$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: 5wWjxAxLAJuYI6SqQVBxheyv0VQXQpFfM82d05Xb8uY= Subject key identifier: 06:11:D9:BA:E4:72:29:16:9D:94:03:CD:71:B8:1E:89:99:CC:37:99 Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 4F Signing time: Sat 31 May 2025 06:49:48 +0000 Manifest this update: Sat 31 May 2025 06:49:47 +0000 Manifest next update: Sat 07 Jun 2025 06:49:47 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: j1Ve/AbjsaK8CAK44LTNX8ukRhZHseqV9oSKv8pe6FQ=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: May 31 06:49:47 2025 GMT Not After : Jun 7 06:49:47 2025 GMT Subject: CN=683aa68c-8a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:b8:57:6f:07:e6:0e:95:99:be:63:9c:9e: 0c:09:09:a1:8e:1d:68:d4:0d:1a:59:9b:c8:fc:e4: dd:0a:d2:ce:c4:d4:48:4d:24:be:94:f8:4c:38:a4: dd:9f:20:5a:97:0f:ec:9f:de:07:2c:91:fa:d6:d6: 40:4c:6c:5c:6e:b9:ce:19:a0:48:1d:d6:40:93:5b: 33:d0:30:2d:8f:e6:fe:76:97:16:60:04:76:a4:fc: cd:71:89:a7:1e:da:6d:1c:8a:7c:73:e9:95:2e:26: d1:15:52:9b:db:6f:5c:78:e1:be:87:77:eb:d1:70: 70:d4:f3:95:b0:6c:76:ef:5f:ee:9e:ec:5b:af:fd: 0b:6f:f9:40:a5:ef:8c:77:b6:1e:78:af:e9:50:27: 26:0b:77:67:a1:9c:1b:0e:3d:28:7b:9c:64:0f:81: d9:3e:73:cb:5b:0c:f4:c4:3d:6a:94:e9:f1:f8:81: 89:fe:50:d1:9e:c4:ec:2c:f4:26:7b:86:2a:46:d9: 62:0c:a0:c5:9e:47:b8:6a:79:95:83:df:60:9d:9c: f0:d6:e8:ee:66:c2:41:c4:57:db:a9:91:dd:a1:76: ce:d1:f6:4d:d8:81:a9:2a:6f:9c:7b:64:ca:6f:e9: 5b:48:e5:a9:f5:93:2e:de:5d:91:89:47:29:de:a2: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:11:D9:BA:E4:72:29:16:9D:94:03:CD:71:B8:1E:89:99:CC:37:99 X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a9:7a:8b:79:aa:36:36:5a:85:b1:5f:c2:1d:db:78:b1:09: 88:0c:1b:14:ca:28:65:f5:7b:df:70:e7:df:42:f2:6d:6c:77: b5:d1:69:cf:44:f5:76:9a:ad:71:a9:65:a9:3a:95:8e:da:1f: 50:9f:00:ae:0a:21:c8:78:58:c8:7b:3a:11:6a:f5:66:b8:0f: 1e:97:3f:8b:b2:0c:61:79:ce:97:e8:49:d8:9b:76:f6:35:42: ea:dd:bd:96:c8:80:76:65:c7:48:f8:de:e5:36:dd:16:73:77: 0e:fd:ef:b4:8f:2f:d8:15:fb:e7:be:48:2c:b3:05:07:9b:f0: f4:6e:e3:23:d3:af:a3:80:64:01:08:2f:e7:df:85:c9:e4:c3: ec:e0:c3:93:73:02:26:c6:09:a5:b4:35:06:90:4a:ac:75:20: dd:bb:82:4e:1a:bd:dc:39:03:fa:9f:df:cc:a7:ca:42:c9:93: 49:c2:df:5d:cd:ee:2f:03:37:0b:57:f8:06:52:87:6f:c8:d2: 4a:bc:a8:cb:38:e6:57:5c:55:9d:d3:3c:f6:f9:1a:d3:03:64: 6c:ba:b9:be:9b:51:03:74:23:b9:3b:8e:9e:4d:03:b3:97:a9: cb:35:63:e8:a3:7e:b0:2a:c0:16:28:ed:1c:0d:3c:09:c3:35: 3f:ff:a3:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQzFCNzY2REEyOUVEMjkzRERGQTVDQ0VCMEFFNDI5NzQ1 NDQ0RDYxNTAeFw0yNTA1MzEwNjQ5NDdaFw0yNTA2MDcwNjQ5NDdaMBgxFjAUBgNV BAMTDTY4M2FhNjhjLThhMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeOLhXbwfmDpWZvmOcngwJCaGOHWjUDRpZm8j85N0K0s7E1EhNJL6U+Ew4pN2f IFqXD+yf3gcskfrW1kBMbFxuuc4ZoEgd1kCTWzPQMC2P5v52lxZgBHak/M1xiace 2m0cinxz6ZUuJtEVUpvbb1x44b6Hd+vRcHDU85WwbHbvX+6e7Fuv/Qtv+UCl74x3 th54r+lQJyYLd2ehnBsOPSh7nGQPgdk+c8tbDPTEPWqU6fH4gYn+UNGexOws9CZ7 hipG2WIMoMWeR7hqeZWD32CdnPDW6O5mwkHEV9upkd2hds7R9k3Ygakqb5x7ZMpv 6VtI5an1ky7eXZGJRyneogOxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBhHZuuRy KRadlAPNcbgeiZnMN5kwHwYDVR0jBBgwFoAUwbdm2intKT3fpczrCuQpdFRE1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzFBRjdERjZBQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2JkbTJpbnRLVDNmcGN6ckN1UXBkRlJFMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzFBRjdERjZBQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1Qz ZnBjenJDdVFwZEZSRTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqpeot5qjY2WoWxX8Id23ixCYgMGxTKKGX1e99w599C8m1sd7XRac9E 9XaarXGpZak6lY7aH1CfAK4KIch4WMh7OhFq9Wa4Dx6XP4uyDGF5zpfoSdibdvY1 QurdvZbIgHZlx0j43uU23RZzdw7977SPL9gV++e+SCyzBQeb8PRu4yPTr6OAZAEI L+ffhcnkw+zgw5NzAibGCaW0NQaQSqx1IN27gk4avdw5A/qf38ynykLJk0nC313N 7i8DNwtX+AZSh2/I0kq8qMs45ldcVZ3TPPb5GtMDZGy6ub6bUQN0I7k7jp5NA7OX qcs1Y+ijfrAqwBYo7RwNPAnDNT//oyo= -----END CERTIFICATE-----Generated at Sat May 31 16:43:49 2025 by rpki-client