$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft File: wQgOZhsN-mIOsJqrLerWA0uCjrw.mft (raw, json) Hash identifier: aq3hYQJuz3vizi8Bvq3JV8uxFONTZqv70uoJPTaKRFw= Subject key identifier: CF:FF:D2:84:56:E6:9B:CF:EF:24:E1:13:71:E8:8E:39:E0:C8:86:13 Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Certificate serial: 18D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft Manifest number: 18CE Signing time: Thu 24 Apr 2025 16:28:26 +0000 Manifest this update: Thu 24 Apr 2025 16:28:25 +0000 Manifest next update: Thu 01 May 2025 16:28:25 +0000 Files and hashes: 1: wQgOZhsN-mIOsJqrLerWA0uCjrw.crl (hash: 9GDIbjzKW+91slnXxSlTEX/cUmIuGbp61yrb7BYqb+8=) 2: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (hash: JsSR5Xyiam1gqDW8LZ3p6vMD1Unh1jWG06vXX1Pt4OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6358 (0x18d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C1, serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Validity Not Before: Apr 24 16:28:25 2025 GMT Not After : May 1 16:28:25 2025 GMT Subject: CN=680a66aa-077b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:ba:35:5d:13:a0:0a:a0:c6:cd:c3:19:34: 40:b9:f7:ef:ec:19:91:cd:7c:40:42:60:35:67:98: 21:ea:70:5a:58:60:52:d5:e1:29:c6:4d:b3:77:c4: 27:4e:94:0a:a5:67:5c:d6:f6:3c:4e:41:27:08:01: e1:5f:e6:32:bd:73:80:4b:00:b9:f8:2a:79:d6:38: f7:75:1a:e4:33:d8:f2:a9:bc:ed:89:61:c4:13:02: 85:32:94:39:7b:a2:25:5c:5c:29:93:c6:9b:f1:47: d8:eb:19:8b:f4:46:c0:dd:0c:f9:3d:7e:05:42:27: dd:0d:e6:34:21:bb:94:ad:e9:4d:22:fe:04:9c:e2: c8:f7:8b:6d:7f:a3:b6:c0:4a:5e:e6:ea:2e:e7:e1: c4:be:62:fb:65:d3:e5:4a:2a:4b:c1:3a:31:ca:04: 4e:d8:b6:90:f8:7b:37:ae:2d:64:fc:79:d6:43:5c: 3b:2b:14:68:0a:1c:44:7b:39:ed:61:f4:59:84:10: 0e:ca:f8:86:8b:ba:9b:e5:b5:d0:a7:cb:24:bc:b3: 79:ca:67:d7:e9:b8:be:35:f3:e7:16:0a:b0:7f:26: 00:e7:0f:f5:88:65:ac:b8:51:2e:c9:0d:2c:ac:01: 9f:f8:5c:a4:58:66:3d:47:c2:75:d8:57:63:4c:74: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FF:D2:84:56:E6:9B:CF:EF:24:E1:13:71:E8:8E:39:E0:C8:86:13 X509v3 Authority Key Identifier: keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:15:ad:2a:cd:af:3d:78:f9:6c:50:25:1d:e5:20:3a:89:72: fb:cf:c7:d9:12:9d:05:b2:50:ec:f9:19:43:ac:b9:e9:30:0c: 60:ea:3c:38:27:8e:71:b1:94:6d:df:7f:3e:a8:31:a7:a8:73: 03:97:82:36:89:97:3a:91:bf:eb:38:0f:91:69:cb:3a:08:3e: c8:2e:95:1a:7d:66:be:55:bf:18:c8:67:2b:d3:cf:8d:aa:6f: a2:e5:6d:e1:63:39:39:a3:bd:b3:c3:e1:d7:a0:ac:66:94:8f: 9d:b0:f4:8c:d0:dc:9a:5b:86:5b:8b:ac:66:ca:03:03:41:ae: 22:57:a8:46:b9:3e:09:6f:09:1b:c0:96:c3:d7:1a:40:a1:77: 44:6b:82:2a:ae:12:d4:e2:83:82:d8:6f:29:7a:90:1b:fd:47: 0f:78:d8:1c:24:2d:78:33:ea:7f:94:22:f6:f3:fe:4d:87:38: f6:6e:fd:3f:51:1f:d9:6c:df:20:fc:b4:e0:17:0c:eb:1f:5f: 26:14:18:ba:1f:e3:ad:9d:8d:1a:b3:69:3d:62:a4:0f:0b:37: 7e:23:93:fe:44:95:77:3e:0a:02:d1:ce:f9:a7:96:07:9f:e6: 41:1c:09:f3:12:d1:34:aa:06:8d:00:68:df:97:ca:d9:3f:2d: e5:21:4a:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzExMTAvBgNVBAUTKEMxMDgwRTY2MUIwREZBNjIwRUIwOUFBQjJERUFENjAz NEI4MjhFQkMwHhcNMjUwNDI0MTYyODI1WhcNMjUwNTAxMTYyODI1WjAYMRYwFAYD VQQDEw02ODBhNjZhYS0wNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoq6NV0ToAqgxs3DGTRAuffv7BmRzXxAQmA1Z5gh6nBaWGBS1eEpxk2zd8Qn TpQKpWdc1vY8TkEnCAHhX+YyvXOASwC5+Cp51jj3dRrkM9jyqbztiWHEEwKFMpQ5 e6IlXFwpk8ab8UfY6xmL9EbA3Qz5PX4FQifdDeY0IbuUrelNIv4EnOLI94ttf6O2 wEpe5uou5+HEvmL7ZdPlSipLwToxygRO2LaQ+Hs3ri1k/HnWQ1w7KxRoChxEeznt YfRZhBAOyviGi7qb5bXQp8skvLN5ymfX6bi+NfPnFgqwfyYA5w/1iGWsuFEuyQ0s rAGf+FykWGY9R8J12FdjTHT0tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM//0oRW 5pvP7yThE3HojjngyIYTMB8GA1UdIwQYMBaAFMEIDmYbDfpiDrCaqy3q1gNLgo68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMS84MDJDMjQzMjhB N0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1tSU9zSnFyTGVyV0EwdUNq cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dRZ09aaHNOLW1JT3NKcXJMZXJXQTB1Q2pydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMS84MDJDMjQzMjhBN0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1t SU9zSnFyTGVyV0EwdUNqcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkFa0qza89ePlsUCUd5SA6iXL7z8fZEp0FslDs+RlDrLnpMAxg6jw4 J45xsZRt338+qDGnqHMDl4I2iZc6kb/rOA+Racs6CD7ILpUafWa+Vb8YyGcr08+N qm+i5W3hYzk5o72zw+HXoKxmlI+dsPSM0NyaW4Zbi6xmygMDQa4iV6hGuT4Jbwkb wJbD1xpAoXdEa4IqrhLU4oOC2G8pepAb/UcPeNgcJC14M+p/lCL28/5Nhzj2bv0/ UR/ZbN8g/LTgFwzrH18mFBi6H+OtnY0as2k9YqQPCzd+I5P+RJV3PgoC0c75p5YH n+ZBHAnzEtE0qgaNAGjfl8rZPy3lIUoH -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:50 2025 by rpki-client