$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft File: 0WtcAvVxqLjfvUc87xSokssNAOE.mft (raw, json) Hash identifier: TY7BgYfHRgSo+dByqsHcuMdTxGAkXz1yCQIHqf3eKCs= Subject key identifier: 88:35:2F:6C:48:6C:C7:83:8F:05:F4:5D:A1:55:51:28:7C:61:E9:9B Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 Certificate issuer: /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft Manifest number: 11BA Signing time: Thu 24 Apr 2025 19:36:47 +0000 Manifest this update: Thu 24 Apr 2025 19:36:47 +0000 Manifest next update: Thu 01 May 2025 19:36:47 +0000 Files and hashes: 1: 0WtcAvVxqLjfvUc87xSokssNAOE.crl (hash: sKTsrTQFGBtce4msaLKubCc4bkt9CDkEjQzG9lmO+qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102, serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Validity Not Before: Apr 24 19:36:47 2025 GMT Not After : May 1 19:36:47 2025 GMT Subject: CN=680a92cf-31f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:52:85:d2:cf:ea:54:0b:85:d5:90:7d:d7:a3: de:0e:56:b4:37:1f:f6:e5:23:5b:5a:47:74:24:19: 42:6c:e4:37:a5:c4:82:37:ea:28:2a:7d:4c:b9:bc: 3a:29:86:ec:aa:68:68:04:11:23:15:02:83:b4:7c: d2:e1:fc:63:e4:3b:b8:39:1b:83:96:1a:39:46:7b: 96:61:81:e1:ac:f6:1d:f5:c8:03:d7:d4:88:32:15: fb:72:85:80:df:c4:54:c0:4b:6a:fe:a5:a4:4e:80: 72:dd:8b:38:4e:65:25:98:d7:a8:ed:30:66:60:0d: c4:9a:1e:52:16:74:00:b8:0b:00:5a:07:d3:f2:9a: f1:a4:b6:c5:30:23:40:0a:00:0f:06:16:33:a9:01: 30:fe:5b:7f:cb:75:8c:40:0d:c6:3d:a5:01:ba:49: b0:ca:98:96:9b:34:12:47:e7:ff:77:6b:c0:fa:15: 64:53:3e:db:8f:77:9a:83:2b:0d:c9:b2:10:17:1a: bf:69:43:a5:aa:3d:62:36:cd:e8:b4:92:e0:f2:0c: 83:8a:53:d2:c7:79:1c:32:90:62:34:53:8e:40:1b: 0d:f4:9b:ae:43:eb:fd:39:51:35:c6:88:c7:f4:e7: 89:09:5a:30:c2:a4:52:46:b7:75:58:cf:57:5f:9e: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:35:2F:6C:48:6C:C7:83:8F:05:F4:5D:A1:55:51:28:7C:61:E9:9B X509v3 Authority Key Identifier: keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:69:b0:8e:df:9b:5d:28:23:b0:4f:ec:a5:ba:93:8b:e7:74: 9e:cc:f0:8b:08:ed:49:49:ea:48:24:77:9d:f5:32:8d:6a:9a: 27:44:46:4f:9e:69:78:52:b2:90:77:49:c2:7b:20:97:f3:1c: 9b:d9:9e:84:70:ea:7f:7e:ea:7d:97:d0:91:88:3e:51:b2:1f: f1:ce:92:d3:c9:f1:fb:49:35:2a:7a:f0:23:bc:d2:d5:5e:c0: 25:eb:3d:cf:a6:a5:bf:fc:f1:cc:a8:4c:99:22:0d:6f:5a:f0: 51:72:37:fc:ca:d3:4a:2f:51:e4:a0:61:7b:1f:77:76:ad:b6: d3:0f:58:22:85:82:e2:90:0b:84:e5:3f:cf:89:af:33:12:58: ca:9d:4b:03:3c:da:a7:b1:fc:82:a7:b4:f9:3b:50:4f:0c:0b: bf:9d:6c:82:41:53:85:85:07:b4:c1:a2:a5:3f:c5:5d:e4:77: 3a:24:5d:d0:8d:0a:4d:ce:5d:51:dd:67:df:94:1a:e6:72:84: c3:37:52:71:d5:91:f8:cf:06:7f:d7:2a:fa:94:fc:d7:89:8c: 25:9b:87:9a:8a:2e:7c:11:3a:42:e7:c9:af:da:25:cf:18:9b: 7c:2e:99:9b:de:18:c1:56:5d:41:b7:98:6b:b3:03:33:3a:e4: 70:31:46:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEQxNkI1QzAyRjU3MUE4QjhERkJENDczQ0VGMTRBODky Q0IwRDAwRTEwHhcNMjUwNDI0MTkzNjQ3WhcNMjUwNTAxMTkzNjQ3WjAYMRYwFAYD VQQDEw02ODBhOTJjZi0zMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FKF0s/qVAuF1ZB916PeDla0Nx/25SNbWkd0JBlCbOQ3pcSCN+ooKn1Mubw6 KYbsqmhoBBEjFQKDtHzS4fxj5Du4ORuDlho5RnuWYYHhrPYd9cgD19SIMhX7coWA 38RUwEtq/qWkToBy3Ys4TmUlmNeo7TBmYA3Emh5SFnQAuAsAWgfT8prxpLbFMCNA CgAPBhYzqQEw/lt/y3WMQA3GPaUBukmwypiWmzQSR+f/d2vA+hVkUz7bj3eagysN ybIQFxq/aUOlqj1iNs3otJLg8gyDilPSx3kcMpBiNFOOQBsN9JuuQ+v9OVE1xojH 9OeJCVowwqRSRrd1WM9XX54nVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIg1L2xI bMeDjwX0XaFVUSh8YembMB8GA1UdIwQYMBaAFNFrXAL1cai4371HPO8UqJLLDQDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFMamZ2VWM4N3hTb2tzc05B T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBXdGNBdlZ4cUxqZnZVYzg3eFNva3NzTkFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFM amZ2VWM4N3hTb2tzc05BT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQabCO35tdKCOwT+ylupOL53SezPCLCO1JSepIJHed9TKNaponREZP nml4UrKQd0nCeyCX8xyb2Z6EcOp/fup9l9CRiD5Rsh/xzpLTyfH7STUqevAjvNLV XsAl6z3PpqW//PHMqEyZIg1vWvBRcjf8ytNKL1HkoGF7H3d2rbbTD1gihYLikAuE 5T/Pia8zEljKnUsDPNqnsfyCp7T5O1BPDAu/nWyCQVOFhQe0waKlP8Vd5Hc6JF3Q jQpNzl1R3WfflBrmcoTDN1Jx1ZH4zwZ/1yr6lPzXiYwlm4eaii58ETpC58mv2iXP GJt8Lpmb3hjBVl1Bt5hrswMzOuRwMUaa -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:52 2025 by rpki-client