$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json) Hash identifier: rmFVrvMG76xAqvHi6sPC0JDxjU3aUOTe7GU1oWH+BQE= Subject key identifier: 4E:B9:27:44:AB:84:43:C0:28:6F:C9:38:9C:B0:8B:9D:EA:48:CB:14 Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft Manifest number: 02D5 Signing time: Fri 25 Apr 2025 01:08:35 +0000 Manifest this update: Fri 25 Apr 2025 01:08:34 +0000 Manifest next update: Fri 02 May 2025 01:08:34 +0000 Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: +1pYmk7Y3+V5AwtUqfTSCMo3OQ8O5FquoGLTqNKWRgU=) 2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: 8qDmsi4NSZMggZYlQgPxLbNv2s0d0VPr9Uca3xZmDtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Validity Not Before: Apr 25 01:08:34 2025 GMT Not After : May 2 01:08:34 2025 GMT Subject: CN=680ae092-7ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:15:be:6a:d3:38:e3:ce:e4:cd:7a:e2:8b: 0e:41:67:44:fd:00:1b:97:6d:69:d4:5a:31:6d:27: a2:1a:ce:67:88:8b:04:34:6d:e2:e3:3d:e1:11:c0: c0:37:8d:e4:95:34:4b:fe:53:04:49:8f:ed:03:36: 6e:34:db:5d:8d:33:f9:88:f4:03:6e:97:60:9d:7a: dd:3b:28:6b:22:0f:ed:39:7d:c9:cc:23:93:d2:35: 5c:f5:49:ee:95:26:83:0f:2b:8a:25:75:b1:f8:51: e5:23:f8:07:b5:06:c5:d7:f0:3a:ea:67:72:5e:77: 01:2f:2e:ef:4b:da:05:ed:6f:d9:4b:77:bd:a4:07: 93:73:e1:c7:e0:4d:e5:92:5d:79:22:47:0b:e0:33: e3:4d:7b:89:14:93:f8:24:46:7f:a2:97:4f:af:0b: 98:38:ef:4d:b2:e2:a3:46:8a:9f:e4:58:d4:42:ab: 8d:55:02:57:32:0b:fa:ba:8c:fe:d3:13:56:e6:f3: b6:e9:93:dd:8f:8b:df:c0:4c:84:2f:dc:6c:e5:9f: 61:44:1a:e0:f0:35:7b:64:be:ff:8d:64:3e:ff:1b: 15:84:6a:11:2c:72:7d:38:d3:56:b0:3f:18:10:72: fc:91:cc:0b:6a:5e:46:80:98:c6:53:63:29:f2:a7: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B9:27:44:AB:84:43:C0:28:6F:C9:38:9C:B0:8B:9D:EA:48:CB:14 X509v3 Authority Key Identifier: keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c6:fe:82:24:a5:89:42:e6:a7:8a:f5:56:12:75:38:e8:38: b0:6c:e5:d5:dc:de:ac:d3:cb:81:d1:74:71:f9:23:0f:d3:65: 52:03:74:b1:cf:45:64:63:e6:e4:65:27:cd:b7:17:19:d0:2b: 47:5c:c9:35:b8:e0:78:e9:aa:77:f8:43:ea:f6:a5:9b:1d:e9: c3:c6:91:41:6d:69:99:5f:4e:5f:42:eb:8e:2d:d5:00:c1:d7: e1:16:02:1c:08:b9:56:b2:72:5b:48:9b:69:4e:c2:21:00:28: ad:fc:4c:71:dc:a2:94:c4:5f:95:57:64:40:28:96:12:36:bb: 3d:74:24:00:ce:02:33:cf:88:4d:28:69:f9:51:e3:00:e4:7e: 04:c5:39:b3:ca:8d:e4:cb:29:af:7e:46:db:71:57:b3:ae:34: 2d:cf:c1:30:bb:9a:fb:bc:87:ca:8f:d6:ae:17:44:9f:01:93: 39:76:fc:84:46:0e:27:8b:b3:4f:bb:5a:4e:7b:52:6a:d1:75: cc:82:ed:d8:c2:a4:a8:a1:e3:a5:26:7c:51:f5:3f:77:76:ac: 9a:96:1e:8e:dd:54:5c:3f:01:b2:6c:7d:41:20:51:94:63:86: 28:b7:5f:15:6b:46:a9:a7:79:7e:14:bc:bb:03:8c:30:ef:20: b8:a3:28:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFCOTAxMTAvBgNVBAUTKDVBQzM2REU5NTkzNkI4N0EwMTBBMkE0QkE5MTU2OTVB Njk5OTA3MUQwHhcNMjUwNDI1MDEwODM0WhcNMjUwNTAyMDEwODM0WjAYMRYwFAYD VQQDEw02ODBhZTA5Mi03ZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAongVvmrTOOPO5M164osOQWdE/QAbl21p1FoxbSeiGs5niIsENG3i4z3hEcDA N43klTRL/lMESY/tAzZuNNtdjTP5iPQDbpdgnXrdOyhrIg/tOX3JzCOT0jVc9Unu lSaDDyuKJXWx+FHlI/gHtQbF1/A66mdyXncBLy7vS9oF7W/ZS3e9pAeTc+HH4E3l kl15IkcL4DPjTXuJFJP4JEZ/opdPrwuYOO9NsuKjRoqf5FjUQquNVQJXMgv6uoz+ 0xNW5vO26ZPdj4vfwEyEL9xs5Z9hRBrg8DV7ZL7/jWQ+/xsVhGoRLHJ9ONNWsD8Y EHL8kcwLal5GgJjGU2Mp8qc6OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE65J0Sr hEPAKG/JOJywi53qSMsUMB8GA1UdIwQYMBaAFFrDbelZNrh6AQoqS6kVaVppmQcd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUI5MC9GODBDRUZBQ0Uy M0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVIb0JDaXBMcVJWcFdtbVpC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzTnQ2VmsydUhvQkNpcExxUlZwV21tWkJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUI5MC9GODBDRUZBQ0UyM0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVI b0JDaXBMcVJWcFdtbVpCeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvxv6CJKWJQuanivVWEnU46DiwbOXV3N6s08uB0XRx+SMP02VSA3Sx z0VkY+bkZSfNtxcZ0CtHXMk1uOB46ap3+EPq9qWbHenDxpFBbWmZX05fQuuOLdUA wdfhFgIcCLlWsnJbSJtpTsIhACit/Exx3KKUxF+VV2RAKJYSNrs9dCQAzgIzz4hN KGn5UeMA5H4ExTmzyo3kyymvfkbbcVezrjQtz8Ewu5r7vIfKj9auF0SfAZM5dvyE Rg4ni7NPu1pOe1Jq0XXMgu3YwqSooeOlJnxR9T93dqyalh6O3VRcPwGybH1BIFGU Y4Yot18Va0app3l+FLy7A4ww7yC4oyj1 -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:13 2025 by rpki-client