$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json) Hash identifier: xJZoqvx98OKwcf1UeCvahkClDGcn5tcLfM5GW9tVUBU= Subject key identifier: 7C:F7:A6:36:C0:2E:F0:D5:98:42:C8:9F:10:F4:56:79:A4:5E:58:F5 Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft Manifest number: 0797 Signing time: Thu 24 Apr 2025 21:06:42 +0000 Manifest this update: Thu 24 Apr 2025 21:06:41 +0000 Manifest next update: Thu 01 May 2025 21:06:41 +0000 Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: 7Pdltlkfgrj/Xew+2O0TfLHmN4o5oAmKXcQ7RJ/VPe8=) 2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: ciOpG8qRab9sKkVmGRn2hy7gpdalC9pHnHF+YnHZNHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Validity Not Before: Apr 24 21:06:41 2025 GMT Not After : May 1 21:06:41 2025 GMT Subject: CN=680aa7e1-7b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:63:a8:52:a3:c3:f4:92:da:75:e6:f9:df: 9d:1c:72:3c:37:c6:e2:cd:02:cb:92:be:52:f8:db: 97:f1:1c:91:af:bf:fe:96:5f:c6:ed:77:03:26:f0: 3f:36:20:f9:16:31:20:22:e7:23:32:44:63:f9:95: 4e:c7:ec:b0:49:1b:38:cf:19:22:1b:27:20:7b:13: 86:42:08:16:39:5d:00:24:34:8e:43:15:80:8d:fa: 3f:3e:cf:e7:3a:44:12:f0:e7:90:a9:a6:a5:aa:88: e2:9c:bf:57:80:c5:3a:77:04:ec:c2:01:24:9e:c9: c8:7c:ed:c5:e7:7a:16:8d:6b:1e:4f:d7:c9:4b:00: b1:c0:d2:d2:e3:79:a1:f7:bb:c9:13:55:1a:5c:26: 46:ee:89:20:b9:5a:25:7b:2e:ee:f9:39:23:3b:05: 5a:81:7a:89:11:a1:57:97:44:21:2f:68:00:33:6f: a3:52:88:db:4c:7b:56:a4:9c:5d:96:2d:e1:39:b1: 63:26:24:89:bc:1b:0e:a8:58:e0:dc:64:7c:bf:3b: 94:d6:07:3b:ec:1a:95:de:33:78:b8:5f:c6:a8:d7: 8f:cc:86:32:67:bf:3f:53:15:8b:5f:7a:5d:38:2f: 75:f0:9e:ce:91:86:8a:e7:e2:8b:38:bc:60:2f:c5: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F7:A6:36:C0:2E:F0:D5:98:42:C8:9F:10:F4:56:79:A4:5E:58:F5 X509v3 Authority Key Identifier: keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:1a:44:52:1b:d1:59:20:d1:68:73:03:b9:9a:00:cb:e8:e9: 77:56:66:13:0e:49:ab:69:e3:db:83:d6:4f:03:b3:b3:11:9b: e6:dc:c2:f1:5a:fb:c7:1f:c8:4d:84:8e:3c:90:14:92:0e:a7: dd:f9:b1:ef:8c:25:d5:83:b2:fd:60:27:5b:37:9f:e7:8c:1f: d4:88:79:59:b2:ed:bf:a5:6f:91:87:cc:66:85:04:72:c0:90: f3:fa:ac:e3:6a:47:d3:e6:01:33:ac:d3:20:50:9f:ac:94:4a: 31:24:76:98:ea:cb:0f:7d:7c:5f:36:53:dd:60:6f:5d:a3:3d: 9e:47:f5:69:55:43:93:49:09:c0:22:0a:56:cc:f5:d2:82:6e: 31:0d:67:01:aa:89:0b:50:08:4c:f5:08:e7:1c:01:0b:c8:d2: 55:04:60:d0:eb:9d:f3:dd:21:8f:54:7d:85:45:72:ac:d0:5d: da:54:a9:b8:98:b5:3e:d8:e4:07:54:1d:29:ac:d6:2d:70:8a: 17:63:ea:43:e5:ea:53:cd:0d:6e:72:28:c4:d8:a0:a8:91:ab: 63:7e:70:4c:9f:93:4b:94:6d:1d:b6:08:2f:7e:f2:d4:9b:3a: b7:95:a2:e6:cb:dd:1e:f2:dd:3a:eb:2e:d6:99:77:a6:08:6d: aa:b8:49:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx OUIwNjI1MEQwHhcNMjUwNDI0MjEwNjQxWhcNMjUwNTAxMjEwNjQxWjAYMRYwFAYD VQQDEw02ODBhYTdlMS03YjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAtjqFKjw/SS2nXm+d+dHHI8N8bizQLLkr5S+NuX8RyRr7/+ll/G7XcDJvA/ NiD5FjEgIucjMkRj+ZVOx+ywSRs4zxkiGycgexOGQggWOV0AJDSOQxWAjfo/Ps/n OkQS8OeQqaalqojinL9XgMU6dwTswgEknsnIfO3F53oWjWseT9fJSwCxwNLS43mh 97vJE1UaXCZG7okguVoley7u+TkjOwVagXqJEaFXl0QhL2gAM2+jUojbTHtWpJxd li3hObFjJiSJvBsOqFjg3GR8vzuU1gc77BqV3jN4uF/GqNePzIYyZ78/UxWLX3pd OC918J7OkYaK5+KLOLxgL8X0yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHz3pjbA LvDVmELInxD0VnmkXlj1MB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK Z19VeXBNMjdMTThac0dKUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiGkRSG9FZINFocwO5mgDL6Ol3VmYTDkmraePbg9ZPA7OzEZvm3MLx WvvHH8hNhI48kBSSDqfd+bHvjCXVg7L9YCdbN5/njB/UiHlZsu2/pW+Rh8xmhQRy wJDz+qzjakfT5gEzrNMgUJ+slEoxJHaY6ssPfXxfNlPdYG9doz2eR/VpVUOTSQnA IgpWzPXSgm4xDWcBqokLUAhM9QjnHAELyNJVBGDQ653z3SGPVH2FRXKs0F3aVKm4 mLU+2OQHVB0prNYtcIoXY+pD5epTzQ1ucijE2KCokatjfnBMn5NLlG0dtggvfvLU mzq3laLmy90e8t066y7WmXemCG2quEm0 -----END CERTIFICATE-----Generated at Sat Apr 26 14:02:02 2025 by rpki-client