$ rpki-client -vvf rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft File: wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft (raw, json) Hash identifier: s/uLZixREknXVMvxEOVLCGyzjrmIsa/+rVU2KFtgjik= Subject key identifier: D0:43:C6:E4:96:E1:85:57:00:8C:DD:C4:B1:C5:26:12:ED:88:1F:0D Authority key identifier: C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65 Certificate issuer: /CN=A917E868/serialNumber=C2643370B7CDB1B6159ABD2D7D6772C6F6D2FB65 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft Manifest number: 01A6 Signing time: Thu 03 Apr 2025 02:58:54 +0000 Manifest this update: Thu 03 Apr 2025 02:58:53 +0000 Manifest next update: Thu 10 Apr 2025 02:58:53 +0000 Files and hashes: 1: wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl (hash: PAYPINtQTSDd41hvOS25mUzTe3DqWoX9DiQjzjs4kwM=) 2: 34FF021A8DA111EDBDB7DC23C4F9AE02.roa (hash: WcOJKBYoZRMDvg4oIYS4kq5xFx2TDUBl7Gt7RS4Zo3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E868 Validity Not Before: Apr 3 02:58:53 2025 GMT Not After : Apr 10 02:58:53 2025 GMT Subject: CN=67edf96e-2f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:99:10:c2:16:2c:8b:05:a6:51:df:d9:3e: 3d:17:9a:cb:84:d9:fa:91:e8:0e:99:7b:c8:e7:9e: f6:2f:2f:86:ff:a9:0c:15:68:3f:9a:ad:78:6e:7d: 4e:54:37:0b:4d:0d:69:03:dc:c7:6c:9c:8b:1e:40: b2:5d:2d:09:fd:ff:26:2a:92:15:27:59:53:65:1c: 5c:13:de:4d:66:0b:1a:44:75:d5:9d:83:4a:b1:cb: 4c:e0:9e:52:88:7d:63:de:16:65:34:ad:c2:c6:10: 06:ee:95:9b:4f:5a:7e:76:b0:9f:0a:5f:90:ba:d9: 84:f8:fd:f8:9d:3c:cd:99:d9:d8:da:7d:54:e2:8b: bc:41:a5:14:5c:62:16:f4:bc:06:d4:fe:8d:e4:5c: bd:80:6a:8b:70:94:aa:02:7a:d6:23:a0:73:62:1a: bb:5a:60:4b:47:50:c0:79:c6:40:44:c3:eb:81:c5: c1:f1:73:33:6f:69:e3:de:df:79:c6:5e:32:8b:a1: bf:d5:60:d3:da:02:88:eb:36:e3:5f:19:24:b4:90: 18:fe:fe:d5:59:00:82:66:02:68:c2:bb:8f:6e:a7: 9c:98:39:f3:e2:f4:fa:d4:b9:b3:4d:49:80:9e:98: 36:e6:c4:1b:17:58:dd:9a:65:47:19:46:63:8b:7e: da:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:43:C6:E4:96:E1:85:57:00:8C:DD:C4:B1:C5:26:12:ED:88:1F:0D X509v3 Authority Key Identifier: keyid:C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:78:5b:08:ce:7b:44:fa:8a:76:7a:08:0b:8d:df:31:63:fc: 22:51:07:95:13:6a:0f:eb:cd:30:c5:c2:8c:7c:2e:54:71:f5: 77:b5:68:3a:8e:85:5f:ca:d3:7e:64:07:c2:3e:8d:3a:d6:0c: 07:04:11:a2:b3:ff:25:d7:25:9c:ad:e3:de:7a:6d:02:78:29: 39:e7:9a:08:9a:48:6c:39:e4:e5:7c:89:8b:69:bb:7f:25:fe: 5b:76:9f:35:b4:b1:89:52:53:00:71:82:f3:8d:b8:93:bb:b0: f4:dc:33:4b:d9:02:54:d7:58:30:54:01:5b:5d:1f:92:92:a7: f4:bc:8b:4a:89:31:f9:8f:39:7d:d3:62:eb:c6:70:eb:50:0d: 1e:c5:be:e9:84:ed:24:b9:b8:5e:f6:23:a1:95:ab:00:d2:a4: 5c:1d:5d:96:bf:d6:46:07:82:42:f3:48:56:12:1c:d2:31:33: c7:af:cf:f0:d9:23:a6:fc:41:b7:e1:3e:be:51:93:a8:09:83: c2:77:ff:89:eb:ef:2a:36:58:e1:db:37:82:f1:3b:e0:47:f6: 7c:f5:f3:fe:56:b0:bc:24:15:62:bf:35:ba:ee:32:0d:95:1e: 45:76:2e:47:34:01:bc:e8:69:b1:4d:6f:cf:a4:99:76:35:16: e4:1f:2b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U4NjgxMTAvBgNVBAUTKEMyNjQzMzcwQjdDREIxQjYxNTlBQkQyRDdENjc3MkM2 RjZEMkZCNjUwHhcNMjUwNDAzMDI1ODUzWhcNMjUwNDEwMDI1ODUzWjAYMRYwFAYD VQQDEw02N2VkZjk2ZS0yZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5SZEMIWLIsFplHf2T49F5rLhNn6kegOmXvI5572Ly+G/6kMFWg/mq14bn1O VDcLTQ1pA9zHbJyLHkCyXS0J/f8mKpIVJ1lTZRxcE95NZgsaRHXVnYNKsctM4J5S iH1j3hZlNK3CxhAG7pWbT1p+drCfCl+QutmE+P34nTzNmdnY2n1U4ou8QaUUXGIW 9LwG1P6N5Fy9gGqLcJSqAnrWI6BzYhq7WmBLR1DAecZARMPrgcXB8XMzb2nj3t95 xl4yi6G/1WDT2gKI6zbjXxkktJAY/v7VWQCCZgJowruPbqecmDnz4vT61LmzTUmA npg25sQbF1jdmmVHGUZji37aKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBDxuSW 4YVXAIzdxLHFJhLtiB8NMB8GA1UdIwQYMBaAFMJkM3C3zbG2FZq9LX1ncsb20vtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTg2OC83NDZBRjBCMjhE OUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNiWVZtcjB0ZldkeXh2YlMt MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dtUXpjTGZOc2JZVm1yMHRmV2R5eHZiUy0yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTg2OC83NDZBRjBCMjhEOUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNi WVZtcjB0ZldkeXh2YlMtMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/eFsIzntE+op2eggLjd8xY/wiUQeVE2oP680wxcKMfC5UcfV3tWg6 joVfytN+ZAfCPo061gwHBBGis/8l1yWcrePeem0CeCk555oImkhsOeTlfImLabt/ Jf5bdp81tLGJUlMAcYLzjbiTu7D03DNL2QJU11gwVAFbXR+Skqf0vItKiTH5jzl9 02LrxnDrUA0exb7phO0kubhe9iOhlasA0qRcHV2Wv9ZGB4JC80hWEhzSMTPHr8/w 2SOm/EG34T6+UZOoCYPCd/+J6+8qNljh2zeC8TvgR/Z89fP+VrC8JBVivzW67jIN lR5Fdi5HNAG86GmxTW/PpJl2NRbkHytY -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:39 2025 by rpki-client