$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft File: wLFgOcRs3wyI2adKgtnkWaOoyuY.mft (raw, json) Hash identifier: prouq+PoYeIORk0Cu/qkByqmbOl3dqBGp2V1HzYZzRo= Subject key identifier: F1:16:47:5B:9F:26:04:C7:7F:07:3B:70:4D:7E:BA:06:BB:31:8A:F0 Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6 Certificate issuer: /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6 Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft Manifest number: 0589 Signing time: Mon 14 Apr 2025 23:00:44 +0000 Manifest this update: Mon 14 Apr 2025 23:00:44 +0000 Manifest next update: Mon 21 Apr 2025 23:00:44 +0000 Files and hashes: 1: wLFgOcRs3wyI2adKgtnkWaOoyuY.crl (hash: z2gsZr4JNGxua7+q5XFLSLjDo4vwAhk0Gd+InwFM0tk=) 2: 974A6E0CE15611EC9E14513DC4F9AE02.roa (hash: vkMZJEjscrWrQmP1QMXSLN6kZ0KXOHfP1HCgjPMFuKU=) 3: 1E75BFFA062311F084ABB51CC4F9AE02.roa (hash: UKf1PhGBjzHATMGTv648kOTke4/dUT/Ksv5RydXXc3w=) 4: B95648BA062211F09E5D020EC4F9AE02.roa (hash: v9BoKHPtS+6KDJpJ1s6FsD8QqUN0uxXtfO3LUF0PxsA=) 5: 96033290E15611EC9E14513DC4F9AE02.roa (hash: 9rUYZVVSecYKVgGZS3+LYYtxh4AnVM4o9EV4HsZiQko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A9EE, serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6 Validity Not Before: Apr 14 23:00:44 2025 GMT Not After : Apr 21 23:00:44 2025 GMT Subject: CN=67fd939c-ff0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:b8:e9:57:ad:02:e0:d6:81:95:01:24:de: 59:f9:01:6e:cc:e5:84:19:9c:fd:de:a7:e6:f8:a8: d6:12:5e:b8:6d:2a:df:c1:c9:ba:77:38:dd:29:63: bd:fb:4a:39:4e:be:73:2f:a6:35:96:44:b7:25:9b: 51:eb:45:7a:4c:6a:2c:e1:29:36:bc:02:f9:b8:5b: f0:9a:fd:00:55:eb:88:ce:6b:cd:4c:7e:31:0c:49: c7:94:52:19:a2:41:c3:d5:7a:8c:53:b2:9f:62:00: f8:85:3a:c2:e3:bf:cb:9e:fd:b8:8c:e4:2e:f2:4d: a1:f5:70:4b:81:2c:92:1e:2d:68:a8:6d:f4:41:71: 5d:c1:cb:9a:ad:be:76:c3:5c:0f:38:44:9e:d2:6b: 15:44:82:27:ad:25:4f:84:b6:01:c7:5a:fd:97:f7: aa:5b:87:bd:92:51:37:e3:fe:e5:17:9f:9f:df:1c: 43:b5:b5:f0:50:19:fc:1c:7f:35:10:62:3b:1f:b0: 72:e5:a5:7e:f7:15:d9:91:59:ca:69:40:70:d0:9f: bb:b7:0b:c4:30:9a:24:e1:b4:21:7d:b0:95:ff:83: 4a:8c:da:d3:7a:1e:45:17:81:97:96:da:2c:da:c2: 10:2a:cf:0b:ac:cf:2b:c2:25:9d:36:74:eb:c2:4e: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:16:47:5B:9F:26:04:C7:7F:07:3B:70:4D:7E:BA:06:BB:31:8A:F0 X509v3 Authority Key Identifier: keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:38:69:76:a0:42:10:dc:b8:12:74:e5:f8:b1:11:cf:9c:4a: