$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft File: WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json) Hash identifier: SONm1RAF4VFPYgrGhDmT2/GXcj22G5YuCWMDDQVzH5k= Subject key identifier: 98:31:AD:2A:33:02:FF:B7:E8:6F:B9:1F:C2:86:9D:D4:31:1B:1A:7E Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0B5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft Manifest number: 0B46 Signing time: Thu 24 Apr 2025 19:03:28 +0000 Manifest this update: Thu 24 Apr 2025 19:03:28 +0000 Manifest next update: Thu 01 May 2025 19:03:28 +0000 Files and hashes: 1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: Sa23vLLj4mqf6CSMiBL87jVivj+F47hGvo3oX6uy0+k=) 2: D8FCAB6C750611EFAE4AA240C4F9AE02.roa (hash: BNtUgizLuW7VE24IioUopOhcnv7kySphvSn8ooQaevk=) 3: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: E4bzrx7poQwdk1jQHWl7doZB/UzexRVv4xP96OZmdAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85, serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Validity Not Before: Apr 24 19:03:28 2025 GMT Not After : May 1 19:03:28 2025 GMT Subject: CN=680a8b00-053d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:5b:9f:75:3d:a2:a1:e5:3c:cf:b5:a3:46: 5f:b1:01:b2:f3:dd:bf:56:56:34:4e:7b:28:10:de: 0e:ca:08:52:c1:99:b4:45:c4:ee:df:38:47:c2:25: f5:2e:5c:d2:75:38:0f:6e:2e:ca:85:87:63:9b:92: 5e:83:54:2d:e3:74:b5:be:9b:16:c2:1a:45:75:7d: fa:24:fc:be:49:17:d5:8a:9e:a6:08:c3:20:e8:7f: 93:79:fd:97:d0:4f:5d:5e:ab:50:73:d6:3d:33:e9: 98:43:13:95:c3:02:5d:6e:55:92:1e:25:62:6f:28: 10:19:3c:6f:5a:b6:a0:46:28:ad:4f:2d:ad:fe:3e: 41:4f:4b:b2:a4:8f:49:b0:a5:ed:dc:25:8c:db:bd: 63:cd:50:f8:83:00:3a:94:95:ae:4e:d9:b0:73:10: c1:f2:57:0d:16:fe:c8:57:74:87:46:52:4c:fb:29: f5:7f:78:08:0d:6e:53:1b:65:de:0b:a6:51:69:15: 3c:aa:98:30:df:6d:03:5f:0c:2c:51:f3:02:44:22: 24:b1:8d:11:31:55:c4:06:7a:c3:28:75:e9:8e:be: 94:cd:cd:d2:d3:87:19:32:91:8c:00:49:f7:cc:ef: ff:31:50:54:4b:43:0a:2d:3c:b9:28:80:b2:e0:ea: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:31:AD:2A:33:02:FF:B7:E8:6F:B9:1F:C2:86:9D:D4:31:1B:1A:7E X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:8d:a9:ce:9f:94:b7:60:f5:64:d6:c8:e3:06:d7:f0:69:ef: f2:84:e1:68:d2:7e:b8:33:37:fd:38:12:4a:ba:a7:1c:14:1d: 55:61:19:50:2c:79:f1:84:18:2d:98:c3:5d:2c:c3:62:76:38: 85:0e:fd:e1:0e:49:fb:90:08:3c:e2:03:9f:05:6f:66:44:68: 64:ba:cc:1d:7e:d4:6d:4f:58:d4:c0:aa:19:9d:8d:ed:d2:34: 88:ce:f0:07:46:af:4f:1f:34:59:a8:62:89:ed:30:de:09:c0: 73:3c:d3:4f:64:01:23:26:32:d3:db:3d:6a:a8:95:a0:66:a3: 06:ad:55:e1:96:22:f6:19:e6:ac:12:c3:3a:b3:30:6f:99:2c: 43:37:30:b1:aa:df:87:4a:48:3b:52:64:ff:bd:f3:aa:db:45: 2f:fa:ad:93:30:48:dd:13:89:8d:bd:34:e9:47:48:b9:4f:c1: b3:fb:ef:3d:ee:cb:44:8e:99:49:c3:6c:ed:7e:e4:af:fa:bf: 27:48:b1:87:58:97:5e:ed:df:3b:34:18:c4:05:77:13:50:12: 95:a9:d2:59:74:29:13:16:36:f0:fe:5e:1a:b9:64:65:28:b3: 99:96:89:8f:e4:49:ee:20:a8:57:41:a0:8e:42:63:31:97:cf: 53:31:ac:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjUwNDI0MTkwMzI4WhcNMjUwNTAxMTkwMzI4WjAYMRYwFAYD VQQDEw02ODBhOGIwMC0wNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmhbn3U9oqHlPM+1o0ZfsQGy892/VlY0TnsoEN4OyghSwZm0RcTu3zhHwiX1 LlzSdTgPbi7KhYdjm5Jeg1Qt43S1vpsWwhpFdX36JPy+SRfVip6mCMMg6H+Tef2X 0E9dXqtQc9Y9M+mYQxOVwwJdblWSHiVibygQGTxvWragRiitTy2t/j5BT0uypI9J sKXt3CWM271jzVD4gwA6lJWuTtmwcxDB8lcNFv7IV3SHRlJM+yn1f3gIDW5TG2Xe C6ZRaRU8qpgw320DXwwsUfMCRCIksY0RMVXEBnrDKHXpjr6Uzc3S04cZMpGMAEn3 zO//MVBUS0MKLTy5KICy4OolnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgxrSoz Av+36G+5H8KGndQxGxp+MB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Q4NS82MkNFRDQ4RTMzRTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2Qt M3c2eEJXT3B0QndlUy1mSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBljanOn5S3YPVk1sjjBtfwae/yhOFo0n64Mzf9OBJKuqccFB1VYRlQ LHnxhBgtmMNdLMNidjiFDv3hDkn7kAg84gOfBW9mRGhkuswdftRtT1jUwKoZnY3t 0jSIzvAHRq9PHzRZqGKJ7TDeCcBzPNNPZAEjJjLT2z1qqJWgZqMGrVXhliL2Geas EsM6szBvmSxDNzCxqt+HSkg7UmT/vfOq20Uv+q2TMEjdE4mNvTTpR0i5T8Gz++89 7stEjplJw2ztfuSv+r8nSLGHWJde7d87NBjEBXcTUBKVqdJZdCkTFjbw/l4auWRl KLOZlomP5EnuIKhXQaCOQmMxl89TMayO -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:37 2025 by rpki-client