$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft File: WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json) Hash identifier: QeExq2iAznRUUJIn0odFdQxkZcrF7/2Uf5FD4P6ZK6U= Subject key identifier: 23:AF:23:3B:4A:D3:E4:A9:72:BD:F0:07:6E:DA:F4:A4:9F:5A:6A:40 Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft Manifest number: 5A Signing time: Fri 25 Apr 2025 06:13:28 +0000 Manifest this update: Fri 25 Apr 2025 06:13:27 +0000 Manifest next update: Fri 02 May 2025 06:13:27 +0000 Files and hashes: 1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: bLhItX385kzvtKn7ONssmJ9GxZ+ab5a0QtO0NdqYbWY=) 2: 8BDA27AECD8211EF9AF32B60C4F9AE02.roa (hash: lR4n9Kwcmr6TKngQVZYuPG5nB4EmQJXT4ATIoMZffCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Validity Not Before: Apr 25 06:13:27 2025 GMT Not After : May 2 06:13:27 2025 GMT Subject: CN=680b2807-9e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:d9:dc:e8:eb:1d:77:f5:ee:fd:9a:0a:25: 67:1c:40:4b:22:dc:c9:3f:c2:b7:bd:33:73:e1:5f: b1:57:9d:4c:de:57:e1:40:36:76:34:4b:39:9e:2c: ea:7b:b1:24:a3:fa:ca:82:7c:54:26:2a:01:3f:a8: 52:db:91:dd:87:3d:89:7d:7f:a4:9c:ce:05:9a:f5: b6:20:7c:bd:d1:8d:b1:b1:56:a6:b8:ab:a0:c8:4d: 78:6d:c8:58:6f:6f:86:ee:47:1c:27:60:c1:76:01: f6:91:e6:cc:12:f8:ef:08:12:0d:87:5a:de:24:69: 3d:fa:a7:5f:66:bc:6d:e2:f6:35:18:60:d7:de:5e: 2c:a1:16:47:67:6a:13:8b:45:d7:b9:36:ef:55:4d: f7:f1:85:75:24:a5:10:83:c6:b2:9c:d6:75:50:be: 83:19:71:3d:c7:1a:c7:85:dd:d6:cf:e4:a2:87:c0: 6a:28:08:d5:a6:d2:86:01:58:1a:2e:b9:b1:02:a1: e5:05:93:d9:bf:d6:ea:95:51:8b:32:55:e8:31:cc: 70:91:40:88:6b:96:0b:ef:07:ab:3c:3c:16:04:90: 43:a4:50:16:6d:df:46:50:cc:af:0a:cc:f9:52:f8: a4:8a:f2:c2:de:f0:d2:81:2c:48:15:81:fa:ff:a1: b3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AF:23:3B:4A:D3:E4:A9:72:BD:F0:07:6E:DA:F4:A4:9F:5A:6A:40 X509v3 Authority Key Identifier: keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:77:dc:b7:e6:5e:53:28:65:6e:aa:b4:86:0d:6f:52:35:61: c4:3b:4b:16:0e:f7:63:85:40:da:45:75:21:26:0b:01:68:1a: ee:63:be:33:b6:2a:66:e8:83:6e:03:e0:d2:ad:29:10:6b:d1: e3:b0:bf:4d:16:df:73:c0:66:45:04:25:23:55:99:2e:ad:96: f4:08:c4:0f:9e:93:48:5f:a8:aa:b2:b9:2c:08:6c:c0:db:d6: 3b:d1:07:49:be:d9:22:6d:68:cf:60:df:1a:c0:80:dc:83:e8: 42:fe:0e:0b:bc:f0:ac:6b:b4:a5:27:a8:f4:94:ae:67:3a:bc: cd:01:b6:90:30:a3:84:db:52:8f:43:93:ce:61:e7:3c:3f:10: 0c:8f:ec:df:e3:f6:0d:1a:5b:87:2d:ed:89:b7:2b:4a:e6:df: f0:b5:f3:67:97:9c:2f:1a:bb:de:ea:a5:ee:11:34:03:21:29: 7a:43:22:33:04:a3:e1:2e:2d:2c:41:91:a2:42:ce:5f:73:03: 73:83:b4:68:29:27:93:5c:ab:11:fd:c0:2d:ed:52:9d:b2:a2: e8:5d:ce:34:dc:c2:1d:fd:7a:ea:83:50:00:e7:ec:13:11:a7: 7e:be:c0:53:ca:ed:62:db:54:e0:32:91:92:65:04:4e:02:1e: 81:f4:49:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoNUE1NkM0REU5NDIzQjlFMkI4MDBBQjdFMDQwRENBM0Uw OUYyMzQ3NTAeFw0yNTA0MjUwNjEzMjdaFw0yNTA1MDIwNjEzMjdaMBgxFjAUBgNV BAMTDTY4MGIyODA3LTllOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9ztnc6Osdd/Xu/ZoKJWccQEsi3Mk/wre9M3PhX7FXnUzeV+FANnY0SzmeLOp7 sSSj+sqCfFQmKgE/qFLbkd2HPYl9f6SczgWa9bYgfL3RjbGxVqa4q6DITXhtyFhv b4buRxwnYMF2AfaR5swS+O8IEg2HWt4kaT36p19mvG3i9jUYYNfeXiyhFkdnahOL Rde5Nu9VTffxhXUkpRCDxrKc1nVQvoMZcT3HGseF3dbP5KKHwGooCNWm0oYBWBou ubECoeUFk9m/1uqVUYsyVegxzHCRQIhrlgvvB6s8PBYEkEOkUBZt30ZQzK8KzPlS +KSK8sLe8NKBLEgVgfr/obMNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI68jO0rT 5KlyvfAHbtr0pJ9aakAwHwYDVR0jBBgwFoAUWlbE3pQjueK4AKt+BA3KPgnyNHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzgzRkQ2QjJFQTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyL1dsYkUzcFFqdWVLNEFLdC1CQTNLUGdueU5I VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2xiRTNwUWp1ZUs0QUt0LUJBM0tQZ255TkhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzgzRkQ2QjJFQTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyL1dsYkUzcFFqdWVL NEFLdC1CQTNLUGdueU5IVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMp33LfmXlMoZW6qtIYNb1I1YcQ7SxYO92OFQNpFdSEmCwFoGu5jvjO2 Kmbog24D4NKtKRBr0eOwv00W33PAZkUEJSNVmS6tlvQIxA+ek0hfqKqyuSwIbMDb 1jvRB0m+2SJtaM9g3xrAgNyD6EL+Dgu88KxrtKUnqPSUrmc6vM0BtpAwo4TbUo9D k85h5zw/EAyP7N/j9g0aW4ct7Ym3K0rm3/C182eXnC8au97qpe4RNAMhKXpDIjME o+EuLSxBkaJCzl9zA3ODtGgpJ5NcqxH9wC3tUp2youhdzjTcwh39euqDUADn7BMR p36+wFPK7WLbVOAykZJlBE4CHoH0SeA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:40 2025 by rpki-client