$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft File: wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json) Hash identifier: kNrhqzWoEi6KdgzZeAlYBAjr1jTBIgTeFeiOpJ39Ejk= Subject key identifier: C6:C3:37:F4:ED:57:4B:61:1F:EE:85:82:67:88:4C:E7:AC:3E:77:9A Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 Certificate issuer: /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft Manifest number: 0166 Signing time: Fri 25 Apr 2025 03:03:51 +0000 Manifest this update: Fri 25 Apr 2025 03:03:51 +0000 Manifest next update: Fri 02 May 2025 03:03:51 +0000 Files and hashes: 1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: De23XmE8lw9emE6ZyhaMG+uYwbISkPDIo8fXVaXWFEU=) 2: 6065A88AFE0011ED89B23949C4F9AE02.roa (hash: GQuRICCeDjjGixJ45rH35u2ONJ6slmeUzZUnxu6QOIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92D6, serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Validity Not Before: Apr 25 03:03:51 2025 GMT Not After : May 2 03:03:51 2025 GMT Subject: CN=680afb97-0288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:0c:6c:72:eb:5a:9a:d6:73:d4:49:83:1a: 6c:fd:63:a7:06:1d:49:11:8e:25:26:ae:d9:1e:b6: 15:63:53:00:b3:9a:0a:b3:9e:45:49:d8:c8:ef:f9: 5a:45:fc:db:e4:7d:61:ce:58:2c:b9:13:3e:06:59: 04:d1:a6:c9:81:ae:68:1b:90:2f:1d:89:dc:b1:c5: eb:cd:5a:60:8b:9c:3b:ea:db:0a:a1:de:fe:99:f3: 2e:a9:8e:6e:67:e2:40:ac:b4:fa:e1:69:e8:70:f1: 0c:ef:0b:87:af:b6:5e:a5:2c:47:3c:ce:88:ac:d6: 6c:0f:48:47:11:86:52:fa:b7:ed:be:3d:da:b2:73: fe:78:e7:dd:37:7b:21:49:44:a7:b9:87:59:54:5b: 4e:45:b6:80:4f:0b:65:ff:61:19:1d:e6:7f:af:96: 1a:e0:6b:7a:d6:3f:1e:86:61:d6:d0:ac:fd:14:79: 6e:be:6b:58:4f:f5:0b:35:0e:90:04:8d:4d:c6:20: 0a:05:35:5c:f5:7e:55:ef:58:e4:26:a9:d8:29:7c: 94:fb:65:8b:19:70:5e:89:14:fb:f9:96:32:ec:d5: 1e:28:2a:fb:ef:e7:8b:b2:a2:db:67:89:f8:20:a6: 99:07:a8:43:63:39:08:d8:ef:95:36:8e:f0:22:f0: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C3:37:F4:ED:57:4B:61:1F:EE:85:82:67:88:4C:E7:AC:3E:77:9A X509v3 Authority Key Identifier: keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:29:13:14:2a:23:32:dc:43:63:e0:a8:0b:ad:7a:06:f8:a5: d5:ad:12:63:b4:94:61:4d:fc:8e:37:3f:0e:e8:c7:d6:d8:a1: 53:6c:32:bc:3c:49:dd:28:e9:dc:fd:5e:0a:fb:44:a3:49:67: df:76:29:cf:48:97:80:f4:d6:e6:6c:f2:f2:4b:c2:22:b6:3b: 42:43:2f:c5:15:a9:24:f2:90:dd:4a:d9:7a:00:ba:93:e5:c4: 2d:71:5c:cf:ba:fa:60:51:3a:44:0b:ab:1f:2f:23:e5:d7:8a: a4:cc:78:c7:85:2c:92:46:d6:97:81:43:71:ce:6e:7f:42:fb: 18:f0:59:c9:01:cb:63:87:aa:bc:65:df:95:4f:75:c0:db:76: 88:25:68:c0:a3:2f:ee:10:94:e4:cd:92:c6:2f:51:e3:4f:8b: 37:c4:26:8b:ac:9f:5b:90:a6:ab:a2:bc:c9:38:9e:3d:43:70: 12:67:fc:8e:f7:3f:ee:05:07:d5:2f:5c:bf:a7:ea:79:c4:2b: 9f:9c:86:d2:3d:4b:3c:c0:ea:79:e5:5f:c6:68:db:bd:4d:72: 7c:4a:0b:48:dc:e5:e0:9d:40:31:7f:31:bf:3a:18:55:c6:8b: dd:41:26:49:67:5f:f9:1b:ac:25:96:dc:94:f7:61:9c:16:3f: 87:b5:29:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRDYxMTAvBgNVBAUTKEMwN0Q2OTk0NDdERThBQjRERDc0RUMzMzBFNjk3N0FC MDMxOTI2NjIwHhcNMjUwNDI1MDMwMzUxWhcNMjUwNTAyMDMwMzUxWjAYMRYwFAYD VQQDEw02ODBhZmI5Ny0wMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2X8MbHLrWprWc9RJgxps/WOnBh1JEY4lJq7ZHrYVY1MAs5oKs55FSdjI7/la Rfzb5H1hzlgsuRM+BlkE0abJga5oG5AvHYncscXrzVpgi5w76tsKod7+mfMuqY5u Z+JArLT64WnocPEM7wuHr7ZepSxHPM6IrNZsD0hHEYZS+rftvj3asnP+eOfdN3sh SUSnuYdZVFtORbaATwtl/2EZHeZ/r5Ya4Gt61j8ehmHW0Kz9FHluvmtYT/ULNQ6Q BI1NxiAKBTVc9X5V71jkJqnYKXyU+2WLGXBeiRT7+ZYy7NUeKCr77+eLsqLbZ4n4 IKaZB6hDYzkI2O+VNo7wIvDDhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbDN/Tt V0thH+6FgmeITOesPneaMB8GA1UdIwQYMBaAFMB9aZRH3oq03XTsMw5pd6sDGSZi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJENi8wREQ5RkRDQUZE RjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWlyVGRkT3d6RG1sM3F3TVpK bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dIMXBsRWZlaXJUZGRPd3pEbWwzcXdNWkptSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJENi8wREQ5RkRDQUZERjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWly VGRkT3d6RG1sM3F3TVpKbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjKRMUKiMy3ENj4KgLrXoG+KXVrRJjtJRhTfyONz8O6MfW2KFTbDK8 PEndKOnc/V4K+0SjSWffdinPSJeA9NbmbPLyS8IitjtCQy/FFakk8pDdStl6ALqT 5cQtcVzPuvpgUTpEC6sfLyPl14qkzHjHhSySRtaXgUNxzm5/QvsY8FnJActjh6q8 Zd+VT3XA23aIJWjAoy/uEJTkzZLGL1HjT4s3xCaLrJ9bkKarorzJOJ49Q3ASZ/yO 9z/uBQfVL1y/p+p5xCufnIbSPUs8wOp55V/GaNu9TXJ8SgtI3OXgnUAxfzG/OhhV xovdQSZJZ1/5G6wlltyU92GcFj+HtSm1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:31 2025 by rpki-client