$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft File: WIXKbgzHteUyD6ckc-5zljP17CY.mft (raw, json) Hash identifier: /xcYocXyOmdKq7xhnn44Z+yt/jbc/OYJFvmnbwo0dzA= Subject key identifier: 77:3E:4B:05:4D:C3:4C:BB:B9:29:AF:C1:A2:1D:F8:7A:35:2C:79:C8 Authority key identifier: 58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 Certificate issuer: /CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft Manifest number: 01B1 Signing time: Fri 25 Apr 2025 02:20:09 +0000 Manifest this update: Fri 25 Apr 2025 02:20:09 +0000 Manifest next update: Fri 02 May 2025 02:20:09 +0000 Files and hashes: 1: WIXKbgzHteUyD6ckc-5zljP17CY.crl (hash: i26rGy4jlWqGQUK4n4ruFPzYXresz9jXwHLNpV3Tc8o=) 2: 9C43FA268A8A11ED9DF2425AC4F9AE02.roa (hash: XU2Kl+wDT9+IdgtwYqn/7pHHpGdYj1vHxZuNd0BPYVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB34A, serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Validity Not Before: Apr 25 02:20:09 2025 GMT Not After : May 2 02:20:09 2025 GMT Subject: CN=680af159-112a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:e7:bf:be:0f:27:13:a4:61:ce:cf:ee:14: d4:24:e4:4c:24:d4:2c:0b:12:18:33:e3:69:2a:91: 80:eb:bf:d4:6b:3b:ed:59:a9:9e:ed:8e:13:43:9a: 38:17:22:e1:2e:05:ed:1a:6c:7f:ac:ca:dd:6e:b3: 7a:09:b6:10:03:e8:da:ac:a1:f1:1e:d5:c5:f3:a3: b6:60:5c:29:e4:bd:51:5e:82:78:35:ef:7d:f1:09: 15:16:dc:83:85:22:6d:8b:11:a9:bb:30:92:36:cd: f1:92:9b:7f:52:21:d4:01:4f:2d:a5:46:04:4a:f0: 42:55:7c:c4:c9:ef:26:d2:72:d8:a5:8a:61:7d:50: 0b:1e:e2:17:80:32:27:89:4b:53:ba:28:a1:af:66: 0f:fe:cd:eb:3d:0d:84:83:17:62:99:37:8b:35:f7: 57:a4:a3:3e:9e:d8:5c:ff:2b:d2:17:9c:e2:73:68: 3a:dd:e1:71:7e:ec:a0:2e:c5:f0:a9:f6:2e:17:fa: 90:eb:98:0e:a3:ec:a9:52:32:27:fa:d3:cd:25:15: d3:86:70:c0:5b:1e:1e:7a:d4:80:60:b4:07:2a:47: aa:d4:e1:f9:c5:52:4b:6d:2d:ab:8a:e5:54:6c:7a: 30:c2:ae:ae:e0:a3:d7:10:48:e6:07:19:f6:5b:42: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3E:4B:05:4D:C3:4C:BB:B9:29:AF:C1:A2:1D:F8:7A:35:2C:79:C8 X509v3 Authority Key Identifier: keyid:58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c4:a0:c3:a0:09:d4:5b:0f:56:0f:72:26:0f:fb:4a:23:17: 98:eb:f5:8c:8e:77:24:1b:04:79:98:32:78:63:64:ae:5b:c1: b0:b5:98:49:fb:c8:56:9d:35:f8:0f:9f:70:6b:34:8f:6a:f8: d7:ea:9c:e2:22:bc:31:62:c7:ba:77:7a:90:20:fb:53:7a:52: d3:df:6b:97:00:2b:22:b2:d7:1e:f2:5f:fc:06:85:27:e1:68: 7c:94:7b:d2:53:6d:aa:15:9e:14:aa:31:f0:8c:62:8b:a4:ca: 8d:61:99:de:0f:82:bd:9d:6f:5c:6e:1a:d4:30:b1:59:06:7c: 74:db:2b:4d:56:34:85:d3:50:93:f3:da:a7:17:0f:21:93:f8: 1c:e5:0c:5f:27:a1:62:df:86:eb:6f:6b:cf:16:4f:ff:17:b0: f9:e5:b2:ca:5d:3c:b7:33:96:48:77:5c:a5:90:0b:28:d4:33: 9b:b8:fd:b1:e5:a4:58:bc:55:1f:39:10:a1:43:93:0f:29:c8: 87:91:24:3b:00:29:bf:a3:a6:ed:9e:3c:7e:b0:f7:76:53:74: 6e:2a:ec:0e:1f:ed:9f:3d:af:f2:01:b8:ec:89:59:ca:81:82: 1f:59:2d:b9:bb:dc:af:ed:ad:97:8c:e3:5f:d5:84:b7:e0:b6: 55:47:42:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzNEExMTAvBgNVBAUTKDU4ODVDQTZFMENDN0I1RTUzMjBGQTcyNDczRUU3Mzk2 MzNGNUVDMjYwHhcNMjUwNDI1MDIyMDA5WhcNMjUwNTAyMDIyMDA5WjAYMRYwFAYD VQQDEw02ODBhZjE1OS0xMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSjnv74PJxOkYc7P7hTUJORMJNQsCxIYM+NpKpGA67/UazvtWame7Y4TQ5o4 FyLhLgXtGmx/rMrdbrN6CbYQA+jarKHxHtXF86O2YFwp5L1RXoJ4Ne998QkVFtyD hSJtixGpuzCSNs3xkpt/UiHUAU8tpUYESvBCVXzEye8m0nLYpYphfVALHuIXgDIn iUtTuiihr2YP/s3rPQ2EgxdimTeLNfdXpKM+nthc/yvSF5zic2g63eFxfuygLsXw qfYuF/qQ65gOo+ypUjIn+tPNJRXThnDAWx4eetSAYLQHKkeq1OH5xVJLbS2riuVU bHowwq6u4KPXEEjmBxn2W0LcMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHc+SwVN w0y7uSmvwaId+Ho1LHnIMB8GA1UdIwQYMBaAFFiFym4Mx7XlMg+nJHPuc5Yz9ewm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM0QS84QTMwRjczNDhB ODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRlVXlENmNrYy01emxqUDE3 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dJWEtiZ3pIdGVVeUQ2Y2tjLTV6bGpQMTdDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM0QS84QTMwRjczNDhBODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRl VXlENmNrYy01emxqUDE3Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPxKDDoAnUWw9WD3ImD/tKIxeY6/WMjnckGwR5mDJ4Y2SuW8GwtZhJ +8hWnTX4D59wazSPavjX6pziIrwxYse6d3qQIPtTelLT32uXACsistce8l/8BoUn 4Wh8lHvSU22qFZ4UqjHwjGKLpMqNYZneD4K9nW9cbhrUMLFZBnx02ytNVjSF01CT 89qnFw8hk/gc5QxfJ6Fi34brb2vPFk//F7D55bLKXTy3M5ZId1ylkAso1DObuP2x 5aRYvFUfORChQ5MPKciHkSQ7ACm/o6btnjx+sPd2U3RuKuwOH+2fPa/yAbjsiVnK gYIfWS25u9yv7a2XjONf1YS34LZVR0Jv -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:18 2025 by rpki-client