$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft File: wvuur6_7tA2qpRworxHolYOxPwo.mft (raw, json) Hash identifier: lIpk4/qnxoNJ9xnRlwr7Ab9nN1uDYII+NXcOLK6FwUA= Subject key identifier: 6E:80:7E:DC:D1:79:06:41:3A:F5:A2:D1:04:FB:F2:F9:1D:51:89:37 Authority key identifier: C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A Certificate issuer: /CN=A91612FE/serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft Manifest number: 5A Signing time: Mon 05 May 2025 05:58:49 +0000 Manifest this update: Mon 05 May 2025 05:58:48 +0000 Manifest next update: Mon 12 May 2025 05:58:48 +0000 Files and hashes: 1: wvuur6_7tA2qpRworxHolYOxPwo.crl (hash: ScgCe09mnvkeCAw6KjeuimepZi6RB0hR/NYLxpFU+V8=) 2: A263DD4CA25511EF90E9CA2AC4F9AE02.roa (hash: ecS+aDoIKoDnNRBWYgcdOS4F+XfGqAG3qfH10LoSK6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91612FE, serialNumber=C2FBAEAFAFFBB40DAAA51C28AF11E89583B13F0A Validity Not Before: May 5 05:58:48 2025 GMT Not After : May 12 05:58:48 2025 GMT Subject: CN=68185399-e09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:f6:48:43:18:e0:c4:3c:b3:4c:79:50:82: 0e:7a:0c:0e:2a:51:95:5f:87:44:1d:bb:cc:1b:0a: 97:3c:7e:f9:49:24:0a:18:00:99:bb:30:3c:b4:b0: 99:30:99:7e:83:85:87:78:5b:9f:3c:c9:bf:ff:06: 01:d7:62:29:16:bf:19:d1:6d:07:21:9b:d6:13:13: d7:da:e0:62:11:46:53:2f:88:bd:26:36:1e:d5:d1: 80:4a:c2:e0:98:65:ae:48:07:a4:5a:26:eb:3e:e0: c2:85:32:ed:1e:b1:e5:73:a4:4a:f2:4c:6a:db:71: ee:69:01:e3:05:74:af:7c:c4:1f:ee:51:5a:c2:07: 28:48:24:7e:a9:14:8f:85:c8:2b:63:0a:90:fc:a4: b7:4c:e6:1a:b9:79:44:57:b6:d9:04:01:8f:d1:33: 7b:e7:a2:f5:5a:a2:ec:64:61:19:2a:f9:5a:c6:ba: 84:e2:df:2c:d2:40:15:f6:45:b1:ba:8b:b7:c6:c3: e6:dd:9d:10:49:d4:db:29:9e:91:3c:bf:1e:c0:a1: 70:90:53:d0:ca:ef:85:fd:72:18:8f:ea:95:f5:eb: 3f:7d:00:e1:63:34:23:94:b7:53:12:da:38:01:5f: b0:a1:d3:4c:0b:84:63:bb:f1:9a:80:be:a3:09:a9: 2a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:80:7E:DC:D1:79:06:41:3A:F5:A2:D1:04:FB:F2:F9:1D:51:89:37 X509v3 Authority Key Identifier: keyid:C2:FB:AE:AF:AF:FB:B4:0D:AA:A5:1C:28:AF:11:E8:95:83:B1:3F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wvuur6_7tA2qpRworxHolYOxPwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/416C8840A25511EFB2CA782AC4F9AE02/wvuur6_7tA2qpRworxHolYOxPwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d7:1d:fb:7f:c8:c4:3a:9b:33:f5:b2:5a:f8:e8:e2:cd:7a: 