$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft File: wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft (raw, json) Hash identifier: T9O9FaoLilOUTLc2J7UfNSmrTkngI3zX0bDyRV7jWgM= Subject key identifier: 40:22:C2:5F:AF:C2:82:9E:0C:2C:51:0D:2C:5B:CC:FD:CB:F8:EB:A9 Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 Certificate issuer: /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft Manifest number: 0642 Signing time: Mon 14 Apr 2025 22:16:41 +0000 Manifest this update: Mon 14 Apr 2025 22:16:41 +0000 Manifest next update: Mon 21 Apr 2025 22:16:41 +0000 Files and hashes: 1: wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl (hash: Z48EEcnmJUwH3WnzIan351YMbgnjAMjibif5pp09wQ8=) 2: 8A9A4734854211EB9DAFD045C4F9AE02.roa (hash: OdpDVRPMiwvBv2VnWCmR20QhCb+9V28fTRtt1gt/10I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 22:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AFD, serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Validity Not Before: Apr 14 22:16:41 2025 GMT Not After : Apr 21 22:16:41 2025 GMT Subject: CN=67fd8949-80ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:62:34:9f:6c:db:aa:82:da:ec:42:75:4d: 7e:5f:e1:ba:3d:70:32:12:83:ad:4a:81:fb:0a:39: c2:cb:f9:a0:99:44:c2:b7:26:e5:ec:7f:3a:8b:1a: ab:68:28:59:20:3d:f1:2e:5a:d0:e5:7c:9b:65:ac: 96:9c:83:bb:54:63:68:20:65:58:5b:4b:94:77:fe: 82:d4:fc:eb:00:3e:25:70:b0:9d:4c:4a:25:81:d8: 3a:12:0b:20:c3:6d:90:56:7b:fc:1e:19:c4:29:81: 12:16:00:3f:38:60:c4:77:34:50:4f:29:47:0b:b2: 80:62:9d:c7:2c:fe:6b:63:e4:22:8c:b2:38:49:28: 18:f7:d7:53:fd:b4:f2:a7:c6:25:3b:8d:0c:f9:f8: 42:46:9d:16:ed:3f:98:e7:09:30:37:a4:5e:b3:ff: 85:34:73:3f:31:8b:01:37:63:42:f7:a7:2b:b3:d7: 87:a4:80:45:44:6e:46:21:ba:d0:53:74:09:0f:d3: 74:62:b7:97:6d:c9:50:14:f8:11:bf:7a:20:cf:e1: 95:e7:cf:49:98:2b:80:90:d7:c2:ca:e4:c8:92:c4: 29:c5:60:fb:c5:38:73:08:f3:e1:93:e5:46:94:2b: 5e:e6:e7:94:05:7b:52:96:64:18:23:c2:de:21:f5: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:C2:5F:AF:C2:82:9E:0C:2C:51:0D:2C:5B:CC:FD:CB:F8:EB:A9 X509v3 Authority Key Identifier: keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:88:21:10:e9:d9:87:c7:f5:37:77:f8:f1:61:9d:bd:1b:5a: f6:fa:84:52:de:4e:b6:8c:91:68:4b:9a:6f:b5:5a:24:3f:55: 15:a3:52:cc:2b:ab:e3:ee:1e:6c:02:68:2c:8d:5f:ae:c0:39: c5:e9:ed:95:8d:5e:0a:aa:95:65:7f:87:d9:7e:c1:a5:ec:75: 3b:02:68:ee:f8:ff:73:ab:19:8a:14:c1:bf:bc:44:af:1e:cf: aa:6a:76:70:7b:9e:fa:4a:ea:8f:e5:d1:31:a9:b9:d3:00:cf: 70:a0:f1:8c:ff:e1:47:9d:20:5b:0f:41:84:26:47:34:3f:9f: c3:65:9f:0d:84:17:7e:02:58:c2:99:66:40:f8:9b:b7:f0:9d: 92:da:a2:d1:d3:42:af:b7:66:87:c5:6a:62:b3:3d:72:62:c0: 9b:10:24:c3:01:21:b0:5d:77:ad:f3:81:6e:2e:df:0d:13:49: f6:f6:45:7e:cd:1b:14:e5:88:0e:7d:ce:4f:0d:34:f7:c3:f7: 0a:cd:c5:64:76:e5:8d:ee:11:2b:40:52:f1:6d:a5:79:f9:d4: e0:5b:a1:20:b1:05:2b:ac:f0:eb:0e:72:ff:81:9e:54:c9:35: 60:4d:1b:b2:1c:79:62:be:41:c4:60:52:90:f0:50:1d:e3:51: 7d:60:aa:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVBRkQxMTAvBgNVBAUTKEMyQzlEQjRDRDZEMDlGOEE0MUE4RDI5MzFGMEIyQjY2 N0JBMUE5ODMwHhcNMjUwNDE0MjIxNjQxWhcNMjUwNDIxMjIxNjQxWjAYMRYwFAYD VQQDEw02N2ZkODk0OS04MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn1iNJ9s26qC2uxCdU1+X+G6PXAyEoOtSoH7CjnCy/mgmUTCtybl7H86ixqr aChZID3xLlrQ5XybZayWnIO7VGNoIGVYW0uUd/6C1PzrAD4lcLCdTEolgdg6Egsg w22QVnv8HhnEKYESFgA/OGDEdzRQTylHC7KAYp3HLP5rY+QijLI4SSgY99dT/bTy p8YlO40M+fhCRp0W7T+Y5wkwN6Res/+FNHM/MYsBN2NC96crs9eHpIBFRG5GIbrQ U3QJD9N0YreXbclQFPgRv3ogz+GV589JmCuAkNfCyuTIksQpxWD7xThzCPPhk+VG lCte5ueUBXtSlmQYI8LeIfVW7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAiwl+v woKeDCxRDSxbzP3L+OupMB8GA1UdIwQYMBaAFMLJ20zW0J+KQajSkx8LK2Z7oamD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFGRC8xMkFDRjA3Qzg1 MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40cEJxTktUSHdzclpudWhx WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzbmJUTmJRbjRwQnFOS1RId3NyWm51aHFZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUFGRC8xMkFDRjA3Qzg1MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40 cEJxTktUSHdzclpudWhxWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCiCEQ6dmHx/U3d/jxYZ29G1r2+oRS3k62jJFoS5pvtVokP1UVo1LM K6vj7h5sAmgsjV+uwDnF6e2VjV4KqpVlf4fZfsGl7HU7Amju+P9zqxmKFMG/vESv Hs+qanZwe576SuqP5dExqbnTAM9woPGM/+FHnSBbD0GEJkc0P5/DZZ8NhBd+AljC mWZA+Ju38J2S2qLR00Kvt2aHxWpisz1yYsCbECTDASGwXXet84FuLt8NE0n29kV+ zRsU5YgOfc5PDTT3w/cKzcVkduWN7hErQFLxbaV5+dTgW6EgsQUrrPDrDnL/gZ5U yTVgTRuyHHlivkHEYFKQ8FAd41F9YKpD -----END CERTIFICATE-----Generated at Wed Apr 16 17:13:17 2025 by rpki-client