df:7f:5f:0d:ce:eb:6c:ef:b1:9f:b3:eb:c3:23:5e:cd:d3:aa: f5:f6:60:eb:b9:fa:d3:da:28:76:65:6a:e9:a5:64:d0:dd:18: 6e:99:b4:de:41:d1:c9:78:02:5e:60:b1:ab:a2:bb:4d:76:c3: 37:15:37:6c:0b:d2:3a:02:d1:bc:97:ec:8b:cf:3d:d8:07:b8: d0:a4:28:88:e9:61:0d:1b:a1:06:34:8b:c6:c8:19:68:ee:35: 42:f8:fe:1a:4d:00:ca:f2:85:aa:da:31:6a:8d:fe:0e:b6:5d: a1:4a:d2:bb:5d:75:80:3b:71:f0:ae:50:54:07:3d:a8:3e:03: fe:a5:7f:63:81:38:d3:4c:d3:e7:43:cd:b6:88:89:6c:cd:5e: 3d:6a:de:b7:4d:ee:35:54:06:8d:28:c3:68:aa:57:da:02:86: b9:9c:0f:9b:54:f4:72:c1:2c:d5:83:5b:a9:90:76:07:e9:ff: f5:fd:9e:76:9d:2a:cc:2b:0a:59:8a:9f:99:a0:51:d5:34:e5: 46:3d:6a:44:2e:53:a7:c1:ef:5d:cf:fb:c1:9b:44:ce:53:5b: 80:95:6d:e1:d9:dc:9d:5d:4b:6f:07:ae:1e:40:91:e1:09:df: d0:1f:ed:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5RUUxMTAvBgNVBAUTKEMwQjE2MDM5QzQ2Q0RGMEM4OEQ5QTc0QTgyRDlFNDU5 QTNBOENBRTYwHhcNMjUwNDE0MjMwMDQ0WhcNMjUwNDIxMjMwMDQ0WjAYMRYwFAYD VQQDEw02N2ZkOTM5Yy1mZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfy46VetAuDWgZUBJN5Z+QFuzOWEGZz93qfm+KjWEl64bSrfwcm6dzjdKWO9 +0o5Tr5zL6Y1lkS3JZtR60V6TGos4Sk2vAL5uFvwmv0AVeuIzmvNTH4xDEnHlFIZ okHD1XqMU7KfYgD4hTrC47/Lnv24jOQu8k2h9XBLgSySHi1oqG30QXFdwcuarb52 w1wPOESe0msVRIInrSVPhLYBx1r9l/eqW4e9klE34/7lF5+f3xxDtbXwUBn8HH81 EGI7H7By5aV+9xXZkVnKaUBw0J+7twvEMJok4bQhfbCV/4NKjNrTeh5FF4GXltos 2sIQKs8LrM8rwiWdNnTrwk5KBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEWR1uf JgTHfwc7cE1+uga7MYrwMB8GA1UdIwQYMBaAFMCxYDnEbN8MiNmnSoLZ5FmjqMrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTlFRS9BMDhCNkE1Q0Qz NkExMUVCODhCMUVCMzNDNEY5QUUwMi93TEZnT2NSczN3eUkyYWRLZ3Rua1dhT295 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMRmdPY1JzM3d5STJhZEtndG5rV2FPb3l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTlFRS9BMDhCNkE1Q0QzNkExMUVCODhCMUVCMzNDNEY5QUUwMi93TEZnT2NSczN3 eUkyYWRLZ3Rua1dhT295dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuOGl2oEIQ3LgSdOX4sRHPnErff18Nzuts77Gfs+vDI17N06r19mDr ufrT2ih2ZWrppWTQ3RhumbTeQdHJeAJeYLGrortNdsM3FTdsC9I6AtG8l+yLzz3Y B7jQpCiI6WENG6EGNIvGyBlo7jVC+P4aTQDK8oWq2jFqjf4Otl2hStK7XXWAO3Hw rlBUBz2oPgP+pX9jgTjTTNPnQ822iIlszV49at63Te41VAaNKMNoqlfaAoa5nA+b VPRywSzVg1upkHYH6f/1/Z52nSrMKwpZip+ZoFHVNOVGPWpELlOnwe9dz/vBm0TO U1uAlW3h2dydXUtvB64eQJHhCd/QH+0A -----END CERTIFICATE-----Generated at Thu Apr 17 08:52:35 2025 by rpki-client