$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft File: WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json) Hash identifier: wZl4dW5jeAbVn9Il0Cfd0CPdSA1UuNAb3cJ+84RTqP4= Subject key identifier: E2:6A:8B:26:4C:6D:34:7F:3E:DB:39:E3:A1:8B:90:47:AF:3A:25:6B Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0B15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft Manifest number: 0B0E Signing time: Thu 24 Apr 2025 19:09:42 +0000 Manifest this update: Thu 24 Apr 2025 19:09:41 +0000 Manifest next update: Thu 01 May 2025 19:09:41 +0000 Files and hashes: 1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: vR7h3s0j6Bz52UcByn1deHtYHE/Aj2hTGX6Hi12aoOQ=) 2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: thbx7wB2Yko7c9vVEn1C7De9utHqQJCytkIE+aVUcMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2837 (0xb15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990, serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Validity Not Before: Apr 24 19:09:41 2025 GMT Not After : May 1 19:09:41 2025 GMT Subject: CN=680a8c75-6538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:68:10:15:fd:67:d3:84:65:d1:7e:ce:c1:be: 0a:e5:49:77:83:a2:58:d7:6a:92:1c:d0:81:a2:5a: 46:cb:e7:9f:b3:78:f3:25:1a:e3:87:51:6b:6d:f0: 84:dc:85:ae:a6:16:ab:bb:f7:fe:a9:c7:cf:f8:1e: 57:2f:d1:36:8a:77:0c:4f:59:ea:0e:02:57:b9:5b: 5b:c3:eb:dd:f9:f0:1d:f2:df:16:1b:86:c4:9b:4b: 41:cf:fb:d0:db:59:df:00:70:8c:3b:10:07:5e:97: 76:6d:34:0c:8b:78:9f:8c:1e:81:8e:95:e8:b3:61: 60:f8:45:0d:3d:75:37:59:86:45:87:94:f6:f9:78: 80:cc:a3:19:19:93:83:22:b7:3a:ec:d6:78:0a:86: 88:28:25:85:aa:07:58:a4:97:7d:78:db:93:4e:71: 7d:2a:64:91:c3:89:69:c4:38:1b:e4:89:19:cd:08: 58:36:e1:92:5d:35:59:ec:d9:41:22:cc:d4:50:61: 92:e2:9f:38:27:25:86:a2:37:4c:99:9e:78:50:51: 30:a2:a6:d6:d1:63:74:59:66:2e:1b:de:81:21:05: ab:c7:cf:5e:8e:0e:da:b8:ad:ee:bb:9d:45:ca:91: 1c:d5:e7:5d:40:1b:bb:9b:6f:43:e0:70:c8:08:25: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6A:8B:26:4C:6D:34:7F:3E:DB:39:E3:A1:8B:90:47:AF:3A:25:6B X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e2:eb:19:d8:e3:d4:3a:1e:cb:51:b9:dc:18:4b:37:f0:14: 25:4e:ba:63:96:cc:8a:c4:80:d5:77:4f:e0:cb:1c:66:a7:2b: 41:38:9c:f9:55:31:2b:cd:00:aa:8a:1f:54:67:9d:74:26:50: 61:da:56:35:6e:a8:9f:37:fd:1a:57:5d:1e:cd:50:0f:9d:36: be:e8:a9:62:58:78:0b:e6:f7:12:ff:62:5d:fd:d3:3a:70:a3: 2f:11:df:b8:2c:10:56:80:c4:85:1f:16:fe:98:86:1e:2f:c6: 29:b4:eb:64:5f:fc:aa:5c:88:64:ad:60:90:ef:a4:99:16:33: 4a:47:74:7e:00:78:32:de:21:39:a9:83:d5:ce:f2:a4:30:86: 89:dd:c4:63:eb:17:60:90:2e:fe:11:70:78:53:7f:d5:cb:55: 06:b8:53:d3:89:ef:29:9f:18:d6:e7:9e:41:6e:6b:5d:c1:dd: b9:7c:75:fe:16:87:5a:f0:a2:43:36:da:98:e6:82:69:2b:47: 46:51:63:fe:b5:3b:53:f6:8f:42:ab:d0:e3:17:1e:af:28:f2: 4a:25:1a:7e:fe:7c:29:69:45:58:7b:f0:4f:77:30:69:e3:e5: 2e:2e:08:eb:7e:74:d6:75:5d:25:f7:b4:76:cc:c5:bc:81:d6: 33:23:3b:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjUwNDI0MTkwOTQxWhcNMjUwNTAxMTkwOTQxWjAYMRYwFAYD VQQDEw02ODBhOGM3NS02NTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mgQFf1n04Rl0X7Owb4K5Ul3g6JY12qSHNCBolpGy+efs3jzJRrjh1FrbfCE 3IWupharu/f+qcfP+B5XL9E2incMT1nqDgJXuVtbw+vd+fAd8t8WG4bEm0tBz/vQ 21nfAHCMOxAHXpd2bTQMi3ifjB6BjpXos2Fg+EUNPXU3WYZFh5T2+XiAzKMZGZOD Irc67NZ4CoaIKCWFqgdYpJd9eNuTTnF9KmSRw4lpxDgb5IkZzQhYNuGSXTVZ7NlB IszUUGGS4p84JyWGojdMmZ54UFEwoqbW0WN0WWYuG96BIQWrx89ejg7auK3uu51F ypEc1eddQBu7m29D4HDICCWxOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJqiyZM bTR/Pts546GLkEevOiVrMB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF4usZ2OPUOh7LUbncGEs38BQlTrpjlsyKxIDVd0/gyxxmpytBOJz5 VTErzQCqih9UZ510JlBh2lY1bqifN/0aV10ezVAPnTa+6KliWHgL5vcS/2Jd/dM6 cKMvEd+4LBBWgMSFHxb+mIYeL8YptOtkX/yqXIhkrWCQ76SZFjNKR3R+AHgy3iE5 qYPVzvKkMIaJ3cRj6xdgkC7+EXB4U3/Vy1UGuFPTie8pnxjW555Bbmtdwd25fHX+ Foda8KJDNtqY5oJpK0dGUWP+tTtT9o9Cq9DjFx6vKPJKJRp+/nwpaUVYe/BPdzBp 4+UuLgjrfnTWdV0l97R2zMW8gdYzIzsz -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:23 2025 by rpki-client