$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json) Hash identifier: fZ1I9iOZ/6woiHwlY5MkJ6SynEV6jp0opJQQh+F08M8= Subject key identifier: A5:16:46:FE:D9:2F:6B:79:FF:C0:88:E9:15:A3:9B:34:F3:BC:E5:68 Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft Manifest number: 49 Signing time: Fri 25 Apr 2025 05:20:13 +0000 Manifest this update: Fri 25 Apr 2025 05:20:12 +0000 Manifest next update: Fri 02 May 2025 05:20:12 +0000 Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: 2jUPOeNLvd8QDcJuB8P3VFCnCxDNKLxVMc8KhLiQ6zk=) 2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: 6QazPAViDz/vpoTr8YQep/2te+BhGM7kc2XHX85fKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Validity Not Before: Apr 25 05:20:12 2025 GMT Not After : May 2 05:20:12 2025 GMT Subject: CN=680b1b8d-6ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:79:fd:4f:f2:37:41:02:55:4b:d4:68:a1: aa:c6:53:b1:2b:9a:de:fb:4b:e9:45:e2:52:ce:98: ff:8f:6b:1e:87:bb:63:76:a7:f7:66:f4:71:74:d3: c1:c6:44:4b:53:d5:56:53:2d:50:24:d9:15:9c:af: 62:6b:0c:4b:33:d2:b5:71:d7:a6:b8:86:ef:35:d4: ad:b7:95:29:8d:3e:12:ba:50:43:f9:9d:b6:40:95: c5:a0:d3:4c:a4:38:94:ba:c0:66:6f:39:11:17:3d: f1:f9:e0:5f:af:72:62:0f:fe:45:b2:8d:6d:f5:4e: f3:54:f9:c4:76:2d:df:ef:11:ce:26:4a:b2:34:c5: 0a:1a:ac:1c:fe:f8:2c:f6:b2:8c:c6:2b:1c:cf:ba: be:4e:05:20:ff:d0:ac:21:12:9a:b3:06:cc:11:c3: c3:ac:d1:cb:64:aa:73:e0:3d:9d:6f:b7:a1:eb:62: 24:58:ea:3d:d8:e6:86:0d:90:0a:48:ce:fb:16:85: 34:e5:f9:6b:99:7e:da:93:62:f4:f1:53:72:c4:5b: 17:9f:97:62:3f:57:c3:2f:15:56:cb:7d:8e:7c:5b: 88:90:f4:fc:79:85:06:54:4d:8e:62:a2:e1:06:6a: 57:6d:e0:21:ba:f9:9e:58:a6:f0:24:47:8a:8b:82: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:16:46:FE:D9:2F:6B:79:FF:C0:88:E9:15:A3:9B:34:F3:BC:E5:68 X509v3 Authority Key Identifier: keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:22:7a:c8:a7:b7:53:29:fe:f9:64:40:48:c6:0e:13:a9: 9e:91:79:fa:5b:28:20:54:dd:dd:b0:c4:16:0a:bb:41:61:29: 82:20:1f:96:aa:43:33:de:f7:5f:cd:c7:38:a5:57:ab:a8:21: ce:20:68:b0:38:11:13:3b:81:00:22:55:8b:68:89:ef:bb:bf: 2c:0b:58:38:c6:58:9f:8b:83:cd:cc:40:98:c9:6a:d5:e4:5d: a2:30:83:9c:e6:d9:ca:cf:cd:42:6a:40:f9:9a:33:d8:3b:15: 1d:59:bb:da:fc:00:a4:ce:26:de:85:22:35:ee:0c:91:20:d6: 8f:e1:48:54:48:cd:82:cc:36:d9:1a:b9:e4:43:f3:a5:b8:91: e5:41:ff:d9:6c:bf:18:1a:33:8f:36:cc:62:ca:a0:85:f1:01: a1:ae:ef:bc:25:2a:67:11:7f:1a:a5:55:26:15:fb:15:3f:00: 2d:72:a0:c0:7c:ac:30:31:55:c4:db:9a:38:c2:20:8c:81:64: 8d:db:b7:98:8a:ad:d8:f2:ee:c0:cb:ca:19:91:07:cb:d4:cf: e4:9c:c8:14:83:c8:9c:7a:98:2d:e6:cf:cb:45:96:b5:5f:db: b6:76:84:94:95:af:53:86:60:04:ae:05:ec:b2:d7:73:a3:a7: 22:99:42:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTYxODExMC8GA1UEBRMoQzEzQThBQkQ1NzA0M0FBRkE1OEY1ODUzQkUyRkFCQ0E5 RjI2RjBFRDAeFw0yNTA0MjUwNTIwMTJaFw0yNTA1MDIwNTIwMTJaMBgxFjAUBgNV BAMTDTY4MGIxYjhkLTZlZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIoHn9T/I3QQJVS9RooarGU7Ermt77S+lF4lLOmP+Pax6Hu2N2p/dm9HF008HG REtT1VZTLVAk2RWcr2JrDEsz0rVx16a4hu811K23lSmNPhK6UEP5nbZAlcWg00yk OJS6wGZvOREXPfH54F+vcmIP/kWyjW31TvNU+cR2Ld/vEc4mSrI0xQoarBz++Cz2 sozGKxzPur5OBSD/0KwhEpqzBswRw8Os0ctkqnPgPZ1vt6HrYiRY6j3Y5oYNkApI zvsWhTTl+WuZftqTYvTxU3LEWxefl2I/V8MvFVbLfY58W4iQ9Px5hQZUTY5iouEG aldt4CG6+Z5YpvAkR4qLgi/tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpRZG/tkv a3n/wIjpFaObNPO85WgwHwYDVR0jBBgwFoAUwTqKvVcEOq+lj1hTvi+ryp8m8O0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNjE4L0U2RjY2REQyQkVD MzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3EtbGoxaFR2aS1yeXA4bThP MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd1RxS3ZWY0VPcS1sajFoVHZpLXJ5cDhtOE8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NjE4L0U2RjY2REQyQkVDMzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3Et bGoxaFR2aS1yeXA4bThPMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJsInrIp7dTKf75ZEBIxg4TqZ6RefpbKCBU3d2wxBYKu0FhKYIgH5aq QzPe91/NxzilV6uoIc4gaLA4ERM7gQAiVYtoie+7vywLWDjGWJ+Lg83MQJjJatXk XaIwg5zm2crPzUJqQPmaM9g7FR1Zu9r8AKTOJt6FIjXuDJEg1o/hSFRIzYLMNtka ueRD86W4keVB/9lsvxgaM482zGLKoIXxAaGu77wlKmcRfxqlVSYV+xU/AC1yoMB8 rDAxVcTbmjjCIIyBZI3bt5iKrdjy7sDLyhmRB8vUz+ScyBSDyJx6mC3mz8tFlrVf 27Z2hJSVr1OGYASuBeyy13OjpyKZQpk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:09 2025 by rpki-client