$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft File: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json) Hash identifier: MIBIJ+hjeJldDRqF+1HCJkRH5mxS47llIl65YWuvhqE= Subject key identifier: 75:E0:02:8E:A9:B5:17:4F:56:85:6F:2A:0B:49:53:F7:4A:34:69:74 Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B Certificate issuer: /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Certificate serial: 1117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft Manifest number: 1103 Signing time: Thu 24 Apr 2025 17:18:23 +0000 Manifest this update: Thu 24 Apr 2025 17:18:22 +0000 Manifest next update: Thu 01 May 2025 17:18:22 +0000 Files and hashes: 1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: 5eIXMjwwP1m5dp9T/tYAMDXi54o+80mMtj4jgn7hWLY=) 2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: tE2E6js3kYa62zkqmiLT/NNljtVICethnlU6hDIPGMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4375 (0x1117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Validity Not Before: Apr 24 17:18:22 2025 GMT Not After : May 1 17:18:22 2025 GMT Subject: CN=680a725f-0dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:84:63:95:88:7c:da:af:ba:47:39:25:55: 71:35:93:bd:aa:43:fd:f5:67:5f:4e:98:dd:21:18: a7:20:a7:54:c5:86:2f:21:f9:f3:e6:38:f1:0f:a6: ef:8f:4b:b1:8c:a8:7f:60:9b:85:9d:39:af:43:56: 68:28:49:35:88:5a:cf:ac:b7:c1:1b:35:6e:e0:c8: 76:41:8d:56:89:89:ac:be:1e:8d:a0:74:35:24:4e: 02:05:e9:a4:21:8e:09:2a:a7:7a:f1:73:a2:0b:41: 9b:3f:95:56:5e:85:ea:f6:4e:aa:8c:08:11:23:b8: 0d:ea:d3:b4:dc:c7:89:d0:f0:0d:3f:15:0b:0a:f4: 7f:a2:36:cb:e4:e1:08:76:6e:90:b2:48:14:f2:58: 0e:a3:73:e7:1c:f8:ac:25:63:f5:41:6b:52:f2:73: 18:21:b8:c2:87:0f:95:c5:b4:e3:ee:8a:b2:a5:92: 1a:08:c4:ab:74:f9:ef:e7:05:e5:70:08:ea:20:e1: 73:7b:78:d0:bf:a2:62:0c:74:06:3b:bc:2f:09:28: 3c:66:0f:bc:5a:f6:c3:bd:b6:e9:61:22:ca:1d:d3: 52:43:8b:41:a9:c3:dd:b9:6f:43:9e:62:eb:20:06: 53:ad:45:8c:8c:f8:21:25:02:90:0b:66:be:19:6c: 55:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E0:02:8E:A9:B5:17:4F:56:85:6F:2A:0B:49:53:F7:4A:34:69:74 X509v3 Authority Key Identifier: keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:bb:30:0e:c4:04:31:ff:9a:45:8a:e4:76:67:ab:c9:7d:fb: b5:31:05:60:2c:4a:9f:28:10:87:ae:64:ae:bd:ab:da:a5:0e: 5b:b6:f5:9b:cb:03:e9:54:81:e3:c1:52:92:9a:3b:c6:ab:5b: 35:04:20:86:98:58:68:b5:e4:64:db:98:94:73:22:fe:a9:bf: c8:e0:ee:fc:28:f1:7b:99:db:a7:79:5f:bf:98:61:75:34:d9: 79:d5:ac:e2:88:d0:99:36:be:52:f8:2c:c2:0f:77:99:5a:f4: fa:e6:41:28:36:41:4e:e4:b7:5c:68:09:f3:48:d8:ea:01:05: e1:97:19:63:c9:f6:d9:c8:55:c4:1e:bd:48:39:88:09:9f:d5: 85:06:73:71:9e:5f:14:e9:a3:c0:e3:ec:53:75:3f:92:0e:16: 6a:87:eb:8e:0c:0b:bf:26:63:98:50:01:9c:44:35:38:5b:ed: 6a:d6:99:16:04:1c:98:3a:93:92:b8:1e:9a:f0:ab:fa:93:7f: c3:8a:59:06:bc:ad:d2:d5:75:79:4a:35:4d:05:79:21:cd:b1: 34:e0:59:a3:4b:b3:3c:0b:71:a9:d1:d4:5b:bf:ac:42:8a:26: 25:25:7c:0a:cb:04:c1:6a:5a:55:0e:f7:0e:3f:c0:31:1a:11: 7a:a6:0e:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCNjUxMTAvBgNVBAUTKEMwNTcxMTlDQTQ1REQzMTQyMTVDNjFFMDlCRjg3MUQ0 OEFCQjVGOUIwHhcNMjUwNDI0MTcxODIyWhcNMjUwNTAxMTcxODIyWjAYMRYwFAYD VQQDEw02ODBhNzI1Zi0wZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyieEY5WIfNqvukc5JVVxNZO9qkP99WdfTpjdIRinIKdUxYYvIfnz5jjxD6bv j0uxjKh/YJuFnTmvQ1ZoKEk1iFrPrLfBGzVu4Mh2QY1WiYmsvh6NoHQ1JE4CBemk IY4JKqd68XOiC0GbP5VWXoXq9k6qjAgRI7gN6tO03MeJ0PANPxULCvR/ojbL5OEI dm6QskgU8lgOo3PnHPisJWP1QWtS8nMYIbjChw+VxbTj7oqypZIaCMSrdPnv5wXl cAjqIOFze3jQv6JiDHQGO7wvCSg8Zg+8WvbDvbbpYSLKHdNSQ4tBqcPduW9DnmLr IAZTrUWMjPghJQKQC2a+GWxVyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXgAo6p tRdPVoVvKgtJU/dKNGl0MB8GA1UdIwQYMBaAFMBXEZykXdMUIVxh4Jv4cdSKu1+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEI2NS9FNkU0MjJBNjE1 NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4UWhYR0hnbV9oeDFJcTdY NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGY1JuS1JkMHhRaFhHSGdtX2h4MUlxN1g1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEI2NS9FNkU0MjJBNjE1NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4 UWhYR0hnbV9oeDFJcTdYNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKuzAOxAQx/5pFiuR2Z6vJffu1MQVgLEqfKBCHrmSuvavapQ5btvWb ywPpVIHjwVKSmjvGq1s1BCCGmFhoteRk25iUcyL+qb/I4O78KPF7mduneV+/mGF1 NNl51aziiNCZNr5S+CzCD3eZWvT65kEoNkFO5LdcaAnzSNjqAQXhlxljyfbZyFXE Hr1IOYgJn9WFBnNxnl8U6aPA4+xTdT+SDhZqh+uODAu/JmOYUAGcRDU4W+1q1pkW BByYOpOSuB6a8Kv6k3/DilkGvK3S1XV5SjVNBXkhzbE04FmjS7M8C3Gp0dRbv6xC iiYlJXwKywTBalpVDvcOP8AxGhF6pg5e -----END CERTIFICATE-----Generated at Sat Apr 26 17:16:01 2025 by rpki-client