$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft File: woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json) Hash identifier: iaIdQUUQAOuL27POKrYGcldDObkwXCcylAYoXA5KcOA= Subject key identifier: A7:C4:1B:5C:29:52:A0:1E:95:A9:24:71:02:98:9F:73:7C:7B:EB:AD Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D Certificate issuer: /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft Manifest number: 09B3 Signing time: Thu 24 Apr 2025 20:21:16 +0000 Manifest this update: Thu 24 Apr 2025 20:21:16 +0000 Manifest next update: Thu 01 May 2025 20:21:16 +0000 Files and hashes: 1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: ejAejPk0nGCGqXjO6TVcJtKn+PwyY2cZt/NWIqM4TJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Validity Not Before: Apr 24 20:21:16 2025 GMT Not After : May 1 20:21:16 2025 GMT Subject: CN=680a9d3c-8497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:63:18:86:93:6b:52:c4:7c:ec:6c:f8:1c: b6:17:80:75:e9:48:9f:be:9c:72:4e:1e:ee:61:15: 35:88:9b:5a:5c:7d:1e:35:fa:34:e4:82:fe:20:69: 12:95:17:1f:12:01:6c:7d:91:f9:c0:bb:36:a2:28: f3:dd:48:80:3d:da:66:32:dd:1a:0b:c1:ad:2d:83: 79:f3:d3:a1:ea:80:38:a1:76:f2:51:30:bb:54:06: 5a:d7:20:f4:2e:8f:e4:47:2d:9e:5c:35:3e:85:6e: a9:98:7f:32:3c:8d:10:a6:a3:bd:d0:e9:16:45:00: 08:8e:d1:fc:4d:be:13:3a:46:33:91:3e:52:53:61: d3:18:e5:02:06:38:a9:3a:61:d1:ea:40:5c:e6:1d: d3:29:95:4b:1c:30:24:9f:00:bb:3d:40:d5:e5:1a: 76:09:fa:9f:7c:8b:c8:5a:ee:bc:15:3c:ab:15:a1: 23:4f:c0:13:b2:55:40:b7:d7:22:a1:f7:76:09:f5: 95:4f:cd:ac:f8:2f:10:73:69:87:6b:f7:ae:d0:19: 61:7e:b8:00:e5:d6:8d:cf:f7:71:33:7a:ca:4c:2d: 7c:fe:a3:19:ec:10:64:6f:3a:d6:23:7a:45:06:7f: 7f:0d:d6:bb:9f:35:d6:36:bb:2f:77:0a:f4:55:a2: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C4:1B:5C:29:52:A0:1E:95:A9:24:71:02:98:9F:73:7C:7B:EB:AD X509v3 Authority Key Identifier: keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ab:07:21:23:37:14:fd:42:8c:4f:6e:51:43:3b:15:5d:8e: 8e:da:a3:d3:b9:54:bf:25:43:f6:e7:69:a5:29:98:37:1d:28: 2a:89:b7:16:0d:25:54:00:e5:d8:a6:36:83:60:5c:d2:6f:5c: c0:67:c3:9e:f6:7d:d1:f3:0e:c7:18:b7:bb:e1:2b:1f:1b:66: d4:61:99:16:2a:10:5f:d7:9a:f4:7e:3f:ea:91:40:69:dd:99: 00:7e:b2:00:be:35:77:f6:8c:a2:69:20:be:de:4d:96:2e:7d: 0f:78:7a:21:c2:b2:a4:19:ca:21:27:97:b6:79:44:c3:72:c4: ae:31:47:7f:f8:3b:02:97:69:f2:f5:8c:20:5b:ad:2b:59:ca: 2a:24:0a:2b:7d:0e:9f:82:36:e6:9a:b5:8f:1c:9a:fc:7b:51: 5e:01:59:7a:29:65:e6:71:21:c4:48:2d:00:5e:7f:d9:c5:27: 22:a6:b2:25:00:3d:97:41:29:e3:b6:e1:55:57:ba:df:4a:46: 7b:6e:3f:ab:b6:c5:6a:1b:04:26:a5:9e:a9:43:51:ab:61:b5: 74:7c:2f:5b:7e:b0:04:5a:57:99:ff:43:cb:0b:7a:dc:6b:88: eb:f9:79:52:90:b9:3b:eb:e2:0c:cc:78:6a:af:b0:d8:6c:50: 35:21:0c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKEMyODRCQThBODhBMDIxMTZCRUU0MzQxMEUwMzlFOTA5 RTMwMjlEMEQwHhcNMjUwNDI0MjAyMTE2WhcNMjUwNTAxMjAyMTE2WjAYMRYwFAYD VQQDEw02ODBhOWQzYy04NDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaZjGIaTa1LEfOxs+By2F4B16UifvpxyTh7uYRU1iJtaXH0eNfo05IL+IGkS lRcfEgFsfZH5wLs2oijz3UiAPdpmMt0aC8GtLYN589Oh6oA4oXbyUTC7VAZa1yD0 Lo/kRy2eXDU+hW6pmH8yPI0QpqO90OkWRQAIjtH8Tb4TOkYzkT5SU2HTGOUCBjip OmHR6kBc5h3TKZVLHDAknwC7PUDV5Rp2CfqffIvIWu68FTyrFaEjT8ATslVAt9ci ofd2CfWVT82s+C8Qc2mHa/eu0BlhfrgA5daNz/dxM3rKTC18/qMZ7BBkbzrWI3pF Bn9/Dda7nzXWNrsvdwr0VaKlhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfEG1wp UqAelakkcQKYn3N8e+utMB8GA1UdIwQYMBaAFMKEuoqIoCEWvuQ0EOA56QnjAp0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lSYS01RFFRNERucENlTUNu UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvUzZpb2lnSVJhLTVEUVE0RG5wQ2VNQ25RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lS YS01RFFRNERucENlTUNuUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXqwchIzcU/UKMT25RQzsVXY6O2qPTuVS/JUP252mlKZg3HSgqibcW DSVUAOXYpjaDYFzSb1zAZ8Oe9n3R8w7HGLe74SsfG2bUYZkWKhBf15r0fj/qkUBp 3ZkAfrIAvjV39oyiaSC+3k2WLn0PeHohwrKkGcohJ5e2eUTDcsSuMUd/+DsCl2ny 9YwgW60rWcoqJAorfQ6fgjbmmrWPHJr8e1FeAVl6KWXmcSHESC0AXn/ZxSciprIl AD2XQSnjtuFVV7rfSkZ7bj+rtsVqGwQmpZ6pQ1GrYbV0fC9bfrAEWleZ/0PLC3rc a4jr+XlSkLk76+IMzHhqr7DYbFA1IQxV -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:34 2025 by rpki-client