$ rpki-client -vvf rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft File: Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft (raw, json) Hash identifier: VtLVggy6QQyk9ntcklg/HCUC6hSVW5INy1e7AufuyCo= Subject key identifier: E8:55:57:52:F8:12:92:E4:EB:E6:B0:A5:C0:EA:70:B1:0C:38:CE:F9 Authority key identifier: 5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A Certificate issuer: /CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft Manifest number: 347B Signing time: Wed 16 Apr 2025 14:54:32 +0000 Manifest this update: Wed 16 Apr 2025 14:54:31 +0000 Manifest next update: Wed 23 Apr 2025 14:54:31 +0000 Files and hashes: 1: Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl (hash: r/nKLytwA16FvsB0AwenS9rNY/n39EHhIpdrbEzIWTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 14:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A311, serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A Validity Not Before: Apr 16 14:54:31 2025 GMT Not After : Apr 23 14:54:31 2025 GMT Subject: CN=67ffc4a8-3dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:1e:7d:1a:13:e8:7d:d9:16:20:8d:33:dc: d0:ac:1f:f8:cb:af:a7:86:23:48:66:e3:7a:41:5b: c8:90:be:0b:07:a4:c2:95:2b:45:e2:82:95:f4:36: 17:7d:bf:4f:6f:32:6c:d3:77:4e:e9:11:80:2f:7b: b7:cc:ae:6b:88:68:ad:db:ab:a1:c6:aa:60:00:ee: 6e:72:21:15:3c:51:11:15:28:22:e4:99:9b:00:a9: 72:47:6d:a2:28:5c:fd:f3:5b:26:6a:3b:09:8f:c6: 84:9e:08:54:6b:a3:f2:2e:78:4a:3c:cc:4c:ac:59: 21:43:ed:25:62:51:70:fa:36:e7:3d:60:c4:03:ad: 18:f7:a1:dc:95:be:72:26:4a:8a:1a:8b:36:45:a2: 5a:8c:04:74:c6:1c:63:e8:16:a0:a6:9c:3c:12:6e: 20:77:84:30:8f:45:78:f6:2d:2f:4b:29:84:40:cc: 10:a2:02:59:ff:7d:9c:a6:4b:e9:76:8f:0d:9e:f6: 20:a7:0a:fb:b4:71:c9:f7:5f:76:a8:3a:4f:0f:b7: 96:7d:12:b4:56:bd:8f:81:22:07:a1:ac:14:ab:f7: d9:5b:7c:5d:74:02:d0:f0:a7:9a:8e:3b:b8:b3:bc: 1b:a1:8a:29:c3:4b:8d:1d:35:82:c3:8d:6b:8e:fa: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:55:57:52:F8:12:92:E4:EB:E6:B0:A5:C0:EA:70:B1:0C:38:CE:F9 X509v3 Authority Key Identifier: keyid:5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:63:39:0c:59:28:24:92:b1:2d:77:a9:78:41:5c:a6:13:57: 9a:55:25:70:06:58:f9:f4:58:36:17:fa:0b:cb:09:a8:7a:6f: 07:cb:cb:ad:b5:9e:91:68:6e:6d:0d:e5:f2:b9:ad:89:20:9e: 1d:2a:50:cc:ad:7b:ae:1f:0c:26:59:62:25:82:06:f7:dd:cc: a1:46:f6:e2:45:ed:b3:fb:dc:6f:e4:d2:ca:54:91:aa:66:92: be:0b:1f:fa:8f:6f:c6:e8:18:9b:35:9d:b4:39:80:96:3f:95: 2b:f4:a4:b1:98:d5:26:da:9c:36:e8:b7:1d:96:39:4f:0f:28: fc:d5:d9:6d:fe:f0:73:41:65:c3:0b:8f:76:3b:da:9e:9e:f4: a1:09:72:87:32:f9:cb:6b:dc:6a:4a:b0:cd:8a:b7:04:2d:3a: 4b:59:c3:cb:71:95:a7:d4:ab:33:c9:a0:d0:6d:fd:de:cc:51: 11:e3:09:b0:28:5f:98:de:3a:6a:c3:d4:4a:8d:6c:83:de:e9: c0:1c:c8:5b:37:1f:5b:4b:d9:bf:6a:d4:f1:34:57:ee:c8:93: c5:a2:6e:f8:71:ac:cb:2f:4f:ee:e9:bf:35:61:bc:e7:40:c4: d6:5c:cb:e4:f1:73:9e:af:49:a2:79:bb:e0:5a:f7:b9:ee:ce: 69:42:a7:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzMTExMTAvBgNVBAUTKDVBMUUyRTM5OEMzMDZFRjFERkY0QzA2RUZDQUFGNkUz NDI2M0IxMkEwHhcNMjUwNDE2MTQ1NDMxWhcNMjUwNDIzMTQ1NDMxWjAYMRYwFAYD VQQDEw02N2ZmYzRhOC0zZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DgefRoT6H3ZFiCNM9zQrB/4y6+nhiNIZuN6QVvIkL4LB6TClStF4oKV9DYX fb9PbzJs03dO6RGAL3u3zK5riGit26uhxqpgAO5uciEVPFERFSgi5JmbAKlyR22i KFz981smajsJj8aEnghUa6PyLnhKPMxMrFkhQ+0lYlFw+jbnPWDEA60Y96Hclb5y JkqKGos2RaJajAR0xhxj6Bagppw8Em4gd4Qwj0V49i0vSymEQMwQogJZ/32cpkvp do8NnvYgpwr7tHHJ9192qDpPD7eWfRK0Vr2PgSIHoawUq/fZW3xddALQ8Keajju4 s7wboYopw0uNHTWCw41rjvo0MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhVV1L4 EpLk6+awpcDqcLEMOM75MB8GA1UdIwQYMBaAFFoeLjmMMG7x3/TAbvyq9uNCY7Eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTMxMS8zRTZGODU4QzFE OTkxMUUyODUxMERDODMwOEIwMkNEMi9XaDR1T1l3d2J2SGY5TUJ1X0tyMjQwSmpz U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doNHVPWXd3YnZIZjlNQnVfS3IyNDBKanNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTMxMS8zRTZGODU4QzFEOTkxMUUyODUxMERDODMwOEIwMkNEMi9XaDR1T1l3d2J2 SGY5TUJ1X0tyMjQwSmpzU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACYzkMWSgkkrEtd6l4QVymE1eaVSVwBlj59Fg2F/oLywmoem8Hy8ut tZ6RaG5tDeXyua2JIJ4dKlDMrXuuHwwmWWIlggb33cyhRvbiRe2z+9xv5NLKVJGq ZpK+Cx/6j2/G6BibNZ20OYCWP5Ur9KSxmNUm2pw26LcdljlPDyj81dlt/vBzQWXD C492O9qenvShCXKHMvnLa9xqSrDNircELTpLWcPLcZWn1KszyaDQbf3ezFER4wmw KF+Y3jpqw9RKjWyD3unAHMhbNx9bS9m/atTxNFfuyJPFom74cazLL0/u6b81Ybzn QMTWXMvk8XOer0miebvgWve57s5pQqfq -----END CERTIFICATE-----Generated at Fri Apr 18 15:12:07 2025 by rpki-client