$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: xfCfMkpEv/h40RR6uVwR0Bg6H0I/ku/4DR2xZVs0VVQ= Subject key identifier: 7D:71:98:ED:CA:17:34:9C:D8:EF:5D:95:4C:37:30:39:95:8F:1B:F1 Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1EF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1EF8 Signing time: Sun 20 Apr 2025 15:58:52 +0000 Manifest this update: Sun 20 Apr 2025 15:58:51 +0000 Manifest next update: Sun 27 Apr 2025 15:58:51 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: 4G27YPT4fHdORZAXGWyskhKUAnIH3HyPIF+9Ob7FpJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7928 (0x1ef8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: Apr 20 15:58:51 2025 GMT Not After : Apr 27 15:58:51 2025 GMT Subject: CN=680519bc-610f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:ac:30:7c:0a:90:74:40:a8:69:f5:6b:0e: b7:26:f9:42:71:1e:81:a2:19:34:f5:0b:89:02:b1: 00:81:e3:d3:51:ee:1a:f0:a4:0d:db:9f:87:08:7d: 59:df:8a:4c:a5:82:c3:ae:b4:c3:97:f9:96:23:7e: 35:b6:bf:9f:d3:0a:22:61:55:e4:c3:d9:3d:66:c6: ce:11:8b:7e:25:06:08:c1:10:ca:91:50:84:a4:ef: 32:dc:87:12:a6:d0:d5:da:c6:7e:cc:b0:89:41:81: bc:ad:32:aa:6e:cf:f5:78:14:67:9f:c6:69:65:b9: 42:f5:0e:27:e8:c2:dc:c0:5d:a8:c5:04:ff:f1:96: e5:11:0a:5c:a4:08:61:fc:f3:e9:98:4a:fa:98:b1: c6:97:43:b0:e5:b3:d2:42:54:c6:ac:6b:e2:e3:5d: 17:a2:d8:2f:3d:d9:84:ae:e0:3b:77:75:c0:e0:f0: 7b:d4:ae:6f:f9:9c:85:fc:d6:c3:56:1d:32:9d:f7: 6a:fc:a2:e2:54:4c:97:4b:cc:75:61:ba:65:97:fc: ba:df:76:32:4a:90:2e:d2:7e:6c:a9:5c:0b:8a:41: b9:30:e3:5f:89:f8:95:87:0e:03:2b:f3:43:e0:4c: e7:01:3b:bc:9e:db:60:17:af:1f:64:56:c7:23:53: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:71:98:ED:CA:17:34:9C:D8:EF:5D:95:4C:37:30:39:95:8F:1B:F1 X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:dd:c5:87:9a:f9:15:c5:26:8c:36:61:3a:cf:6b:02:01:0f: 39:a2:e2:10:89:70:4a:91:1d:02:92:0c:3b:73:fc:2e:7e:88: 7f:62:bc:b3:6a:85:e3:9c:a2:02:af:5e:59:00:c8:f1:7b:b3: 0e:7f:e9:72:76:2e:c2:17:36:ca:fa:cf:b9:4e:74:8b:0f:d3: 7b:4e:74:e6:54:e2:c7:21:d8:ee:d6:b4:9a:0a:85:89:a8:10: 09:7a:a4:81:76:45:58:42:32:68:9e:d7:d1:86:54:81:5f:e4: c2:94:6e:d3:78:f9:e7:0b:b6:be:4d:64:2f:ae:0e:1d:aa:75: 14:87:e0:5b:22:7b:19:fa:f7:7b:cf:f9:f4:1e:52:63:f7:94: fa:01:07:f5:78:06:63:93:81:b2:26:21:c3:aa:a4:6e:76:0f: 79:5c:1a:6b:b5:9b:4d:62:d3:c6:73:a3:57:51:dc:4a:84:84: 5a:af:69:c9:89:57:31:ab:a8:93:5c:e7:44:39:81:8b:6b:62: 24:62:89:e2:93:f1:80:d2:86:5b:83:66:fb:f2:56:b8:eb:0d: da:61:c1:72:95:2a:a9:c2:48:4c:b6:8f:d5:e0:4d:0e:2a:fe: ae:d0:a5:68:2d:41:e1:35:6b:3e:b9:32:b2:13:97:36:d3:83: 81:c3:cc:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjUwNDIwMTU1ODUxWhcNMjUwNDI3MTU1ODUxWjAYMRYwFAYD VQQDEw02ODA1MTliYy02MTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9CsMHwKkHRAqGn1aw63JvlCcR6Bohk09QuJArEAgePTUe4a8KQN25+HCH1Z 34pMpYLDrrTDl/mWI341tr+f0woiYVXkw9k9ZsbOEYt+JQYIwRDKkVCEpO8y3IcS ptDV2sZ+zLCJQYG8rTKqbs/1eBRnn8ZpZblC9Q4n6MLcwF2oxQT/8ZblEQpcpAhh /PPpmEr6mLHGl0Ow5bPSQlTGrGvi410XotgvPdmEruA7d3XA4PB71K5v+ZyF/NbD Vh0ynfdq/KLiVEyXS8x1Ybpll/y633YySpAu0n5sqVwLikG5MONfifiVhw4DK/ND 4EznATu8nttgF68fZFbHI1OupQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1xmO3K FzSc2O9dlUw3MDmVjxvxMB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB3cWHmvkVxSaMNmE6z2sCAQ85ouIQiXBKkR0Ckgw7c/wufoh/Yryz aoXjnKICr15ZAMjxe7MOf+lydi7CFzbK+s+5TnSLD9N7TnTmVOLHIdju1rSaCoWJ qBAJeqSBdkVYQjJontfRhlSBX+TClG7TePnnC7a+TWQvrg4dqnUUh+BbInsZ+vd7 z/n0HlJj95T6AQf1eAZjk4GyJiHDqqRudg95XBprtZtNYtPGc6NXUdxKhIRar2nJ iVcxq6iTXOdEOYGLa2IkYonik/GA0oZbg2b78la46w3aYcFylSqpwkhMto/V4E0O Kv6u0KVoLUHhNWs+uTKyE5c204OBw8wp -----END CERTIFICATE-----Generated at Sun Apr 20 21:56:40 2025 by rpki-client