$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft File: wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json) Hash identifier: QQJOA922GaJHK/AtWHJD92mu0Qbm8jDADghVkMiZgsc= Subject key identifier: 41:C6:3D:20:4C:22:B3:B5:A7:93:E0:3B:98:80:6E:E1:9C:19:7C:C5 Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft Manifest number: 23 Signing time: Sat 31 May 2025 07:25:31 +0000 Manifest this update: Sat 31 May 2025 07:25:30 +0000 Manifest next update: Sat 07 Jun 2025 07:25:30 +0000 Files and hashes: 1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: mlIx+X/4KSU3co1fc+T4xddoptLGLvJJNp0/aNkZOZM=) 2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: kwR4HiPzGhpK5SEPo+ThTcF7apxZuPZzTOyt4h1UDag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F Validity Not Before: May 31 07:25:30 2025 GMT Not After : Jun 7 07:25:30 2025 GMT Subject: CN=683aaeea-a1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:23:da:59:34:a2:c3:0a:b0:b9:3e:16:13: 35:d1:41:73:6c:10:7f:3b:e9:b8:eb:7f:59:a7:0f: 98:5f:0d:8e:12:65:a3:58:97:11:7c:6a:8a:de:fe: 70:98:17:69:a1:20:b5:8f:54:93:e7:d5:ee:44:ba: 87:58:fa:64:64:69:46:4a:e7:40:06:64:93:f6:96: 8f:4f:d9:ae:13:ce:33:ec:71:1a:f3:d7:ba:a5:5b: 96:17:1c:09:e3:76:95:36:48:c6:bf:1c:9c:24:5f: 54:3f:ab:19:36:dd:27:c2:16:4f:93:ea:f3:67:48: 09:9f:f0:62:d0:65:2d:77:7b:0a:a0:f6:2d:10:51: fa:f1:14:f6:14:8d:2e:9c:87:d7:96:84:d0:64:0e: c0:48:d0:ce:73:5f:d4:3a:96:99:e4:e7:6d:d2:72: ee:1f:e0:e5:bb:3a:ad:53:f2:08:46:43:66:f7:c6: 75:a2:3a:89:43:96:0f:3c:44:ef:cd:3d:a6:c8:c2: 88:aa:81:12:a3:6e:00:92:10:26:52:ed:c6:10:a1: 99:04:e5:56:6f:f0:5f:2e:a8:9c:6a:5d:6c:4f:12: 94:68:a4:d2:cc:aa:5b:bd:05:f1:ee:a5:97:31:80: e7:bc:fd:a1:e7:9a:26:1d:52:d6:bf:8d:fa:29:36: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C6:3D:20:4C:22:B3:B5:A7:93:E0:3B:98:80:6E:E1:9C:19:7C:C5 X509v3 Authority Key Identifier: keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:9d:c7:87:44:d8:41:57:8a:a2:db:e8:e0:a3:5e:b8:df:7e: 75:30:1f:11:c6:eb:6b:e5:b3:a7:fc:5a:c0:a0:7e:e8:10:8c: df:a1:ee:92:b2:d6:ce:d4:4d:6a:16:a0:4b:5f:4c:a1:27:74: e4:31:5c:c7:c0:74:92:e1:07:bc:54:b5:7d:3d:5c:65:5d:9e: 7d:73:d6:8b:53:38:8e:ec:af:c9:64:e7:93:f5:71:46:21:b8: 7c:0c:70:30:19:aa:43:08:a5:33:40:07:ca:78:b7:72:9c:86: e5:a1:28:33:7f:07:bf:24:1b:6b:87:d8:74:87:f3:b7:3d:24: 21:e3:09:03:33:4a:c9:a3:54:48:c1:68:be:d5:b1:26:96:6b: b6:4a:bc:e6:69:b3:8b:e9:08:3a:7e:cc:5e:e7:70:49:0f:65: c8:46:8d:92:1c:ff:79:eb:04:0c:77:15:66:3a:f0:f4:6f:6e: c6:73:32:5c:05:8d:22:41:d8:f0:48:d0:d3:78:13:68:47:e1: f1:f2:14:3a:94:0c:91:ac:6a:ea:d1:d5:65:13:ac:eb:16:1b: 31:b4:5e:39:39:84:cb:9d:ad:7e:cd:4b:33:8f:15:3a:43:26: 7f:92:49:89:db:96:b1:b2:46:fc:d6:61:a9:1a:ad:01:16:15: b3:2e:40:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REI5NzExMC8GA1UEBRMoQzFGNEEzOTg2MUNBRDNDRjM3ODQyMThERURBN0EwNUU4 NTJGMjI3RjAeFw0yNTA1MzEwNzI1MzBaFw0yNTA2MDcwNzI1MzBaMBgxFjAUBgNV BAMTDTY4M2FhZWVhLWExZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJWSPaWTSiwwqwuT4WEzXRQXNsEH876bjrf1mnD5hfDY4SZaNYlxF8aore/nCY F2mhILWPVJPn1e5EuodY+mRkaUZK50AGZJP2lo9P2a4TzjPscRrz17qlW5YXHAnj dpU2SMa/HJwkX1Q/qxk23SfCFk+T6vNnSAmf8GLQZS13ewqg9i0QUfrxFPYUjS6c h9eWhNBkDsBI0M5zX9Q6lpnk523Scu4f4OW7Oq1T8ghGQ2b3xnWiOolDlg88RO/N PabIwoiqgRKjbgCSECZS7cYQoZkE5VZv8F8uqJxqXWxPEpRopNLMqlu9BfHupZcx gOe8/aHnmiYdUta/jfopNlDhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQcY9IEwi s7Wnk+A7mIBu4ZwZfMUwHwYDVR0jBBgwFoAUwfSjmGHK0883hCGN7aegXoUvIn8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJEQjk3LzVEOEI1MjY0MEEx NDExRjBCNDNEQzU4NkM0RjlBRTAyL3dmU2ptR0hLMDg4M2hDR043YWVnWG9Vdklu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2ZTam1HSEswODgzaENHTjdhZWdYb1V2SW44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE Qjk3LzVEOEI1MjY0MEExNDExRjBCNDNEQzU4NkM0RjlBRTAyL3dmU2ptR0hLMDg4 M2hDR043YWVnWG9VdkluOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAImdx4dE2EFXiqLb6OCjXrjffnUwHxHG62vls6f8WsCgfugQjN+h7pKy 1s7UTWoWoEtfTKEndOQxXMfAdJLhB7xUtX09XGVdnn1z1otTOI7sr8lk55P1cUYh uHwMcDAZqkMIpTNAB8p4t3KchuWhKDN/B78kG2uH2HSH87c9JCHjCQMzSsmjVEjB aL7VsSaWa7ZKvOZps4vpCDp+zF7ncEkPZchGjZIc/3nrBAx3FWY68PRvbsZzMlwF jSJB2PBI0NN4E2hH4fHyFDqUDJGsaurR1WUTrOsWGzG0Xjk5hMudrX7NSzOPFTpD Jn+SSYnblrGyRvzWYakarQEWFbMuQGc= -----END CERTIFICATE-----Generated at Sat May 31 17:34:20 2025 by rpki-client