$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft File: WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json) Hash identifier: OgFRibbdLL5cpnBMt0FJueA599IMo5k4KB23YwD254o= Subject key identifier: 4D:4B:6C:41:EF:7D:0A:57:63:CD:B0:67:67:36:E7:F5:BB:F7:60:B5 Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 Certificate issuer: /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft Manifest number: 4D Signing time: Wed 09 Apr 2025 06:09:43 +0000 Manifest this update: Wed 09 Apr 2025 06:09:43 +0000 Manifest next update: Wed 16 Apr 2025 06:09:43 +0000 Files and hashes: 1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: LCJJyb1P92y+AmBgmmi0GU35On+l+642OeqJ/oz6VJA=) 2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: xTT8Qi7eRLtjGj1MJV5lOZ1nPkMc9OMOKapYnFfPneA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C4FD Validity Not Before: Apr 9 06:09:43 2025 GMT Not After : Apr 16 06:09:43 2025 GMT Subject: CN=67f60f27-2c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:04:96:88:2e:ba:c0:50:d8:65:f5:53:3f: 01:1f:f3:19:87:8c:64:7c:08:f1:a3:7d:d3:ea:47: 5f:dd:53:b8:75:2d:98:d4:07:37:6e:69:b5:84:51: 40:ba:53:df:55:02:8f:00:ba:e5:35:cb:d6:61:db: 77:3d:a8:5b:43:01:49:ab:98:0f:d0:bd:bc:cd:39: f0:2c:5c:1b:99:09:32:89:06:ab:fb:41:91:10:fc: da:60:03:b8:bc:81:30:6c:f8:eb:03:d4:66:b7:2f: 8e:19:c2:2d:15:4f:54:69:b7:ef:b3:fb:11:46:bc: 18:ed:87:25:30:7f:a8:9a:dd:15:d0:dd:de:5a:8e: c9:60:9f:5b:99:6c:b8:97:8d:47:72:61:38:a5:a7: 27:ab:bf:91:58:78:49:17:4c:1d:5e:e4:83:b1:c3: 5a:12:47:be:32:90:9a:68:0a:b8:2a:ad:29:a3:cd: 01:87:93:d4:82:72:43:f2:df:40:03:c3:cd:0a:79: 0d:51:f2:05:af:b0:5e:79:92:64:da:f1:1a:1e:43: b8:40:c9:f7:17:ea:7d:9e:2b:47:c0:b4:7d:fe:a6: d2:a9:a0:b6:3b:1a:5d:4c:52:59:38:10:ba:eb:f2: e0:d0:80:14:29:d4:85:73:a0:6c:14:cb:22:1e:4b: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4B:6C:41:EF:7D:0A:57:63:CD:B0:67:67:36:E7:F5:BB:F7:60:B5 X509v3 Authority Key Identifier: keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:14:7e:51:ce:b6:69:d6:56:19:a2:d2:e9:e3:c0:b2:44: 0b:22:f7:e4:15:34:61:ab:4c:03:83:11:b0:e4:8e:76:96:cc: 25:73:c2:27:a5:d5:03:7c:63:62:e0:40:ea:21:70:b8:58:64: 93:78:1f:cb:f8:c8:d2:7e:06:12:91:46:67:8c:8e:da:66:82: e0:c1:c0:75:aa:a8:67:f8:80:8b:51:9b:a8:74:1b:db:d3:16: e9:7b:b5:f0:f5:5d:63:75:63:f7:f2:89:2f:82:94:f0:19:bf: c7:f9:db:7f:e9:ec:c5:de:e3:dd:54:9c:08:e6:78:01:fd:c7: b4:80:d0:5a:49:a8:2d:5b:33:d0:cd:b3:07:df:aa:16:d1:43: 71:24:3c:85:77:37:58:2e:89:29:b2:e2:58:bf:74:22:6e:e8: 96:6c:50:43:98:17:fe:0b:8b:fc:3c:5e:9e:c8:52:81:54:99: e7:df:fa:0a:88:c0:42:f4:cf:0b:6b:bb:7a:8f:c9:e4:6c:83: 58:3b:6e:ff:3c:1a:60:e7:05:8c:2b:1e:cf:64:0a:14:69:63: 51:9f:b0:fb:86:84:2f:e2:9f:29:6a:88:fd:6d:9b:40:19:7a: 51:94:be:0d:ef:a2:e4:17:08:6e:5c:36:13:5d:9d:4f:51:61: f4:99:e3:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzRGRDExMC8GA1UEBRMoNTk5MEY0QzNCQjIzNDM2Qzk1MTAwQjQ4NDhEQzkxODZB QTQ5NTMxOTAeFw0yNTA0MDkwNjA5NDNaFw0yNTA0MTYwNjA5NDNaMBgxFjAUBgNV BAMTDTY3ZjYwZjI3LTJjN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaQASWiC66wFDYZfVTPwEf8xmHjGR8CPGjfdPqR1/dU7h1LZjUBzduabWEUUC6 U99VAo8AuuU1y9Zh23c9qFtDAUmrmA/QvbzNOfAsXBuZCTKJBqv7QZEQ/NpgA7i8 gTBs+OsD1Ga3L44Zwi0VT1Rpt++z+xFGvBjthyUwf6ia3RXQ3d5ajslgn1uZbLiX jUdyYTilpyerv5FYeEkXTB1e5IOxw1oSR74ykJpoCrgqrSmjzQGHk9SCckPy30AD w80KeQ1R8gWvsF55kmTa8RoeQ7hAyfcX6n2eK0fAtH3+ptKpoLY7Gl1MUlk4ELrr 8uDQgBQp1IVzoGwUyyIeSxDtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTUtsQe99 CldjzbBnZzbn9bv3YLUwHwYDVR0jBBgwFoAUWZD0w7sjQ2yVEAtISNyRhqpJUxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDNEZEL0E1N0NBQkVDQTU1 NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5VkVBdElTTnlSaHFwSlV4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV1pEMHc3c2pRMnlWRUF0SVNOeVJocXBKVXhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND NEZEL0E1N0NBQkVDQTU1NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5 VkVBdElTTnlSaHFwSlV4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIXHFH5RzrZp1lYZotLp48CyRAsi9+QVNGGrTAODEbDkjnaWzCVzwiel 1QN8Y2LgQOohcLhYZJN4H8v4yNJ+BhKRRmeMjtpmguDBwHWqqGf4gItRm6h0G9vT Ful7tfD1XWN1Y/fyiS+ClPAZv8f523/p7MXe491UnAjmeAH9x7SA0FpJqC1bM9DN swffqhbRQ3EkPIV3N1guiSmy4li/dCJu6JZsUEOYF/4Li/w8Xp7IUoFUmeff+gqI wEL0zwtru3qPyeRsg1g7bv88GmDnBYwrHs9kChRpY1GfsPuGhC/inylqiP1tm0AZ elGUvg3vouQXCG5cNhNdnU9RYfSZ4/0= -----END CERTIFICATE-----Generated at Fri Apr 11 16:29:20 2025 by rpki-client