$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json) Hash identifier: seYO3sXpP1fJ33AEKDOJqOcaoOYt4SSoz9xjgO6jgDA= Subject key identifier: 4D:8E:DE:F0:D7:92:88:C9:11:AD:77:47:5F:94:5A:56:66:19:85:06 Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Certificate serial: 177B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft Manifest number: 1746 Signing time: Thu 24 Apr 2025 16:38:48 +0000 Manifest this update: Thu 24 Apr 2025 16:38:47 +0000 Manifest next update: Thu 01 May 2025 16:38:47 +0000 Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: NpAsX6fm3bAV/fdLt9JVqdrzFJQ/3svGpAT8D/5k8gs=) 2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: TYrZ+B6VIzKW11uXjXFH3B1vYwvh9CEWEvcjwdCYyoM=) 3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: PrshPG5oG7Q/ksTfEH95reK4a0iC1d8YmqXN8qzwXXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6011 (0x177b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Validity Not Before: Apr 24 16:38:47 2025 GMT Not After : May 1 16:38:47 2025 GMT Subject: CN=680a6917-f67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:05:04:17:4e:c9:1a:fe:30:56:d1:3b:51: a9:1d:db:be:f3:b0:00:50:ee:c2:43:d7:41:1f:b7: b2:10:76:58:39:4a:fd:78:50:4c:73:6d:9e:26:cc: f9:05:fa:a7:db:8f:32:d0:bb:55:a2:43:d5:49:79: e5:89:f7:9b:3c:57:61:47:ff:77:9d:1f:1f:f1:1c: c6:bc:62:2f:b8:eb:7b:9d:15:53:b8:73:04:c6:d3: 60:d9:1a:b9:be:8b:f4:0c:d2:80:78:f5:b3:9a:9f: 93:d5:a8:42:55:55:42:8a:af:4e:60:d2:7a:68:ec: 7a:7f:03:76:68:87:37:19:37:02:a7:e2:cb:33:6e: 26:77:f1:50:33:f6:4a:67:48:2e:08:b5:7e:ee:ec: 23:ee:84:e4:68:73:01:66:40:90:58:e6:36:7d:25: ec:a3:0f:fc:45:8a:f8:32:26:16:c3:41:ae:2f:cc: 00:96:09:3e:f2:d6:c9:e4:2e:f8:04:0e:ec:25:06: 51:3d:56:82:69:5a:c2:82:b4:78:e1:90:ef:e6:1b: 9b:5d:e5:c8:66:46:e4:a0:c6:c1:e8:90:6a:21:be: 8c:29:ea:dc:07:3f:ed:e5:43:71:6e:83:62:b1:8f: ff:33:54:86:6f:89:8a:ff:8e:17:be:8e:3c:38:6c: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8E:DE:F0:D7:92:88:C9:11:AD:77:47:5F:94:5A:56:66:19:85:06 X509v3 Authority Key Identifier: keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:97:de:b7:ef:ff:d0:98:cd:4b:e8:d8:1c:11:f4:fd:d3:f5: f1:2c:a2:e8:94:32:d6:c0:eb:59:1e:c3:bc:c1:9b:54:a5:49: 05:0d:85:54:2e:fa:d2:68:31:1e:e7:67:05:a4:4e:8b:3d:7b: 44:c0:34:eb:70:7c:57:c0:ed:29:28:9e:f4:a6:9e:1a:2c:08: 97:26:10:f9:d5:f6:ad:5b:1f:90:da:1d:10:d8:9d:c6:cd:fe: 0b:25:6c:3e:df:9b:6f:90:d6:4a:0d:d3:0c:1b:c2:74:bf:cc: 22:06:b5:89:ca:f1:2d:a6:c3:99:7e:3f:d0:e1:b9:fb:4d:8e: be:88:95:68:94:93:e5:71:36:18:3f:c5:a8:ff:8d:f7:66:b1: 9b:75:15:07:22:08:b4:2c:c0:41:24:24:3c:4b:62:0e:66:87: 6d:bb:83:6b:02:4f:16:d5:7b:fe:e8:53:c9:7b:66:5f:04:c7: 0f:9b:a3:e8:de:95:68:9b:79:8c:f2:9b:9f:e7:d0:23:9c:93: 46:88:e5:9a:92:e0:9d:3e:ee:81:4a:b5:47:97:21:bb:68:0f: ea:84:e3:55:2d:37:ba:33:af:92:e8:fd:f7:6a:7b:7d:c6:24: 4d:37:f4:a3:78:f9:f7:f8:cc:8a:d0:b5:ae:f5:86:98:b2:69: af:b4:02:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC Qzc5QjlGQzIwHhcNMjUwNDI0MTYzODQ3WhcNMjUwNTAxMTYzODQ3WjAYMRYwFAYD VQQDEw02ODBhNjkxNy1mNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xAFBBdOyRr+MFbRO1GpHdu+87AAUO7CQ9dBH7eyEHZYOUr9eFBMc22eJsz5 Bfqn248y0LtVokPVSXnlifebPFdhR/93nR8f8RzGvGIvuOt7nRVTuHMExtNg2Rq5 vov0DNKAePWzmp+T1ahCVVVCiq9OYNJ6aOx6fwN2aIc3GTcCp+LLM24md/FQM/ZK Z0guCLV+7uwj7oTkaHMBZkCQWOY2fSXsow/8RYr4MiYWw0GuL8wAlgk+8tbJ5C74 BA7sJQZRPVaCaVrCgrR44ZDv5hubXeXIZkbkoMbB6JBqIb6MKercBz/t5UNxboNi sY//M1SGb4mK/44Xvo48OGxv1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2O3vDX kojJEa13R1+UWlZmGYUGMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhFMi80QzkwOEEyMkUwQjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQ WklER00xSUhhVU84ZWJuOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCl9637//QmM1L6NgcEfT90/XxLKLolDLWwOtZHsO8wZtUpUkFDYVU LvrSaDEe52cFpE6LPXtEwDTrcHxXwO0pKJ70pp4aLAiXJhD51fatWx+Q2h0Q2J3G zf4LJWw+35tvkNZKDdMMG8J0v8wiBrWJyvEtpsOZfj/Q4bn7TY6+iJVolJPlcTYY P8Wo/433ZrGbdRUHIgi0LMBBJCQ8S2IOZodtu4NrAk8W1Xv+6FPJe2ZfBMcPm6Po 3pVom3mM8puf59AjnJNGiOWakuCdPu6BSrVHlyG7aA/qhONVLTe6M6+S6P33ant9 xiRNN/SjePn3+MyK0LWu9YaYsmmvtAI5 -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:31 2025 by rpki-client