$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft File: wcRvxKcZaeWFBKc01JBKe9L_BUM.mft (raw, json) Hash identifier: ZR3thSxi4ZNAaPcpnlAY6ollSsvcdDTWADKIbr3hoc4= Subject key identifier: 94:AB:3D:A3:6C:41:8B:05:45:05:98:89:55:45:89:8B:57:07:ED:E7 Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43 Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543 Certificate serial: 25EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft Manifest number: 25DE Signing time: Fri 04 Apr 2025 15:45:17 +0000 Manifest this update: Fri 04 Apr 2025 15:45:17 +0000 Manifest next update: Fri 11 Apr 2025 15:45:17 +0000 Files and hashes: 1: wcRvxKcZaeWFBKc01JBKe9L_BUM.crl (hash: Zy2yxVXkXvaXHaiG8IfscQbxWGqndKFJxRhOH+c5wjE=) 2: ACDC884E1C1511EF93C5F728C4F9AE02.roa (hash: thDNYeVNXoV/Cx4Him9K7gBe071N+a3q0Oy01hD4n04=) 3: 665C2DFC1C1511EFB1AF8F28C4F9AE02.roa (hash: fwQeTVurB+Fy8cbxpFo5uSylEEcB+icgV21PTKUqveQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9711 (0x25ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E32A Validity Not Before: Apr 4 15:45:17 2025 GMT Not After : Apr 11 15:45:17 2025 GMT Subject: CN=67effe8d-f55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:2f:39:e9:fd:fb:f1:3a:11:86:65:f3:d8: 64:47:c4:ef:c5:bd:6f:d4:cd:59:b5:06:f9:9c:e3: 47:b7:ea:88:02:cc:bf:21:1f:d9:65:7b:35:6b:2c: 48:42:38:ad:7f:50:23:04:4c:f4:cf:98:a3:e1:f1: cb:4c:a3:02:8f:c3:f9:42:8b:38:c6:f5:9e:d3:48: bc:dc:5c:ff:d0:f5:35:55:ce:5c:26:68:a9:01:45: e5:a3:c1:a0:2e:c0:a4:d5:e9:76:73:cc:e6:f9:f9: 04:97:04:c4:79:ba:f2:fb:bb:e7:79:20:49:4d:15: 1c:84:32:2e:54:8f:88:16:63:36:7b:69:d5:da:af: 06:4b:83:7b:61:c0:6b:37:74:47:ae:98:8a:66:19: 5b:fc:e5:5f:b1:e7:4c:43:39:3a:12:40:26:ea:e4: 91:c0:7f:6f:eb:d1:cd:2d:a0:f1:21:04:67:f8:bc: 06:65:86:2d:2b:93:1c:f4:f9:7d:8f:1a:07:e7:50: 7c:8c:41:bc:14:66:ba:6d:c8:3a:e2:3a:f2:df:7d: 02:5e:65:7d:79:d2:0d:ce:9c:a7:e6:dd:53:36:3f: 84:e2:b6:63:d0:aa:35:8e:41:86:bb:88:67:12:3f: 5e:ec:4f:23:60:08:d3:e8:d7:ef:93:d2:c3:60:3e: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AB:3D:A3:6C:41:8B:05:45:05:98:89:55:45:89:8B:57:07:ED:E7 X509v3 Authority Key Identifier: keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5c:aa:73:c8:95:08:b3:d6:e8:a4:53:d4:21:32:95:50:2c: 57:d5:e6:74:a7:12:fb:ef:00:36:30:07:96:2f:cf:f6:f3:9f: 8b:2f:06:09:3c:ee:59:0a:75:5c:4f:c3:65:f9:ab:0b:78:30: 60:8b:03:ca:39:63:34:61:cd:78:a4:23:62:8e:1c:64:95:5e: d1:0f:fc:7b:f8:f4:15:66:a6:df:62:20:cf:5a:0e:1e:bc:3c: 72:99:04:8a:00:4d:f4:37:46:bc:ce:89:91:36:50:de:81:8e: d4:d3:85:3d:f8:a3:a1:9b:a9:a7:68:0c:47:34:3d:cf:ec:a5: e2:1d:e2:14:06:77:38:8d:f1:3c:35:97:df:81:2a:c5:11:78: c0:f1:81:5a:f9:7d:be:27:4e:9a:b9:2f:41:f4:93:f3:39:1c: 68:c3:d7:3c:fd:c2:7b:d5:43:d4:ee:34:a1:8f:57:ee:9c:6a: 5a:d5:dc:bb:a9:45:03:1c:26:e2:4b:75:56:77:07:40:e3:1f: 5e:06:6d:20:57:ba:9c:b9:9d:63:3a:f1:41:e6:b2:22:79:63: f9:63:d2:3d:b4:90:26:80:d0:18:67:11:a3:8b:bf:66:24:99: 87:b4:eb:5f:e9:35:1b:7c:7f:12:09:0f:d1:b7:6f:41:f2:98: 92:10:8d:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzMkExMTAvBgNVBAUTKEMxQzQ2RkM0QTcxOTY5RTU4NTA0QTczNEQ0OTA0QTdC RDJGRjA1NDMwHhcNMjUwNDA0MTU0NTE3WhcNMjUwNDExMTU0NTE3WjAYMRYwFAYD VQQDEw02N2VmZmU4ZC1mNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwMvOen9+/E6EYZl89hkR8Tvxb1v1M1ZtQb5nONHt+qIAsy/IR/ZZXs1ayxI Qjitf1AjBEz0z5ij4fHLTKMCj8P5Qos4xvWe00i83Fz/0PU1Vc5cJmipAUXlo8Gg LsCk1el2c8zm+fkElwTEebry+7vneSBJTRUchDIuVI+IFmM2e2nV2q8GS4N7YcBr N3RHrpiKZhlb/OVfsedMQzk6EkAm6uSRwH9v69HNLaDxIQRn+LwGZYYtK5Mc9Pl9 jxoH51B8jEG8FGa6bcg64jry330CXmV9edINzpyn5t1TNj+E4rZj0Ko1jkGGu4hn Ej9e7E8jYAjT6Nfvk9LDYD6lPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSrPaNs QYsFRQWYiVVFiYtXB+3nMB8GA1UdIwQYMBaAFMHEb8SnGWnlhQSnNNSQSnvS/wVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTMyQS8xQjRGOUY5NkZB RDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFlV0ZCS2MwMUpCS2U5TF9C VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djUnZ4S2NaYWVXRkJLYzAxSkJLZTlMX0JVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTMyQS8xQjRGOUY5NkZBRDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFl V0ZCS2MwMUpCS2U5TF9CVU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAXKpzyJUIs9bopFPUITKVUCxX1eZ0pxL77wA2MAeWL8/285+LLwYJ PO5ZCnVcT8Nl+asLeDBgiwPKOWM0Yc14pCNijhxklV7RD/x7+PQVZqbfYiDPWg4e vDxymQSKAE30N0a8zomRNlDegY7U04U9+KOhm6mnaAxHND3P7KXiHeIUBnc4jfE8 NZffgSrFEXjA8YFa+X2+J06auS9B9JPzORxow9c8/cJ71UPU7jShj1funGpa1dy7 qUUDHCbiS3VWdwdA4x9eBm0gV7qcuZ1jOvFB5rIieWP5Y9I9tJAmgNAYZxGji79m JJmHtOtf6TUbfH8SCQ/Rt29B8piSEI1P -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:44 2025 by rpki-client