtXxy94al8Q4Eud9InSk421u+9VlTi6kXPcO/COnJejeJ6nOCDs6U0bH5tTDnib yv4FPJeLQgR/2XhslTsPE88u5nCwyW0oU7xwrCpM5UlWQxIMYo5dYAvfIuC8koGE 9Vp7Ec1GH0VyWdv+fM7nySlJYFBkwQNN+TLWLU7Vtw8ZiYkM3RppM5mvxzsyKrmm jmRUzfNA1PJT4zv6VHlmR2Fp7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMT6UgfW B6/d1CPiU5nuTh7TPMD+MB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQu/7iDNbhCJ4fbj9S1VKr9ezND4LeF2438Sf1FW2Lgo6w/GysPOU6 Wk2q2Vt5mNX0OskKzGCWe3ShDXQ8wSjcFc8phm84WxWlMOgJBF4iXnqKHNg3mqyc M/ab9yOm0KvHGf5s20NrxAJo0aqLLHvYcCo5ffswIwURCgwVEmhAZ+7ef78Nvhex 3IXYoHJT6EuFaKe5QEM/x2LkRjm6Fgmkmt1e7BEW/kMk1ZKxj2jP76SuVgjCI+RY U9adPnj+9tFMeqfNOnBmxGyfMzvwVnrGcloC14NB7Ht5XrnbyraeRKHvU/Fi1n1N wdrpy1R/J5oAjyHspZ4AI7cit6AIkjJ1 -----END CERTIFICATE-----Generated at Fri May 16 02:40:56 2025 by rpki-client