$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft File: Wnot3qYsiQ6QHx3NQEb814zAtBw.mft (raw, json) Hash identifier: ppjbUXacS5ckmvNqEPvMA+w+PizcQrZAcakRU6uGTFo= Subject key identifier: 28:8E:AF:E9:7B:04:3E:D6:A2:B8:98:DF:5A:4B:6E:74:D5:98:31:CD Authority key identifier: 5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C Certificate issuer: /CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft Manifest number: 067D Signing time: Thu 24 Apr 2025 22:05:16 +0000 Manifest this update: Thu 24 Apr 2025 22:05:15 +0000 Manifest next update: Thu 01 May 2025 22:05:15 +0000 Files and hashes: 1: Wnot3qYsiQ6QHx3NQEb814zAtBw.crl (hash: NmtzEt+g35SSZpfKyFLSgIUFGuxMbr9pA1fX8r8L9g8=) 2: 7C7FDC646FF711EBA7506161C4F9AE02.roa (hash: +n5J+qx7tpV2H+mHVC6O7TSh7QMWtrt2mfYoCJ9j4Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89AF, serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C Validity Not Before: Apr 24 22:05:15 2025 GMT Not After : May 1 22:05:15 2025 GMT Subject: CN=680ab59c-b17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:44:75:78:80:37:04:ee:e2:96:03:2d:3a: bc:66:10:56:bb:f5:a6:a0:cb:c5:7a:24:6c:16:0a: dc:da:4d:94:55:72:fe:3c:7a:37:1c:d9:3f:b3:65: 78:95:06:91:e5:fa:7e:f4:d1:53:c3:17:c7:aa:c9: 9e:7f:62:04:7c:98:17:c8:53:db:b1:fd:60:6b:a6: c2:76:6a:28:63:51:a9:7f:92:bf:ba:9b:1d:80:9f: ee:31:97:66:fa:b7:cf:fe:00:c3:65:42:14:67:a7: 82:2c:86:88:d4:7f:29:93:38:27:f3:18:4c:6f:51: df:f4:53:97:47:ed:7c:e9:2d:1e:5a:77:54:d3:e5: 52:a8:5c:4c:82:ea:02:93:c1:6c:50:8c:16:85:db: 3a:fd:46:f0:70:0c:b1:b6:34:f1:43:9e:38:4f:36: 53:a6:17:79:f1:b7:81:7c:32:42:b0:08:d9:2a:48: 91:5a:b1:32:1e:19:d6:86:15:0c:ba:8c:df:74:96: d9:c8:79:7a:90:8b:9c:51:3b:e6:9a:47:4d:48:d3: 64:3a:5d:d6:c4:95:7b:b1:4d:41:93:59:0c:9e:34: 6c:b5:6a:02:35:c1:9d:b4:db:4d:c3:54:d2:ae:be: d2:64:c3:5c:a2:06:b5:4d:77:ec:f6:93:7d:3a:7e: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8E:AF:E9:7B:04:3E:D6:A2:B8:98:DF:5A:4B:6E:74:D5:98:31:CD X509v3 Authority Key Identifier: keyid:5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:75:06:f9:b4:77:3d:c5:85:1e:78:97:cf:9e:91:07:dd:cd: 32:b4:c2:82:10:d4:74:21:29:f0:02:89:69:a7:6c:af:6a:1a: 5f:d8:69:3c:cc:23:b5:25:3a:a1:0d:48:b2:db:6d:79:62:d5: 47:fc:1b:fe:32:2c:91:aa:c3:b7:9e:dc:a7:47:07:f9:68:ab: fe:1c:dd:45:3d:b8:49:86:ac:02:51:d4:1d:c1:31:30:cd:82: 6c:9a:04:7a:ef:23:09:99:ca:c4:61:58:88:dd:16:8c:35:48: 7c:bf:03:0f:5a:38:0d:07:50:78:ef:54:5f:b4:06:49:ca:f5: 33:16:8a:bd:c4:61:bb:7c:c1:d8:4a:7f:65:4a:74:b3:a7:5a: bf:54:2d:c7:ae:ee:4a:79:41:2d:17:1c:f8:ad:27:bf:c8:c8: 63:2a:99:9f:4b:7e:c6:34:69:09:4c:95:7b:ad:38:c1:b7:14: 62:d4:69:86:89:67:03:7a:a0:2d:f2:1c:b4:91:e4:e8:6a:86: ae:09:8b:28:66:0f:db:de:59:fe:80:3f:76:04:06:80:9a:f4: f3:a1:eb:f5:41:b8:37:5e:95:23:49:c4:21:61:ae:d3:55:2a: 7d:a7:6d:3b:ca:35:a7:5d:ec:6b:e8:70:a6:5c:44:e4:fe:ac: 11:ee:6a:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5QUYxMTAvBgNVBAUTKDVBN0EyRERFQTYyQzg5MEU5MDFGMURDRDQwNDZGQ0Q3 OENDMEI0MUMwHhcNMjUwNDI0MjIwNTE1WhcNMjUwNTAxMjIwNTE1WjAYMRYwFAYD VQQDEw02ODBhYjU5Yy1iMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX5EdXiANwTu4pYDLTq8ZhBWu/WmoMvFeiRsFgrc2k2UVXL+PHo3HNk/s2V4 lQaR5fp+9NFTwxfHqsmef2IEfJgXyFPbsf1ga6bCdmooY1Gpf5K/upsdgJ/uMZdm +rfP/gDDZUIUZ6eCLIaI1H8pkzgn8xhMb1Hf9FOXR+186S0eWndU0+VSqFxMguoC k8FsUIwWhds6/UbwcAyxtjTxQ544TzZTphd58beBfDJCsAjZKkiRWrEyHhnWhhUM uozfdJbZyHl6kIucUTvmmkdNSNNkOl3WxJV7sU1Bk1kMnjRstWoCNcGdtNtNw1TS rr7SZMNcoga1TXfs9pN9On6VjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiOr+l7 BD7WoriY31pLbnTVmDHNMB8GA1UdIwQYMBaAFFp6Ld6mLIkOkB8dzUBG/NeMwLQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlBRi8xODYwQ0ExQTZG RjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lRNlFIeDNOUUViODE0ekF0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dub3QzcVlzaVE2UUh4M05RRWI4MTR6QXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlBRi8xODYwQ0ExQTZGRjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lR NlFIeDNOUUViODE0ekF0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUdQb5tHc9xYUeeJfPnpEH3c0ytMKCENR0ISnwAolpp2yvahpf2Gk8 zCO1JTqhDUiy2215YtVH/Bv+MiyRqsO3ntynRwf5aKv+HN1FPbhJhqwCUdQdwTEw zYJsmgR67yMJmcrEYViI3RaMNUh8vwMPWjgNB1B471RftAZJyvUzFoq9xGG7fMHY Sn9lSnSzp1q/VC3Hru5KeUEtFxz4rSe/yMhjKpmfS37GNGkJTJV7rTjBtxRi1GmG iWcDeqAt8hy0keToaoauCYsoZg/b3ln+gD92BAaAmvTzoev1Qbg3XpUjScQhYa7T VSp9p207yjWnXexr6HCmXETk/qwR7mr+ -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:53 2025 by rpki-client