$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft File: WapOuYXqXAVIVAS0XMNUp9Ghpso.mft (raw, json) Hash identifier: Dvxc4YCDmxQaNEsYVBvligqrPsV+bZda+aQs8m8mmCo= Subject key identifier: BD:46:4D:99:E4:B8:65:96:44:78:6F:81:48:A8:BD:A5:B2:43:A3:43 Authority key identifier: 59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA Certificate issuer: /CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft Manifest number: 01C1 Signing time: Fri 25 Apr 2025 02:22:10 +0000 Manifest this update: Fri 25 Apr 2025 02:22:10 +0000 Manifest next update: Fri 02 May 2025 02:22:10 +0000 Files and hashes: 1: WapOuYXqXAVIVAS0XMNUp9Ghpso.crl (hash: 5gZcHEjDGcS/CBIYZ9K+W0slJ7/Pb5PZRjGEtNQICDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Validity Not Before: Apr 25 02:22:10 2025 GMT Not After : May 2 02:22:10 2025 GMT Subject: CN=680af1d2-d8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:de:2e:96:ef:8d:32:38:f5:21:a7:1c:9c: b0:9a:7c:a0:62:2b:4f:85:5c:21:2e:84:58:6e:6b: cf:89:66:22:14:c7:f7:0a:07:2d:53:42:79:92:94: 03:86:85:9e:79:d6:56:58:92:42:4a:4f:a0:38:c9: 20:17:65:cf:98:8d:01:74:a5:0d:83:fb:ef:6e:45: 26:b3:d3:12:c5:8d:c5:c7:88:5d:47:e7:f7:8c:6b: a8:e0:50:2c:ac:de:56:69:26:db:ee:7c:4c:28:7b: d0:57:b0:bb:17:f3:7d:5c:96:63:bf:68:8a:8d:d4: b6:89:87:c5:72:70:00:64:b4:94:f9:ef:8a:55:2e: 8b:1c:a7:92:cf:f6:87:f9:38:40:c6:9f:9a:97:47: fe:15:30:07:26:7f:ea:66:5f:4b:35:0c:c8:e7:81: 25:27:dd:d1:0c:6e:9d:f8:96:00:1f:ae:30:12:6a: bc:7f:a5:55:f4:11:d2:de:d7:16:67:23:a4:eb:e8: 4a:40:39:1e:c1:63:43:67:b4:ec:57:2a:dc:fd:29: 47:fa:3a:c1:6c:69:ef:b3:5e:24:30:e4:68:40:1f: a2:fc:19:0b:80:d0:e7:85:51:93:05:f7:10:c1:a5: 8d:04:1d:53:85:48:70:d3:7f:f5:f5:49:16:a9:67: 83:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:46:4D:99:E4:B8:65:96:44:78:6F:81:48:A8:BD:A5:B2:43:A3:43 X509v3 Authority Key Identifier: keyid:59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:78:eb:6e:0c:1d:ba:61:cd:d7:e4:86:70:e8:e7:c4:be:56: 6f:5a:43:a1:d2:94:33:4f:2e:cd:eb:5c:76:c6:af:1b:34:57: 6b:c0:28:86:9c:1c:26:45:22:11:92:40:2d:6b:cb:0f:da:d1: d9:28:87:fb:57:5c:5a:3d:f9:4d:a0:ae:58:56:a5:1c:82:b5: 67:b3:48:ef:91:31:3f:d1:18:c1:04:b6:f0:32:db:b9:f3:ae: 86:9e:64:39:e3:51:d6:70:3d:f2:0c:2e:81:d5:31:dc:d4:eb: 66:72:44:2a:a8:f3:6c:c8:e3:f7:f2:7b:14:3d:1e:e1:46:79: 00:a6:1b:25:95:ab:b5:21:47:23:64:fb:f2:33:d4:1f:69:04: 24:be:63:9b:70:3d:f5:55:25:af:f2:c0:e4:ea:6f:fd:7f:ba: 0c:ba:89:35:64:07:7a:7b:4e:2a:0e:4a:b5:38:e8:6e:d5:3a: 94:79:f4:af:cd:0b:5e:6f:7d:e5:0e:12:2e:d0:54:11:7c:f7: 73:68:07:38:73:16:a7:6f:9f:a3:bc:8d:15:ea:cf:01:ae:40: 5b:a1:63:8c:ca:a0:75:02:26:f2:0c:df:ba:ba:14:72:a5:6c: 1b:ef:a3:e2:ee:96:e3:18:b2:7c:6b:a9:c2:6e:33:fb:92:ae: ba:91:ad:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QzgxMTAvBgNVBAUTKDU5QUE0RUI5ODVFQTVDMDU0ODU0MDRCNDVDQzM1NEE3 RDFBMUE2Q0EwHhcNMjUwNDI1MDIyMjEwWhcNMjUwNTAyMDIyMjEwWjAYMRYwFAYD VQQDEw02ODBhZjFkMi1kOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoreLpbvjTI49SGnHJywmnygYitPhVwhLoRYbmvPiWYiFMf3CgctU0J5kpQD hoWeedZWWJJCSk+gOMkgF2XPmI0BdKUNg/vvbkUms9MSxY3Fx4hdR+f3jGuo4FAs rN5WaSbb7nxMKHvQV7C7F/N9XJZjv2iKjdS2iYfFcnAAZLSU+e+KVS6LHKeSz/aH +ThAxp+al0f+FTAHJn/qZl9LNQzI54ElJ93RDG6d+JYAH64wEmq8f6VV9BHS3tcW ZyOk6+hKQDkewWNDZ7TsVyrc/SlH+jrBbGnvs14kMORoQB+i/BkLgNDnhVGTBfcQ waWNBB1ThUhw03/19UkWqWeDgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1GTZnk uGWWRHhvgUiovaWyQ6NDMB8GA1UdIwQYMBaAFFmqTrmF6lwFSFQEtFzDVKfRoabK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhBVklWQVMwWE1OVXA5R2hw c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhcE91WVhxWEFWSVZBUzBYTU5VcDlHaHBzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhB VklWQVMwWE1OVXA5R2hwc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9eOtuDB26Yc3X5IZw6OfEvlZvWkOh0pQzTy7N61x2xq8bNFdrwCiG nBwmRSIRkkAta8sP2tHZKIf7V1xaPflNoK5YVqUcgrVns0jvkTE/0RjBBLbwMtu5 866GnmQ541HWcD3yDC6B1THc1OtmckQqqPNsyOP38nsUPR7hRnkAphsllau1IUcj ZPvyM9QfaQQkvmObcD31VSWv8sDk6m/9f7oMuok1ZAd6e04qDkq1OOhu1TqUefSv zQteb33lDhIu0FQRfPdzaAc4cxanb5+jvI0V6s8BrkBboWOMyqB1AibyDN+6uhRy pWwb76Pi7pbjGLJ8a6nCbjP7kq66ka0t -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:27 2025 by rpki-client