$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json) Hash identifier: n1j71cU4aVuMCeSj+rgY3yEjDBxnzvFv/ji9yepAdGo= Subject key identifier: 6F:C8:7C:61:D4:DE:F1:63:C2:10:0D:B0:02:60:D0:64:C3:D6:4D:17 Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft Manifest number: 0583 Signing time: Thu 24 Apr 2025 23:03:30 +0000 Manifest this update: Thu 24 Apr 2025 23:03:29 +0000 Manifest next update: Thu 01 May 2025 23:03:29 +0000 Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: X0sRQy0VHDs0rH2TMlfTSSrxZiNofoSbnWqwK41Fqpg=) 2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: uguUMCdjeeoR+3BZNUcz2rlEWQIIVlblf1lRNkNHvS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Validity Not Before: Apr 24 23:03:29 2025 GMT Not After : May 1 23:03:29 2025 GMT Subject: CN=680ac342-08e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a4:e9:02:c0:30:3f:d4:20:4f:53:dd:94:50: 47:28:f1:2e:19:d5:df:b9:f3:13:82:06:cc:a7:5a: 16:bc:23:09:e1:3c:2c:04:e4:da:9a:6f:34:81:c1: 3b:9b:0a:9a:ad:50:78:68:f6:84:c9:43:a9:98:de: f6:5f:dd:fb:c0:20:5b:25:4c:f2:ad:5a:25:ec:3f: 58:19:85:27:9f:82:40:e8:d0:14:3a:0e:7d:1e:04: 70:37:7c:83:0f:bc:a5:e2:7a:75:a1:df:ef:ec:b7: b2:5c:6d:13:eb:1b:91:6a:49:c1:56:bd:3d:f0:35: f5:bc:80:a7:66:7f:05:6c:25:0a:8b:04:76:6b:ec: 8e:f8:8f:76:85:7f:3c:41:11:af:7f:ec:b1:7a:21: 01:10:28:4d:47:ef:13:df:42:19:56:d3:44:78:e4: c4:d3:34:70:81:5f:78:5c:f6:0b:88:68:9e:68:16: 69:75:43:15:e9:35:9c:86:90:01:65:ae:9b:22:3d: 49:4f:ef:40:16:0e:80:f9:fd:b4:4e:e4:e7:e2:a5: 21:09:df:8e:24:e8:ad:47:f2:ca:d0:11:b1:66:dd: 3d:97:88:4e:99:3a:d8:56:2a:47:5a:d0:d5:b0:40: ca:31:41:f0:fd:b1:6d:ba:1f:94:52:32:c2:68:db: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C8:7C:61:D4:DE:F1:63:C2:10:0D:B0:02:60:D0:64:C3:D6:4D:17 X509v3 Authority Key Identifier: keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e2:9c:06:ae:89:ae:31:cb:eb:79:07:a4:d4:76:d4:51:6e: aa:48:16:d6:e9:29:9c:a8:bd:e8:8e:6f:9c:48:bb:7f:2c:d2: 17:bd:9e:51:d7:22:b2:69:f6:69:fb:ff:4f:96:b3:2d:dd:5a: 12:d9:24:04:85:6f:a5:f1:42:58:32:5b:8c:54:72:09:89:ee: 22:7b:83:69:dd:65:67:ca:d7:46:8d:97:50:12:8c:0e:6a:cc: d7:be:f8:7c:2b:16:f7:d3:7e:bf:38:d7:b9:ca:46:a0:2c:5e: 8d:7b:75:d3:b8:ce:ed:7e:ac:46:6b:4b:e6:12:90:b6:68:3b: 2b:c5:4d:ba:ae:84:62:05:65:88:a5:87:60:71:73:43:cc:99: 58:79:c5:db:f6:9c:57:bc:93:2a:c1:bf:8a:d0:c0:7f:94:90: 8a:c7:47:37:49:63:f7:9b:e7:2b:c4:ee:a8:ba:83:27:d9:09: fe:cd:bb:f6:44:6e:72:5b:fa:82:72:88:9e:9a:e5:53:a9:dc: 9d:2a:4c:b5:2e:8e:54:c1:fe:a1:e6:ed:33:08:97:9d:18:e0: 86:e6:2c:75:56:88:16:4a:b2:47:97:fa:31:72:76:bc:4d:c3: b8:12:06:aa:98:ce:73:50:49:5f:9c:7f:c9:1b:02:94:25:90: 70:58:d4:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVGMjUxMTAvBgNVBAUTKDVBNjg0NDFGQjlEMUI3OTBGQzZDNzk5RTM5NTEwMUQ5 Mjc2MDk2N0QwHhcNMjUwNDI0MjMwMzI5WhcNMjUwNTAxMjMwMzI5WjAYMRYwFAYD VQQDEw02ODBhYzM0Mi0wOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KTpAsAwP9QgT1PdlFBHKPEuGdXfufMTggbMp1oWvCMJ4TwsBOTamm80gcE7 mwqarVB4aPaEyUOpmN72X937wCBbJUzyrVol7D9YGYUnn4JA6NAUOg59HgRwN3yD D7yl4np1od/v7LeyXG0T6xuRaknBVr098DX1vICnZn8FbCUKiwR2a+yO+I92hX88 QRGvf+yxeiEBEChNR+8T30IZVtNEeOTE0zRwgV94XPYLiGieaBZpdUMV6TWchpAB Za6bIj1JT+9AFg6A+f20TuTn4qUhCd+OJOitR/LK0BGxZt09l4hOmTrYVipHWtDV sEDKMUHw/bFtuh+UUjLCaNtdAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/IfGHU 3vFjwhANsAJg0GTD1k0XMB8GA1UdIwQYMBaAFFpoRB+50beQ/Gx5njlRAdknYJZ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUYyNS9GOEVEOEI4QUQz NUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1RDhiSG1lT1ZFQjJTZGds bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dtaEVIN25SdDVEOGJIbWVPVkVCMlNkZ2xuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUYyNS9GOEVEOEI4QUQzNUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1 RDhiSG1lT1ZFQjJTZGdsbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP4pwGromuMcvreQek1HbUUW6qSBbW6SmcqL3ojm+cSLt/LNIXvZ5R 1yKyafZp+/9PlrMt3VoS2SQEhW+l8UJYMluMVHIJie4ie4Np3WVnytdGjZdQEowO aszXvvh8Kxb3036/ONe5ykagLF6Ne3XTuM7tfqxGa0vmEpC2aDsrxU26roRiBWWI pYdgcXNDzJlYecXb9pxXvJMqwb+K0MB/lJCKx0c3SWP3m+crxO6ouoMn2Qn+zbv2 RG5yW/qCcoiemuVTqdydKky1Lo5Uwf6h5u0zCJedGOCG5ix1VogWSrJHl/oxcna8 TcO4EgaqmM5zUElfnH/JGwKUJZBwWNQe -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:01 2025 by rpki-client