$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: Q2xPe7AjmnxgAb0xlE9wt07L8iCG+B2tQAAzzqQaJ6s= Subject key identifier: FD:62:12:79:80:FA:0A:B8:6A:27:98:53:69:A3:D7:4A:BD:14:FE:21 Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 261C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 25F6 Signing time: Thu 24 Apr 2025 15:44:27 +0000 Manifest this update: Thu 24 Apr 2025 15:44:26 +0000 Manifest next update: Thu 01 May 2025 15:44:26 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: qRouUNpQhXLUy+rLEAGvahSfvWSFaZ9JG2aZ3QO0tm0=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bub+bmfe4PnreQ1ZPIst7Ck9C3Kep4qMMCvN4ZXfJXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9756 (0x261c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Apr 24 15:44:26 2025 GMT Not After : May 1 15:44:26 2025 GMT Subject: CN=680a5c5a-6d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:05:74:09:d4:79:8d:a2:fb:58:7c:46:cc: bf:81:4f:ed:48:59:a5:dd:e7:04:38:2d:0a:c9:ec: a3:25:0e:90:14:33:f3:69:51:39:71:50:f7:88:e1: 25:af:09:9e:5d:32:9c:96:54:3a:04:ac:29:6e:33: 34:ce:fe:c4:f1:d8:c6:99:51:7a:9f:1a:f2:0d:80: e4:64:90:cc:59:08:75:d4:26:00:15:60:4a:b6:8b: f7:19:cc:2e:1f:16:fd:56:75:d5:f3:09:c2:cb:a4: ec:f6:e1:8a:6a:e5:73:8e:5c:d2:0c:52:eb:38:73: d1:9c:34:b3:6b:1a:6b:82:db:30:f2:46:28:5a:e8: 4c:e9:1b:b2:22:08:38:08:56:8d:2b:d0:f2:3c:f9: bb:c3:6a:da:2d:e3:18:bf:75:3d:cd:97:ca:65:bb: b0:7a:11:f7:98:cb:c0:f0:1c:d8:a0:0f:27:d8:7b: bf:00:d0:19:aa:63:f1:3e:73:72:7b:bc:91:c3:08: b3:3d:54:30:62:0a:33:c5:a8:22:d5:12:9c:45:a1: 6b:98:c3:5c:58:cb:88:dc:ba:79:9a:5b:22:80:a3: b3:bb:b8:c7:40:20:d4:b5:17:d1:fd:b2:dd:ab:6c: a1:f7:f1:76:68:10:d1:10:e2:e2:79:b5:63:ba:04: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:62:12:79:80:FA:0A:B8:6A:27:98:53:69:A3:D7:4A:BD:14:FE:21 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cf:29:02:5c:ae:18:da:76:37:0c:f7:77:6d:17:aa:9b:fe: bb:72:ab:39:98:28:b2:ca:83:18:ff:69:b0:42:30:e9:e0:37: 76:14:39:57:7f:4f:1f:c9:e6:d6:2d:70:6e:e3:a1:d0:40:49: 87:a9:48:ea:96:21:64:d2:5b:a2:04:04:10:25:a9:37:fd:a6: c6:78:f9:c9:77:cb:62:aa:8f:47:13:4f:50:e6:61:c4:3e:84: 24:3f:d5:3d:8d:8d:a4:ef:26:91:db:7f:ac:5f:87:e2:f9:d9: dc:79:83:b4:43:fc:3a:1e:d9:a0:50:47:ef:2d:63:73:da:f5: b7:45:0e:e9:60:6c:ad:33:dc:1f:c2:0e:4d:72:fe:93:84:93: d2:10:d6:11:52:4b:ba:11:a6:dc:d1:33:08:e8:df:31:1e:78: 69:30:6c:98:a4:dc:a5:7a:e1:a4:b9:46:2c:53:73:be:4d:10: dd:81:de:77:63:2d:df:04:a3:55:1f:25:2b:5e:74:20:d8:3e: 07:7a:f6:cb:6b:8d:68:6f:6a:f7:27:23:62:55:c7:d7:d4:94: c5:87:3d:00:c6:75:45:8b:11:47:1b:ff:0d:aa:a2:93:be:37: a0:57:3b:99:84:4a:fd:1a:95:24:df:51:55:85:53:31:5a:76: 4b:bc:d2:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUwNDI0MTU0NDI2WhcNMjUwNTAxMTU0NDI2WjAYMRYwFAYD VQQDEw02ODBhNWM1YS02ZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7QFdAnUeY2i+1h8Rsy/gU/tSFml3ecEOC0KyeyjJQ6QFDPzaVE5cVD3iOEl rwmeXTKcllQ6BKwpbjM0zv7E8djGmVF6nxryDYDkZJDMWQh11CYAFWBKtov3Gcwu Hxb9VnXV8wnCy6Ts9uGKauVzjlzSDFLrOHPRnDSzaxprgtsw8kYoWuhM6RuyIgg4 CFaNK9DyPPm7w2raLeMYv3U9zZfKZbuwehH3mMvA8BzYoA8n2Hu/ANAZqmPxPnNy e7yRwwizPVQwYgozxagi1RKcRaFrmMNcWMuI3Lp5mlsigKOzu7jHQCDUtRfR/bLd q2yh9/F2aBDREOLiebVjugS8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1iEnmA +gq4aieYU2mj10q9FP4hMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLzykCXK4Y2nY3DPd3bReqm/67cqs5mCiyyoMY/2mwQjDp4Dd2FDlX f08fyebWLXBu46HQQEmHqUjqliFk0luiBAQQJak3/abGePnJd8tiqo9HE09Q5mHE PoQkP9U9jY2k7yaR23+sX4fi+dnceYO0Q/w6HtmgUEfvLWNz2vW3RQ7pYGytM9wf wg5Ncv6ThJPSENYRUku6Eabc0TMI6N8xHnhpMGyYpNyleuGkuUYsU3O+TRDdgd53 Yy3fBKNVHyUrXnQg2D4HevbLa41ob2r3JyNiVcfX1JTFhz0AxnVFixFHG/8NqqKT vjegVzuZhEr9GpUk31FVhVMxWnZLvNLu -----END CERTIFICATE-----Generated at Sat Apr 26 03:34:07 2025 by rpki-client