$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json) Hash identifier: EIbJSeArs5cqOjNjWdp98WgR2XE9/KA4vfySIoa+YOM= Subject key identifier: 0F:5F:D5:B5:BB:5E:6C:E3:CD:72:8D:62:FE:8D:8C:F5:45:24:61:EC Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft Manifest number: C7 Signing time: Sat 29 Mar 2025 05:07:31 +0000 Manifest this update: Sat 29 Mar 2025 05:07:30 +0000 Manifest next update: Sat 05 Apr 2025 05:07:30 +0000 Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: HyZbLXvQ1w8mRDoZ4f/QaTMIs0vdgKyC7ICp8s60ZLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E Validity Not Before: Mar 29 05:07:30 2025 GMT Not After : Apr 5 05:07:30 2025 GMT Subject: CN=67e78013-935a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:0a:73:1e:f1:b5:28:99:13:35:b7:6b:46: 8f:9a:ad:d4:35:4b:fa:42:b0:9c:6c:79:f5:d5:14: 76:d4:42:c8:21:ce:ed:43:b6:12:4d:f0:3d:c1:17: d5:33:cd:b1:ee:42:16:75:9c:0f:a0:f3:5c:61:e3: 12:c5:b0:93:dc:af:d6:09:66:d1:30:a6:c0:b0:f0: 4d:af:59:c1:10:1e:f2:e4:3f:36:91:66:2b:85:8c: dc:3c:51:07:3a:b4:95:cf:1f:04:4e:b8:75:d6:60: 17:5f:0d:58:34:a3:ea:26:7b:29:ff:3e:ab:3d:8a: 8d:15:b0:b9:f8:a6:ce:56:7f:d4:44:fb:9b:7b:10: 80:37:ec:e5:de:3c:34:f4:02:c7:54:d9:1e:b6:42: 5e:84:d8:ce:f4:2f:16:32:7e:6f:b6:3a:c4:0f:f6: 6b:21:af:0b:88:7b:d1:56:d6:fd:31:f7:eb:c4:d4: d1:8e:c1:58:9e:d1:f0:24:4e:b1:77:c9:63:fc:34: 01:af:4d:16:c3:35:c5:34:b0:6d:a3:74:8a:cf:08: 7c:3d:c1:dc:7f:5a:c3:17:d0:41:96:2f:23:9e:bb: 88:d8:16:59:13:f7:61:9c:30:36:6b:d8:0e:70:e1: d2:13:05:76:91:01:10:21:88:de:6f:e1:45:be:ac: 08:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5F:D5:B5:BB:5E:6C:E3:CD:72:8D:62:FE:8D:8C:F5:45:24:61:EC X509v3 Authority Key Identifier: keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:af:f3:f9:89:03:17:c4:19:e8:96:6c:f7:ae:6a:3f:85:b5: 21:50:cf:94:d6:b7:d3:ee:c5:be:da:6d:46:f5:da:d3:c4:7a: 05:60:15:3c:60:94:21:f8:3f:f3:00:49:8b:aa:11:c4:2b:4a: d1:88:d9:3a:70:e0:85:fd:af:e4:52:d9:af:38:00:fb:9f:34: 3d:af:a6:97:23:79:2e:29:84:c0:b0:bd:d4:b9:14:78:5f:9a: b0:e2:86:31:12:a2:cb:92:98:c9:32:67:61:47:75:93:e4:55: ca:28:44:7b:c7:27:39:b2:06:d4:6c:d7:f0:20:3e:61:82:a0: f3:06:62:64:24:e6:52:d6:20:cf:61:83:57:8f:ae:3f:a1:65: 4f:59:f8:9f:1c:65:c0:58:96:f3:a8:7f:fa:73:05:91:04:95: 18:40:69:5f:4f:ca:3b:47:bc:16:10:24:fb:35:5f:3f:70:d3: 85:09:18:a9:72:a9:2b:9a:e8:f1:b5:52:c1:77:bb:0b:5a:1d: 4f:52:f9:ba:d4:05:21:2a:82:7f:b5:10:b4:55:69:01:11:a2: 91:1b:80:99:66:cd:b5:48:57:ab:6b:c4:c5:8f:f1:aa:71:11: 59:50:3d:9f:15:05:f0:9e:6b:d8:26:61:ed:63:95:d0:67:61: 02:d1:59:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKEMxOUQ2QjZERUIzQTFGOUMzOTg0N0UxNENBQTU1OTk3 QkM5Q0YyNzYwHhcNMjUwMzI5MDUwNzMwWhcNMjUwNDA1MDUwNzMwWjAYMRYwFAYD VQQDEw02N2U3ODAxMy05MzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuoKcx7xtSiZEzW3a0aPmq3UNUv6QrCcbHn11RR21ELIIc7tQ7YSTfA9wRfV M82x7kIWdZwPoPNcYeMSxbCT3K/WCWbRMKbAsPBNr1nBEB7y5D82kWYrhYzcPFEH OrSVzx8ETrh11mAXXw1YNKPqJnsp/z6rPYqNFbC5+KbOVn/URPubexCAN+zl3jw0 9ALHVNketkJehNjO9C8WMn5vtjrED/ZrIa8LiHvRVtb9MffrxNTRjsFYntHwJE6x d8lj/DQBr00WwzXFNLBto3SKzwh8PcHcf1rDF9BBli8jnruI2BZZE/dhnDA2a9gO cOHSEwV2kQEQIYjeb+FFvqwIUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9f1bW7 XmzjzXKNYv6NjPVFJGHsMB8GA1UdIwQYMBaAFMGda23rOh+cOYR+FMqlWZe8nPJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DRURBNTJDNEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1dzVoSDRVeXFWWmw3eWM4 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5YzhuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DRURBNTJDNEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1 dzVoSDRVeXFWWmw3eWM4blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWr/P5iQMXxBnolmz3rmo/hbUhUM+U1rfT7sW+2m1G9drTxHoFYBU8 YJQh+D/zAEmLqhHEK0rRiNk6cOCF/a/kUtmvOAD7nzQ9r6aXI3kuKYTAsL3UuRR4 X5qw4oYxEqLLkpjJMmdhR3WT5FXKKER7xyc5sgbUbNfwID5hgqDzBmJkJOZS1iDP YYNXj64/oWVPWfifHGXAWJbzqH/6cwWRBJUYQGlfT8o7R7wWECT7NV8/cNOFCRip cqkrmujxtVLBd7sLWh1PUvm61AUhKoJ/tRC0VWkBEaKRG4CZZs21SFera8TFj/Gq cRFZUD2fFQXwnmvYJmHtY5XQZ2EC0VlC -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:11 2025 by rpki-client