$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft File: wJ7fW2leBHksNRT0mPS7FEcJbvc.mft (raw, json) Hash identifier: Xy+C5JL1VaZYH9dv+0nh0IxLg2H8AJFLmjpsy98P5MI= Subject key identifier: 2F:0A:0B:4A:54:4F:AC:32:23:7D:FB:97:5A:D1:DA:95:3D:05:0E:5A Authority key identifier: C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 Certificate issuer: /CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft Manifest number: DD Signing time: Sun 27 Apr 2025 04:23:55 +0000 Manifest this update: Sun 27 Apr 2025 04:23:54 +0000 Manifest next update: Sun 04 May 2025 04:23:54 +0000 Files and hashes: 1: wJ7fW2leBHksNRT0mPS7FEcJbvc.crl (hash: A3mXE53x7sP2pTcorzSH+8OPpDwiRAcNU7Or079qdqI=) 2: FC0907B8D45711EE93BD8B7CC4F9AE02.roa (hash: WEHBvskgD+7pAwM51UvYkvJPxMc31VB5wYczhy7vxrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 04:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B, serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Validity Not Before: Apr 27 04:23:54 2025 GMT Not After : May 4 04:23:54 2025 GMT Subject: CN=680db15a-f2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:b4:f0:fb:f9:f1:39:2f:22:7c:e4:bc:7a: df:7e:f1:40:ec:76:0c:ff:23:9c:ba:47:d9:23:93: 34:0b:97:a3:20:12:a5:5c:94:5d:f1:8f:06:a3:2a: ea:c9:b6:82:f1:35:44:58:4c:d4:e0:b1:05:87:ab: fe:5b:4d:c7:04:8b:e0:f6:79:c2:d6:e2:01:3c:38: 5f:b0:05:65:e6:19:e0:a9:e6:5d:d9:a8:8e:c4:93: fa:09:9d:0e:46:0e:77:43:57:30:cf:b6:11:18:31: 65:58:ea:1a:f1:e5:96:2e:39:84:20:a6:f0:69:46: 54:35:d2:6f:88:4f:55:2d:9e:43:71:bc:03:cd:65: 58:79:16:9b:39:e2:e7:fe:57:2f:c0:37:c2:4b:e5: cd:dd:a5:8f:fd:e2:4e:43:47:06:73:b6:19:97:77: 62:a9:cd:57:73:c4:61:13:dc:ac:7f:33:a1:4f:c7: 63:01:22:ec:b4:1b:02:7e:e8:f1:2b:ae:43:98:f2: 73:eb:87:0f:13:ac:90:56:b3:8d:c1:80:ff:d8:64: f2:21:65:dd:78:28:d0:ce:da:7a:c3:72:35:c8:4d: 00:6e:f0:dd:9c:1d:2f:6e:41:2a:59:e0:97:51:a2: 37:eb:21:c6:ef:25:5b:19:5c:93:e9:c4:4b:e7:77: 63:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0A:0B:4A:54:4F:AC:32:23:7D:FB:97:5A:D1:DA:95:3D:05:0E:5A X509v3 Authority Key Identifier: keyid:C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f7:c6:2d:64:8d:46:ef:56:fb:81:ee:c1:56:90:f1:e4:12: cd:9a:32:0b:b6:a3:ef:4d:ef:55:6a:a8:e8:a2:2b:b4:80:47: fa:b6:d4:61:c4:0b:6e:5b:59:34:55:ec:89:c4:dd:26:20:06: 5c:12:da:19:5e:d7:61:f8:0a:12:a6:1e:a2:8e:c3:0e:61:57: cb:08:1b:9c:b2:3d:ca:cb:f2:20:14:05:c8:f0:09:21:4b:95: 81:ea:ee:82:1f:b3:9f:1f:1f:95:60:f6:88:f0:cd:3d:17:97: 7e:2f:51:13:c2:e9:74:3c:d9:f9:1f:8b:cf:38:4f:ba:12:75: c3:5f:42:db:57:f9:85:aa:03:82:4e:40:62:31:88:96:d5:19: d6:14:c0:e5:40:d1:3a:07:31:6f:1a:d1:a6:c9:97:98:1c:40: 2c:c0:7b:73:a3:7d:c4:aa:5f:7a:ef:14:61:80:a7:c9:ca:8e: 4c:96:ae:e7:fa:88:75:98:81:bb:1d:89:32:31:cc:ff:be:08: cd:78:5b:35:90:11:b7:9b:1d:d9:9a:28:05:82:6b:61:04:73: 8d:21:3d:13:cb:0a:f5:7f:85:7f:7f:2a:87:27:8f:ad:65:52: 47:70:3a:bf:98:59:9b:68:13:56:bb:01:4e:e9:0b:ed:d5:78: ea:dc:e1:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCMkIxMTAvBgNVBAUTKEMwOUVERjVCNjk1RTA0NzkyQzM1MTRGNDk4RjRCQjE0 NDcwOTZFRjcwHhcNMjUwNDI3MDQyMzU0WhcNMjUwNTA0MDQyMzU0WjAYMRYwFAYD VQQDEw02ODBkYjE1YS1mMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgK08Pv58TkvInzkvHrffvFA7HYM/yOcukfZI5M0C5ejIBKlXJRd8Y8Goyrq ybaC8TVEWEzU4LEFh6v+W03HBIvg9nnC1uIBPDhfsAVl5hngqeZd2aiOxJP6CZ0O Rg53Q1cwz7YRGDFlWOoa8eWWLjmEIKbwaUZUNdJviE9VLZ5DcbwDzWVYeRabOeLn /lcvwDfCS+XN3aWP/eJOQ0cGc7YZl3diqc1Xc8RhE9ysfzOhT8djASLstBsCfujx K65DmPJz64cPE6yQVrONwYD/2GTyIWXdeCjQztp6w3I1yE0AbvDdnB0vbkEqWeCX UaI36yHG7yVbGVyT6cRL53djLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8KC0pU T6wyI337l1rR2pU9BQ5aMB8GA1UdIwQYMBaAFMCe31tpXgR5LDUU9Jj0uxRHCW73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEIyQi85QjgyMDZENENG OUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJIa3NOUlQwbVBTN0ZFY0pi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dKN2ZXMmxlQkhrc05SVDBtUFM3RkVjSmJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEIyQi85QjgyMDZENENGOUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJI a3NOUlQwbVBTN0ZFY0pidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB98YtZI1G71b7ge7BVpDx5BLNmjILtqPvTe9Vaqjooiu0gEf6ttRh xAtuW1k0VeyJxN0mIAZcEtoZXtdh+AoSph6ijsMOYVfLCBucsj3Ky/IgFAXI8Akh S5WB6u6CH7OfHx+VYPaI8M09F5d+L1ETwul0PNn5H4vPOE+6EnXDX0LbV/mFqgOC TkBiMYiW1RnWFMDlQNE6BzFvGtGmyZeYHEAswHtzo33Eql967xRhgKfJyo5Mlq7n +oh1mIG7HYkyMcz/vgjNeFs1kBG3mx3ZmigFgmthBHONIT0Tywr1f4V/fyqHJ4+t ZVJHcDq/mFmbaBNWuwFO6Qvt1Xjq3OFm -----END CERTIFICATE-----Generated at Tue Apr 29 00:39:40 2025 by rpki-client