$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json) Hash identifier: SCQVnTqvpy8IREjvbmTqvAb6opUPGxOuUf8JMS3Kuq8= Subject key identifier: 6C:AB:CD:5C:04:85:87:31:C0:EC:DD:29:4D:98:AE:6A:78:6B:2D:2D Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft Manifest number: 0184 Signing time: Fri 25 Apr 2025 02:47:29 +0000 Manifest this update: Fri 25 Apr 2025 02:47:29 +0000 Manifest next update: Fri 02 May 2025 02:47:29 +0000 Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: MMZSF7PgN3hRd4nRmPHzNILbAmBIeRCYKaB6vaI4vT8=) 2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: 8W11lhJNXDI/B18v0915hoFQti7BAopL/ni44iL17Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Validity Not Before: Apr 25 02:47:29 2025 GMT Not After : May 2 02:47:29 2025 GMT Subject: CN=680af7c1-7346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:38:2b:0b:89:ac:66:cc:3f:65:e6:8a:b1: 8d:71:e4:44:3e:0e:66:cf:b6:a0:19:4a:35:70:e9: e5:b2:ab:80:e4:4e:51:17:54:a5:91:c5:09:b2:75: 2e:b7:ed:5f:b5:42:e5:0c:58:11:47:2d:13:b7:2e: 7b:0f:cc:0f:1b:12:e8:1a:f9:16:58:f5:1b:be:2e: 1d:3e:59:eb:6d:26:2b:98:69:99:ae:e1:16:0d:75: 00:e3:ce:46:b6:6b:d2:80:61:dd:62:26:06:be:a8: 17:4c:bc:a6:b2:08:f4:56:3f:03:18:39:2a:f6:7d: 33:c5:78:df:4b:03:05:a0:67:2a:1a:81:c0:05:43: 3e:29:9e:92:45:17:96:94:01:c8:fe:e2:3f:65:b6: 77:ee:e9:aa:4b:98:a3:c0:e1:25:1e:7e:4a:cc:84: b1:88:53:37:7d:cf:43:e2:88:95:a9:75:e9:f2:f5: f1:4d:36:9a:5d:ca:5f:d6:f4:2a:08:04:a5:24:45: ec:c9:76:f2:48:71:1c:dc:4e:21:bf:ac:3a:0a:7a: c5:fb:ad:c9:79:69:02:ed:b5:c8:10:65:52:68:3e: 99:47:7a:eb:92:fb:20:33:8a:ec:63:cd:df:45:bd: ee:55:bc:9a:48:13:ae:07:9d:bb:3a:08:f3:f4:89: 79:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AB:CD:5C:04:85:87:31:C0:EC:DD:29:4D:98:AE:6A:78:6B:2D:2D X509v3 Authority Key Identifier: keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:8e:56:eb:65:55:1d:50:52:14:62:2c:9e:ab:63:a6:2b:72: dd:4c:80:3a:cb:01:6e:35:97:5c:85:4d:50:fc:bc:29:11:e0: 56:9d:96:91:04:8c:6d:0a:e7:9c:f2:29:a0:8c:02:fb:6c:1b: d7:6c:10:23:72:e8:87:66:c5:58:3d:3a:b2:1c:0e:25:ad:67: 56:4c:06:4a:cf:d6:0d:5f:e4:46:b9:9a:e0:bb:1d:aa:cc:02: 1c:d2:de:53:ff:ae:03:12:a3:dd:da:d0:cb:d9:8a:f8:c5:89: c0:bb:30:08:1a:1d:98:aa:cb:e8:f9:73:0b:50:25:53:e0:72: e4:8b:4f:d3:60:18:60:6a:cc:e3:85:81:d6:7b:ad:28:13:1e: 5c:27:44:3a:c6:bb:05:53:f3:ad:59:f6:c6:b0:26:89:f5:f6: e6:66:0e:85:f4:11:f9:42:ed:d9:f7:f2:ff:a8:f9:ff:48:70: 27:84:05:37:8a:de:43:41:8e:9f:40:ca:5f:e7:2b:db:b8:70: 8f:f2:34:dd:03:0c:f3:a2:ee:14:13:c1:50:81:b0:71:7e:e7: a2:12:f4:cd:57:7c:8f:a7:06:15:b8:4f:c5:aa:08:66:d6:59: 21:4b:43:19:bd:1a:64:75:b0:73:aa:62:7b:ce:a5:48:8b:27: 96:cf:6a:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNUYxMTAvBgNVBAUTKEMwNkZGMDA1REUxRDVFRjEzQkE4RjBDMjYwRTk2MzAz NEE1QTIyQ0EwHhcNMjUwNDI1MDI0NzI5WhcNMjUwNTAyMDI0NzI5WjAYMRYwFAYD VQQDEw02ODBhZjdjMS03MzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmk4KwuJrGbMP2XmirGNceREPg5mz7agGUo1cOnlsquA5E5RF1SlkcUJsnUu t+1ftULlDFgRRy0Tty57D8wPGxLoGvkWWPUbvi4dPlnrbSYrmGmZruEWDXUA485G tmvSgGHdYiYGvqgXTLymsgj0Vj8DGDkq9n0zxXjfSwMFoGcqGoHABUM+KZ6SRReW lAHI/uI/ZbZ37umqS5ijwOElHn5KzISxiFM3fc9D4oiVqXXp8vXxTTaaXcpf1vQq CASlJEXsyXbySHEc3E4hv6w6CnrF+63JeWkC7bXIEGVSaD6ZR3rrkvsgM4rsY83f Rb3uVbyaSBOuB527Ogjz9Il5xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyrzVwE hYcxwOzdKU2Yrmp4ay0tMB8GA1UdIwQYMBaAFMBv8AXeHV7xO6jwwmDpYwNKWiLK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1Ri9GNzQ1NUFBQUQy QjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2RTdxUERDWU9sakEwcGFJ c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dHX3dCZDRkWHZFN3FQRENZT2xqQTBwYUlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1Ri9GNzQ1NUFBQUQyQjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2 RTdxUERDWU9sakEwcGFJc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZjlbrZVUdUFIUYiyeq2OmK3LdTIA6ywFuNZdchU1Q/LwpEeBWnZaR BIxtCuec8imgjAL7bBvXbBAjcuiHZsVYPTqyHA4lrWdWTAZKz9YNX+RGuZrgux2q zAIc0t5T/64DEqPd2tDL2Yr4xYnAuzAIGh2Yqsvo+XMLUCVT4HLki0/TYBhgaszj hYHWe60oEx5cJ0Q6xrsFU/OtWfbGsCaJ9fbmZg6F9BH5Qu3Z9/L/qPn/SHAnhAU3 it5DQY6fQMpf5yvbuHCP8jTdAwzzou4UE8FQgbBxfueiEvTNV3yPpwYVuE/Fqghm 1lkhS0MZvRpkdbBzqmJ7zqVIiyeWz2pM -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:14 2025 by rpki-client