$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft File: Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json) Hash identifier: XyoNErVQBO6GrCETHu0Wk5ekwwc3v2mVtF6T5ZTTAtI= Subject key identifier: 3E:EC:79:EC:D2:59:99:1E:35:24:A4:98:1E:37:02:10:F3:73:3B:1D Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 Certificate issuer: /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Certificate serial: 0BA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft Manifest number: 0B9E Signing time: Fri 30 May 2025 19:11:28 +0000 Manifest this update: Fri 30 May 2025 19:11:27 +0000 Manifest next update: Fri 06 Jun 2025 19:11:27 +0000 Files and hashes: 1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: EBpgV/dUG6eIRgd7S7In57hHoSnJOZi13poeMUM1oyw=) 2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: w2bZ1Vy5tJz/xtNGpIMywBX1w2FBfB12WPfrA4jI4ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Validity Not Before: May 30 19:11:27 2025 GMT Not After : Jun 6 19:11:27 2025 GMT Subject: CN=683a02df-25d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:55:4c:08:6c:78:7d:5f:8f:93:42:90:92:01: 1b:65:58:fd:56:06:47:ce:01:b4:f3:5f:ef:76:a5: c2:95:10:d2:78:8c:70:e7:5b:6a:db:ee:d9:f2:8d: c0:67:12:57:f1:8b:25:df:a2:0e:70:ee:6d:f3:f4: f0:02:7f:0b:8e:ae:ec:ad:e9:4b:58:bd:7b:99:b7: 53:91:e1:a9:ce:ea:11:ea:0d:3c:13:63:f4:df:92: bf:57:8d:1c:99:12:6d:02:0a:be:d5:44:91:f1:61: 91:e5:53:d4:77:96:9d:24:21:01:e4:13:53:30:1b: 71:61:bb:c4:d6:9e:10:8b:23:2b:6c:1e:e2:65:6a: 2a:3d:1c:95:ea:40:ab:46:44:00:e2:1f:aa:86:db: dd:01:64:0e:f2:fb:71:4d:99:71:d6:51:cd:c3:2a: 30:b5:fc:af:4c:cb:bb:bc:81:ea:b7:17:ff:13:c8: 72:6e:c7:03:9d:e6:09:50:02:4a:09:ea:aa:c7:46: e4:47:1a:ea:67:2d:4e:23:91:0b:0e:0d:7f:39:1c: 37:e5:cd:d9:fa:ab:0b:ce:ba:bb:6a:0c:b9:34:a8: 77:1b:a4:a0:47:ed:9b:09:56:2b:16:46:ac:34:07: a9:93:94:9d:bd:c9:e5:47:1e:44:1b:31:6b:98:b7: cd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EC:79:EC:D2:59:99:1E:35:24:A4:98:1E:37:02:10:F3:73:3B:1D X509v3 Authority Key Identifier: keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d2:cf:80:77:5e:d7:5c:eb:da:0e:76:11:3d:87:34:c7:12: a5:74:75:df:c1:91:b4:59:e0:8a:bf:a3:b2:a1:ee:87:25:eb: af:d3:22:68:73:06:e7:b8:7e:36:f0:aa:d9:f9:8e:f9:53:34: da:79:00:a1:e3:d8:ce:71:ec:04:58:f7:51:33:5c:64:09:56: ff:fa:65:f3:14:6e:22:26:db:b0:c1:61:c6:d4:60:8d:db:ef: d2:1a:3d:18:cf:61:da:43:1c:5a:6e:c4:6d:0c:62:a4:c0:e3: fe:76:b7:c7:18:2e:4f:6d:40:96:dd:ae:6d:4f:9f:78:36:ae: f7:e1:2b:0b:64:d0:e7:73:d2:35:d6:63:36:da:24:45:ba:ea: 2c:6e:80:13:17:da:fa:0c:d2:02:a2:30:83:0b:20:98:4e:85: cf:cb:61:0e:37:61:67:77:90:2a:02:76:0a:e5:db:56:70:fb: a2:a7:dd:66:fc:1f:e4:cd:52:c1:cd:30:cd:bd:c2:39:81:43: 6e:45:51:3c:0c:50:ac:19:92:2d:e8:93:c4:cb:f4:b1:ab:e1: 81:52:5e:2b:ae:9f:b9:83:bf:0f:6b:e1:3f:99:89:6d:23:d7: 64:5c:2a:c6:5a:03:ca:ee:8d:c1:b0:3e:a9:56:c5:16:3b:88: d9:22:af:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQzQxMTAvBgNVBAUTKDVBOEZDNkQ5Qjk5MjMyMkYyRDdDMDc3MzQ1NDNGNzk4 OTdFRDgwMzcwHhcNMjUwNTMwMTkxMTI3WhcNMjUwNjA2MTkxMTI3WjAYMRYwFAYD VQQDEw02ODNhMDJkZi0yNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lVMCGx4fV+Pk0KQkgEbZVj9VgZHzgG081/vdqXClRDSeIxw51tq2+7Z8o3A ZxJX8Ysl36IOcO5t8/TwAn8Ljq7srelLWL17mbdTkeGpzuoR6g08E2P035K/V40c mRJtAgq+1USR8WGR5VPUd5adJCEB5BNTMBtxYbvE1p4QiyMrbB7iZWoqPRyV6kCr RkQA4h+qhtvdAWQO8vtxTZlx1lHNwyowtfyvTMu7vIHqtxf/E8hybscDneYJUAJK Ceqqx0bkRxrqZy1OI5ELDg1/ORw35c3Z+qsLzrq7agy5NKh3G6SgR+2bCVYrFkas NAepk5SdvcnlRx5EGzFrmLfNCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7seezS WZkeNSSkmB43AhDzczsdMB8GA1UdIwQYMBaAFFqPxtm5kjIvLXwHc0VD95iX7YA3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FDNC8zQkY0QTY5ODI2 MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01pOHRmQWR6UlVQM21KZnRn RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvX0cyYm1TTWk4dGZBZHpSVVAzbUpmdGdEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FDNC8zQkY0QTY5ODI2MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01p OHRmQWR6UlVQM21KZnRnRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA00s+Ad17XXOvaDnYRPYc0xxKldHXfwZG0WeCKv6Oyoe6HJeuv0yJo cwbnuH428KrZ+Y75UzTaeQCh49jOcewEWPdRM1xkCVb/+mXzFG4iJtuwwWHG1GCN 2+/SGj0Yz2HaQxxabsRtDGKkwOP+drfHGC5PbUCW3a5tT594Nq734SsLZNDnc9I1 1mM22iRFuuosboATF9r6DNICojCDCyCYToXPy2EON2Fnd5AqAnYK5dtWcPuip91m /B/kzVLBzTDNvcI5gUNuRVE8DFCsGZIt6JPEy/Sxq+GBUl4rrp+5g78Pa+E/mYlt I9dkXCrGWgPK7o3BsD6pVsUWO4jZIq8Q -----END CERTIFICATE-----Generated at Sat May 31 16:57:43 2025 by rpki-client