$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: SEEESDp6akDIjpcNhrmbC//TmoDVeh1Pmucqmeoc/ME= Subject key identifier: 00:39:A2:78:2D:2F:AE:1B:90:B5:FC:EC:47:15:F5:4C:92:F2:0B:73 Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 098A Signing time: Thu 24 Apr 2025 20:01:26 +0000 Manifest this update: Thu 24 Apr 2025 20:01:26 +0000 Manifest next update: Thu 01 May 2025 20:01:26 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: O97PuWoP+Xfjv7NPYktOYM+wMB2ugZstE5PPqQkujls=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: xmJbA6IxBO4/+GmddqWiUZSxhJO/ZzoQBxBDrxW+61c=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: 1aQRLZv1BGCnnNcNnCRaokdzw4E8uFS548+f2rZZdFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Apr 24 20:01:26 2025 GMT Not After : May 1 20:01:26 2025 GMT Subject: CN=680a9896-b4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:71:0a:fb:bd:7a:ab:55:c4:57:6d:a6:a5:08: 21:8a:eb:77:9a:58:c1:36:ad:c5:33:d8:35:44:a4: d2:a2:98:b7:ff:fa:95:59:ba:fb:1a:fb:18:16:e3: 4f:93:fc:c3:ee:fa:35:d6:23:ba:ea:32:6e:b4:09: 87:bf:10:79:b6:d7:9f:88:98:3a:39:77:be:73:17: 72:7e:ae:13:b7:80:81:d1:57:20:eb:6b:16:7d:42: 0e:88:56:bd:58:d1:52:8b:a7:2a:7d:f4:7f:1e:12: b2:b5:00:91:c8:1d:48:76:33:2a:9a:e6:f5:60:d6: 3a:e7:91:5d:a0:b9:9a:80:8b:ae:95:32:aa:72:3e: 18:3f:8f:ea:89:46:69:96:9c:dc:93:57:71:ad:38: a7:e6:7f:5e:49:34:c6:d2:a0:a7:2a:86:15:91:69: 96:5f:d0:10:70:b5:ec:ff:7e:71:da:bf:2b:91:4f: 92:9b:7b:b3:81:63:c1:d5:9d:5c:08:3c:35:ae:64: b3:2b:15:a6:fa:7c:4d:08:93:78:e7:6e:95:3e:f3: 2c:dc:bd:a2:fc:f7:bb:67:4f:dc:01:14:30:92:a4: a9:9e:28:14:4f:97:20:43:70:ec:07:16:f4:31:0e: bd:f7:a0:40:6d:97:5e:9f:2c:5b:30:74:4b:85:91: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:39:A2:78:2D:2F:AE:1B:90:B5:FC:EC:47:15:F5:4C:92:F2:0B:73 X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:9b:6d:78:f9:d1:24:8f:3a:85:2a:03:15:f3:8b:3a:43:3c: c1:a2:aa:ae:bf:22:f7:d7:95:93:8e:bf:f0:15:dd:e3:5a:32: d9:df:a8:1b:ea:f6:96:a3:59:68:5e:bd:ac:fa:fd:3d:d5:5b: 72:24:5c:62:86:f2:fa:1b:60:e7:35:9c:b3:11:1f:f2:4d:21: ec:e9:f5:4e:6e:91:66:34:07:9b:82:4b:3d:2b:b1:f4:16:8d: 73:60:64:74:dc:4e:81:83:08:a5:23:60:0e:f0:88:68:5a:3c: 88:70:3c:1f:35:9d:df:47:a4:e2:86:34:92:bc:9f:32:ae:60: f3:fa:64:e4:89:88:dd:19:3f:bf:c7:6d:4f:29:83:09:c5:e3: 2e:95:5b:50:e9:31:dc:28:9e:19:2c:6b:57:2d:c7:31:1c:47: ec:f1:8d:db:1c:b5:95:58:2a:37:36:4a:d0:82:e7:c3:d4:f2: 61:1f:34:75:8d:49:ea:ff:af:ed:87:a3:ed:1f:a8:76:9d:25: 8f:8b:0c:04:88:af:bc:c5:bc:9e:c6:f1:6b:ee:54:1c:10:bd: 20:db:65:d2:da:c2:19:ec:04:33:55:e9:f4:e6:d1:44:12:14: bc:ec:38:b5:85:18:60:51:e5:93:ad:d3:34:6b:79:ea:06:98: c0:44:15:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjUwNDI0MjAwMTI2WhcNMjUwNTAxMjAwMTI2WjAYMRYwFAYD VQQDEw02ODBhOTg5Ni1iNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XEK+716q1XEV22mpQghiut3mljBNq3FM9g1RKTSopi3//qVWbr7GvsYFuNP k/zD7vo11iO66jJutAmHvxB5ttefiJg6OXe+cxdyfq4Tt4CB0Vcg62sWfUIOiFa9 WNFSi6cqffR/HhKytQCRyB1IdjMqmub1YNY655FdoLmagIuulTKqcj4YP4/qiUZp lpzck1dxrTin5n9eSTTG0qCnKoYVkWmWX9AQcLXs/35x2r8rkU+Sm3uzgWPB1Z1c CDw1rmSzKxWm+nxNCJN4526VPvMs3L2i/Pe7Z0/cARQwkqSpnigUT5cgQ3DsBxb0 MQ6996BAbZdenyxbMHRLhZElkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAA5ongt L64bkLX87EcV9UyS8gtzMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACm214+dEkjzqFKgMV84s6QzzBoqquvyL315WTjr/wFd3jWjLZ36gb 6vaWo1loXr2s+v091VtyJFxihvL6G2DnNZyzER/yTSHs6fVObpFmNAebgks9K7H0 Fo1zYGR03E6BgwilI2AO8IhoWjyIcDwfNZ3fR6TihjSSvJ8yrmDz+mTkiYjdGT+/ x21PKYMJxeMulVtQ6THcKJ4ZLGtXLccxHEfs8Y3bHLWVWCo3NkrQgufD1PJhHzR1 jUnq/6/th6PtH6h2nSWPiwwEiK+8xbyexvFr7lQcEL0g22XS2sIZ7AQzVen05tFE EhS87Di1hRhgUeWTrdM0a3nqBpjARBXO -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:58 2025 by rpki-client