$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: 3BDAljm0rdUMYfzOeb+NrE88EuSpRvOsDExKvuePwCg= Subject key identifier: C6:13:FD:AC:4F:DD:C4:C1:C5:9A:68:D8:DB:BE:5F:A9:60:40:7F:D9 Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 03C7 Signing time: Sat 31 May 2025 01:34:42 +0000 Manifest this update: Sat 31 May 2025 01:34:42 +0000 Manifest next update: Sat 07 Jun 2025 01:34:42 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: bUg4qCFUYIupmZBKWjMHfC4pYDs9irTrjX6cNcNiRss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: May 31 01:34:42 2025 GMT Not After : Jun 7 01:34:42 2025 GMT Subject: CN=683a5cb2-b393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:29:13:22:d8:78:4a:bb:b3:5c:2f:92:5d: d6:c3:f0:56:7c:45:64:02:19:20:cf:ec:47:ed:0f: a7:50:75:57:7c:fb:f7:fd:3f:8e:a5:d1:55:6f:06: 08:d8:08:f9:33:9f:35:48:89:45:1d:76:01:26:3b: 8d:e5:40:61:0e:27:af:de:b9:2e:5d:ef:9d:68:2d: 76:f6:fc:b9:c9:0c:7a:ac:ce:c9:b9:15:15:ca:75: 63:5a:c9:d2:2e:5e:e0:c0:25:49:17:6d:2c:f5:ea: c1:77:cb:d3:70:94:49:dd:73:2b:80:4f:02:15:14: 37:1e:db:34:98:52:ad:13:ff:5d:5a:26:2b:96:b0: 60:92:d1:b2:bc:c3:0b:ea:5c:67:3d:da:54:ba:74: d2:9e:db:ce:a3:8d:ea:d8:36:9b:67:68:e1:4f:58: da:67:b7:9a:05:c5:3e:98:2f:6e:5c:26:e4:2b:a6: 10:5a:f1:00:d1:c8:44:a1:51:93:21:3a:5b:f6:d0: ee:ab:77:83:0c:22:bd:76:ef:eb:ec:b0:bd:6d:1b: 86:65:19:47:0c:d9:27:9e:2b:d7:2d:92:13:ef:be: 70:37:9f:18:32:0d:08:1b:8f:b7:4a:a6:63:e2:12: 15:31:41:3c:08:e9:04:57:06:a3:4b:48:da:4b:ba: 12:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:FD:AC:4F:DD:C4:C1:C5:9A:68:D8:DB:BE:5F:A9:60:40:7F:D9 X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:53:30:89:0d:3a:be:ba:9d:b7:9e:8e:71:5f:58:21:a8:e2: cd:c1:d5:72:99:63:5b:e4:59:db:a8:db:36:e0:aa:1f:61:01: 83:82:6a:13:8f:03:da:be:2c:c6:f6:1e:19:cb:90:0a:74:f0: ee:10:b1:f1:94:e9:cf:47:10:35:ed:66:24:61:e9:3a:d8:fe: b9:4a:ee:10:c3:e1:00:a0:df:2f:a2:a8:c2:6f:9e:b4:0d:16: 01:ab:60:83:2f:80:c6:ea:87:7e:28:1e:08:50:50:87:af:79: 83:6b:bf:d4:26:71:c2:a1:4b:86:99:41:20:dd:4e:3d:c1:2c: 53:12:1d:e1:e8:d9:46:25:e5:0e:6b:c7:ac:34:f5:ea:dd:f4: a1:6c:5b:e3:83:ae:a5:3a:f8:7f:f0:cd:4f:03:94:de:db:81: 38:b4:00:19:77:98:92:55:9a:3c:03:6c:1a:fb:76:1b:bd:06: 96:88:4e:c6:77:be:6c:e2:03:49:1d:7a:ae:0e:e7:b4:b2:92: 1f:f3:50:57:78:56:07:6b:7e:58:4c:78:84:48:bb:9d:7d:43: 63:c3:52:05:b0:55:48:5f:55:03:7e:6e:ea:08:39:88:e9:7f: 35:ae:0b:eb:64:65:9b:3f:32:01:da:45:dc:1d:b0:e0:06:a9: 00:42:ce:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjUwNTMxMDEzNDQyWhcNMjUwNjA3MDEzNDQyWjAYMRYwFAYD VQQDEw02ODNhNWNiMi1iMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqQpEyLYeEq7s1wvkl3Ww/BWfEVkAhkgz+xH7Q+nUHVXfPv3/T+OpdFVbwYI 2Aj5M581SIlFHXYBJjuN5UBhDiev3rkuXe+daC129vy5yQx6rM7JuRUVynVjWsnS Ll7gwCVJF20s9erBd8vTcJRJ3XMrgE8CFRQ3Hts0mFKtE/9dWiYrlrBgktGyvMML 6lxnPdpUunTSntvOo43q2DabZ2jhT1jaZ7eaBcU+mC9uXCbkK6YQWvEA0chEoVGT ITpb9tDuq3eDDCK9du/r7LC9bRuGZRlHDNknnivXLZIT775wN58YMg0IG4+3SqZj 4hIVMUE8COkEVwajS0jaS7oS5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYT/axP 3cTBxZpo2Nu+X6lgQH/ZMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZUzCJDTq+up23no5xX1ghqOLNwdVymWNb5FnbqNs24KofYQGDgmoT jwPavizG9h4Zy5AKdPDuELHxlOnPRxA17WYkYek62P65Su4Qw+EAoN8voqjCb560 DRYBq2CDL4DG6od+KB4IUFCHr3mDa7/UJnHCoUuGmUEg3U49wSxTEh3h6NlGJeUO a8esNPXq3fShbFvjg66lOvh/8M1PA5Te24E4tAAZd5iSVZo8A2wa+3YbvQaWiE7G d75s4gNJHXquDue0spIf81BXeFYHa35YTHiESLudfUNjw1IFsFVIX1UDfm7qCDmI 6X81rgvrZGWbPzIB2kXcHbDgBqkAQs7I -----END CERTIFICATE-----Generated at Sat May 31 16:31:26 2025 by rpki-client