$ rpki-client -vvf rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft File: wrgcmpNbsrM71p-3mzTuMmc5nbY.mft (raw, json) Hash identifier: pzvFZTNKIIxdRsRnp4fPUPUno2i5ANEywGdwij5VbFI= Subject key identifier: 3A:B3:80:8E:99:B9:DE:4C:E8:C3:8A:81:96:5D:FF:EA:80:A9:17:E2 Authority key identifier: C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6 Certificate issuer: /CN=A9180882/serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft Manifest number: 01A7 Signing time: Sat 31 May 2025 02:57:43 +0000 Manifest this update: Sat 31 May 2025 02:57:42 +0000 Manifest next update: Sat 07 Jun 2025 02:57:42 +0000 Files and hashes: 1: wrgcmpNbsrM71p-3mzTuMmc5nbY.crl (hash: wc+YhrGxbKLVpH7bn2RhFGiPcjd/3Jw7GliALmOjWYc=) 2: EAD89080BA8B11EDB9005884C4F9AE02.roa (hash: cK40QtT2CNNImNuy8pJFpePuMkD3LPBAr2rQnfOdgKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180882, serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6 Validity Not Before: May 31 02:57:42 2025 GMT Not After : Jun 7 02:57:42 2025 GMT Subject: CN=683a7027-b7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:10:6c:9e:14:c5:38:5d:a8:14:7d:fe:cc: f3:c2:ed:53:fa:eb:0e:4c:67:7d:77:8d:00:4e:48: 26:28:68:cb:f4:7f:63:dd:1b:55:4c:1c:9c:c8:7c: 01:2d:d6:72:01:89:0b:7b:29:33:03:1a:18:ee:4c: ab:3c:cf:32:92:fb:f5:be:c2:c5:f4:aa:93:4f:0a: db:84:0d:c0:6f:a6:b7:fa:4c:7c:4e:a0:8e:10:45: 83:c7:2a:09:8b:90:4f:67:3d:ed:f2:18:02:4b:35: 06:14:64:d8:bf:cf:e4:cb:a1:f8:73:50:ba:bd:db: 9b:53:f6:88:a9:78:d1:64:3c:c6:93:16:9e:b8:38: 31:a3:8d:75:0d:e3:4f:83:91:43:3e:22:05:75:07: fe:57:27:e4:9a:25:2a:f4:45:de:ac:61:4b:ec:c1: 89:ea:61:26:a8:7b:29:0b:19:bc:1e:e9:38:01:43: d8:d4:c8:86:7c:56:49:18:03:bf:f4:1f:00:ea:c0: a4:f1:49:b5:9b:8f:f4:b7:ae:86:38:b3:77:58:5b: 4d:9f:3c:20:dd:2e:5f:94:67:8d:98:e6:8c:c9:fb: ed:4f:03:4b:de:db:cd:f1:37:0d:38:ff:cc:8b:84: af:f6:c5:9a:b4:fc:c4:8f:0b:02:c4:5f:2c:55:84: 99:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B3:80:8E:99:B9:DE:4C:E8:C3:8A:81:96:5D:FF:EA:80:A9:17:E2 X509v3 Authority Key Identifier: keyid:C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e1:e8:04:3e:35:b5:87:2f:0d:42:e2:e7:75:fa:f4:21:4e: 0b:c8:70:44:fe:85:e4:e3:9a:b0:3b:da:ab:1d:d8:8b:5e:9b: bd:6b:4e:67:6d:1e:f8:5d:c8:d2:8f:a7:00:e2:71:93:1a:fc: 0d:be:65:50:b3:b1:61:b7:d6:ab:37:fb:2f:cb:1d:e9:f6:10: 84:40:4f:c8:09:25:8d:fa:68:63:a9:44:63:05:40:ee:c7:6e: 42:b7:78:e9:27:d8:09:2e:02:35:3a:45:2b:8c:7d:7b:94:77: 6e:b1:a5:31:1b:42:c7:76:e2:bb:54:5e:5c:79:1c:95:ab:1e: f1:44:da:e5:f8:d6:d8:22:80:20:65:20:a0:17:1b:9b:8d:1a: af:03:51:97:78:51:38:b6:92:57:ca:7e:ca:e6:f6:94:e6:9f: 49:d2:0d:4f:dd:d1:14:ea:c8:3b:2e:a2:4b:d6:d3:07:b4:78: 26:ab:80:15:19:61:f1:66:48:d0:1c:f8:22:bb:bb:ff:ed:28: d0:41:67:06:4b:ce:8d:a1:17:a3:c7:92:d9:36:dd:8f:39:97: c4:6d:0a:09:35:8e:e4:17:f1:aa:a1:c2:e9:5a:08:76:76:46: ce:df:7a:40:e6:d5:4f:b6:ee:d7:c5:e5:f2:76:72:ef:07:bd: fd:9b:9d:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA4ODIxMTAvBgNVBAUTKEMyQjgxQzlBOTM1QkIyQjMzQkQ2OUZCNzlCMzRFRTMy NjczOTlEQjYwHhcNMjUwNTMxMDI1NzQyWhcNMjUwNjA3MDI1NzQyWjAYMRYwFAYD VQQDEw02ODNhNzAyNy1iN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9EQbJ4UxThdqBR9/szzwu1T+usOTGd9d40ATkgmKGjL9H9j3RtVTBycyHwB LdZyAYkLeykzAxoY7kyrPM8ykvv1vsLF9KqTTwrbhA3Ab6a3+kx8TqCOEEWDxyoJ i5BPZz3t8hgCSzUGFGTYv8/ky6H4c1C6vdubU/aIqXjRZDzGkxaeuDgxo411DeNP g5FDPiIFdQf+VyfkmiUq9EXerGFL7MGJ6mEmqHspCxm8Huk4AUPY1MiGfFZJGAO/ 9B8A6sCk8Um1m4/0t66GOLN3WFtNnzwg3S5flGeNmOaMyfvtTwNL3tvN8TcNOP/M i4Sv9sWatPzEjwsCxF8sVYSZ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqzgI6Z ud5M6MOKgZZd/+qAqRfiMB8GA1UdIwQYMBaAFMK4HJqTW7KzO9aft5s07jJnOZ22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDg4Mi9ERjNBQjQ2Q0I3 MkQxMUVEODVERDMwMTdDNEY5QUUwMi93cmdjbXBOYnNyTTcxcC0zbXpUdU1tYzVu YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dyZ2NtcE5ic3JNNzFwLTNtelR1TW1jNW5iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDg4Mi9ERjNBQjQ2Q0I3MkQxMUVEODVERDMwMTdDNEY5QUUwMi93cmdjbXBOYnNy TTcxcC0zbXpUdU1tYzVuYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi4egEPjW1hy8NQuLndfr0IU4LyHBE/oXk45qwO9qrHdiLXpu9a05n bR74XcjSj6cA4nGTGvwNvmVQs7Fht9arN/svyx3p9hCEQE/ICSWN+mhjqURjBUDu x25Ct3jpJ9gJLgI1OkUrjH17lHdusaUxG0LHduK7VF5ceRyVqx7xRNrl+NbYIoAg ZSCgFxubjRqvA1GXeFE4tpJXyn7K5vaU5p9J0g1P3dEU6sg7LqJL1tMHtHgmq4AV GWHxZkjQHPgiu7v/7SjQQWcGS86NoRejx5LZNt2POZfEbQoJNY7kF/GqocLpWgh2 dkbO33pA5tVPtu7XxeXydnLvB739m50O -----END CERTIFICATE-----Generated at Sat May 31 17:34:20 2025 by rpki-client