$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft File: Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json) Hash identifier: sYXLrICzUl2hNhy7YWFUNKinTrVWIVzzj/r2cUl8MAU= Subject key identifier: 9A:9D:64:1C:78:4E:D5:9C:D0:45:BB:6E:71:53:A8:5D:2C:DB:60:43 Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft Manifest number: 12 Signing time: Fri 25 Apr 2025 07:02:30 +0000 Manifest this update: Fri 25 Apr 2025 07:02:29 +0000 Manifest next update: Fri 02 May 2025 07:02:29 +0000 Files and hashes: 1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: Gty/cx4g4fTcwVN8FToLPOi8ZTEeXzGWx0MXnDOQW9g=) 2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: uW1VF7Kvr3qqb0xY8fd0nDeotf3CK4ccwfdt9+YehUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A Validity Not Before: Apr 25 07:02:29 2025 GMT Not After : May 2 07:02:29 2025 GMT Subject: CN=680b3386-cf41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:d8:0e:a3:29:00:83:2c:f9:73:8d:48:c3: 5d:a5:90:91:f5:25:bf:ad:42:36:9d:c3:53:cb:c9: ce:97:60:26:41:98:da:c6:b0:69:72:7a:64:0d:53: 2c:7b:4b:05:78:26:e5:ac:65:2a:59:a6:c2:19:ea: a8:c4:64:e8:37:2d:d3:54:36:d6:52:e7:86:9a:84: 5d:b8:23:1e:59:11:58:b6:ec:a6:9e:41:0f:bc:b3: a3:f1:46:cf:1d:31:40:45:89:bb:88:7c:0c:1c:fd: 44:90:66:75:e5:b0:52:64:0d:93:73:1a:da:7d:63: 03:d1:84:a6:3e:3d:8c:d4:88:2b:1c:f5:d3:7b:ee: 2b:4a:0a:48:fc:f3:a3:8c:a3:d3:6d:9c:25:6a:f7: 26:62:96:08:2d:5b:37:95:b3:b6:4c:dc:07:2e:4d: e2:d6:62:36:2d:03:a1:ea:ab:a3:36:10:d6:63:ed: db:23:68:2d:4f:da:4e:c7:73:a0:88:a7:d3:2e:99: df:e4:b8:93:60:10:c2:9f:93:53:1c:2e:8e:7b:fb: e3:97:cb:22:95:95:06:f8:07:38:87:1c:82:39:76: ab:28:49:24:25:ac:ea:30:de:eb:ab:e0:3b:de:fa: 5f:29:c9:89:5e:1c:c4:79:da:e7:3e:84:8b:ba:ec: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9D:64:1C:78:4E:D5:9C:D0:45:BB:6E:71:53:A8:5D:2C:DB:60:43 X509v3 Authority Key Identifier: keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6c:90:e8:5b:03:52:9e:9f:6e:f8:b8:ea:a3:79:2f:9e:38: 2e:2d:20:32:ed:4e:93:d3:1d:c0:f2:d6:f3:21:89:1f:f6:76: c6:9e:38:39:23:fe:4a:af:be:16:b1:4b:22:38:a1:d7:b5:9f: 30:67:6d:98:48:df:c6:51:47:92:8f:35:da:41:29:d9:d0:39: ab:b4:1a:7d:1a:87:3a:e5:36:65:72:eb:1b:63:82:7a:46:81: eb:42:96:5f:cf:8a:c5:fa:cd:a8:04:de:7c:6d:0f:34:7e:6b: 41:18:ec:5b:12:e3:ff:58:80:f8:7e:77:1d:02:fa:54:fa:50: 94:f7:26:23:e9:11:11:a0:b1:63:bf:3a:4f:01:b6:f5:80:29: ab:f5:cf:4d:cb:6f:2b:28:51:60:e4:98:0d:1d:c8:de:7f:e6: 30:bc:01:98:52:d2:1e:53:59:b8:ac:f8:0f:c4:02:6f:3d:96: bf:0f:c3:7e:af:06:20:69:5b:69:bd:db:9f:1e:ed:ec:2e:cb: e0:2d:a0:c4:71:aa:91:d6:19:3f:76:e3:83:63:e7:d4:66:ac: 8b:e6:b9:67:11:39:5e:0c:42:48:ac:ee:40:c4:0d:e8:7f:02: 04:9e:b4:75:ac:cb:f8:8b:d5:84:cd:bf:d5:df:14:54:cb:fc: 84:cc:d9:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUE4MjExMC8GA1UEBRMoNUFCRUNEOEVBQUQzN0VBNTdBRUI5MzlGMkMwQjE0Mjk3 NDg0MUY4QTAeFw0yNTA0MjUwNzAyMjlaFw0yNTA1MDIwNzAyMjlaMBgxFjAUBgNV BAMTDTY4MGIzMzg2LWNmNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmB9gOoykAgyz5c41Iw12lkJH1Jb+tQjadw1PLyc6XYCZBmNrGsGlyemQNUyx7 SwV4JuWsZSpZpsIZ6qjEZOg3LdNUNtZS54aahF24Ix5ZEVi27KaeQQ+8s6PxRs8d MUBFibuIfAwc/USQZnXlsFJkDZNzGtp9YwPRhKY+PYzUiCsc9dN77itKCkj886OM o9NtnCVq9yZilggtWzeVs7ZM3AcuTeLWYjYtA6Hqq6M2ENZj7dsjaC1P2k7Hc6CI p9Mumd/kuJNgEMKfk1McLo57++OXyyKVlQb4BziHHII5dqsoSSQlrOow3uur4Dve +l8pyYleHMR52uc+hIu67JW9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmp1kHHhO 1ZzQRbtucVOoXSzbYEMwHwYDVR0jBBgwFoAUWr7NjqrTfqV665OfLAsUKXSEH4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1QTgyL0JCOThBNDVFMDkw ODExRjBBNDkzRTkyMkM0RjlBRTAyL1dyN05qcXJUZnFWNjY1T2ZMQXNVS1hTRUg0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3I3TmpxclRmcVY2NjVPZkxBc1VLWFNFSDRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 QTgyL0JCOThBNDVFMDkwODExRjBBNDkzRTkyMkM0RjlBRTAyL1dyN05qcXJUZnFW NjY1T2ZMQXNVS1hTRUg0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAhskOhbA1Ken274uOqjeS+eOC4tIDLtTpPTHcDy1vMhiR/2dsaeODkj /kqvvhaxSyI4ode1nzBnbZhI38ZRR5KPNdpBKdnQOau0Gn0ahzrlNmVy6xtjgnpG getCll/PisX6zagE3nxtDzR+a0EY7FsS4/9YgPh+dx0C+lT6UJT3JiPpERGgsWO/ Ok8BtvWAKav1z03LbysoUWDkmA0dyN5/5jC8AZhS0h5TWbis+A/EAm89lr8Pw36v BiBpW2m9258e7ewuy+AtoMRxqpHWGT9244Nj59RmrIvmuWcROV4MQkis7kDEDeh/ AgSetHWsy/iL1YTNv9XfFFTL/ITM2bU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:38 2025 by rpki-client