$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: WJa3kRan300S0wUNcaI4DBV0OTEsKXWWJjDFIhTSkv4= Subject key identifier: 74:22:18:7E:D8:3E:9D:46:94:97:64:F4:C6:A1:17:FC:0B:BC:05:9E Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 0548 Signing time: Thu 24 Apr 2025 23:13:07 +0000 Manifest this update: Thu 24 Apr 2025 23:13:07 +0000 Manifest next update: Thu 01 May 2025 23:13:07 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: AmwJRCOfRreAEM+8ZRBLWeTunAQfHPQwCuIuKQ/v+WQ=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: oSqY7LR2RimEPpc7yB9nwDJKZPsrgKKxfgWlADMHfYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: Apr 24 23:13:07 2025 GMT Not After : May 1 23:13:07 2025 GMT Subject: CN=680ac583-f3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:1b:f2:4e:c1:88:53:79:b5:e0:96:07:ea: 3b:94:4a:91:8a:bf:fd:f9:ad:be:b3:b5:a6:2d:78: 5c:bd:ec:5c:cb:79:93:c0:62:31:82:f7:d0:f9:3f: 50:2e:70:67:1d:41:b5:75:4b:08:37:25:88:e6:90: c4:c2:8a:09:de:1a:b2:77:3e:8c:3c:47:97:c8:59: f1:d8:20:e1:97:eb:da:fa:b9:9a:33:40:58:90:1e: 2d:22:2e:70:2e:67:08:4c:82:a5:75:2b:cf:3a:1f: d9:b0:c5:d5:76:4a:a4:78:a2:d5:f5:3e:ef:e9:86: e5:17:b7:9a:d6:b3:f0:3e:ce:88:0d:f2:eb:d6:06: 35:ad:6b:5d:d3:26:67:82:29:dc:46:c1:32:ea:c8: 55:29:4c:06:4a:fd:82:f9:26:b8:7b:6b:09:db:2e: 96:2b:b2:a2:85:f0:30:bc:6c:63:29:c7:86:fe:b7: 9d:43:84:46:42:90:70:27:2d:07:de:d7:ca:97:f3: 60:0e:ca:ea:f0:82:40:48:bc:03:8c:ed:af:87:e6: 33:a4:2f:3c:ef:9c:8f:5d:2b:ba:a9:52:2b:be:ed: c3:11:ad:a9:fb:94:0f:2f:fc:3c:b9:f8:7d:63:5f: 79:91:e8:8c:8b:19:4a:26:de:d1:46:51:43:83:f4: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:22:18:7E:D8:3E:9D:46:94:97:64:F4:C6:A1:17:FC:0B:BC:05:9E X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c5:69:40:3e:ce:1a:e0:bf:9e:d1:6d:d6:aa:7d:1f:a9:3b: 75:7d:41:95:3d:ea:54:ca:44:96:7d:6d:50:41:dc:39:61:66: ee:b7:4d:40:ad:ad:f9:fd:da:ac:fe:e7:0f:7a:c0:36:c1:d6: 98:a7:72:e9:56:19:65:4d:db:3e:13:c3:9b:64:f8:f7:0d:1a: 6f:a8:3e:81:9b:4b:66:af:8f:33:02:37:ab:56:09:34:01:d5: 7c:12:7c:11:c3:3f:c9:b7:a4:69:7d:3f:f3:1e:b9:04:8c:f7: 64:54:2c:66:2e:f0:24:cf:73:89:42:2e:6b:dd:23:c3:1c:7e: 6f:87:b7:73:b2:30:bb:00:1b:62:8b:cc:8d:fd:84:75:fa:82: a9:c5:01:a9:0d:3f:ef:f1:a3:b1:61:39:90:28:14:9b:ce:b6: 3a:ea:3b:ff:64:7f:be:06:e1:07:80:e2:2b:1e:dd:ff:ac:7b: 56:23:3a:38:30:f3:c2:99:58:78:83:25:e0:3a:12:52:24:29: e8:16:d0:9d:4c:ed:15:89:ae:e5:f5:26:53:4b:08:22:94:a1: 25:11:74:f2:77:1a:3c:12:89:c9:d1:1b:e3:e2:c7:14:fe:e3: 41:b0:4a:0e:cf:60:32:82:89:87:9b:24:2d:93:53:cd:3f:fe: 6b:44:b8:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjUwNDI0MjMxMzA3WhcNMjUwNTAxMjMxMzA3WjAYMRYwFAYD VQQDEw02ODBhYzU4My1mM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSMb8k7BiFN5teCWB+o7lEqRir/9+a2+s7WmLXhcvexcy3mTwGIxgvfQ+T9Q LnBnHUG1dUsINyWI5pDEwooJ3hqydz6MPEeXyFnx2CDhl+va+rmaM0BYkB4tIi5w LmcITIKldSvPOh/ZsMXVdkqkeKLV9T7v6YblF7ea1rPwPs6IDfLr1gY1rWtd0yZn gincRsEy6shVKUwGSv2C+Sa4e2sJ2y6WK7KihfAwvGxjKceG/redQ4RGQpBwJy0H 3tfKl/NgDsrq8IJASLwDjO2vh+YzpC8875yPXSu6qVIrvu3DEa2p+5QPL/w8ufh9 Y195keiMixlKJt7RRlFDg/TLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQiGH7Y Pp1GlJdk9MahF/wLvAWeMB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzxWlAPs4a4L+e0W3Wqn0fqTt1fUGVPepUykSWfW1QQdw5YWbut01A ra35/dqs/ucPesA2wdaYp3LpVhllTds+E8ObZPj3DRpvqD6Bm0tmr48zAjerVgk0 AdV8EnwRwz/Jt6RpfT/zHrkEjPdkVCxmLvAkz3OJQi5r3SPDHH5vh7dzsjC7ABti i8yN/YR1+oKpxQGpDT/v8aOxYTmQKBSbzrY66jv/ZH++BuEHgOIrHt3/rHtWIzo4 MPPCmVh4gyXgOhJSJCnoFtCdTO0Via7l9SZTSwgilKElEXTydxo8EonJ0Rvj4scU /uNBsEoOz2AygomHmyQtk1PNP/5rRLgn -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:26 2025 by rpki-client