$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json) Hash identifier: h8mywMxjCsenXnzdWdsT5mYW/es0bQwfIeOEPCjqAjU= Subject key identifier: 4E:10:36:A9:B3:7A:A0:CC:85:3C:97:80:88:2E:2E:87:73:1B:E1:47 Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 0F83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft Manifest number: 0F71 Signing time: Thu 24 Apr 2025 17:33:57 +0000 Manifest this update: Thu 24 Apr 2025 17:33:57 +0000 Manifest next update: Thu 01 May 2025 17:33:57 +0000 Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: AA+cWkjK9T24zFXM1eMDMjCbsf00vZPMZWZ3eAWTrr4=) 2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: brx75mAIZcLmrMrMmInTA2Jwy5WbjMuVgkiLF5aIeqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3971 (0xf83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: Apr 24 17:33:57 2025 GMT Not After : May 1 17:33:57 2025 GMT Subject: CN=680a7605-d10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:92:1e:34:34:72:17:c7:44:40:d2:68:22: 38:9d:aa:c1:6a:a9:f9:98:cd:5a:68:2e:06:8e:f9: a9:2a:f1:66:12:56:15:3e:cb:05:4c:7f:96:fb:82: 5f:dd:4e:3c:f0:98:b3:31:f1:c8:cb:a9:f8:39:a6: 44:e7:60:15:4e:90:48:36:7d:41:63:b1:86:d3:7c: 53:85:05:14:67:9e:4b:33:ee:2a:e7:2d:81:70:ea: 20:92:6c:cc:d3:c7:44:94:54:66:90:b3:95:e5:e3: b2:59:9f:b6:42:0c:1b:19:8b:e1:e6:4b:36:84:c7: 5d:08:52:cf:77:cd:a3:5e:23:f7:c9:8d:0d:6f:ab: 4a:9f:6c:ae:b3:da:24:81:17:74:d2:a8:be:e6:92: 2d:a0:3a:b8:34:8d:59:7c:6f:92:49:e2:dd:bd:6f: 66:81:71:b0:d2:e8:d6:1b:b2:df:f1:ea:b0:24:b8: 90:3c:f8:a9:a6:22:cd:21:8d:9d:7c:73:15:93:d2: 78:61:69:4b:bd:9b:b7:cd:bc:b5:d8:9e:4a:9e:cd: e5:b3:29:b3:42:2b:fc:c3:41:9b:ba:e0:b3:b6:69: a1:63:dc:23:dd:f5:6e:39:33:58:69:71:18:b1:f7: cc:d4:76:3d:68:28:8b:04:06:54:da:14:82:fb:ce: b4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:10:36:A9:B3:7A:A0:CC:85:3C:97:80:88:2E:2E:87:73:1B:E1:47 X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:10:54:a6:63:ca:05:9c:78:0c:89:ad:a5:f2:e0:ad:37:4e: f0:a9:a1:d7:e2:e4:78:d7:c7:bb:d8:70:24:b5:43:6b:e3:c2: bd:24:5c:61:f9:40:e0:d8:7b:80:8c:c5:a0:45:77:26:a3:dc: ca:89:87:16:1c:d3:5a:bb:73:83:9f:f6:03:a0:17:d4:b7:9f: dd:5c:5a:86:1b:f8:fc:10:f6:d2:68:cf:0a:58:69:82:2e:ce: 77:3b:4e:ac:05:b3:66:c1:ca:b5:b6:2c:a9:9d:1f:ca:c2:fc: 12:bc:7a:ef:b7:15:e3:d7:5f:d0:b1:c8:3c:66:1d:a1:0c:c0: 90:d7:73:a6:5c:b9:2a:f6:d0:38:35:05:99:1e:c1:a9:ce:18: 2e:11:be:74:f1:2b:02:c5:6c:34:80:4a:63:94:99:c4:8f:46: b4:be:10:3d:c4:82:95:fa:ad:4b:a9:de:90:ef:0e:e4:17:ad: 36:9c:ab:5c:8d:c8:92:d1:98:92:44:4a:fd:24:b9:8f:10:06: 60:bb:12:fc:f0:6f:6a:e1:24:b6:cf:ed:ec:b4:3a:a5:8b:31: 3c:0b:41:85:48:55:59:23:91:78:19:cf:e1:86:3e:bd:60:8e: 17:ec:f2:41:b1:ea:e6:2d:5e:9e:98:ab:f9:f4:01:cd:84:57: de:3c:13:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjUwNDI0MTczMzU3WhcNMjUwNTAxMTczMzU3WjAYMRYwFAYD VQQDEw02ODBhNzYwNS1kMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQ+SHjQ0chfHREDSaCI4narBaqn5mM1aaC4GjvmpKvFmElYVPssFTH+W+4Jf 3U488JizMfHIy6n4OaZE52AVTpBINn1BY7GG03xThQUUZ55LM+4q5y2BcOogkmzM 08dElFRmkLOV5eOyWZ+2QgwbGYvh5ks2hMddCFLPd82jXiP3yY0Nb6tKn2yus9ok gRd00qi+5pItoDq4NI1ZfG+SSeLdvW9mgXGw0ujWG7Lf8eqwJLiQPPippiLNIY2d fHMVk9J4YWlLvZu3zby12J5Kns3lsymzQiv8w0GbuuCztmmhY9wj3fVuOTNYaXEY sffM1HY9aCiLBAZU2hSC+860XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4QNqmz eqDMhTyXgIguLodzG+FHMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTZCRC85OEE1REY5QzY1ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNU YkE4bHJ4bGJOd041bDdGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiEFSmY8oFnHgMia2l8uCtN07wqaHX4uR418e72HAktUNr48K9JFxh +UDg2HuAjMWgRXcmo9zKiYcWHNNau3ODn/YDoBfUt5/dXFqGG/j8EPbSaM8KWGmC Ls53O06sBbNmwcq1tiypnR/KwvwSvHrvtxXj11/Qscg8Zh2hDMCQ13OmXLkq9tA4 NQWZHsGpzhguEb508SsCxWw0gEpjlJnEj0a0vhA9xIKV+q1Lqd6Q7w7kF602nKtc jciS0ZiSREr9JLmPEAZguxL88G9q4SS2z+3stDqlizE8C0GFSFVZI5F4Gc/hhj69 YI4X7PJBsermLV6emKv59AHNhFfePBNW -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:40 2025 by rpki-client