$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft File: wUoOYILw6SLK_iKWlSPoZMeo8dw.mft (raw, json) Hash identifier: 2sp59eUozE39PIrg32Tqar1k3qlM8M+Mo1hIvUUl/0w= Subject key identifier: 2B:0C:D7:48:FD:18:99:09:D8:61:AC:88:EE:11:64:95:47:2C:A5:70 Authority key identifier: C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC Certificate issuer: /CN=A91C62B6/serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft Manifest number: D1 Signing time: Fri 25 Apr 2025 04:54:21 +0000 Manifest this update: Fri 25 Apr 2025 04:54:20 +0000 Manifest next update: Fri 02 May 2025 04:54:20 +0000 Files and hashes: 1: wUoOYILw6SLK_iKWlSPoZMeo8dw.crl (hash: cEP7psVrXdqyFB8J2f3SEg0LyagmeGnxvM60v2flRZQ=) 2: 8E1DCEDA013B11EF86588545C4F9AE02.roa (hash: smRqwZU79BxT70mcDEE+mLVxCUFpEnrUcI1Z0dFF4ZU=) 3: E0C16642013B11EFA1286E46C4F9AE02.roa (hash: uhIUjELjVZa5Y62wg4YBJZgNj0OBhnAUsoUiBAK0Lh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62B6, serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC Validity Not Before: Apr 25 04:54:20 2025 GMT Not After : May 2 04:54:20 2025 GMT Subject: CN=680b157d-48d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:3a:41:42:08:c4:81:de:95:c2:67:64:27: d1:bf:9d:5c:8e:11:5b:56:c4:1b:28:ae:10:a9:9f: ec:36:bc:42:30:a9:16:a0:94:db:ec:80:a8:ad:0b: 50:15:9d:84:fc:54:ed:06:e9:a9:d0:31:f5:70:29: ea:32:34:f2:99:25:d6:54:68:08:3c:4b:c9:07:d7: 2f:0f:b0:e1:81:51:d8:99:65:42:1b:3d:85:83:ca: c1:dd:23:70:24:55:04:ca:3a:83:c5:55:29:76:56: ed:d3:3d:ee:21:2d:e7:8f:3f:4c:03:80:e0:f0:59: 29:95:69:7d:9a:af:17:1a:95:c9:c2:ad:d9:73:e6: 83:12:08:b8:a0:9b:6a:3f:ca:2e:0b:05:d4:29:92: e2:8f:39:1b:b7:ad:33:c6:a0:ec:da:35:e5:a2:b8: 63:64:e3:12:0f:de:d5:b2:07:ef:42:d0:a2:11:35: 45:a2:71:87:be:93:9c:6c:28:2b:6b:fe:1f:2a:bf: bb:ab:25:e0:f0:ea:c6:4f:fa:6c:74:16:d8:7f:ad: 6c:eb:07:11:2c:a8:2c:0d:08:10:c1:14:ff:16:df: d0:55:3e:30:9b:1c:f5:6c:04:9a:75:54:f9:ec:13: 7b:5e:3d:11:23:90:1f:df:bb:fc:1f:ff:8a:ff:91: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0C:D7:48:FD:18:99:09:D8:61:AC:88:EE:11:64:95:47:2C:A5:70 X509v3 Authority Key Identifier: keyid:C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d0:05:b1:b9:0f:a6:dc:30:55:15:27:3a:1b:cb:bd:09:81: 15:92:e5:0b:c8:05:42:83:a5:21:a6:f4:89:3d:95:51:6f:af: