$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json) Hash identifier: SrkAUCER92D/hDuXvA75DUV4OFxNeir5ETA/BwvdBT4= Subject key identifier: F8:D7:9F:C8:0C:6C:F5:CE:87:74:A5:12:3B:CD:E2:D7:AB:BB:BE:8D Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Certificate serial: 02CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft Manifest number: 02C1 Signing time: Fri 25 Apr 2025 01:11:49 +0000 Manifest this update: Fri 25 Apr 2025 01:11:49 +0000 Manifest next update: Fri 02 May 2025 01:11:49 +0000 Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: I5BlZ+lcfdamMHzFIBgWS5h6OPhgo47lpyTNPk43UA4=) 2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: SKYjC2+Kll4ZZKRgRzaVrVL/om+GJv0anlAPWT1K3TE=) 3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: +tMP8g15DFcYp7mMqY0WVEOydxXfPdFwqrShsC1V228=) 4: 8409527078B011EE8D737723C4F9AE02.roa (hash: 0ZYVM7VxDyYQJk7ae/RUp5ynDYTJuRZ5sT+0mo9VS4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Validity Not Before: Apr 25 01:11:49 2025 GMT Not After : May 2 01:11:49 2025 GMT Subject: CN=680ae155-83f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:70:60:4e:f0:91:a7:a8:0d:08:e5:ff:af: a8:8f:19:15:0b:fa:54:a0:d8:64:21:cd:9d:f4:7a: 0c:03:ab:3e:cc:1f:1e:2e:f1:5e:3a:aa:8e:13:e5: 13:8f:54:3d:9c:24:ed:8b:c4:14:5b:48:17:00:e6: 3a:98:a2:31:94:27:b8:24:f9:12:89:8c:59:b1:9c: d1:e1:18:ba:f9:00:5c:b7:02:3d:5d:26:e0:a8:43: d2:c3:52:14:76:3c:7b:7f:6b:2c:2d:40:d3:a0:84: 9b:65:4c:bd:c7:86:f2:f8:fa:c2:a2:4f:f1:a0:f5: bb:48:bd:9f:e4:1f:de:b9:8d:8c:b8:a4:3b:4e:d1: 98:3d:c7:80:08:c2:31:b3:6b:ae:5e:ed:41:af:ee: da:56:a8:7e:37:22:8c:eb:7f:4a:65:47:bd:d9:a3: 58:9b:ad:46:e9:21:2b:26:3f:32:47:d1:dd:11:59: 07:74:b5:58:6f:04:7a:c1:19:e2:5a:31:d7:6b:92: 35:9a:ca:1d:50:a7:4c:9f:5c:b9:c9:33:a4:af:2b: c9:a7:f8:67:7e:c3:ac:8a:8b:b9:cf:63:3e:91:8c: 4d:a8:c8:fa:26:6b:af:04:09:9f:d2:c8:77:08:ac: 23:15:07:35:75:d1:eb:ce:4a:30:02:2b:cb:10:53: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D7:9F:C8:0C:6C:F5:CE:87:74:A5:12:3B:CD:E2:D7:AB:BB:BE:8D X509v3 Authority Key Identifier: keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:27:79:a1:b5:1e:cb:b5:46:e0:28:65:c8:f2:6a:bd:b6:04: d9:f5:8c:26:74:02:ca:06:d9:d2:31:65:05:23:99:16:79:d3: cb:70:94:be:e0:91:31:06:24:d5:25:c1:bb:33:eb:36:b4:23: 03:b0:f1:44:22:1a:1a:7d:90:56:13:33:b7:ce:36:cb:40:77: 99:ac:e4:9b:34:9d:83:94:f4:b4:32:6e:cd:a5:7b:b5:83:a8: a2:ee:83:61:b3:87:6f:78:cf:18:54:21:ff:7e:1f:4d:f1:ae: 46:c2:87:ac:c5:73:8a:75:9c:02:46:97:ce:9a:85:f2:6e:3f: fd:da:7a:b4:f7:15:2d:32:39:d9:f1:16:e5:9f:23:cc:95:bf: 2e:a9:d6:13:4d:87:20:47:87:91:6b:17:87:3c:20:1c:72:5f: 0c:f3:c6:30:2f:41:3a:32:7e:48:f4:e8:e4:60:9b:3a:f0:68: d7:62:a4:f3:89:68:2f:0c:a1:9f:43:23:b2:51:d4:ce:46:72: 86:ef:6a:c0:e9:55:07:17:d1:76:0a:18:d6:9b:6a:14:d1:ad: 9d:85:3f:37:5b:b1:17:93:26:bb:81:26:d5:1a:1a:e6:e9:41: bb:01:8b:63:7f:00:07:71:f5:0f:04:8f:84:d3:cd:6d:b7:c6: a1:60:b0:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEyRkIxMTAvBgNVBAUTKDU5MTE4REQ3NTNGMDUzMEVEQzJCOEMzQkUyNjNCRURC MENDRUJDMEUwHhcNMjUwNDI1MDExMTQ5WhcNMjUwNTAyMDExMTQ5WjAYMRYwFAYD VQQDEw02ODBhZTE1NS04M2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE9wYE7wkaeoDQjl/6+ojxkVC/pUoNhkIc2d9HoMA6s+zB8eLvFeOqqOE+UT j1Q9nCTti8QUW0gXAOY6mKIxlCe4JPkSiYxZsZzR4Ri6+QBctwI9XSbgqEPSw1IU djx7f2ssLUDToISbZUy9x4by+PrCok/xoPW7SL2f5B/euY2MuKQ7TtGYPceACMIx s2uuXu1Br+7aVqh+NyKM639KZUe92aNYm61G6SErJj8yR9HdEVkHdLVYbwR6wRni WjHXa5I1msodUKdMn1y5yTOkryvJp/hnfsOsiou5z2M+kYxNqMj6JmuvBAmf0sh3 CKwjFQc1ddHrzkowAivLEFNr6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjXn8gM bPXOh3SlEjvN4teru76NMB8GA1UdIwQYMBaAFFkRjddT8FMO3CuMO+JjvtsMzrwO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTJGQi9FMEQ2NDUxNEVE MUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3N2NLNHc3NG1PLTJ3ek92 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSR04xMVB3VXc3Y0s0dzc0bU8tMnd6T3ZBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTJGQi9FMEQ2NDUxNEVEMUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3 N2NLNHc3NG1PLTJ3ek92QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXJ3mhtR7LtUbgKGXI8mq9tgTZ9YwmdALKBtnSMWUFI5kWedPLcJS+ 4JExBiTVJcG7M+s2tCMDsPFEIhoafZBWEzO3zjbLQHeZrOSbNJ2DlPS0Mm7NpXu1 g6ii7oNhs4dveM8YVCH/fh9N8a5GwoesxXOKdZwCRpfOmoXybj/92nq09xUtMjnZ 8RblnyPMlb8uqdYTTYcgR4eRaxeHPCAccl8M88YwL0E6Mn5I9OjkYJs68GjXYqTz iWgvDKGfQyOyUdTORnKG72rA6VUHF9F2ChjWm2oU0a2dhT83W7EXkya7gSbVGhrm 6UG7AYtjfwAHcfUPBI+E081tt8ahYLDy -----END CERTIFICATE-----Generated at Sat Apr 26 14:20:53 2025 by rpki-client