3b:2f:37:4c:8b:cf:4a:71:14:b8:3e:eb:2b:4f:07:9e:0d:bf: bd:92:c8:15:36:9f:e1:54:22:fe:eb:ce:d0:63:a4:66:5b:df: 9b:af:ca:f2:3d:89:61:01:82:7d:50:37:cd:11:86:8c:5e:c4: 74:e5:7e:72:4c:9a:7e:8d:36:bb:c9:fd:8a:1a:1b:a0:79:fd: 41:b9:8c:86:44:f5:6e:45:ef:ed:6f:e2:7a:1f:10:db:7f:ad: 86:5e:e6:6d:0a:1c:f0:e8:ba:6f:c9:f8:09:12:0c:d3:06:82: 37:3e:12:6f:c1:5e:3f:09:93:cd:44:0e:07:87:1a:70:7c:ee: dc:80:c8:22:45:60:6e:8a:8f:ae:fc:d1:b6:14:45:2f:c9:b5: f4:2c:54:6a:7d:cd:cd:00:f5:8b:61:9b:02:61:13:2d:84:53: 16:0a:32:d8:67:f9:69:dc:a7:07:3f:7d:12:79:39:1c:85:18: 1f:be:38:90:d1:93:f5:55:91:52:44:45:ab:09:20:dc:b3:22: 99:d9:16:d7:04:6c:99:a2:c6:61:35:eb:43:80:58:ab:0b:91: 13:d3:a4:3a:ff:f2:f1:20:5d:83:fa:fb:ec:ee:c2:fc:9d:b2: 77:ec:bc:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTJGRTExMC8GA1UEBRMoQzJGQkFFQUZBRkZCQjQwREFBQTUxQzI4QUYxMUU4OTU4 M0IxM0YwQTAeFw0yNTA1MDUwNTU4NDhaFw0yNTA1MTIwNTU4NDhaMBgxFjAUBgNV BAMTDTY4MTg1Mzk5LWUwOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4gPZIQxjgxDyzTHlQgg56DA4qUZVfh0Qdu8wbCpc8fvlJJAoYAJm7MDy0sJkw mX6DhYd4W588yb//BgHXYikWvxnRbQchm9YTE9fa4GIRRlMviL0mNh7V0YBKwuCY Za5IB6RaJus+4MKFMu0eseVzpEryTGrbce5pAeMFdK98xB/uUVrCByhIJH6pFI+F yCtjCpD8pLdM5hq5eURXttkEAY/RM3vnovVaouxkYRkq+VrGuoTi3yzSQBX2RbG6 i7fGw+bdnRBJ1NspnpE8vx7AoXCQU9DK74X9chiP6pX16z99AOFjNCOUt1MS2jgB X7Ch00wLhGO78ZqAvqMJqSpLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUboB+3NF5 BkE69aLRBPvy+R1RiTcwHwYDVR0jBBgwFoAUwvuur6/7tA2qpRworxHolYOxPwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMkZFLzQxNkM4ODQwQTI1 NTExRUZCMkNBNzgyQUM0RjlBRTAyL3d2dXVyNl83dEEycXBSd29yeEhvbFlPeFB3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd3Z1dXI2Xzd0QTJxcFJ3b3J4SG9sWU94UHdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx MkZFLzQxNkM4ODQwQTI1NTExRUZCMkNBNzgyQUM0RjlBRTAyL3d2dXVyNl83dEEy cXBSd29yeEhvbFlPeFB3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHHXHft/yMQ6mzP1slr46OLNejsvN0yLz0pxFLg+6ytPB54Nv72SyBU2 n+FUIv7rztBjpGZb35uvyvI9iWEBgn1QN80RhoxexHTlfnJMmn6NNrvJ/YoaG6B5 /UG5jIZE9W5F7+1v4nofENt/rYZe5m0KHPDoum/J+AkSDNMGgjc+Em/BXj8Jk81E DgeHGnB87tyAyCJFYG6Kj6780bYURS/JtfQsVGp9zc0A9YthmwJhEy2EUxYKMthn +Wncpwc/fRJ5ORyFGB++OJDRk/VVkVJERasJINyzIpnZFtcEbJmixmE160OAWKsL kRPTpDr/8vEgXYP6++zuwvydsnfsvI0= -----END CERTIFICATE-----Generated at Tue May 6 09:37:33 2025 by rpki-client