$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: z/FnsIs//bLnEjrhjHAP7EFm/IWehnxxV/crf7ZfWHc= Subject key identifier: 55:5F:8C:E1:1D:9B:26:A0:62:BB:C3:BA:FE:66:85:CC:1F:68:2F:10 Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: 61 Signing time: Sat 29 Mar 2025 06:21:26 +0000 Manifest this update: Sat 29 Mar 2025 06:21:26 +0000 Manifest next update: Sat 05 Apr 2025 06:21:26 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: GwVxCRhRfDSmARWp9cARL4Pl4bYR+2LKc6d0UoWn6jI=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: fkSkf/lrYAP+GPqi/wzsXVOHAz3euOzdB17q/HqvVko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D Validity Not Before: Mar 29 06:21:26 2025 GMT Not After : Apr 5 06:21:26 2025 GMT Subject: CN=67e79166-eb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1d:46:a0:64:03:51:33:77:7f:2e:5a:0c:a0: bb:20:f7:d1:b1:82:3f:66:0f:6e:8a:4f:2d:b7:2e: 93:f0:07:85:25:6e:b6:c0:b4:2d:78:d7:78:e8:e7: 34:e3:07:ff:84:91:70:f8:9f:bf:cb:03:bb:43:7d: 54:bd:da:95:d5:ea:4d:f5:61:3b:38:42:39:8e:b4: fa:c9:22:cb:14:4b:1f:47:2c:83:b6:8c:bf:d4:b4: d4:94:99:f7:f9:d1:c7:0a:e9:df:31:52:2c:84:52: 88:49:3b:ee:03:5f:9d:4a:83:64:0b:cc:21:71:a8: 83:a5:64:3e:a9:55:ff:19:ab:d6:42:6a:c9:3e:a8: 97:45:26:0a:9e:68:3e:55:67:42:57:eb:f0:10:36: 37:dd:46:e4:cc:98:6e:a4:b5:5c:53:5f:01:97:eb: ee:63:22:0f:5a:8c:dd:d4:45:7f:f3:b0:bb:98:7d: 4a:35:20:e4:3d:d2:f5:28:a7:43:a4:9f:f5:2b:8a: 2d:0b:c3:5d:a7:5b:03:d2:d1:cd:5e:d4:45:c1:f9: bc:5c:fe:b6:e0:9d:50:1f:41:f9:76:2f:06:a4:62: 4f:3b:8a:fb:ce:44:6d:d8:7c:45:47:28:d6:9f:e5: c0:61:75:6a:e9:1d:92:3b:d6:f0:0b:64:eb:09:15: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5F:8C:E1:1D:9B:26:A0:62:BB:C3:BA:FE:66:85:CC:1F:68:2F:10 X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:23:21:fc:6c:07:75:68:40:5f:62:0a:a5:70:f2:63:38:35: e4:ab:28:66:9d:12:84:03:4f:62:e3:f9:b4:be:f9:85:31:84: ee:ac:6f:d3:01:25:c6:3f:65:00:72:bd:b2:93:7a:f4:32:07: 21:2f:3b:c5:a4:72:78:77:d2:b2:73:84:c6:f5:69:0b:ac:5d: 95:0e:ff:2f:bb:c0:05:8a:aa:25:58:08:59:91:01:68:b2:25: 87:85:50:0d:66:38:02:75:e4:b5:4b:b9:e3:5c:f9:b5:d8:a2: 98:fb:1e:f8:7c:73:a2:7a:2b:b3:af:b8:ad:67:22:5c:c4:03: b3:2e:2e:36:0e:c1:d7:51:51:f3:88:85:25:5f:37:2a:a8:6e: 8a:5c:17:1f:d2:11:94:f1:ba:53:45:90:47:bc:e1:d8:71:96: d3:31:b6:de:9f:37:4f:91:fe:0c:74:71:f9:48:4c:8f:16:1d: ce:03:88:51:9f:a3:06:90:e3:38:22:8b:01:4e:cb:20:f9:15: b7:c2:ee:a6:58:cf:1a:a6:7e:b7:aa:99:49:03:e3:5d:00:a1: 45:78:32:80:bd:0f:b7:4f:f9:4a:00:67:d1:ed:e1:90:4f:56: 7c:3f:e8:cc:8e:49:de:06:38:d7:f8:55:86:14:3d:af:8b:3f: d9:3a:b0:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjUwRDExMC8GA1UEBRMoNTg2RjkzMzE3NkY2NTQ1NDM1QkIwNjk3RkU1Rjk4MkEy MDkzOTQxQjAeFw0yNTAzMjkwNjIxMjZaFw0yNTA0MDUwNjIxMjZaMBgxFjAUBgNV BAMTDTY3ZTc5MTY2LWViMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpHUagZANRM3d/LloMoLsg99Gxgj9mD26KTy23LpPwB4UlbrbAtC1413jo5zTj B/+EkXD4n7/LA7tDfVS92pXV6k31YTs4QjmOtPrJIssUSx9HLIO2jL/UtNSUmff5 0ccK6d8xUiyEUohJO+4DX51Kg2QLzCFxqIOlZD6pVf8Zq9ZCask+qJdFJgqeaD5V Z0JX6/AQNjfdRuTMmG6ktVxTXwGX6+5jIg9ajN3URX/zsLuYfUo1IOQ90vUop0Ok n/Urii0Lw12nWwPS0c1e1EXB+bxc/rbgnVAfQfl2LwakYk87ivvORG3YfEVHKNaf 5cBhdWrpHZI71vALZOsJFTaPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVV+M4R2b JqBiu8O6/maFzB9oLxAwHwYDVR0jBBgwFoAUWG+TMXb2VFQ1uwaX/l+YKiCTlBsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTBEL0VGOEUzREFDN0JC QzExRUY5MkVFMUE2NkM0RjlBRTAyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxC cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV0ctVE1YYjJWRlExdXdhWF9sLVlLaUNUbEJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC NTBEL0VGOEUzREFDN0JCQzExRUY5MkVFMUE2NkM0RjlBRTAyL1dHLVRNWGIyVkZR MXV3YVhfbC1ZS2lDVGxCcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGYjIfxsB3VoQF9iCqVw8mM4NeSrKGadEoQDT2Lj+bS++YUxhO6sb9MB JcY/ZQByvbKTevQyByEvO8Wkcnh30rJzhMb1aQusXZUO/y+7wAWKqiVYCFmRAWiy JYeFUA1mOAJ15LVLueNc+bXYopj7Hvh8c6J6K7OvuK1nIlzEA7MuLjYOwddRUfOI hSVfNyqobopcFx/SEZTxulNFkEe84dhxltMxtt6fN0+R/gx0cflITI8WHc4DiFGf owaQ4zgiiwFOyyD5FbfC7qZYzxqmfreqmUkD410AoUV4MoC9D7dP+UoAZ9Ht4ZBP Vnw/6MyOSd4GONf4VYYUPa+LP9k6sBY= -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:29 2025 by rpki-client