$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: au5WmT+pPNiu8bn9/JqXcprzfADMCIINTOIdtKvg/58= Subject key identifier: E8:B7:40:C0:EF:7E:7E:6B:73:70:B9:A8:AE:22:E9:50:6F:97:F9:91 Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: F0 Signing time: Sat 05 Apr 2025 04:42:37 +0000 Manifest this update: Sat 05 Apr 2025 04:42:37 +0000 Manifest next update: Sat 12 Apr 2025 04:42:37 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: GkpLUFins+G6RFWSHpM7UNoJjarKtIE6pkdW1NTS4+c=) 2: D2A0E6FEE3C811EE900A6909C4F9AE02.roa (hash: 2zn27eCFMcBRueo5/57eJ3HR3hmLxhfb2Fa4MJKbG4M=) 3: EAEFF196E3C811EE8818A409C4F9AE02.roa (hash: ezjLKJRXRac8xcRH9uTO+dGIc1KG4Hx+liqGMCZmuFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4 Validity Not Before: Apr 5 04:42:37 2025 GMT Not After : Apr 12 04:42:37 2025 GMT Subject: CN=67f0b4bd-0a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:fe:58:3c:5a:40:db:58:2f:64:27:b7:d6: c6:ad:22:85:d2:8d:3f:5f:10:d8:6b:ce:4c:ce:79: d1:c2:85:f5:c9:87:d6:4c:a4:dd:b4:a3:57:3d:de: d7:4f:8a:c4:23:97:d8:96:e1:2f:e9:09:0e:d3:ca: 1c:d7:d5:37:9e:66:25:51:c8:f8:09:5c:79:bb:17: e0:02:1f:6b:0c:3a:04:97:4c:b0:12:22:63:23:0b: c8:04:4e:1a:df:da:b4:0d:82:37:89:42:1d:cb:8e: b2:ba:a0:fc:66:dd:e0:cc:a6:d5:a9:cc:82:2d:f1: 12:59:a9:c0:53:fa:93:86:5b:f3:f3:51:14:4c:47: c8:b7:95:4a:6e:c6:a5:8b:f2:ac:29:ed:9a:20:a1: 9a:79:6f:c5:19:82:35:fd:0e:4d:37:da:f5:c9:28: 86:60:0f:ae:31:ea:ad:ea:56:0e:dc:27:7a:8a:15: a6:8e:2d:6f:0f:94:2f:cb:c5:ac:4c:8b:10:38:b6: af:22:56:cd:70:01:03:af:3b:b0:5c:e1:2c:77:01: ef:cc:5e:69:38:a1:f4:81:7b:f2:9a:22:30:2a:e8: f3:d3:16:5a:7f:98:e3:80:7c:49:14:55:70:7b:4f: 06:cd:c7:00:4c:73:65:9d:d6:77:f9:6f:82:ee:bb: 91:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B7:40:C0:EF:7E:7E:6B:73:70:B9:A8:AE:22:E9:50:6F:97:F9:91 X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:58:76:ac:e9:16:fb:a0:de:5d:8c:0a:2e:d6:6f:b9:4c:c1: c0:a6:39:5b:7d:00:98:d6:12:5d:b1:5e:80:c6:e8:6a:d4:a0: 3d:0c:3b:d8:89:34:21:95:aa:dc:01:bc:62:3a:82:3b:fa:86: d2:06:07:31:ad:bf:38:0a:34:82:11:49:01:44:e8:15:bf:fd: 91:05:de:05:3e:12:25:8f:ab:86:9a:00:59:c8:69:6e:c3:b1: b7:2f:a5:d3:b8:d8:73:d7:5e:77:f7:22:fb:c4:f0:5b:6a:d7: d7:97:0d:7c:42:89:fe:89:3f:bd:f9:72:42:a2:a4:02:06:b1: ae:c5:ac:1c:b5:81:c1:cf:18:3c:f3:64:20:de:e9:89:02:24: e2:c8:83:a3:9c:db:05:cc:c1:9b:79:cc:d3:20:a1:da:f4:2d: 27:eb:69:67:89:3f:b5:a6:1f:b1:51:17:14:21:da:b2:9e:48: e7:d8:9e:22:c8:9b:90:d2:2d:73:49:8b:17:2b:e3:02:d5:8b: f2:1a:19:f5:8b:05:57:b5:6e:23:53:86:de:59:25:f6:0e:26: eb:e0:72:59:55:11:4e:a1:b7:b6:d4:ed:0e:2c:21:49:47:4c: 72:a1:30:db:b4:aa:de:ed:d8:31:9a:1a:dc:fa:c1:e8:00:f2: 40:dd:e8:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjUwNDA1MDQ0MjM3WhcNMjUwNDEyMDQ0MjM3WjAYMRYwFAYD VQQDEw02N2YwYjRiZC0wYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aD+WDxaQNtYL2Qnt9bGrSKF0o0/XxDYa85MznnRwoX1yYfWTKTdtKNXPd7X T4rEI5fYluEv6QkO08oc19U3nmYlUcj4CVx5uxfgAh9rDDoEl0ywEiJjIwvIBE4a 39q0DYI3iUIdy46yuqD8Zt3gzKbVqcyCLfESWanAU/qThlvz81EUTEfIt5VKbsal i/KsKe2aIKGaeW/FGYI1/Q5NN9r1ySiGYA+uMeqt6lYO3Cd6ihWmji1vD5Qvy8Ws TIsQOLavIlbNcAEDrzuwXOEsdwHvzF5pOKH0gXvymiIwKujz0xZaf5jjgHxJFFVw e08GzccATHNlndZ3+W+C7ruRxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOi3QMDv fn5rc3C5qK4i6VBvl/mRMB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADWHas6Rb7oN5djAou1m+5TMHApjlbfQCY1hJdsV6Axuhq1KA9DDvY iTQhlarcAbxiOoI7+obSBgcxrb84CjSCEUkBROgVv/2RBd4FPhIlj6uGmgBZyGlu w7G3L6XTuNhz11539yL7xPBbatfXlw18Qon+iT+9+XJCoqQCBrGuxawctYHBzxg8 82Qg3umJAiTiyIOjnNsFzMGbeczTIKHa9C0n62lniT+1ph+xURcUIdqynkjn2J4i yJuQ0i1zSYsXK+MC1YvyGhn1iwVXtW4jU4beWSX2Dibr4HJZVRFOobe21O0OLCFJ R0xyoTDbtKre7dgxmhrc+sHoAPJA3eji -----END CERTIFICATE-----Generated at Sat Apr 5 15:15:09 2025 by rpki-client