$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft File: WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json) Hash identifier: Pruki6lXF+QNuu/16eB2jcEucDSoqHBjs3sOaDBkwz4= Subject key identifier: E5:CB:B0:45:7F:FB:74:4F:B5:93:CA:E1:94:EE:0A:F3:4B:6A:90:3B Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC Certificate issuer: /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Certificate serial: 0EB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft Manifest number: 0EAA Signing time: Thu 24 Apr 2025 17:40:00 +0000 Manifest this update: Thu 24 Apr 2025 17:39:59 +0000 Manifest next update: Thu 01 May 2025 17:39:59 +0000 Files and hashes: 1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: xVxQZrF0pG9ShvdaG1ode9afJe5Xg8hpaBn7U0RiGzw=) 2: 7DAD1584881811E99CA76437C4F9AE02.roa (hash: kQ1ecN3du3BFvR7/Vwlq9mllQVMxIS/rTwYJnbfcfck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3760 (0xeb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Validity Not Before: Apr 24 17:39:59 2025 GMT Not After : May 1 17:39:59 2025 GMT Subject: CN=680a776f-a635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:6f:ca:c4:d7:c8:93:ec:0a:46:c6:76:4c: b7:1f:cc:fc:3c:81:bf:ae:da:3f:9c:a0:02:09:34: 7f:36:21:e2:7c:ca:4f:ea:05:c5:6f:b4:c5:92:ed: dd:b7:48:37:e0:a6:94:fa:34:2a:ac:53:14:98:d6: fa:ce:25:0c:c5:a8:59:ec:a1:0a:48:d8:85:03:fd: 69:ec:f2:22:59:1c:98:c5:ae:21:fc:c5:54:f3:cc: 1d:fa:0d:2e:ef:f2:3b:45:7c:8d:96:83:23:d9:0d: a4:2c:46:f6:e8:c5:ed:63:97:50:5f:98:41:dc:f8: 03:a5:bf:0c:1f:4e:66:02:df:19:d7:a1:08:88:50: c8:8f:fa:36:16:7e:94:40:30:f6:9f:b7:e8:af:45: 26:ca:0d:50:68:21:87:13:65:fe:d7:38:89:c0:f3: 84:56:c6:e7:45:a3:f6:06:82:89:85:3d:45:fe:3d: 55:6c:3d:c7:97:6a:83:6d:35:d9:e5:db:97:c3:26: b6:c6:51:55:05:ff:c1:6e:84:6c:c6:ce:bd:d5:9c: cc:b6:16:33:c0:e1:4d:c6:0c:19:2a:2a:4c:ec:56: f0:c2:a4:e3:d2:04:da:0a:90:96:ba:d9:80:f7:61: 54:0e:03:af:25:99:d0:31:86:2b:ac:5a:fd:5e:cf: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CB:B0:45:7F:FB:74:4F:B5:93:CA:E1:94:EE:0A:F3:4B:6A:90:3B X509v3 Authority Key Identifier: keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:08:97:76:56:cd:f6:5b:dc:66:50:57:fe:9f:55:a4:92:b8: cb:74:ed:c9:ba:16:d3:48:b7:e3:96:de:10:c7:a0:2a:a8:2f: af:ed:c8:48:56:3d:44:13:76:e8:bc:cc:f6:f3:7c:e9:7e:65: fc:7a:c2:7e:1f:d7:e5:55:13:35:4a:01:6b:c6:e7:67:05:17: 71:1c:d3:6e:2e:d3:75:d5:7c:c8:12:1f:a4:68:ab:39:ef:7b: 98:7f:a1:ec:fe:4a:9e:0f:0d:03:04:5a:28:04:68:34:22:82: f7:fe:f3:3b:6a:a0:6a:b9:7a:0a:95:7d:74:33:da:e5:c0:1c: 77:c1:ef:aa:59:77:82:8b:b5:16:06:28:ba:cc:48:5f:3d:56: 1a:0a:88:f6:37:48:cc:b1:50:d3:d8:1f:9a:d4:d2:7c:dd:16: 5f:4f:f3:10:5b:88:16:14:45:3b:ea:cf:42:47:5c:10:88:f1: f7:bb:a5:0f:a0:1d:28:b1:85:75:a1:f8:13:5b:7d:41:aa:b1: 6c:3a:e9:c1:60:7e:42:51:60:7b:32:f1:4b:5f:b8:10:96:1b: 75:93:af:c6:4b:3a:f3:37:f4:86:b3:75:38:17:e0:35:b4:84: 45:12:ad:f7:a6:81:10:dd:10:ac:7c:23:60:77:5b:ae:f9:76: 7e:6d:20:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY3NzYxMTAvBgNVBAUTKDU5MzlFOTczQzg4QkZDNkE0MUFBMzVBODlERDg0NkZC MEQxNjhCQ0MwHhcNMjUwNDI0MTczOTU5WhcNMjUwNTAxMTczOTU5WjAYMRYwFAYD VQQDEw02ODBhNzc2Zi1hNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2BvysTXyJPsCkbGdky3H8z8PIG/rto/nKACCTR/NiHifMpP6gXFb7TFku3d t0g34KaU+jQqrFMUmNb6ziUMxahZ7KEKSNiFA/1p7PIiWRyYxa4h/MVU88wd+g0u 7/I7RXyNloMj2Q2kLEb26MXtY5dQX5hB3PgDpb8MH05mAt8Z16EIiFDIj/o2Fn6U QDD2n7for0Umyg1QaCGHE2X+1ziJwPOEVsbnRaP2BoKJhT1F/j1VbD3Hl2qDbTXZ 5duXwya2xlFVBf/BboRsxs691ZzMthYzwOFNxgwZKipM7FbwwqTj0gTaCpCWutmA 92FUDgOvJZnQMYYrrFr9Xs/NhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXLsEV/ +3RPtZPK4ZTuCvNLapA7MB8GA1UdIwQYMBaAFFk56XPIi/xqQao1qJ3YRvsNFovM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjc3Ni8zRTExNzQ4NDg4 MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9HcEJxaldvbmRoRy13MFdp OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dUbnBjOGlMX0dwQnFqV29uZGhHLXcwV2k4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njc3Ni8zRTExNzQ4NDg4MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9H cEJxaldvbmRoRy13MFdpOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/CJd2Vs32W9xmUFf+n1WkkrjLdO3JuhbTSLfjlt4Qx6AqqC+v7chI Vj1EE3bovMz283zpfmX8esJ+H9flVRM1SgFrxudnBRdxHNNuLtN11XzIEh+kaKs5 73uYf6Hs/kqeDw0DBFooBGg0IoL3/vM7aqBquXoKlX10M9rlwBx3we+qWXeCi7UW Bii6zEhfPVYaCoj2N0jMsVDT2B+a1NJ83RZfT/MQW4gWFEU76s9CR1wQiPH3u6UP oB0osYV1ofgTW31BqrFsOunBYH5CUWB7MvFLX7gQlht1k6/GSzrzN/SGs3U4F+A1 tIRFEq33poEQ3RCsfCNgd1uu+XZ+bSBb -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:56 2025 by rpki-client