$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft File: WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json) Hash identifier: HdX4655VwTqMmLdtIt1XZ3LYfvZBNim4LbSoLVObgS8= Subject key identifier: 51:B2:59:37:5A:D3:6E:58:21:9E:EB:FB:83:F2:BD:D6:A1:C1:4B:3F Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0B6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft Manifest number: 0B57 Signing time: Fri 30 May 2025 19:19:00 +0000 Manifest this update: Fri 30 May 2025 19:18:59 +0000 Manifest next update: Fri 06 Jun 2025 19:18:59 +0000 Files and hashes: 1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: BBDLtiRrGEpgD+DTnxkJD6fqBtvnLeo+/PHbWAfE5Vw=) 2: D8FCAB6C750611EFAE4AA240C4F9AE02.roa (hash: BNtUgizLuW7VE24IioUopOhcnv7kySphvSn8ooQaevk=) 3: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: E4bzrx7poQwdk1jQHWl7doZB/UzexRVv4xP96OZmdAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2924 (0xb6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85, serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Validity Not Before: May 30 19:18:59 2025 GMT Not After : Jun 6 19:18:59 2025 GMT Subject: CN=683a04a3-39db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:8e:64:29:07:2c:6a:fd:e0:98:33:b3:d3: 6e:df:db:9d:05:a4:8d:99:8e:0a:69:f3:2f:fc:d6: ed:a0:34:7d:44:06:e8:6b:e6:1c:83:6c:01:47:18: 71:13:54:1e:c7:24:9a:a1:4f:c0:da:d1:78:4b:47: 5d:b0:66:ee:ec:c5:85:25:51:4f:6a:ff:76:ee:64: d9:25:4e:4b:04:15:02:7d:de:bd:0e:b2:50:a9:ca: ca:d3:50:2e:95:6f:06:12:fd:62:2e:65:b3:a6:bd: 30:76:b5:4a:88:a8:07:e0:07:e2:bf:46:36:fb:8c: 98:c5:e5:66:b3:85:d5:b0:12:0f:75:d1:d0:b6:ad: d8:93:ff:9a:87:93:35:45:5e:68:ea:b1:de:91:57: cc:19:ca:00:3f:19:87:d5:dc:bf:b9:74:9f:f1:52: dd:35:9e:27:14:2e:dd:1a:7b:93:aa:66:a5:91:54: 03:6e:93:23:a8:ff:d3:cc:eb:71:d3:eb:12:2b:4f: 6d:c6:a1:91:77:70:af:87:c3:6b:5d:c7:71:d2:0d: d9:2e:fb:03:dd:87:0e:f2:a6:2b:e4:4f:6d:1b:d1: b2:c9:0e:1e:90:cd:a5:9e:b6:72:dc:f3:a7:a5:49: 8a:03:46:3f:94:e8:14:4a:15:02:bf:d5:91:b5:9f: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B2:59:37:5A:D3:6E:58:21:9E:EB:FB:83:F2:BD:D6:A1:C1:4B:3F X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7f:57:45:bc:e1:4f:40:05:98:58:ad:d4:9e:0e:d5:07:ba: 52:49:42:5d:6e:30:66:90:ed:7d:a8:16:d0:cd:22:ec:d0:31: 93:08:d3:12:71:36:4e:aa:64:69:62:6c:91:bb:2a:a9:bb:37: 20:0a:7c:ae:3e:71:8e:e3:d6:4d:3e:07:cb:35:0c:ae:17:23: f6:7b:e6:1e:cc:13:1a:93:31:bc:67:ef:69:02:e5:4b:08:3a: 9b:5d:6a:41:ae:43:ce:59:4d:d3:96:18:85:60:30:ab:05:2e: ca:73:b4:89:c5:21:df:fb:f9:18:6b:ec:7a:c1:14:26:ac:7b: 02:7d:d9:05:61:7f:a6:86:91:ef:bb:62:e3:7a:7d:0f:27:c4: 16:9e:a3:b9:b8:96:1a:95:f8:c5:08:21:cc:53:9e:f3:fa:3f: ff:ad:c3:cf:87:a0:f7:08:1a:6d:18:a1:6c:c3:76:3f:89:59: d8:2e:4a:a6:6c:8a:c8:0b:ab:ef:ee:9c:00:44:d5:47:7e:69: 5a:15:19:6f:0c:ab:d8:3a:63:10:39:cc:36:3c:22:f8:94:ac: 48:ca:00:a8:9f:ec:b8:bb:ea:f0:da:4d:c9:36:b5:b8:33:a3: ae:c0:2e:36:a3:08:47:50:7f:43:a5:f2:7b:4e:05:01:ba:0f: 75:db:3b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjUwNTMwMTkxODU5WhcNMjUwNjA2MTkxODU5WjAYMRYwFAYD VQQDEw02ODNhMDRhMy0zOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4KOZCkHLGr94Jgzs9Nu39udBaSNmY4KafMv/NbtoDR9RAboa+Ycg2wBRxhx E1QexySaoU/A2tF4S0ddsGbu7MWFJVFPav927mTZJU5LBBUCfd69DrJQqcrK01Au lW8GEv1iLmWzpr0wdrVKiKgH4Afiv0Y2+4yYxeVms4XVsBIPddHQtq3Yk/+ah5M1 RV5o6rHekVfMGcoAPxmH1dy/uXSf8VLdNZ4nFC7dGnuTqmalkVQDbpMjqP/TzOtx 0+sSK09txqGRd3Cvh8NrXcdx0g3ZLvsD3YcO8qYr5E9tG9GyyQ4ekM2lnrZy3POn pUmKA0Y/lOgUShUCv9WRtZ/D9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGyWTda 025YIZ7r+4PyvdahwUs/MB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Q4NS82MkNFRDQ4RTMzRTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2Qt M3c2eEJXT3B0QndlUy1mSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCf1dFvOFPQAWYWK3Ung7VB7pSSUJdbjBmkO19qBbQzSLs0DGTCNMS cTZOqmRpYmyRuyqpuzcgCnyuPnGO49ZNPgfLNQyuFyP2e+YezBMakzG8Z+9pAuVL CDqbXWpBrkPOWU3TlhiFYDCrBS7Kc7SJxSHf+/kYa+x6wRQmrHsCfdkFYX+mhpHv u2Ljen0PJ8QWnqO5uJYalfjFCCHMU57z+j//rcPPh6D3CBptGKFsw3Y/iVnYLkqm bIrIC6vv7pwARNVHfmlaFRlvDKvYOmMQOcw2PCL4lKxIygCon+y4u+rw2k3JNrW4 M6OuwC42owhHUH9DpfJ7TgUBug912zvQ -----END CERTIFICATE-----Generated at Sat May 31 17:32:51 2025 by rpki-client