$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: 9wOjnHDvlQZd7eK1VUx63RhQktTiJymvutQeQKgBWAg= Subject key identifier: 44:58:CE:D0:50:34:2A:B1:23:CF:E5:0B:69:0C:F9:B3:7B:A2:2F:E9 Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: 8D Signing time: Fri 25 Apr 2025 05:28:51 +0000 Manifest this update: Fri 25 Apr 2025 05:28:51 +0000 Manifest next update: Fri 02 May 2025 05:28:51 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: VYqpcSegTNKbOteyn/hjpAX62ehe5Co0I0Kw0vl8gO8=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: EOPx00rRZjGS/73Br0xTrWoW0kA4+3+SpewBHZe+BK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Apr 25 05:28:51 2025 GMT Not After : May 2 05:28:51 2025 GMT Subject: CN=680b1d93-2616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:be:d9:02:02:05:51:76:2e:4d:ce:c3:0d: cd:96:70:e1:ae:55:3c:b3:5a:30:2b:d8:05:95:af: 3f:83:15:1e:d8:51:67:ef:67:cc:83:18:57:26:e6: 58:95:e9:d9:73:a0:34:39:90:58:2c:df:df:4d:4f: 7e:ac:0d:35:ba:40:6d:f8:68:37:dc:10:91:85:46: 07:6b:28:c2:63:93:48:f9:3f:c5:12:e1:1d:bf:7e: 03:11:36:8f:ef:04:46:6c:bf:ad:78:6b:0c:0b:eb: 01:5f:67:db:c1:c5:13:63:8f:7a:a1:68:d5:3b:b1: f7:cd:0c:b3:de:26:b2:c1:4d:84:0a:a7:e3:3b:e0: 02:f4:60:90:f7:7c:76:63:9a:18:f1:2c:09:6c:c8: da:c5:e7:f0:79:33:e7:d3:29:07:19:d4:45:f7:34: 4e:22:7d:c5:2d:dd:e4:ac:0e:9c:58:ca:9b:eb:37: c5:7d:4a:eb:68:dc:d5:ad:d6:35:28:e1:8a:7b:c4: 52:56:fc:61:b5:63:83:77:b0:be:c8:20:75:72:e0: 5f:68:09:95:7c:86:af:a8:dd:7a:a2:34:98:61:46: 20:3f:f9:95:46:99:84:fe:b4:18:bd:63:18:12:8c: bf:ab:49:59:09:cd:66:9f:20:b4:ff:72:40:d9:21: dd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:58:CE:D0:50:34:2A:B1:23:CF:E5:0B:69:0C:F9:B3:7B:A2:2F:E9 X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:92:52:88:de:b6:03:66:52:7e:e0:e6:f8:51:92:8c:11:3c: dd:48:33:6a:9a:73:0a:60:42:36:b6:c7:c1:07:bd:ff:83:39: 5e:81:95:5b:4e:d6:f0:cf:92:17:7d:a7:36:69:87:86:5b:bd: cc:ff:26:73:72:87:fc:af:9d:bf:fd:59:77:ab:8b:8c:34:f8: b4:19:6d:a0:5a:20:01:22:3f:8c:2c:26:f4:a8:7b:95:5b:74: fc:e9:43:22:b4:99:e4:15:6a:25:fb:26:81:b9:cd:ad:90:ce: e1:00:08:08:67:4b:57:33:64:65:28:f6:aa:88:f7:50:e4:f2: ce:10:50:9b:83:b1:f6:6b:92:6c:75:fc:d6:31:7d:f6:8a:07: ae:16:5f:be:a5:07:a3:99:a8:2f:0d:9e:71:30:6f:6d:99:42: 96:e9:9e:cf:d0:33:89:0b:8a:3c:c9:10:c2:47:79:62:21:d9: ee:1d:c7:2e:00:37:e2:54:9f:ad:2d:dc:da:e2:c4:2a:2c:44: 9f:4f:34:aa:7d:7b:89:07:55:24:51:cf:68:e9:c0:b9:e1:62: 0b:c5:fe:c7:b7:66:4e:84:43:58:b8:bc:5e:a2:e2:ce:bf:19: d4:fe:38:14:9d:75:cb:c0:64:47:91:ff:ab:63:83:b1:2c:99: 48:cd:ba:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjUwNDI1MDUyODUxWhcNMjUwNTAyMDUyODUxWjAYMRYwFAYD VQQDEw02ODBiMWQ5My0yNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHe+2QICBVF2Lk3Oww3NlnDhrlU8s1owK9gFla8/gxUe2FFn72fMgxhXJuZY lenZc6A0OZBYLN/fTU9+rA01ukBt+Gg33BCRhUYHayjCY5NI+T/FEuEdv34DETaP 7wRGbL+teGsMC+sBX2fbwcUTY496oWjVO7H3zQyz3iaywU2ECqfjO+AC9GCQ93x2 Y5oY8SwJbMjaxefweTPn0ykHGdRF9zROIn3FLd3krA6cWMqb6zfFfUrraNzVrdY1 KOGKe8RSVvxhtWODd7C+yCB1cuBfaAmVfIavqN16ojSYYUYgP/mVRpmE/rQYvWMY Eoy/q0lZCc1mnyC0/3JA2SHdBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERYztBQ NCqxI8/lC2kM+bN7oi/pMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJklKI3rYDZlJ+4Ob4UZKMETzdSDNqmnMKYEI2tsfBB73/gzlegZVb Ttbwz5IXfac2aYeGW73M/yZzcof8r52//Vl3q4uMNPi0GW2gWiABIj+MLCb0qHuV W3T86UMitJnkFWol+yaBuc2tkM7hAAgIZ0tXM2RlKPaqiPdQ5PLOEFCbg7H2a5Js dfzWMX32igeuFl++pQejmagvDZ5xMG9tmUKW6Z7P0DOJC4o8yRDCR3liIdnuHccu ADfiVJ+tLdza4sQqLESfTzSqfXuJB1UkUc9o6cC54WILxf7Ht2ZOhENYuLxeouLO vxnU/jgUnXXLwGRHkf+rY4OxLJlIzbp2 -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:17 2025 by rpki-client