$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: +tmPiB63u0mM1TqvBJQ2YG59F4wns23TQbVXMiZIUY4= Subject key identifier: EA:56:55:03:6F:EE:50:CC:7A:CC:3D:89:5F:05:BD:B8:90:F6:3E:EF Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 0595 Signing time: Fri 30 May 2025 23:25:49 +0000 Manifest this update: Fri 30 May 2025 23:25:48 +0000 Manifest next update: Fri 06 Jun 2025 23:25:48 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: wr2LFzHL7H6GQ1lHjWyDVYpJ+aUjB9C+GDGNFpXtdK4=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: KjSC+EBY/UPIqhkSiTjfbrlSvd1G9oxKPCBMNEBLTuc=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: May 30 23:25:48 2025 GMT Not After : Jun 6 23:25:48 2025 GMT Subject: CN=683a3e7d-5437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:42:cb:61:22:b8:d9:10:62:f4:8a:e0:96: e0:ec:98:63:89:58:79:a9:90:88:3e:e4:38:ed:a3: b6:d3:18:a2:e2:5d:45:62:26:59:b2:cb:fc:59:a4: 29:3f:51:b1:45:e9:b1:38:b4:17:fd:34:16:d2:42: ca:5f:09:da:7a:7d:6c:5d:a1:a8:86:ae:d9:d1:db: 9e:f4:a9:86:32:ab:8d:72:72:e4:6d:d4:76:c8:c2: 64:59:9b:e5:ba:2f:4a:47:06:79:63:b4:20:51:81: d4:cf:41:f8:63:2f:ba:3f:35:9c:58:6c:a9:3e:4b: 8e:bb:f2:03:96:6d:7c:cf:a1:5f:54:3d:98:15:f5: b1:a7:5a:02:c3:bc:87:43:9b:df:cf:dc:e4:21:73: 54:0e:33:ef:ad:42:48:57:af:4e:29:09:59:62:ad: 62:22:b0:b6:b4:97:ea:7d:53:39:6e:64:6b:1a:ed: 3c:2c:d4:60:cb:2f:ce:20:b8:3f:f4:d0:30:9a:4f: 7c:56:3c:c6:ab:ba:86:bd:5a:b6:92:06:97:48:d3: 5b:34:5b:9a:bd:da:72:12:88:4c:3a:6d:2b:2c:a2: c8:4c:3d:4d:4c:15:d1:be:93:13:2d:8f:c3:bf:96: 42:bd:de:d3:f0:ba:26:7b:c6:ec:3e:53:33:da:10: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:56:55:03:6F:EE:50:CC:7A:CC:3D:89:5F:05:BD:B8:90:F6:3E:EF X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:9b:1d:01:19:b2:87:f1:68:0d:1b:20:80:ef:15:ae:53:7e: e5:a8:43:e6:ec:6e:8f:b2:cc:80:f5:b7:bc:2e:f7:f4:fc:e0: db:d9:0a:97:3d:c7:90:53:e8:cb:4d:e2:b7:0c:8f:8e:33:b7: 59:6d:37:9b:95:1c:d8:8f:f8:b0:fe:d1:a1:f7:c8:4f:cb:e7: 2e:26:b9:51:c3:b6:7a:c6:89:e3:00:e7:12:01:31:cf:e4:34: bd:3e:aa:1a:d5:f6:6b:a0:81:b7:2a:f6:69:51:dd:79:0c:50: 28:b2:39:b8:50:f1:b3:3e:08:c1:9d:0a:8a:19:81:49:2b:c2: cc:12:ff:be:8e:d2:1f:94:e9:67:f3:6d:1b:d1:81:1e:4d:42: c7:89:8a:4a:92:36:f2:d1:60:e3:48:2f:54:df:8b:bf:db:a9: eb:a2:c4:53:9d:c8:20:ca:94:af:0e:9c:e3:f3:59:01:58:4d: 3e:dc:0c:7c:8b:a3:01:88:0a:93:95:6d:6f:7f:99:e1:82:e8: 3a:67:37:8a:7a:c0:59:63:7e:a4:50:e3:e2:91:37:cb:03:ad: d5:f3:c4:07:e9:d8:75:66:64:52:37:76:2e:c3:ae:47:d8:98: 80:df:1a:31:46:7e:35:8a:5e:f7:d3:47:fd:9e:05:c3:ec:24: e5:23:d1:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwNTMwMjMyNTQ4WhcNMjUwNjA2MjMyNTQ4WjAYMRYwFAYD VQQDEw02ODNhM2U3ZC01NDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TRCy2EiuNkQYvSK4Jbg7JhjiVh5qZCIPuQ47aO20xii4l1FYiZZssv8WaQp P1GxRemxOLQX/TQW0kLKXwnaen1sXaGohq7Z0due9KmGMquNcnLkbdR2yMJkWZvl ui9KRwZ5Y7QgUYHUz0H4Yy+6PzWcWGypPkuOu/IDlm18z6FfVD2YFfWxp1oCw7yH Q5vfz9zkIXNUDjPvrUJIV69OKQlZYq1iIrC2tJfqfVM5bmRrGu08LNRgyy/OILg/ 9NAwmk98VjzGq7qGvVq2kgaXSNNbNFuavdpyEohMOm0rLKLITD1NTBXRvpMTLY/D v5ZCvd7T8Lome8bsPlMz2hBJoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpWVQNv 7lDMesw9iV8FvbiQ9j7vMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHmx0BGbKH8WgNGyCA7xWuU37lqEPm7G6PssyA9be8Lvf0/ODb2QqX PceQU+jLTeK3DI+OM7dZbTeblRzYj/iw/tGh98hPy+cuJrlRw7Z6xonjAOcSATHP 5DS9Pqoa1fZroIG3KvZpUd15DFAosjm4UPGzPgjBnQqKGYFJK8LMEv++jtIflOln 820b0YEeTULHiYpKkjby0WDjSC9U34u/26nrosRTncggypSvDpzj81kBWE0+3Ax8 i6MBiAqTlW1vf5nhgug6ZzeKesBZY36kUOPikTfLA63V88QH6dh1ZmRSN3Yuw65H 2JiA3xoxRn41il7300f9ngXD7CTlI9H0 -----END CERTIFICATE-----Generated at Sat May 31 17:12:54 2025 by rpki-client