$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: 5Ec2PPG4XVS5RROg9l5AT+dbjx4PR1uWHOVfBX7XyWA= Subject key identifier: 1C:47:59:05:7E:CA:F7:AE:C1:25:C4:BC:54:A9:5E:CF:3B:4C:3D:31 Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 16 Signing time: Wed 05 Feb 2025 06:23:08 +0000 Manifest this update: Wed 05 Feb 2025 06:23:08 +0000 Manifest next update: Wed 12 Feb 2025 06:23:08 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: Q9RmogZMt+ACrNfIsZUeFslxzBwlECpozzLj5Bt2qEk=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281 Validity Not Before: Feb 5 06:23:08 2025 GMT Not After : Feb 12 06:23:08 2025 GMT Subject: CN=67a303cc-e699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:dd:6b:c9:32:69:a2:54:50:71:09:4e:93: 74:cc:63:c4:df:04:99:5e:2c:ee:4f:a2:51:fc:51: 5b:5d:33:5a:b6:eb:00:dc:03:19:be:78:c8:89:29: d3:b2:00:52:51:50:2d:cc:f2:8f:18:a2:5f:28:e1: b9:86:13:79:ba:ab:ae:0d:ac:8c:b5:cb:02:6d:70: 20:a3:da:b5:a8:bb:69:81:0e:1d:4f:1f:c0:72:d4: cc:00:36:24:04:88:50:af:dc:15:6b:e4:c4:ba:93: c1:12:14:a3:c0:0f:d6:a1:75:a7:b5:6c:18:f8:7f: bc:d6:5c:22:e1:e2:4c:10:8e:d3:65:4a:86:81:bc: 8a:bb:05:11:81:61:96:41:37:9f:f9:bf:e9:3b:e9: 0c:7f:bd:cf:a7:11:40:04:4c:22:d6:73:26:0e:97: 69:1e:38:67:e7:76:f1:29:da:ad:9c:91:19:bc:2a: e5:1d:00:90:35:e5:f4:01:25:30:7c:2b:cd:f8:b8: 9f:f2:da:59:01:5e:29:e6:ac:d1:b4:c7:49:17:80: 26:56:8f:ff:77:2f:26:98:18:9d:09:13:c5:e2:77: 2e:d6:f0:f3:12:be:f5:ff:ce:43:94:72:80:57:5f: 97:3e:9f:3f:44:20:e0:93:ec:fb:5a:a3:98:03:62: b3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:47:59:05:7E:CA:F7:AE:C1:25:C4:BC:54:A9:5E:CF:3B:4C:3D:31 X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4e:d2:2e:1a:ae:73:f3:71:bd:5b:a8:39:d7:19:da:03:35: b2:31:0e:74:8b:10:56:0a:71:0d:d1:68:eb:5d:9b:24:35:9e: f1:6a:ff:6d:f9:6d:17:8c:01:25:c0:54:11:63:b9:c3:cb:cd: 3f:00:c3:03:0f:25:31:05:8c:27:7b:52:a9:fb:62:b9:29:b1: 01:37:e3:05:f9:1c:bf:52:f0:4d:ba:62:aa:30:b1:40:68:3d: 1c:5d:af:e2:c1:db:36:5d:3b:3f:02:80:76:cb:dc:9b:90:b3: 30:0a:86:48:b9:d2:a0:9f:20:ef:05:7b:6b:60:ef:9e:01:0a: d2:45:85:68:1c:93:1f:f3:ec:42:1f:66:f4:06:fc:43:c8:bc: d7:e0:3d:03:69:b8:79:f6:b9:59:cd:e6:6f:28:40:f1:88:56: 32:2f:2e:4d:98:65:4c:8d:9c:90:8e:98:05:2e:c4:03:3a:ea: ca:7c:8f:f9:22:5c:a7:35:2c:45:df:a8:31:9f:bc:75:84:9b: 1b:35:d0:b1:90:65:87:89:c0:2e:51:74:01:8d:8f:f5:bd:e6: d1:c6:76:46:be:4f:b0:1c:16:b3:e3:37:e7:6a:40:db:af:d2: d0:ea:7f:43:ea:40:0d:10:9a:c9:51:52:57:18:93:41:e6:72: 5f:38:8c:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQzFCNzY2REEyOUVEMjkzRERGQTVDQ0VCMEFFNDI5NzQ1 NDQ0RDYxNTAeFw0yNTAyMDUwNjIzMDhaFw0yNTAyMTIwNjIzMDhaMBgxFjAUBgNV BAMTDTY3YTMwM2NjLWU2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgYd1ryTJpolRQcQlOk3TMY8TfBJleLO5PolH8UVtdM1q26wDcAxm+eMiJKdOy AFJRUC3M8o8Yol8o4bmGE3m6q64NrIy1ywJtcCCj2rWou2mBDh1PH8By1MwANiQE iFCv3BVr5MS6k8ESFKPAD9ahdae1bBj4f7zWXCLh4kwQjtNlSoaBvIq7BRGBYZZB N5/5v+k76Qx/vc+nEUAETCLWcyYOl2keOGfndvEp2q2ckRm8KuUdAJA15fQBJTB8 K834uJ/y2lkBXinmrNG0x0kXgCZWj/93LyaYGJ0JE8Xidy7W8PMSvvX/zkOUcoBX X5c+nz9EIOCT7Ptao5gDYrMfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHEdZBX7K 967BJcS8VKlezztMPTEwHwYDVR0jBBgwFoAUwbdm2intKT3fpczrCuQpdFRE1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzFBRjdERjZBQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2JkbTJpbnRLVDNmcGN6ckN1UXBkRlJFMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzFBRjdERjZBQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1Qz ZnBjenJDdVFwZEZSRTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJxO0i4arnPzcb1bqDnXGdoDNbIxDnSLEFYKcQ3RaOtdmyQ1nvFq/235 bReMASXAVBFjucPLzT8AwwMPJTEFjCd7Uqn7YrkpsQE34wX5HL9S8E26YqowsUBo PRxdr+LB2zZdOz8CgHbL3JuQszAKhki50qCfIO8Fe2tg754BCtJFhWgckx/z7EIf ZvQG/EPIvNfgPQNpuHn2uVnN5m8oQPGIVjIvLk2YZUyNnJCOmAUuxAM66sp8j/ki XKc1LEXfqDGfvHWEmxs10LGQZYeJwC5RdAGNj/W95tHGdka+T7AcFrPjN+dqQNuv 0tDqf0PqQA0QmslRUlcYk0Hmcl84jFQ= -----END CERTIFICATE-----Generated at Thu Feb 6 07:47:16 2025 by rpki-client