$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: z2w668QayWSo0Wi8+ktRNhZQeUz9Yka4gqL5G/FMAXA= Subject key identifier: 07:1F:4E:14:EF:EC:4E:36:66:A0:9C:29:BD:FC:C8:F3:BC:A5:A0:7F Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 0576 Signing time: Fri 28 Mar 2025 23:35:00 +0000 Manifest this update: Fri 28 Mar 2025 23:35:00 +0000 Manifest next update: Fri 04 Apr 2025 23:35:00 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: bB8ccvTQCkDXGZgFDHY/NrUdUkYQYGcIKYgwDm9BaCo=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: KjSC+EBY/UPIqhkSiTjfbrlSvd1G9oxKPCBMNEBLTuc=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC Validity Not Before: Mar 28 23:35:00 2025 GMT Not After : Apr 4 23:35:00 2025 GMT Subject: CN=67e73224-9b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d6:bb:2e:b4:83:bb:c2:3f:51:cd:9c:7a:e8: c7:49:69:81:0d:18:ea:c4:32:30:2a:d1:db:68:07: 94:14:68:e0:83:93:eb:a2:a6:0a:09:67:df:70:ef: 27:f0:68:23:58:ad:78:c0:25:5d:8d:eb:eb:62:5e: 07:81:1e:95:96:71:3f:80:e1:9c:fc:d5:62:d2:ff: 4f:fc:ac:fa:1a:81:73:62:8d:7c:21:f5:4b:5e:85: 89:5b:31:f6:22:34:03:37:60:f4:e5:ff:40:89:3e: 10:75:0e:c2:12:ef:40:21:25:7c:95:63:6e:2b:2f: 29:16:e5:12:94:ea:6c:e1:6c:c2:3c:92:f0:0e:ec: cd:8c:00:4f:68:9a:29:e4:db:62:66:f9:b1:22:fc: 78:c3:bb:f8:a2:bd:05:a1:4b:06:3c:38:d2:4d:1a: c0:fd:7e:bc:87:f4:e7:38:8c:ee:df:13:00:93:7b: 01:c0:e9:dc:67:d8:fe:aa:94:05:24:6c:eb:88:84: 86:05:b1:6d:6f:80:05:f2:11:3f:5e:32:34:68:73: d8:a8:b4:2c:d7:5f:fe:2f:42:70:0c:a4:4f:dc:36: 11:4e:8d:b8:53:da:87:60:bd:67:a0:b1:04:f2:39: c8:15:dd:00:93:3f:1e:8c:49:5f:a0:3f:c7:e6:e0: 53:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1F:4E:14:EF:EC:4E:36:66:A0:9C:29:BD:FC:C8:F3:BC:A5:A0:7F X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2a:b9:37:fa:c5:c6:e2:9b:1a:49:0b:f8:1d:81:30:d1:b2: 63:2b:74:c4:33:19:c6:84:9f:19:a6:05:5e:88:40:fb:46:f3: b4:0d:0e:c6:d3:c6:44:a8:e2:ee:c2:ff:73:dd:bd:ce:41:16: 24:f4:cb:f3:0f:1e:96:2d:a6:1f:0c:c2:fd:f8:c4:05:a4:68: 65:26:7b:b2:58:30:b0:d4:06:f2:76:cc:00:eb:96:89:1b:bd: 68:e9:fc:19:15:4d:a2:93:54:4a:ae:5e:df:73:62:54:b2:26: 8d:13:e2:eb:0a:31:61:16:1d:ce:40:7f:1b:d5:1e:28:a1:ee: a9:62:29:2e:28:a0:9d:be:25:c2:92:e5:c4:1c:f1:44:f3:81: 40:7f:6e:a3:e9:1b:19:20:ec:b8:90:b9:4d:17:b9:37:d4:d9: c4:18:d8:87:c5:08:51:37:bb:ae:0e:5f:13:28:df:dd:3e:41: d1:52:75:7f:33:37:56:46:3f:34:e7:71:e2:a6:64:22:4b:97: b1:63:6c:97:0c:0c:ec:1b:af:a6:e0:95:58:d1:e8:99:cf:35: 05:4e:db:13:99:cd:d3:83:cf:05:51:2b:e0:d0:c5:31:e0:b1: 19:b0:b5:54:0c:09:f7:7d:c9:9f:32:92:be:92:94:7b:fa:d5: 08:63:d7:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwMzI4MjMzNTAwWhcNMjUwNDA0MjMzNTAwWjAYMRYwFAYD VQQDEw02N2U3MzIyNC05YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Na7LrSDu8I/Uc2ceujHSWmBDRjqxDIwKtHbaAeUFGjgg5ProqYKCWffcO8n 8GgjWK14wCVdjevrYl4HgR6VlnE/gOGc/NVi0v9P/Kz6GoFzYo18IfVLXoWJWzH2 IjQDN2D05f9AiT4QdQ7CEu9AISV8lWNuKy8pFuUSlOps4WzCPJLwDuzNjABPaJop 5NtiZvmxIvx4w7v4or0FoUsGPDjSTRrA/X68h/TnOIzu3xMAk3sBwOncZ9j+qpQF JGzriISGBbFtb4AF8hE/XjI0aHPYqLQs11/+L0JwDKRP3DYRTo24U9qHYL1noLEE 8jnIFd0Akz8ejElfoD/H5uBTWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcfThTv 7E42ZqCcKb38yPO8paB/MB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMKrk3+sXG4psaSQv4HYEw0bJjK3TEMxnGhJ8ZpgVeiED7RvO0DQ7G 08ZEqOLuwv9z3b3OQRYk9MvzDx6WLaYfDML9+MQFpGhlJnuyWDCw1AbydswA65aJ G71o6fwZFU2ik1RKrl7fc2JUsiaNE+LrCjFhFh3OQH8b1R4ooe6pYikuKKCdviXC kuXEHPFE84FAf26j6RsZIOy4kLlNF7k31NnEGNiHxQhRN7uuDl8TKN/dPkHRUnV/ MzdWRj8053HipmQiS5exY2yXDAzsG6+m4JVY0eiZzzUFTtsTmc3Tg88FUSvg0MUx 4LEZsLVUDAn3fcmfMpK+kpR7+tUIY9c7 -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:24 2025 by rpki-client