$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: I9N2bju1JEevTj7olLcYgW2v4cmrVckIqLmIqNxjEvk= Subject key identifier: ED:4B:62:39:4E:FC:9E:2A:02:C0:85:3D:02:0C:7B:DE:2F:60:3B:AC Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 14B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 18EE Signing time: Thu 24 Apr 2025 16:53:24 +0000 Manifest this update: Thu 24 Apr 2025 16:53:23 +0000 Manifest next update: Thu 01 May 2025 16:53:23 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: sZXXWTG8yiRQz/oyaU5FXXYTmshC1X8/Qj8xswA5n9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5296 (0x14b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: Apr 24 16:53:23 2025 GMT Not After : May 1 16:53:23 2025 GMT Subject: CN=680a6c83-3527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:48:e4:ee:32:6b:2a:47:0e:cd:8d:88:f4: 4e:5b:3a:04:18:31:68:dd:89:03:00:60:ec:21:f2: 78:e4:b5:46:e9:5b:74:32:2f:03:ae:6b:2f:5a:50: d4:9d:9c:2b:1e:33:2d:a7:24:e7:2d:61:c8:e7:ad: d9:06:9d:6d:15:47:07:d9:62:1a:bc:7c:c8:06:13: d4:d6:65:f8:8a:59:d8:c5:4c:cb:97:29:45:d8:15: d3:b3:36:94:23:2f:13:d1:ef:cb:fa:97:fa:7b:81: 2d:73:f0:65:94:d4:1d:36:7a:72:ca:cf:30:a1:ea: f9:95:ff:a9:d2:d1:13:39:41:13:09:3a:a0:ac:e1: e1:f5:14:62:b6:2e:5b:31:7b:84:7e:c7:83:40:1e: f3:e7:e2:77:e7:d5:8f:21:c6:02:bb:d3:78:a1:a0: f9:53:aa:08:72:d2:d7:0d:60:d2:73:34:3f:5b:c4: 4c:d6:08:9b:d0:40:62:39:cd:43:ee:e7:69:25:aa: bc:23:7a:79:4a:eb:b5:8f:23:71:ac:e4:05:fd:7d: db:ec:c1:5e:d4:55:9d:f4:d5:b5:be:99:0b:7b:d7: 9d:f4:f8:94:a6:90:c7:e5:53:ad:b0:a6:1e:78:1a: c2:17:44:a9:7c:e8:a6:4c:8b:9a:a8:44:36:f1:a0: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4B:62:39:4E:FC:9E:2A:02:C0:85:3D:02:0C:7B:DE:2F:60:3B:AC X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:25:45:1d:1a:67:b8:29:93:a3:2f:0a:83:2a:b0:c6:fb:06: 6c:41:c1:65:9b:e2:7b:bb:85:22:3c:c3:6d:f6:94:b8:6a:c3: c5:58:5c:04:7c:83:76:9e:e6:60:09:eb:87:8a:31:ba:e0:38: d6:0b:6e:9b:35:f5:53:35:4e:9c:e9:4c:f6:4b:4f:1f:fe:0c: e6:e9:34:72:56:49:6f:0f:72:d6:c0:2b:f5:3a:02:06:78:6b: bb:07:45:57:b1:ef:ad:25:ad:24:be:d5:25:95:07:08:d0:b6: 4b:73:62:9d:c5:d2:f0:55:df:37:a3:94:14:bc:d9:59:93:c2: e1:b4:70:d9:8b:5a:b7:42:10:64:b1:ff:7d:03:55:93:bb:9a: ba:80:04:ca:d6:a8:7c:9c:43:25:b6:b6:72:66:4c:c8:9b:bd: 6f:d1:22:e1:cc:20:0e:67:f6:24:2b:24:82:23:20:5d:13:0e: 15:5b:27:07:6d:ca:15:f7:5c:a8:9c:4d:ca:60:4e:d5:61:c6: 61:aa:78:d4:12:86:82:cd:60:d8:16:41:31:f6:71:9f:6a:53: 50:17:2f:98:7b:e4:a3:e6:a3:83:48:72:b9:f5:c6:f9:61:d5: 57:72:91:65:3f:1d:cb:b5:ac:6b:3d:45:28:6b:42:3d:32:7a: 6a:cc:b0:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjUwNDI0MTY1MzIzWhcNMjUwNTAxMTY1MzIzWjAYMRYwFAYD VQQDEw02ODBhNmM4My0zNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/NI5O4yaypHDs2NiPROWzoEGDFo3YkDAGDsIfJ45LVG6Vt0Mi8DrmsvWlDU nZwrHjMtpyTnLWHI563ZBp1tFUcH2WIavHzIBhPU1mX4ilnYxUzLlylF2BXTszaU Iy8T0e/L+pf6e4Etc/BllNQdNnpyys8woer5lf+p0tETOUETCTqgrOHh9RRiti5b MXuEfseDQB7z5+J359WPIcYCu9N4oaD5U6oIctLXDWDSczQ/W8RM1gib0EBiOc1D 7udpJaq8I3p5Suu1jyNxrOQF/X3b7MFe1FWd9NW1vpkLe9ed9PiUppDH5VOtsKYe eBrCF0SpfOimTIuaqEQ28aBdcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1LYjlO /J4qAsCFPQIMe94vYDusMB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXJUUdGme4KZOjLwqDKrDG+wZsQcFlm+J7u4UiPMNt9pS4asPFWFwE fIN2nuZgCeuHijG64DjWC26bNfVTNU6c6Uz2S08f/gzm6TRyVklvD3LWwCv1OgIG eGu7B0VXse+tJa0kvtUllQcI0LZLc2KdxdLwVd83o5QUvNlZk8LhtHDZi1q3QhBk sf99A1WTu5q6gATK1qh8nEMltrZyZkzIm71v0SLhzCAOZ/YkKySCIyBdEw4VWycH bcoV91yonE3KYE7VYcZhqnjUEoaCzWDYFkEx9nGfalNQFy+Ye+Sj5qODSHK59cb5 YdVXcpFlPx3LtaxrPUUoa0I9MnpqzLDw -----END CERTIFICATE-----Generated at Sat Apr 26 08:15:46 2025 by rpki-client