$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft File: wso-IoSMqAhkgVrBFxhWCJY6SW0.mft (raw, json) Hash identifier: cOwtQwFQgxvaJPZ3I0s+OphUiGRKnNRHVaa0ZgYh/l0= Subject key identifier: E0:39:70:D7:42:1C:D1:45:1E:EB:34:FF:EB:31:F5:D1:8C:F7:6A:01 Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D Certificate issuer: /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft Manifest number: 0738 Signing time: Fri 30 May 2025 21:57:22 +0000 Manifest this update: Fri 30 May 2025 21:57:22 +0000 Manifest next update: Fri 06 Jun 2025 21:57:22 +0000 Files and hashes: 1: wso-IoSMqAhkgVrBFxhWCJY6SW0.crl (hash: 45fLweETuIpT6sFNfoWI7LtqR869T5XOz9do2rJuzU4=) 2: 5FE8E1B42E1F11EBA5577457C4F9AE02.roa (hash: 1rB8wjfujUH34y0bYE/i/m37F3UP1B3bzE3MrCEyty0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D9B5, serialNumber=C2CA3E22848CA80864815AC117185608963A496D Validity Not Before: May 30 21:57:22 2025 GMT Not After : Jun 6 21:57:22 2025 GMT Subject: CN=683a29c2-80bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:97:c6:fb:fb:12:7e:98:ef:48:a8:66:db: ed:b3:b6:d4:9d:eb:3d:39:ba:76:f4:82:9c:ed:36: 2b:c2:a1:94:0e:f9:36:a6:c0:f3:b3:a1:23:8a:08: 6a:1a:45:24:89:e1:ce:74:a2:9b:dd:1a:bf:e4:e7: 69:d6:04:c4:5d:40:c8:02:c8:c1:9c:35:be:4f:a4: 57:57:56:9e:89:47:bc:b8:ed:34:a1:46:81:53:e1: dc:4c:03:bc:f4:f7:d7:7e:ec:14:08:d9:6e:22:34: 0f:da:74:c2:ed:89:1f:51:35:b2:02:18:de:f5:1c: 1b:a9:ee:4a:72:cc:1f:12:e4:77:1c:4d:b8:8e:ed: c2:27:b3:c8:72:84:3f:7e:ce:c7:d0:e1:50:91:e3: 6a:a6:06:c5:2f:fe:55:ac:88:4b:2a:c9:b8:57:f6: f2:6b:f9:41:71:93:90:ce:39:8a:2a:9f:70:3e:0f: eb:2e:c6:77:71:80:45:0b:80:0c:35:6d:54:e4:aa: e3:6b:22:30:86:fb:3c:6c:1d:86:d0:6e:20:07:82: 4a:68:a4:b5:fe:03:41:cc:ac:42:c7:f9:3d:76:df: 7c:95:c4:39:91:17:46:53:df:12:b3:a8:51:31:ac: 8d:0f:cf:71:f3:70:b8:50:a4:b6:cc:75:bf:48:9b: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:70:D7:42:1C:D1:45:1E:EB:34:FF:EB:31:F5:D1:8C:F7:6A:01 X509v3 Authority Key Identifier: keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d5:4f:94:28:9a:31:45:aa:0a:27:e3:5d:b3:e1:a8:fa:34: b6:ef:5b:92:74:d3:27:52:22:b8:c8:69:5c:ef:74:85:f8:bf: 98:9e:e5:16:aa:53:ef:13:a2:7c:81:8d:44:9c:38:d4:72:29: e0:c3:4d:e7:c4:e2:c6:36:30:a5:d9:87:32:40:1d:a9:30:82: 64:7b:82:64:80:81:f7:44:50:68:d8:6b:91:c4:82:75:77:77: 92:a3:ef:6c:46:c7:d8:2b:8e:fd:cf:3f:db:af:43:f8:a7:4e: 71:eb:21:10:a1:19:f1:f1:e6:80:4b:c6:22:e9:41:19:6a:a8: d2:6e:0a:b7:65:3e:76:3d:04:c3:04:73:10:f4:00:0e:17:52: c9:dc:a3:be:cb:4c:5e:67:f7:0a:72:83:87:58:1d:89:d3:59: f2:c1:56:80:1c:47:66:20:da:47:b4:5c:9e:ad:40:38:0d:53: 2a:1f:e4:a7:96:e6:ea:72:83:20:c6:eb:89:87:5e:10:69:39: be:1a:49:bc:8f:d9:28:f3:25:b2:33:97:0d:ca:46:30:b4:44: e2:3f:bd:08:50:80:52:b9:ea:e8:36:fa:1e:b4:85:6f:5a:a5: d7:9c:ef:3f:f6:27:3a:1a:b6:33:f8:03:2c:05:de:56:52:69: aa:a6:42:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5QjUxMTAvBgNVBAUTKEMyQ0EzRTIyODQ4Q0E4MDg2NDgxNUFDMTE3MTg1NjA4 OTYzQTQ5NkQwHhcNMjUwNTMwMjE1NzIyWhcNMjUwNjA2MjE1NzIyWjAYMRYwFAYD VQQDEw02ODNhMjljMi04MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX6Xxvv7En6Y70ioZtvts7bUnes9Obp29IKc7TYrwqGUDvk2psDzs6Ejighq GkUkieHOdKKb3Rq/5Odp1gTEXUDIAsjBnDW+T6RXV1aeiUe8uO00oUaBU+HcTAO8 9PfXfuwUCNluIjQP2nTC7YkfUTWyAhje9Rwbqe5KcswfEuR3HE24ju3CJ7PIcoQ/ fs7H0OFQkeNqpgbFL/5VrIhLKsm4V/bya/lBcZOQzjmKKp9wPg/rLsZ3cYBFC4AM NW1U5KrjayIwhvs8bB2G0G4gB4JKaKS1/gNBzKxCx/k9dt98lcQ5kRdGU98Ss6hR MayND89x83C4UKS2zHW/SJtHswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOA5cNdC HNFFHus0/+sx9dGM92oBMB8GA1UdIwQYMBaAFMLKPiKEjKgIZIFawRcYVgiWOklt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCNS9DMkJCQjExMDJF MUQxMUVCOUQ4RDJDNTRDNEY5QUUwMi93c28tSW9TTXFBaGtnVnJCRnhoV0NKWTZT VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzby1Jb1NNcUFoa2dWckJGeGhXQ0pZNlNXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDlCNS9DMkJCQjExMDJFMUQxMUVCOUQ4RDJDNTRDNEY5QUUwMi93c28tSW9TTXFB aGtnVnJCRnhoV0NKWTZTVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN1U+UKJoxRaoKJ+Nds+Go+jS271uSdNMnUiK4yGlc73SF+L+YnuUW qlPvE6J8gY1EnDjUcingw03nxOLGNjCl2YcyQB2pMIJke4JkgIH3RFBo2GuRxIJ1 d3eSo+9sRsfYK479zz/br0P4p05x6yEQoRnx8eaAS8Yi6UEZaqjSbgq3ZT52PQTD BHMQ9AAOF1LJ3KO+y0xeZ/cKcoOHWB2J01nywVaAHEdmINpHtFyerUA4DVMqH+Sn lubqcoMgxuuJh14QaTm+Gkm8j9ko8yWyM5cNykYwtETiP70IUIBSueroNvoetIVv WqXXnO8/9ic6GrYz+AMsBd5WUmmqpkI3 -----END CERTIFICATE-----Generated at Sat May 31 17:45:08 2025 by rpki-client