$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft File: wapc5S4RUztkHjtoWrMjxGl2pAE.mft (raw, json) Hash identifier: sm23S3kIEkncu1KhraOiwLKMbttZleR7hUKpii65uQA= Subject key identifier: 8E:61:EB:09:83:41:E3:64:32:45:51:75:AD:80:00:67:8C:77:A7:57 Authority key identifier: C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 Certificate issuer: /CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Certificate serial: 1946 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft Manifest number: 1935 Signing time: Sat 12 Apr 2025 16:21:42 +0000 Manifest this update: Sat 12 Apr 2025 16:21:42 +0000 Manifest next update: Sat 19 Apr 2025 16:21:42 +0000 Files and hashes: 1: wapc5S4RUztkHjtoWrMjxGl2pAE.crl (hash: GIzcDquePoDjEzEcnhZVxgFwnm1MOfgD6ZlVcq1BdbM=) 2: 0E01F66437F511EEA737AD17C4F9AE02.roa (hash: 4h9/gedAkyFkLOFX95sZ0gtcQY54jVFNaMdtuEQXK5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 16:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6470 (0x1946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ACC3, serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Validity Not Before: Apr 12 16:21:42 2025 GMT Not After : Apr 19 16:21:42 2025 GMT Subject: CN=67fa9316-8a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:0b:c8:23:30:1c:10:ef:5b:49:4f:1a:b4: bd:ac:aa:e8:7d:55:cf:ad:7f:1b:56:fe:9f:ad:65: d8:77:e2:c7:70:aa:d9:69:aa:80:82:d9:6e:ba:11: 17:e9:14:0a:3a:2e:71:09:cd:1d:f6:95:ae:d3:93: 75:4b:52:7e:07:fd:72:23:bd:21:59:8e:31:c6:0e: c4:9c:30:7c:be:b1:c0:2d:d4:97:46:07:bd:c8:7c: 9f:cc:8a:c5:68:a7:30:c7:fc:d1:b2:44:e5:af:27: ee:4a:a0:32:91:7f:24:b5:c2:6f:0f:b9:43:a3:31: 7a:04:96:d4:b7:82:3f:1e:4b:fe:5e:81:29:c1:f2: 11:7d:09:17:f9:48:79:ef:58:97:5c:2c:19:22:8d: 49:d1:dd:d6:ad:3e:f1:ff:8a:fa:2c:46:74:ee:68: 00:df:fe:db:32:d4:8e:2f:e4:40:e1:bc:4c:b6:de: 9f:02:df:58:a3:73:e0:59:03:0f:eb:d5:24:4a:bc: 5b:9b:5b:4b:49:9b:c8:c4:40:97:eb:34:95:77:f5: 39:c8:54:88:72:73:e4:26:60:e1:42:76:fc:40:5f: 3b:29:20:4e:a3:f3:8a:94:30:72:d1:a6:11:47:97: 29:f5:1a:7b:4e:24:ac:d6:d3:93:fb:39:df:08:77: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:61:EB:09:83:41:E3:64:32:45:51:75:AD:80:00:67:8C:77:A7:57 X509v3 Authority Key Identifier: keyid:C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:7e:0d:93:28:b5:6a:2d:b6:f4:28:0b:e0:f5:14:5b:0c:4f: 39:c5:90:83:bd:1f:7d:9c:32:79:31:fe:81:ac:8c:dd:ea:16: af:9b:9b:66:9a:6d:62:ea:6a:21:43:10:77:44:23:e4:0c:24: d9:14:f7:2c:8b:ce:27:bb:99:86:7c:d6:e7:d0:f0:08:af:f1: 29:be:f0:82:fb:64:17:1e:2d:eb:4a:87:b3:73:3f:66:67:27: 55:45:f3:75:80:ac:9b:6c:91:b9:9b:da:0d:2c:28:11:e9:8d: 5a:9f:55:99:f4:c1:7b:de:f5:83:9e:62:5a:d8:c8:6e:64:e8: af:aa:42:72:2a:f8:82:ff:a4:66:60:55:f6:ba:9e:b5:e9:40: db:e9:1b:9b:67:15:fb:f2:dc:08:13:a0:2d:67:73:d7:af:01: 9f:90:9c:18:96:19:d3:c1:d7:c1:f8:d1:56:6c:63:46:f4:b7: cd:45:ac:d9:fb:38:e5:24:3c:82:ad:43:5c:64:db:3a:b7:d6: b0:e1:af:47:54:74:83:80:5a:58:d8:b7:d8:e2:85:48:be:1d: b2:08:07:db:21:2e:6e:3c:ea:ae:ae:2e:56:40:ed:b5:27:e8: 28:b9:55:ab:ea:62:93:2b:bc:10:5d:a6:c3:7c:7d:0a:59:5a: 42:24:67:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDQzMxMTAvBgNVBAUTKEMxQUE1Q0U1MkUxMTUzM0I2NDFFM0I2ODVBQjMyM0M0 Njk3NkE0MDEwHhcNMjUwNDEyMTYyMTQyWhcNMjUwNDE5MTYyMTQyWjAYMRYwFAYD VQQDEw02N2ZhOTMxNi04YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcELyCMwHBDvW0lPGrS9rKrofVXPrX8bVv6frWXYd+LHcKrZaaqAgtluuhEX 6RQKOi5xCc0d9pWu05N1S1J+B/1yI70hWY4xxg7EnDB8vrHALdSXRge9yHyfzIrF aKcwx/zRskTlryfuSqAykX8ktcJvD7lDozF6BJbUt4I/Hkv+XoEpwfIRfQkX+Uh5 71iXXCwZIo1J0d3WrT7x/4r6LEZ07mgA3/7bMtSOL+RA4bxMtt6fAt9Yo3PgWQMP 69UkSrxbm1tLSZvIxECX6zSVd/U5yFSIcnPkJmDhQnb8QF87KSBOo/OKlDBy0aYR R5cp9Rp7TiSs1tOT+znfCHdiJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5h6wmD QeNkMkVRda2AAGeMd6dXMB8GA1UdIwQYMBaAFMGqXOUuEVM7ZB47aFqzI8RpdqQB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUNDMy9ENEY0QjQ4ODc3 RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6dGtIanRvV3JNanhHbDJw QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhcGM1UzRSVXp0a0hqdG9Xck1qeEdsMnBBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUNDMy9ENEY0QjQ4ODc3RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6 dGtIanRvV3JNanhHbDJwQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1fg2TKLVqLbb0KAvg9RRbDE85xZCDvR99nDJ5Mf6BrIzd6havm5tm mm1i6mohQxB3RCPkDCTZFPcsi84nu5mGfNbn0PAIr/EpvvCC+2QXHi3rSoezcz9m ZydVRfN1gKybbJG5m9oNLCgR6Y1an1WZ9MF73vWDnmJa2MhuZOivqkJyKviC/6Rm YFX2up616UDb6RubZxX78twIE6AtZ3PXrwGfkJwYlhnTwdfB+NFWbGNG9LfNRazZ +zjlJDyCrUNcZNs6t9aw4a9HVHSDgFpY2LfY4oVIvh2yCAfbIS5uPOquri5WQO21 J+gouVWr6mKTK7wQXabDfH0KWVpCJGef -----END CERTIFICATE-----Generated at Sun Apr 13 02:37:26 2025 by rpki-client