$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json) Hash identifier: 7YZr9RqqAW7IZAwU5/sPklgx8hEzlwc48Nb9amU9j6E= Subject key identifier: 4B:5B:D3:3B:22:A2:96:F7:A6:C9:27:82:67:1E:2C:29:04:49:19:88 Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft Manifest number: 01A8 Signing time: Fri 25 Apr 2025 02:27:19 +0000 Manifest this update: Fri 25 Apr 2025 02:27:19 +0000 Manifest next update: Fri 02 May 2025 02:27:19 +0000 Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: 8fTPikp3qRKa39d0pFxdRn2rhkmrHDhOww38JHY1wbQ=) 2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: Op5FiTtFCqiSuAmQrIrvzBwaHPhkdRDyeJuZKNddGfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Validity Not Before: Apr 25 02:27:19 2025 GMT Not After : May 2 02:27:19 2025 GMT Subject: CN=680af307-5376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:3e:5c:2c:85:29:15:7f:9a:00:77:82:d9: 09:65:f9:16:e3:46:89:9a:2e:d6:74:c7:9a:ea:c8: 31:ad:c1:44:33:1a:9d:8f:27:71:d0:c2:bc:8b:f3: f7:72:d1:01:85:2a:6d:33:03:b0:26:3d:3b:23:bb: b8:05:3b:05:5d:7b:4c:c7:fb:51:11:52:b7:92:bb: f5:21:11:16:1a:25:30:24:aa:0a:9f:11:e5:be:6e: 13:f7:77:3a:20:6b:c5:8f:db:69:fe:8e:63:c0:bf: 16:df:75:b7:d7:f8:22:ac:08:d6:8d:21:d6:1c:fa: 73:a2:a0:7f:e0:39:fc:8e:b1:bf:d4:14:ab:c4:c9: 66:3f:6b:b5:99:21:68:28:fc:85:1d:54:97:4f:12: da:47:af:42:46:92:de:9b:1a:cc:05:da:4a:6e:bd: 0c:94:2f:3a:e1:73:1c:32:0c:84:fa:cd:44:56:f4: 93:cd:7d:74:39:37:4d:13:6e:a0:c6:76:a6:da:5d: d0:44:29:bb:e5:7e:77:ff:31:d3:23:53:8c:bf:24: d2:68:53:35:c6:d9:63:bb:a2:ee:ec:00:34:51:f2: 8a:1b:f5:d4:83:5e:ee:51:9a:b5:1b:8e:15:e3:15: a5:d5:5b:f6:79:82:6e:4b:82:8f:99:33:03:d3:e8: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5B:D3:3B:22:A2:96:F7:A6:C9:27:82:67:1E:2C:29:04:49:19:88 X509v3 Authority Key Identifier: keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ef:70:2f:30:bb:dc:1e:25:3a:a1:82:91:b2:dd:6a:91:2a: 4f:ab:98:87:b8:43:1e:7c:de:04:bf:e7:e2:e5:e1:a6:2d:8b: 7a:fc:19:b3:e5:34:c3:1c:6e:ff:3e:d0:42:7f:a4:54:2e:da: 22:b3:a5:47:80:f3:bb:31:aa:51:de:80:44:78:2b:6e:81:ef: b8:a7:8a:92:9c:7e:8b:d7:64:2d:44:08:c6:d5:7f:70:d5:08: 07:79:18:ab:fe:4e:5a:6b:c0:4c:8c:ec:49:16:2d:21:29:38: c3:12:67:6b:32:fa:be:61:39:bb:7a:67:65:3f:03:04:e0:eb: b3:fa:90:d2:dd:20:73:77:92:9a:eb:57:16:6b:66:21:32:b6: 31:06:27:19:8e:e1:07:0a:e0:33:b8:92:91:f2:a6:46:2f:44: f9:12:65:63:93:bc:41:93:ef:4a:11:6a:d4:e7:cb:f3:ff:29: a9:24:78:31:de:14:8d:6e:42:aa:fb:9a:41:84:a6:42:b8:82: 24:83:f3:56:65:bc:11:b5:43:97:b7:64:df:29:3e:b0:17:d3: 39:94:9d:9b:5d:89:3b:84:9e:bc:d1:17:c5:2a:ef:3b:21:ca: 00:16:c8:0f:ac:46:96:a8:8d:66:d8:21:33:c2:84:99:42:83: e2:bd:d8:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1QTYxMTAvBgNVBAUTKDU5MEZBM0M2NzAwMEU5Njk4NTc5MUU2MzU1QUQxRjZE QUQ1QzE4NzYwHhcNMjUwNDI1MDIyNzE5WhcNMjUwNTAyMDIyNzE5WjAYMRYwFAYD VQQDEw02ODBhZjMwNy01Mzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArls+XCyFKRV/mgB3gtkJZfkW40aJmi7WdMea6sgxrcFEMxqdjydx0MK8i/P3 ctEBhSptMwOwJj07I7u4BTsFXXtMx/tREVK3krv1IREWGiUwJKoKnxHlvm4T93c6 IGvFj9tp/o5jwL8W33W31/girAjWjSHWHPpzoqB/4Dn8jrG/1BSrxMlmP2u1mSFo KPyFHVSXTxLaR69CRpLemxrMBdpKbr0MlC864XMcMgyE+s1EVvSTzX10OTdNE26g xnam2l3QRCm75X53/zHTI1OMvyTSaFM1xtlju6Lu7AA0UfKKG/XUg17uUZq1G44V 4xWl1Vv2eYJuS4KPmTMD0+jhRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtb0zsi opb3pskngmceLCkESRmIMB8GA1UdIwQYMBaAFFkPo8ZwAOlphXkeY1WtH22tXBh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVBNi9DQTg2OTQ0QTlD NUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZXbUZlUjVqVmEwZmJhMWNH SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRLWp4bkFBNldtRmVSNWpWYTBmYmExY0dIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVBNi9DQTg2OTQ0QTlDNUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZX bUZlUjVqVmEwZmJhMWNHSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS73AvMLvcHiU6oYKRst1qkSpPq5iHuEMefN4Ev+fi5eGmLYt6/Bmz 5TTDHG7/PtBCf6RULtois6VHgPO7MapR3oBEeCtuge+4p4qSnH6L12QtRAjG1X9w 1QgHeRir/k5aa8BMjOxJFi0hKTjDEmdrMvq+YTm7emdlPwME4Ouz+pDS3SBzd5Ka 61cWa2YhMrYxBicZjuEHCuAzuJKR8qZGL0T5EmVjk7xBk+9KEWrU58vz/ympJHgx 3hSNbkKq+5pBhKZCuIIkg/NWZbwRtUOXt2TfKT6wF9M5lJ2bXYk7hJ680RfFKu87 IcoAFsgPrEaWqI1m2CEzwoSZQoPivdhz -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:27 2025 by rpki-client