$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft File: Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft (raw, json) Hash identifier: phtrMfvQrZjZu5OQysnPT2lwNe6IEVyPBWP2Ud5+vnA= Subject key identifier: 84:D0:7D:4B:0F:D6:8D:03:A2:47:48:DA:84:72:64:7D:A7:3B:51:74 Authority key identifier: 5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73 Certificate issuer: /CN=A913B6D5/serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft Manifest number: 0670 Signing time: Sun 20 Apr 2025 21:57:45 +0000 Manifest this update: Sun 20 Apr 2025 21:57:44 +0000 Manifest next update: Sun 27 Apr 2025 21:57:44 +0000 Files and hashes: 1: Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl (hash: d+xKBCVE1Hf9WvzueMu7xw7ttSZVqqqb1ywLPRYuKW0=) 2: E2B81154741B11EB83EC7A62C4F9AE02.roa (hash: SfDbv1ydo+vznwdchu/VzafMX/NegNN92VChKBq/R3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 21:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B6D5, serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73 Validity Not Before: Apr 20 21:57:44 2025 GMT Not After : Apr 27 21:57:44 2025 GMT Subject: CN=68056dd9-7f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:39:a7:86:7c:fc:44:b0:4d:4e:ea:74:e5: 28:c6:46:7b:71:9e:86:73:f8:b5:f4:c4:54:4f:48: ba:60:a8:80:22:28:12:51:c1:65:1f:59:17:06:6e: 7e:d4:8a:df:ba:d8:f0:20:da:be:4b:dd:9d:4e:d6: 47:1d:d5:33:5d:87:5e:93:16:c7:a7:66:a3:79:6f: 0f:da:17:bd:ed:09:49:dd:c4:8b:a7:02:51:e1:5a: da:de:bb:ae:7e:83:c0:92:8f:ad:ae:f6:7e:8e:6c: 1b:b4:36:c3:97:f4:75:3b:82:3d:79:7d:d2:5b:c6: cb:01:59:20:d8:84:d7:c1:87:a3:65:ab:49:90:cb: 56:bc:57:63:46:92:e9:f5:aa:22:98:b2:3d:bf:d8: bc:38:ae:4b:68:6a:dd:a3:06:41:f3:fd:21:5a:6e: 55:e4:05:94:df:d9:9a:44:ee:8f:d5:9c:24:67:cb: 12:77:cf:42:ed:82:14:ec:1f:6f:3b:d3:25:ac:ef: 42:ec:64:ad:d0:96:f8:1a:41:cd:f8:e3:9f:5d:95: 21:f4:77:9a:81:c4:fd:6b:c4:10:e8:15:f4:74:46: 49:5f:17:d3:23:70:5c:07:27:9c:62:9e:c1:ab:13: 9b:d0:66:5a:cf:ee:1a:f2:04:7b:34:b7:93:37:65: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:7D:4B:0F:D6:8D:03:A2:47:48:DA:84:72:64:7D:A7:3B:51:74 X509v3 Authority Key Identifier: keyid:5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:5a:d5:6d:dc:98:d3:91:ac:f1:be:58:19:3f:dc:4f:38:66: 93:64:7b:18:aa:91:61:91:f3:79:1e:03:aa:2f:de:52:e1:2f: 11:bd:40:dd:3e:0e:21:f3:9a:e1:4d:1f:7b:dd:29:19:03:c0: 91:d8:37:54:9d:2d:72:2f:76:a4:d9:c9:5a:89:3a:c7:a9:3f: d2:ab:4c:16:69:3d:b1:62:b7:aa:ad:98:ca:9f:e5:f0:4c:7f: 93:45:11:39:d5:0b:98:9d:90:1a:be:24:48:62:14:30:30:e4: ec:11:05:34:16:98:2c:bf:26:6d:b9:c7:75:ff:d6:65:ea:a8: 36:84:15:7a:94:f7:c6:c7:e8:2d:95:55:c7:1e:25:33:61:c8: 06:75:d7:25:f4:04:a7:4f:3d:76:86:03:ce:9e:f9:10:0d:ef: 9a:96:d0:33:b7:40:b3:76:83:70:50:14:88:30:5f:74:ed:b7: 06:b6:3c:68:6b:dc:17:de:e2:93:87:38:34:b0:1f:b0:11:e8: 8b:83:d8:a7:0c:33:22:e2:51:70:25:61:8f:b8:25:36:81:dd: 3d:ce:48:59:93:a8:e8:57:02:23:a2:cd:52:b7:fd:d8:a1:5f: e9:7a:58:5e:4e:e5:db:16:f5:27:9c:35:1f:3b:7f:3f:1a:d5: 77:0f:16:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2RDUxMTAvBgNVBAUTKDVBQzk2NUU1MENGRUJCNTkxNDc5MzdEQzM0RDgxRkQz MDJCNkJBNzMwHhcNMjUwNDIwMjE1NzQ0WhcNMjUwNDI3MjE1NzQ0WjAYMRYwFAYD VQQDEw02ODA1NmRkOS03ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy85p4Z8/ESwTU7qdOUoxkZ7cZ6Gc/i19MRUT0i6YKiAIigSUcFlH1kXBm5+ 1IrfutjwINq+S92dTtZHHdUzXYdekxbHp2ajeW8P2he97QlJ3cSLpwJR4Vra3ruu foPAko+trvZ+jmwbtDbDl/R1O4I9eX3SW8bLAVkg2ITXwYejZatJkMtWvFdjRpLp 9aoimLI9v9i8OK5LaGrdowZB8/0hWm5V5AWU39maRO6P1ZwkZ8sSd89C7YIU7B9v O9MlrO9C7GSt0Jb4GkHN+OOfXZUh9HeagcT9a8QQ6BX0dEZJXxfTI3BcByecYp7B qxOb0GZaz+4a8gR7NLeTN2UBVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITQfUsP 1o0DokdI2oRyZH2nO1F0MB8GA1UdIwQYMBaAFFrJZeUM/rtZFHk33DTYH9MCtrpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjZENS9CQzRCRkI3Njc0 MUExMUVCQjg5NzRFNjJDNEY5QUUwMi9Xc2xsNVF6LXUxa1VlVGZjTk5nZjB3SzJ1 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzbGw1UXotdTFrVWVUZmNOTmdmMHdLMnVuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjZENS9CQzRCRkI3Njc0MUExMUVCQjg5NzRFNjJDNEY5QUUwMi9Xc2xsNVF6LXUx a1VlVGZjTk5nZjB3SzJ1bk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1WtVt3JjTkazxvlgZP9xPOGaTZHsYqpFhkfN5HgOqL95S4S8RvUDd Pg4h85rhTR973SkZA8CR2DdUnS1yL3ak2claiTrHqT/Sq0wWaT2xYreqrZjKn+Xw TH+TRRE51QuYnZAaviRIYhQwMOTsEQU0FpgsvyZtucd1/9Zl6qg2hBV6lPfGx+gt lVXHHiUzYcgGddcl9ASnTz12hgPOnvkQDe+altAzt0CzdoNwUBSIMF907bcGtjxo a9wX3uKThzg0sB+wEeiLg9inDDMi4lFwJWGPuCU2gd09zkhZk6joVwIjos1St/3Y oV/pelheTuXbFvUnnDUfO38/GtV3Dxb5 -----END CERTIFICATE-----Generated at Tue Apr 22 06:00:39 2025 by rpki-client