$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json) Hash identifier: lGkMH3HijM6FEEJDAllvSwczOZUAl42vcILNF71NzpI= Subject key identifier: 87:52:83:8F:26:3B:3E:12:41:52:EB:8A:AC:4A:35:4B:BF:2E:80:73 Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft Manifest number: 0AE9 Signing time: Thu 24 Apr 2025 19:17:44 +0000 Manifest this update: Thu 24 Apr 2025 19:17:44 +0000 Manifest next update: Thu 01 May 2025 19:17:44 +0000 Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: JryZm5Tni925uXMCBU8vZJAoTx7bkZqVTWwwF17SVaM=) 2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: Mg9FSloatKIT5DeKmuz+Qvjhu8F3q0aOXlO1sHBkA98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Validity Not Before: Apr 24 19:17:44 2025 GMT Not After : May 1 19:17:44 2025 GMT Subject: CN=680a8e58-cb21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c9:bf:86:99:cf:26:3d:bd:6b:77:f1:79:b8: b0:47:8a:7b:27:7b:88:ea:89:97:4b:b1:92:d5:e7: 1a:d1:14:43:b4:39:c0:31:bd:6b:54:df:b5:7e:4d: 78:c5:30:0b:71:30:30:65:69:02:2b:27:1f:e9:cf: ba:7c:59:00:7f:95:d1:16:6d:68:ef:fa:60:8b:44: 25:fa:ef:03:2e:6c:ac:c0:3d:24:88:9c:30:b3:cb: d8:fa:62:11:2e:07:37:a2:32:71:9d:55:8c:30:72: 4b:e4:aa:9b:29:22:3a:ca:b5:9e:53:d6:c0:b1:2c: 80:96:72:b7:9e:8f:cc:1e:4e:ab:6b:67:72:68:de: 33:6d:6a:d4:2e:3f:11:91:6e:9c:36:f7:57:5a:03: fa:e6:c7:31:9e:91:ae:05:6c:12:78:5d:02:f2:d0: e4:fd:fa:f0:d1:55:43:0d:bf:a1:ae:d9:f7:01:b3: b5:ca:91:c3:71:6d:bc:4d:d3:ee:6d:a7:dc:d5:d0: 41:92:24:6e:72:64:48:b7:c2:60:b8:25:1d:c4:f4: b3:18:75:b1:69:fe:aa:36:09:17:08:a8:3e:c6:a9: 1d:ac:5a:0c:ca:f3:2c:35:35:e9:4f:c2:9b:8e:cf: fd:e5:d7:1e:ba:a8:30:01:68:20:2d:47:90:6d:2c: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:52:83:8F:26:3B:3E:12:41:52:EB:8A:AC:4A:35:4B:BF:2E:80:73 X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:1f:0e:51:6c:2b:b9:56:40:b8:41:bd:a1:50:34:31:2b:d2: 8d:ba:df:58:49:2f:61:02:44:1d:0c:05:b0:17:88:d0:7b:87: 87:dd:78:b7:be:a8:e4:7b:ee:bf:40:75:b4:a1:a4:ad:d7:28: a2:9e:cb:37:6f:6a:86:7f:2f:f2:41:69:5b:b4:a4:ff:95:7f: 39:e5:b4:4f:db:5b:a6:3b:1c:48:57:69:41:c9:a9:33:2b:bb: 25:2e:f5:b9:3f:35:89:a8:81:6a:a2:3d:e6:14:ce:c3:2e:d7: 1b:c4:d7:91:0c:04:69:5a:63:db:a7:9f:46:70:15:60:8c:ad: 3b:9e:3d:c5:38:e2:9f:9a:b7:5c:03:92:a7:76:cf:ea:47:0f: 3d:30:d3:fa:13:fd:b4:0d:be:39:ad:d4:57:9b:f4:48:a0:75: a4:e5:9d:c6:2d:dd:db:b6:4b:2f:79:03:33:e7:bf:aa:90:35: da:ec:46:ac:4e:23:3e:25:30:42:bf:a8:4b:85:5f:78:4c:e0: cc:cf:c8:84:6c:ef:4b:6b:80:c9:2f:59:9b:87:73:4e:39:e9: bc:07:48:75:2f:41:e3:05:e1:ce:bc:5c:f8:60:e4:90:03:53: f2:11:49:5d:50:eb:67:7a:7a:1e:d3:12:2e:2c:7a:a1:4d:f4: 4e:e5:f0:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjUwNDI0MTkxNzQ0WhcNMjUwNTAxMTkxNzQ0WjAYMRYwFAYD VQQDEw02ODBhOGU1OC1jYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cm/hpnPJj29a3fxebiwR4p7J3uI6omXS7GS1eca0RRDtDnAMb1rVN+1fk14 xTALcTAwZWkCKycf6c+6fFkAf5XRFm1o7/pgi0Ql+u8DLmyswD0kiJwws8vY+mIR Lgc3ojJxnVWMMHJL5KqbKSI6yrWeU9bAsSyAlnK3no/MHk6ra2dyaN4zbWrULj8R kW6cNvdXWgP65scxnpGuBWwSeF0C8tDk/frw0VVDDb+hrtn3AbO1ypHDcW28TdPu bafc1dBBkiRucmRIt8JguCUdxPSzGHWxaf6qNgkXCKg+xqkdrFoMyvMsNTXpT8Kb js/95dceuqgwAWggLUeQbSzDmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdSg48m Oz4SQVLriqxKNUu/LoBzMB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5 SDRYaTFaRDkxZlFHZlF1OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9Hw5RbCu5VkC4Qb2hUDQxK9KNut9YSS9hAkQdDAWwF4jQe4eH3Xi3 vqjke+6/QHW0oaSt1yiinss3b2qGfy/yQWlbtKT/lX855bRP21umOxxIV2lByakz K7slLvW5PzWJqIFqoj3mFM7DLtcbxNeRDARpWmPbp59GcBVgjK07nj3FOOKfmrdc A5Knds/qRw89MNP6E/20Db45rdRXm/RIoHWk5Z3GLd3btksveQMz57+qkDXa7Eas TiM+JTBCv6hLhV94TODMz8iEbO9La4DJL1mbh3NOOem8B0h1L0HjBeHOvFz4YOSQ A1PyEUldUOtnenoe0xIuLHqhTfRO5fBB -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:27 2025 by rpki-client