$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json) Hash identifier: 9S2HdOdn3VERNkLRLwwbQXEJVwboDmlYLhILemN3X5A= Subject key identifier: AD:15:BC:62:AF:08:F5:EC:4B:05:33:EF:E2:30:26:8D:28:C8:A3:3A Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft Manifest number: 0119 Signing time: Thu 01 May 2025 03:46:56 +0000 Manifest this update: Thu 01 May 2025 03:46:56 +0000 Manifest next update: Thu 08 May 2025 03:46:56 +0000 Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: 41SumH3AZ6/Tnq1kQKsj6r0TRnSFgvPm860hjiLbsIc=) 2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: l8sRE2YAPh1eQYlp9y5e6VCbUFJp+lvUI5lEd97/izs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 03:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Validity Not Before: May 1 03:46:56 2025 GMT Not After : May 8 03:46:56 2025 GMT Subject: CN=6812eeb0-6eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:76:c6:84:88:4e:20:0d:76:4c:3a:28:6c: 18:0f:f5:49:a1:eb:b6:c5:0a:0f:eb:a0:8d:01:45: c2:05:4e:2e:58:9f:d4:04:ca:2b:4f:0c:98:8e:47: 31:de:3c:ed:fc:e6:a7:c9:19:28:a5:4b:42:65:f3: 21:5d:ac:9a:91:98:d3:d0:57:92:90:cc:93:98:ae: 91:d1:06:83:59:62:76:3b:07:3c:fa:37:93:5d:93: b9:e4:19:92:91:60:f1:f8:7e:32:12:e6:39:c9:d8: d5:f6:d9:a8:31:87:3a:23:eb:16:4e:f3:6d:64:50: a0:88:4a:96:4f:bf:91:c7:3b:29:82:ec:2a:f1:79: d3:7a:25:b3:80:a2:77:7f:79:9f:cd:66:0d:fe:2c: 82:a4:ac:f3:a9:ec:fd:d2:f6:75:8a:33:d2:7f:a9: 0c:c5:4f:c6:72:c2:40:fc:ba:60:bc:d0:db:d2:e2: 20:b2:59:f7:ee:78:fd:c3:5d:51:05:32:6f:da:02: 3a:11:d1:e2:45:c3:55:46:5f:48:33:e2:29:03:5f: c6:ae:fb:c3:f3:ba:2d:58:98:1b:00:11:d2:41:57: 2c:0f:cc:c2:d8:5e:b4:2e:46:e7:76:29:65:05:b6: f3:12:01:67:97:da:f2:32:a1:6e:51:e3:07:10:24: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:15:BC:62:AF:08:F5:EC:4B:05:33:EF:E2:30:26:8D:28:C8:A3:3A X509v3 Authority Key Identifier: keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:12:a7:f8:5d:5f:d4:c5:8a:b6:c6:1c:e2:83:81:c3:43:47: 9e:b3:39:03:09:8d:27:c9:49:d1:a5:b8:5c:b2:aa:a1:04:ea: 14:3f:d8:69:3b:1b:12:59:a0:b3:d5:f9:61:8d:18:b0:07:bf: 05:4a:39:1b:f2:78:85:30:f5:30:b2:6b:57:dc:51:52:3d:72: 91:db:32:c0:4b:5f:a6:a1:eb:53:0b:48:56:8f:29:b1:8f:1c: 06:5d:fc:43:19:d0:32:17:4f:fd:91:83:2a:e5:2a:28:83:76: ca:60:7a:02:65:4b:49:ca:67:ac:3d:4c:b8:04:0b:da:47:b7: d6:44:e2:55:f2:4b:cb:dd:8d:19:a1:57:d9:2e:a1:b6:96:33: d9:b0:fb:10:5d:d9:f6:31:d3:af:d6:c5:09:e3:01:45:ce:4a: 6a:fc:c2:bf:a1:e0:55:c7:e9:94:45:6d:5e:38:02:20:39:58: 67:74:fd:7f:2b:6c:03:90:cf:bc:ea:59:eb:4a:da:5e:7e:7c: f9:b1:33:84:05:dd:c9:ea:50:d2:3b:88:46:57:76:b6:be:9e: 9c:9d:2c:b4:d5:ab:7e:b4:3a:db:bb:26:fa:49:46:e6:f5:c3: f7:19:55:48:e4:6c:22:15:5c:67:c4:e4:56:ec:e9:ff:aa:bb: c2:44:2c:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3 NjFGREI1RDgwHhcNMjUwNTAxMDM0NjU2WhcNMjUwNTA4MDM0NjU2WjAYMRYwFAYD VQQDEw02ODEyZWViMC02ZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskp2xoSITiANdkw6KGwYD/VJoeu2xQoP66CNAUXCBU4uWJ/UBMorTwyYjkcx 3jzt/OanyRkopUtCZfMhXayakZjT0FeSkMyTmK6R0QaDWWJ2Owc8+jeTXZO55BmS kWDx+H4yEuY5ydjV9tmoMYc6I+sWTvNtZFCgiEqWT7+Rxzspguwq8XnTeiWzgKJ3 f3mfzWYN/iyCpKzzqez90vZ1ijPSf6kMxU/GcsJA/LpgvNDb0uIgsln37nj9w11R BTJv2gI6EdHiRcNVRl9IM+IpA1/GrvvD87otWJgbABHSQVcsD8zC2F60Lkbndill BbbzEgFnl9ryMqFuUeMHECR5IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0VvGKv CPXsSwUz7+IwJo0oyKM6MB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5 RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx RnU0UUdWWkxyWjkySDl0ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Eqf4XV/UxYq2xhzig4HDQ0eeszkDCY0nyUnRpbhcsqqhBOoUP9hp OxsSWaCz1flhjRiwB78FSjkb8niFMPUwsmtX3FFSPXKR2zLAS1+moetTC0hWjymx jxwGXfxDGdAyF0/9kYMq5Soog3bKYHoCZUtJymesPUy4BAvaR7fWROJV8kvL3Y0Z oVfZLqG2ljPZsPsQXdn2MdOv1sUJ4wFFzkpq/MK/oeBVx+mURW1eOAIgOVhndP1/ K2wDkM+86lnrStpefnz5sTOEBd3J6lDSO4hGV3a2vp6cnSy01at+tDrbuyb6SUbm 9cP3GVVI5GwiFVxnxORW7On/qrvCRCyf -----END CERTIFICATE-----Generated at Fri May 2 11:40:23 2025 by rpki-client