$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft File: WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json) Hash identifier: ktu7UoG0BQTTTGCueglOC43bWWZLoc0YA18zTDqpSTw= Subject key identifier: 8D:CE:45:C3:F5:A8:83:27:71:02:F5:3F:B1:7B:47:8E:ED:98:B0:46 Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft Manifest number: 01AD Signing time: Sat 05 Apr 2025 02:53:08 +0000 Manifest this update: Sat 05 Apr 2025 02:53:08 +0000 Manifest next update: Sat 12 Apr 2025 02:53:08 +0000 Files and hashes: 1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: pvXp66SrgRziYFy9NCT64PvqfTFgSlrxPS6JqLdt5fw=) 2: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (hash: NtempH4sH10J4xA32EJi0/pMUNSLL5Y5TyDjBhb9q5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D65B Validity Not Before: Apr 5 02:53:08 2025 GMT Not After : Apr 12 02:53:08 2025 GMT Subject: CN=67f09b14-e2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:1e:78:94:3b:ab:1c:1d:c6:54:4b:73:4f: 5d:d8:f9:6e:83:f6:6d:73:fc:d5:d1:0e:4a:f3:0c: 53:c9:ee:78:ba:54:31:3a:07:d3:32:6d:77:e5:47: 6d:62:21:b7:6b:80:80:75:bb:29:fe:eb:e7:fd:07: ed:a0:b5:60:f4:58:3f:be:2c:08:01:d9:cc:c0:df: 45:29:52:c7:db:86:69:20:9a:cf:fb:c2:e4:e3:92: b7:72:3d:a4:c8:5c:91:aa:24:f7:57:08:dd:9d:36: c9:97:86:25:15:08:c9:2d:fa:07:41:e8:df:97:67: 9f:da:15:5f:98:f2:b7:42:38:54:71:8f:37:77:7e: 13:a0:4a:17:d1:a9:75:17:47:3b:ed:ea:82:35:ce: e7:08:22:98:6d:5c:b8:a4:c7:e9:da:01:c2:80:12: fb:44:4a:16:50:66:f5:7e:6c:dd:95:da:87:20:75: d0:94:0e:5a:3f:ba:c6:9e:02:ba:49:8e:00:a5:8b: 51:5e:34:df:e9:47:10:d7:92:81:d7:d1:5d:47:d5: 85:cb:98:57:89:98:ab:a2:aa:e5:35:ed:ef:15:f1: cc:74:bd:bf:20:4a:f0:81:9f:71:fc:75:a3:85:ff: c9:ed:84:75:b4:0b:07:39:3b:08:c7:15:c1:a1:19: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CE:45:C3:F5:A8:83:27:71:02:F5:3F:B1:7B:47:8E:ED:98:B0:46 X509v3 Authority Key Identifier: keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ec:1c:8a:1b:bc:40:1c:84:a4:ba:e6:a6:8e:7b:e6:67:c4: 6f:8f:96:28:14:99:c7:dc:f9:b4:ea:48:17:37:93:9a:ec:e8: 1e:44:ed:c9:a4:06:21:a4:d5:86:b7:1f:e0:74:44:1d:e4:7d: 15:77:67:d1:fe:52:4a:61:fb:ef:a7:fd:71:a1:09:a5:8f:63: d4:98:5e:32:bd:a6:91:95:9f:97:e0:3a:17:bb:39:aa:9a:d1: 6b:3b:b1:c0:35:f2:f4:41:68:37:48:86:1e:e5:68:bd:a4:56: b0:c6:74:de:f3:e7:ca:70:29:5d:98:7b:33:6d:f4:de:dd:00: ae:39:3d:32:c0:75:f6:a0:31:75:bd:a5:0d:a9:44:31:e5:0e: dc:cb:3d:07:a9:70:45:55:5d:fb:a4:22:31:ba:81:69:82:82: 85:3a:be:36:7c:de:d7:ea:e0:dd:db:3d:08:21:ec:30:64:7f: 0c:a0:e9:55:58:f2:e5:f0:0b:d6:e8:f3:16:99:d0:18:17:63: bd:0e:58:d7:92:70:63:a1:cd:66:e7:ce:ce:9b:bc:e7:b1:87: d1:39:a0:78:80:e7:23:de:51:19:6c:8a:6c:58:7b:a0:5e:37: 53:fe:2d:0f:63:70:21:1c:71:ce:2c:ba:6e:e6:ee:54:bd:4f: 9e:11:76:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NUIxMTAvBgNVBAUTKDU4MTMzMkY1RDNFQjg4MkE1QzI1MkZERkQ5ODBCNjBB MUEzNzhFNDEwHhcNMjUwNDA1MDI1MzA4WhcNMjUwNDEyMDI1MzA4WjAYMRYwFAYD VQQDEw02N2YwOWIxNC1lMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoIeeJQ7qxwdxlRLc09d2Plug/Ztc/zV0Q5K8wxTye54ulQxOgfTMm135Udt YiG3a4CAdbsp/uvn/QftoLVg9Fg/viwIAdnMwN9FKVLH24ZpIJrP+8Lk45K3cj2k yFyRqiT3VwjdnTbJl4YlFQjJLfoHQejfl2ef2hVfmPK3QjhUcY83d34ToEoX0al1 F0c77eqCNc7nCCKYbVy4pMfp2gHCgBL7REoWUGb1fmzdldqHIHXQlA5aP7rGngK6 SY4ApYtRXjTf6UcQ15KB19FdR9WFy5hXiZiroqrlNe3vFfHMdL2/IErwgZ9x/HWj hf/J7YR1tAsHOTsIxxXBoRmc+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3ORcP1 qIMncQL1P7F7R47tmLBGMB8GA1UdIwQYMBaAFFgTMvXT64gqXCUv39mAtgoaN45B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Qi9DRjRDRjEzQUE1 RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlDcGNKU19mMllDMkNobzNq a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2prRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Qi9DRjRDRjEzQUE1RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlD cGNKU19mMllDMkNobzNqa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx7ByKG7xAHISkuuamjnvmZ8Rvj5YoFJnH3Pm06kgXN5Oa7OgeRO3J pAYhpNWGtx/gdEQd5H0Vd2fR/lJKYfvvp/1xoQmlj2PUmF4yvaaRlZ+X4DoXuzmq mtFrO7HANfL0QWg3SIYe5Wi9pFawxnTe8+fKcCldmHszbfTe3QCuOT0ywHX2oDF1 vaUNqUQx5Q7cyz0HqXBFVV37pCIxuoFpgoKFOr42fN7X6uDd2z0IIewwZH8MoOlV WPLl8AvW6PMWmdAYF2O9DljXknBjoc1m587Om7znsYfROaB4gOcj3lEZbIpsWHug XjdT/i0PY3AhHHHOLLpu5u5UvU+eEXaC -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:13 2025 by rpki-client