$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft File: atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json) Hash identifier: L2OnK7mmGEEtTfQVGev/4y6pJyAuHDUt7CgOxyS3TYA= Subject key identifier: 59:35:87:E9:F1:D1:CF:5E:A3:95:5B:41:7B:2F:5F:FF:60:A7:11:39 Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98 Certificate issuer: /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698 Certificate serial: 060F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft Manifest number: 060D Signing time: Sat 26 Apr 2025 22:28:25 +0000 Manifest this update: Sat 26 Apr 2025 22:28:24 +0000 Manifest next update: Sat 03 May 2025 22:28:24 +0000 Files and hashes: 1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: rLjbA69g4rErZ4vnjUtAbSib34bzBSvKNudltAQizRk=) 2: D154F886EB7E11EE973A5D76C4F9AE02.roa (hash: KNP57ubsOVF9oNCH7Xk/Z7xQApgpYUwHKDlJNQIBNxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698 Validity Not Before: Apr 26 22:28:24 2025 GMT Not After : May 3 22:28:24 2025 GMT Subject: CN=680d5e08-f737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:6f:f8:99:1e:9b:cd:4e:29:b9:e2:24:bc: 3f:d1:a9:a0:9b:84:40:10:5d:4a:ab:38:4a:5e:77: 7f:12:3e:67:b9:fb:44:9e:fd:4f:3a:1c:3d:f4:4f: 95:34:df:57:c5:b7:b3:9f:39:78:52:f2:1f:1b:60: 7c:c8:f0:43:9f:a0:a7:f1:b6:ec:29:47:86:45:9b: 66:39:59:2f:ca:6c:21:e6:4e:a0:b7:f9:91:22:b8: 36:c5:6e:fe:84:d3:c7:77:28:d1:b6:c5:0b:cd:7a: 73:f3:3d:3e:6d:8d:94:6b:7f:85:ef:50:e2:1d:b8: 3e:1a:de:f3:2e:3f:ae:ec:c1:78:55:62:dc:33:a0: c6:72:a2:1e:bd:07:09:dd:0d:69:d6:ec:35:b7:86: d8:50:9c:57:29:95:b4:be:ef:07:32:9f:5a:32:3e: 91:95:a8:8c:3c:44:d0:ca:a2:d2:8b:45:a3:7a:ad: 10:ae:7a:5f:7a:54:81:27:5f:c8:f8:c7:10:70:19: b6:fa:7a:bc:a8:d1:83:db:7d:04:6d:e7:04:2e:cd: 72:98:3c:1c:8b:ad:c6:d4:9c:c7:ef:cb:e3:bb:46: d9:7c:01:77:94:b2:ab:8a:13:92:1e:73:8c:28:77: a4:0a:90:54:df:8a:8f:de:17:d9:b4:d2:dd:51:67: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:35:87:E9:F1:D1:CF:5E:A3:95:5B:41:7B:2F:5F:FF:60:A7:11:39 X509v3 Authority Key Identifier: keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:21:57:68:c7:05:51:26:d8:5e:fd:a8:29:9c:b9:e0:06:76: cd:6c:73:9f:a0:be:92:b9:5a:da:8b:64:f7:7c:ee:99:10:ed: e7:e5:56:78:5e:57:97:62:c1:91:97:27:e8:11:a0:6c:1e:cd: d1:66:69:36:28:27:e7:f4:0f:e8:ad:0d:84:a6:18:81:49:7f: bc:f7:0a:26:1e:7a:57:1f:55:5c:79:5d:46:26:38:47:86:a1: 06:13:27:b6:c9:92:3f:64:80:91:f8:0e:e4:44:c6:72:ca:16: 1b:dd:08:33:3a:bc:a0:4b:78:68:3d:f5:8b:c8:c3:3b:91:82: 4b:34:ce:fa:c9:65:16:48:b0:98:43:b4:fd:13:bd:93:87:2a: 94:23:60:81:73:bf:52:2e:7b:fb:fb:8b:22:89:2c:c2:5a:ea: 39:08:a5:7b:a5:e8:1c:4b:35:4c:fd:b8:2e:8f:1c:69:54:da: f4:d6:3e:29:9f:db:ca:b8:82:cb:9a:45:6d:11:a3:fd:76:2c: 8a:88:2a:a2:44:70:60:52:3e:9a:4c:5f:84:42:9a:be:69:8f: 15:09:fc:2e:21:e0:86:4a:0b:d3:e7:e4:e8:3e:84:dd:5a:c9: f9:27:15:54:28:f3:c6:2a:91:e1:7c:ee:bb:88:fd:52:37:b7: 7e:3d:18:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2QjMxMTAvBgNVBAUTKDZBRDU4QjJDMzIzRUY0MEZDMDg5NDBCMTQ2MDdEMDg2 OTVDRTg2OTgwHhcNMjUwNDI2MjIyODI0WhcNMjUwNTAzMjIyODI0WjAYMRYwFAYD VQQDEw02ODBkNWUwOC1mNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWdv+Jkem81OKbniJLw/0amgm4RAEF1KqzhKXnd/Ej5nuftEnv1POhw99E+V NN9Xxbeznzl4UvIfG2B8yPBDn6Cn8bbsKUeGRZtmOVkvymwh5k6gt/mRIrg2xW7+ hNPHdyjRtsULzXpz8z0+bY2Ua3+F71DiHbg+Gt7zLj+u7MF4VWLcM6DGcqIevQcJ 3Q1p1uw1t4bYUJxXKZW0vu8HMp9aMj6RlaiMPETQyqLSi0Wjeq0QrnpfelSBJ1/I +McQcBm2+nq8qNGD230EbecELs1ymDwci63G1JzH78vju0bZfAF3lLKrihOSHnOM KHekCpBU34qP3hfZtNLdUWdL6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFk1h+nx 0c9eo5VbQXsvX/9gpxE5MB8GA1UdIwQYMBaAFGrViywyPvQPwIlAsUYH0IaVzoaY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZCMy83MjQzRUI5RTlC NjQxMUVCQjY1RTZFODdDNEY5QUUwMi9hdFdMTERJLTlBX0FpVUN4UmdmUWhwWE9o cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0V0xMREktOUFfQWlVQ3hSZ2ZRaHBYT2hwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjZCMy83MjQzRUI5RTlCNjQxMUVCQjY1RTZFODdDNEY5QUUwMi9hdFdMTERJLTlB X0FpVUN4UmdmUWhwWE9ocGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhIVdoxwVRJthe/agpnLngBnbNbHOfoL6SuVrai2T3fO6ZEO3n5VZ4 XleXYsGRlyfoEaBsHs3RZmk2KCfn9A/orQ2EphiBSX+89womHnpXH1VceV1GJjhH hqEGEye2yZI/ZICR+A7kRMZyyhYb3QgzOrygS3hoPfWLyMM7kYJLNM76yWUWSLCY Q7T9E72ThyqUI2CBc79SLnv7+4siiSzCWuo5CKV7pegcSzVM/bgujxxpVNr01j4p n9vKuILLmkVtEaP9diyKiCqiRHBgUj6aTF+EQpq+aY8VCfwuIeCGSgvT5+ToPoTd Wsn5JxVUKPPGKpHhfO67iP1SN7d+PRgX -----END CERTIFICATE-----Generated at Sun Apr 27 05:19:10 2025 by rpki-client