$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json) Hash identifier: sSRh4KWnsWXYvCk34TFeNctPwwSDw7OG4Djt3B2vUp0= Subject key identifier: 4C:BE:EB:7F:A3:E9:B5:B8:2C:E9:AA:38:B7:5C:2E:E3:DD:FE:98:D4 Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft Manifest number: 0849 Signing time: Thu 24 Apr 2025 20:35:56 +0000 Manifest this update: Thu 24 Apr 2025 20:35:56 +0000 Manifest next update: Thu 01 May 2025 20:35:56 +0000 Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: 4ocDFkgBjcs9ZzmmTnkcewQBhZafQD9LMZj5PEq5Mv8=) 2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 75Xx9HK/DSb6cqMFmlY3w1Yvea4hRHDh6jcfeq7uocg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Validity Not Before: Apr 24 20:35:56 2025 GMT Not After : May 1 20:35:56 2025 GMT Subject: CN=680aa0ac-e663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:aa:50:ce:45:45:ec:94:75:b0:95:3d:21: 42:ce:a0:b9:b7:96:43:b6:fc:38:60:90:eb:bf:e6: a3:e0:ab:bd:00:6b:d6:a0:5f:1d:bb:98:99:74:97: 47:32:9c:7a:f4:cb:74:83:95:08:f1:58:e8:09:c6: 0a:48:25:33:f5:40:e5:fe:95:91:d5:bf:c4:4f:9e: be:c7:78:d3:70:ff:93:47:86:f0:53:4d:fe:f1:28: ae:3c:97:f2:4d:09:5e:e2:ef:e9:98:a0:27:d7:6d: 97:b4:eb:84:3e:9f:75:36:03:a8:f3:62:95:90:57: 78:43:17:1a:2e:34:dd:f8:61:5f:88:d5:46:57:f8: 28:76:ce:75:0c:b0:23:65:e1:c3:2a:b2:d7:84:25: 3c:92:1f:32:3f:ca:4b:ff:5b:e6:fb:1d:65:b6:19: b2:57:8f:29:77:5d:ee:1d:ec:c1:73:a5:4d:6f:ac: a9:11:bb:07:7f:11:1b:7d:bc:d5:bf:7e:2f:e7:f4: a4:ec:11:2b:8e:2c:1f:c1:e5:89:ac:7a:bb:be:af: e0:1a:e1:aa:b6:ac:95:97:c6:24:0f:7f:a8:e3:e6: e7:1c:c9:66:8e:15:a6:ca:a1:7d:78:a1:f7:6b:97: 0a:25:39:ec:b5:3c:0f:ba:ae:7b:e5:3e:f2:f6:3d: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BE:EB:7F:A3:E9:B5:B8:2C:E9:AA:38:B7:5C:2E:E3:DD:FE:98:D4 X509v3 Authority Key Identifier: keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:9a:ab:a5:ba:b0:3a:4a:26:a2:c6:0c:45:92:c1:37:1f:78: 33:8c:9a:12:5c:7f:c5:17:20:7c:a9:f3:db:6a:e4:aa:d8:ff: 30:b5:8e:d2:a3:d7:26:18:d7:03:79:19:27:04:f5:fa:bd:9a: 32:1c:b3:78:b5:68:85:b2:77:55:5a:64:c6:a2:e3:6c:f5:7b: b0:cb:13:6d:90:f2:6b:eb:c9:e3:7d:06:0d:1f:ba:eb:ea:57: f9:71:5f:26:b0:86:e3:07:f8:e2:13:5b:62:e3:a6:9c:43:b4: 84:a1:9d:61:9c:3f:eb:4b:e5:b0:72:25:a5:22:8a:aa:f6:f9: 69:61:cc:39:76:08:b7:68:0d:be:22:3e:3e:74:2a:37:fe:1e: f3:85:54:0c:7b:83:bf:eb:22:f1:95:70:5a:23:a8:eb:88:3c: 93:23:42:60:1e:ad:c4:cd:0d:89:d6:8f:00:dc:82:d6:98:6a: 34:2b:c5:b1:f4:92:af:07:10:f9:67:c4:10:fe:96:14:53:41: a1:fb:be:fa:56:d6:e2:6f:56:9d:6c:fd:2b:a9:e1:1b:2f:db: 9b:9c:10:68:17:5d:dd:0c:2f:47:03:17:d1:dd:0d:69:cc:8e: 19:39:cd:a5:4b:f0:7a:8b:2e:c1:85:29:f4:08:15:4d:4f:37: 00:dc:24:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF ODE3RTM5QUQwHhcNMjUwNDI0MjAzNTU2WhcNMjUwNTAxMjAzNTU2WjAYMRYwFAYD VQQDEw02ODBhYTBhYy1lNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7h6qUM5FReyUdbCVPSFCzqC5t5ZDtvw4YJDrv+aj4Ku9AGvWoF8du5iZdJdH Mpx69Mt0g5UI8VjoCcYKSCUz9UDl/pWR1b/ET56+x3jTcP+TR4bwU03+8SiuPJfy TQle4u/pmKAn122XtOuEPp91NgOo82KVkFd4QxcaLjTd+GFfiNVGV/gods51DLAj ZeHDKrLXhCU8kh8yP8pL/1vm+x1lthmyV48pd13uHezBc6VNb6ypEbsHfxEbfbzV v34v5/Sk7BErjiwfweWJrHq7vq/gGuGqtqyVl8YkD3+o4+bnHMlmjhWmyqF9eKH3 a5cKJTnstTwPuq575T7y9j1QmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy+63+j 6bW4LOmqOLdcLuPd/pjUMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2 RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjE3Ni84OEFCOEU5NEM2RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXRO TmNwUXFUblQyY3ZvRi1PYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChmqulurA6SiaixgxFksE3H3gzjJoSXH/FFyB8qfPbauSq2P8wtY7S o9cmGNcDeRknBPX6vZoyHLN4tWiFsndVWmTGouNs9XuwyxNtkPJr68njfQYNH7rr 6lf5cV8msIbjB/jiE1ti46acQ7SEoZ1hnD/rS+WwciWlIoqq9vlpYcw5dgi3aA2+ Ij4+dCo3/h7zhVQMe4O/6yLxlXBaI6jriDyTI0JgHq3EzQ2J1o8A3ILWmGo0K8Wx 9JKvBxD5Z8QQ/pYUU0Gh+776Vtbib1adbP0rqeEbL9ubnBBoF13dDC9HAxfR3Q1p zI4ZOc2lS/B6iy7BhSn0CBVNTzcA3CRO -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:02 2025 by rpki-client