$ rpki-client -vvf rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft File: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft (raw, json) Hash identifier: JVj+ufMtm+Z5ITDtRpcAo+sOdtm6R8FFZ0CQs3uGXNg= Subject key identifier: F1:54:E0:27:FA:3A:D1:2B:4A:F5:CF:87:9E:B2:95:F1:CA:FC:F1:34 Authority key identifier: 5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF Certificate issuer: /CN=A91136B5/serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft Manifest number: 021E Signing time: Fri 25 Apr 2025 01:44:53 +0000 Manifest this update: Fri 25 Apr 2025 01:44:52 +0000 Manifest next update: Fri 02 May 2025 01:44:52 +0000 Files and hashes: 1: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl (hash: ymDbqULWIKnWQf6C0Cu78P3dFadQUltHBMdzuVgLqJE=) 2: 0EA2B2D62BB011ED90F41820C4F9AE02.roa (hash: 3j5PRrDY98r3uDB/NRxNOqJcUUYPq2wYxKOeqHbmCZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91136B5, serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Validity Not Before: Apr 25 01:44:52 2025 GMT Not After : May 2 01:44:52 2025 GMT Subject: CN=680ae915-cd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:6c:a2:90:31:88:f9:07:ca:44:a9:7f:3d: d9:72:34:fb:d0:e5:9e:0a:e2:d3:e9:b7:6a:8c:20: c3:73:64:43:e5:03:38:94:56:d5:f7:52:bb:ff:28: 1a:b3:e0:17:42:f4:50:ef:4b:14:a1:5b:f8:d0:61: 22:f3:cd:8a:14:d4:b1:8a:cb:b7:8c:43:87:88:7e: db:5e:d6:ea:b5:4e:b6:ad:bd:bd:bf:20:dd:44:d5: 84:6f:45:13:1c:d6:d1:68:75:b5:9e:38:b1:e6:e4: e1:f4:d2:c2:20:46:c0:48:d9:90:5b:9a:7d:90:25: e2:33:4c:47:90:e4:47:48:6b:c1:e4:92:c3:ba:ed: d7:5f:1b:c1:c0:96:e5:50:73:21:7e:07:90:da:92: ef:ca:6c:f4:74:d3:5a:5b:7d:9f:05:0d:fe:78:de: 9c:23:19:61:ea:2c:f8:e1:6f:df:e5:e4:39:35:b4: a1:63:f1:1c:59:6c:dc:99:26:59:d8:fd:d3:ea:ad: 89:2c:03:26:c9:d8:05:ad:37:62:c0:48:c0:b8:4d: 31:a3:0a:71:d6:f8:66:c2:6a:e7:65:23:2b:ec:e5: 58:88:b8:98:a6:b9:44:e2:2b:8e:92:11:b1:8f:f0: c6:0d:a5:19:d2:98:db:40:68:5e:47:06:7b:89:e3: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:54:E0:27:FA:3A:D1:2B:4A:F5:CF:87:9E:B2:95:F1:CA:FC:F1:34 X509v3 Authority Key Identifier: keyid:5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:cd:94:98:99:a4:cd:a9:9e:26:c3:20:d8:d1:01:48:96:58: 44:a9:b8:84:ec:7b:48:af:fa:fa:15:76:ba:20:b0:af:15:ec: 95:54:ab:42:01:99:1b:cd:1e:6b:6d:1a:e9:42:0d:21:49:6e: 10:95:91:e1:e6:dc:86:7f:98:83:63:63:23:ab:6e:3e:e7:41: 80:8e:d4:5e:ea:03:98:ba:dd:96:60:b7:88:3f:78:51:08:a1: 2b:01:41:27:df:26:d1:c0:cf:ab:b7:52:ed:f3:8d:8b:d3:a2: 15:71:56:1d:4b:29:fc:0b:be:e3:d0:66:7e:4c:bd:91:92:0b: 3c:48:76:0a:6f:99:55:a6:ff:de:0d:7e:1a:fb:6e:e0:8a:a2: e2:d4:c1:28:14:a9:ee:92:35:3d:89:7f:94:2e:98:1e:3a:fc: 5c:1e:13:37:dc:84:fd:e2:02:a7:d7:27:2e:be:8f:f6:60:9d: 56:5e:2b:48:17:b3:c6:bb:c6:d8:3d:c0:32:b8:23:fa:f7:c6: 59:a5:2d:5d:26:97:f4:63:04:03:bb:64:d5:2b:94:23:ff:f4: 4d:aa:3b:07:87:49:c4:8a:2a:44:b6:0f:c1:bf:01:66:bf:35: bb:01:c8:a7:90:79:6c:d0:f3:67:7b:92:fa:b2:20:51:0c:de: 1e:90:58:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2QjUxMTAvBgNVBAUTKDVBRUNFQUQ1NENCMzZDQkYxQjRBMDBDNENENDEwODQ2 RDIzMTQxRUYwHhcNMjUwNDI1MDE0NDUyWhcNMjUwNTAyMDE0NDUyWjAYMRYwFAYD VQQDEw02ODBhZTkxNS1jZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH1sopAxiPkHykSpfz3ZcjT70OWeCuLT6bdqjCDDc2RD5QM4lFbV91K7/yga s+AXQvRQ70sUoVv40GEi882KFNSxisu3jEOHiH7bXtbqtU62rb29vyDdRNWEb0UT HNbRaHW1njix5uTh9NLCIEbASNmQW5p9kCXiM0xHkORHSGvB5JLDuu3XXxvBwJbl UHMhfgeQ2pLvymz0dNNaW32fBQ3+eN6cIxlh6iz44W/f5eQ5NbShY/EcWWzcmSZZ 2P3T6q2JLAMmydgFrTdiwEjAuE0xowpx1vhmwmrnZSMr7OVYiLiYprlE4iuOkhGx j/DGDaUZ0pjbQGheRwZ7ieMnWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFU4Cf6 OtErSvXPh56ylfHK/PE0MB8GA1UdIwQYMBaAFFrs6tVMs2y/G0oAxM1BCEbSMUHv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzZCNS9GNDExNURCQzJC QUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJMOGJTZ0RFelVFSVJ0SXhR ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1enExVXl6Ykw4YlNnREV6VUVJUnRJeFFlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzZCNS9GNDExNURCQzJCQUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJM OGJTZ0RFelVFSVJ0SXhRZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmzZSYmaTNqZ4mwyDY0QFIllhEqbiE7HtIr/r6FXa6ILCvFeyVVKtC AZkbzR5rbRrpQg0hSW4QlZHh5tyGf5iDY2Mjq24+50GAjtRe6gOYut2WYLeIP3hR CKErAUEn3ybRwM+rt1Lt842L06IVcVYdSyn8C77j0GZ+TL2Rkgs8SHYKb5lVpv/e DX4a+27giqLi1MEoFKnukjU9iX+ULpgeOvxcHhM33IT94gKn1ycuvo/2YJ1WXitI F7PGu8bYPcAyuCP698ZZpS1dJpf0YwQDu2TVK5Qj//RNqjsHh0nEiipEtg/BvwFm vzW7AcinkHls0PNne5L6siBRDN4ekFhU -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:53 2025 by rpki-client