cc:5a:72:00:f4:3d:43:60:9e:a7:50:da:d7:b9:8a:df:b1:1e: 35:c7:d1:a9:ef:77:ff:5d:77:4c:da:21:34:5a:9c:42:e6:0f: 1f:bc:e5:d3:2a:71:b0:10:49:a7:4e:bb:53:8a:f1:29:7f:10: ef:88:19:c7:da:dd:39:89:74:50:2f:95:2e:44:af:16:26:21: 0a:83:1d:ca:c2:db:97:6a:df:c9:1d:84:c5:f3:2d:fc:6a:96: ee:80:51:ca:e0:d8:e0:ef:bc:05:b9:76:da:0a:80:3d:90:3d: 95:8e:e6:3b:0a:8d:26:bb:99:07:a5:ad:8c:71:4b:d4:7e:e5: e6:2a:2e:0e:1c:9c:34:26:be:95:a9:44:42:af:d0:c6:0e:67: 47:55:4b:01:e2:97:b0:bc:9b:8e:ac:51:ed:af:5c:3c:a5:05: 1e:45:98:6d:bf:35:ca:4a:2e:26:73:5f:21:f3:84:26:99:d0: ec:64:19:b0:30:58:53:44:13:e9:fa:a6:c1:db:dd:de:b5:ee: e9:ff:e0:02:96:59:cf:05:ae:2a:e6:a5:36:58:fa:e8:0f:1e: 44:03:8a:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyQjYxMTAvBgNVBAUTKEMxNEEwRTYwODJGMEU5MjJDQUZFMjI5Njk1MjNFODY0 QzdBOEYxREMwHhcNMjUwNDI1MDQ1NDIwWhcNMjUwNTAyMDQ1NDIwWjAYMRYwFAYD VQQDEw02ODBiMTU3ZC00OGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRY6QUIIxIHelcJnZCfRv51cjhFbVsQbKK4QqZ/sNrxCMKkWoJTb7ICorQtQ FZ2E/FTtBump0DH1cCnqMjTymSXWVGgIPEvJB9cvD7DhgVHYmWVCGz2Fg8rB3SNw JFUEyjqDxVUpdlbt0z3uIS3njz9MA4Dg8FkplWl9mq8XGpXJwq3Zc+aDEgi4oJtq P8ouCwXUKZLijzkbt60zxqDs2jXlorhjZOMSD97VsgfvQtCiETVFonGHvpOcbCgr a/4fKr+7qyXg8OrGT/psdBbYf61s6wcRLKgsDQgQwRT/Ft/QVT4wmxz1bASadVT5 7BN7Xj0RI5Af37v8H/+K/5Ft4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsM10j9 GJkJ2GGsiO4RZJVHLKVwMB8GA1UdIwQYMBaAFMFKDmCC8Okiyv4ilpUj6GTHqPHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJCNi9COTk4N0FBNEZF NDAxMUVFOEZFNzQ1NjlDNEY5QUUwMi93VW9PWUlMdzZTTEtfaUtXbFNQb1pNZW84 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVb09ZSUx3NlNMS19pS1dsU1BvWk1lbzhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJCNi9COTk4N0FBNEZFNDAxMUVFOEZFNzQ1NjlDNEY5QUUwMi93VW9PWUlMdzZT TEtfaUtXbFNQb1pNZW84ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI0AWxuQ+m3DBVFSc6G8u9CYEVkuULyAVCg6UhpvSJPZVRb6/MWnIA 9D1DYJ6nUNrXuYrfsR41x9Gp73f/XXdM2iE0WpxC5g8fvOXTKnGwEEmnTrtTivEp fxDviBnH2t05iXRQL5UuRK8WJiEKgx3KwtuXat/JHYTF8y38apbugFHK4Njg77wF uXbaCoA9kD2VjuY7Co0mu5kHpa2McUvUfuXmKi4OHJw0Jr6VqURCr9DGDmdHVUsB 4pewvJuOrFHtr1w8pQUeRZhtvzXKSi4mc18h84QmmdDsZBmwMFhTRBPp+qbB293e te7p/+ACllnPBa4q5qU2WProDx5EA4qT -----END CERTIFICATE-----Generated at Sat Apr 26 05:41:17 2025 by rpki-client