$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json) Hash identifier: xByg81hc9NMzvIWdVZAv8A1+VSRLd69uRbGKZb4sTrA= Subject key identifier: 7B:69:EB:1C:4C:A5:C2:04:69:E3:81:13:0C:02:A2:28:DF:65:B4:BB Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft Manifest number: E4 Signing time: Thu 03 Apr 2025 04:38:47 +0000 Manifest this update: Thu 03 Apr 2025 04:38:46 +0000 Manifest next update: Thu 10 Apr 2025 04:38:46 +0000 Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: OaJGOnDcFKl/dwBUJDckW0vuxgKYU+WawjC5VneFoT0=) 2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: CRo8pDS3QFFaAXTL+9qZM9K187fka63VWkrPnljCSFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B85B Validity Not Before: Apr 3 04:38:46 2025 GMT Not After : Apr 10 04:38:46 2025 GMT Subject: CN=67ee10d6-9742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:40:64:08:f3:de:9d:08:b3:ed:44:e0:fa: ea:17:ce:df:dc:49:20:ab:5e:b6:54:5b:2d:f0:ab: d7:b8:e6:c2:8f:0c:9c:b1:29:a4:a6:f6:97:fe:7e: b6:04:a7:0c:6a:b9:40:7f:0b:d3:f7:30:d0:ad:14: 0a:7a:48:f0:82:8e:a3:23:e6:df:5e:90:1e:7c:09: b5:db:03:20:10:95:cb:29:05:79:78:ca:93:ac:11: 16:bc:d4:d4:5b:55:20:ab:3e:8c:ec:36:a2:cf:74: e1:f6:e8:d4:23:fd:1b:8d:8c:e6:83:03:5f:71:88: 3b:ed:82:ac:d8:c9:3c:92:b3:3f:03:6f:b0:39:0e: 67:77:ea:50:a6:6e:9f:60:f3:85:2c:a1:dc:1c:58: cf:cf:78:a7:70:ca:88:52:ab:0d:54:ec:5c:8b:b6: c5:f2:06:37:22:be:db:96:9e:98:e2:76:50:9e:3a: bf:d9:0f:e5:fb:7a:9b:0b:42:40:30:16:53:5a:8c: ff:64:a4:c8:b1:37:b8:07:02:12:56:63:75:e4:c0: 07:84:f7:8c:d3:a1:47:7c:37:4d:48:93:c6:87:26: 0c:58:1b:03:7e:10:ad:19:c3:58:48:98:77:2e:af: 56:58:4f:9a:0a:5e:65:25:ab:24:e0:88:38:09:59: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:69:EB:1C:4C:A5:C2:04:69:E3:81:13:0C:02:A2:28:DF:65:B4:BB X509v3 Authority Key Identifier: keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f3:5c:93:69:27:89:95:0e:42:cf:df:64:57:c5:95:76:75: bb:b4:9f:6e:39:b2:cd:43:df:73:ec:00:7f:28:2d:34:27:8b: 50:c0:99:1c:87:7b:dc:a7:3d:ef:78:0f:78:10:71:c6:49:0f: 2e:6c:91:c5:79:2f:8a:38:9e:41:3c:ff:47:61:87:8c:ed:b2: d7:fa:af:bc:d3:6d:16:82:3d:0e:15:b9:e8:a4:2c:65:a5:d1: a4:84:6d:7c:16:3e:3b:30:c4:bb:31:a1:c9:cf:dd:66:19:33: 58:12:a1:cb:49:b1:6a:df:57:29:f8:48:f4:fe:99:f8:28:1c: 68:37:f9:14:19:9d:6b:63:7f:7d:c4:c1:ef:f6:35:bf:47:1a: 80:89:c1:74:36:df:f1:f6:84:d4:56:34:7b:e7:44:d3:b6:31: c8:21:04:56:80:27:78:e9:52:f3:a1:d3:ad:64:07:ab:e2:bc: c3:6b:9c:ff:85:25:9c:21:24:f9:e6:ed:ac:b6:cc:92:b1:d2: b6:a6:b3:ab:e4:c4:ee:1d:46:95:ce:e9:91:15:f9:d0:13:5f: bc:49:06:6a:89:db:9e:84:bb:de:17:d3:8d:71:f0:31:23:8e: b0:cd:ae:9a:b6:b6:a2:3d:9e:18:93:b1:24:e8:4b:25:50:52: 1b:08:26:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI4NUIxMTAvBgNVBAUTKEMyNzVGN0I4QUVDQzI5NDhENEI0QkE5OTlGQTlDMEUy QUQ1NEVBNTkwHhcNMjUwNDAzMDQzODQ2WhcNMjUwNDEwMDQzODQ2WjAYMRYwFAYD VQQDEw02N2VlMTBkNi05NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJxAZAjz3p0Is+1E4PrqF87f3Ekgq162VFst8KvXuObCjwycsSmkpvaX/n62 BKcMarlAfwvT9zDQrRQKekjwgo6jI+bfXpAefAm12wMgEJXLKQV5eMqTrBEWvNTU W1Ugqz6M7Daiz3Th9ujUI/0bjYzmgwNfcYg77YKs2Mk8krM/A2+wOQ5nd+pQpm6f YPOFLKHcHFjPz3incMqIUqsNVOxci7bF8gY3Ir7blp6Y4nZQnjq/2Q/l+3qbC0JA MBZTWoz/ZKTIsTe4BwISVmN15MAHhPeM06FHfDdNSJPGhyYMWBsDfhCtGcNYSJh3 Lq9WWE+aCl5lJask4Ig4CVlShQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtp6xxM pcIEaeOBEwwCoijfZbS7MB8GA1UdIwQYMBaAFMJ197iuzClI1LS6mZ+pwOKtVOpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjg1Qi8yMDQ3RDc0NkI0 QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtValV0THFabjZuQTRxMVU2 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjg1Qi8yMDQ3RDc0NkI0QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtV alV0THFabjZuQTRxMVU2bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe81yTaSeJlQ5Cz99kV8WVdnW7tJ9uObLNQ99z7AB/KC00J4tQwJkc h3vcpz3veA94EHHGSQ8ubJHFeS+KOJ5BPP9HYYeM7bLX+q+8020Wgj0OFbnopCxl pdGkhG18Fj47MMS7MaHJz91mGTNYEqHLSbFq31cp+Ej0/pn4KBxoN/kUGZ1rY399 xMHv9jW/RxqAicF0Nt/x9oTUVjR750TTtjHIIQRWgCd46VLzodOtZAer4rzDa5z/ hSWcIST55u2stsySsdK2prOr5MTuHUaVzumRFfnQE1+8SQZqiduehLveF9ONcfAx I46wza6atraiPZ4Yk7Ek6EslUFIbCCYh -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:10 2025 by rpki-client