$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: DO75vXohwuFOkWdLT051153geYwcyCYlIJtYpGNnFOc= Subject key identifier: EE:D7:16:24:DE:5E:7A:97:94:21:65:70:CB:8E:26:32:B6:27:BA:19 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 091D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 08FF Signing time: Thu 24 Apr 2025 20:13:14 +0000 Manifest this update: Thu 24 Apr 2025 20:13:14 +0000 Manifest next update: Thu 01 May 2025 20:13:14 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: 1oTqzGiPZJzsSdJGZ4oA3DXW7TEvp/TAnq09rxYhERE=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: gOCw5zLl7y7h+UWFzAOSwX3oI4JmJwwAJxjqn+jEKuo=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: NQ+08YGOdEaF/ITWmOcqyCWrC35sSFn/SumNIjZOhls=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: mVbCZmxbw75/wJuw2lQw2e9EqjrrEqzYVc8QSZMYsH8=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: c5z4KkXkym8vqTv49IzGrRHtzbiepV0IBMzX8Mue6BQ=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: ya3/+CFVUd26DRczFvF0+d7fGBWWa9IkA5jh/NTOjQU=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: qBySD0Ql5ISyNIpBRQOOsUE/7hyokJQg1egqkA93Wgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Apr 24 20:13:14 2025 GMT Not After : May 1 20:13:14 2025 GMT Subject: CN=680a9b5a-43af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:e3:af:b1:50:f9:62:f1:e3:81:e4:48:67: 70:cf:8f:5c:71:85:92:19:ae:61:82:3e:4b:99:69: 09:ac:53:cc:45:09:14:a9:51:89:6c:e6:fc:0d:52: 47:45:47:70:bc:96:1a:88:6f:fe:a8:f2:a8:0b:36: 10:7a:78:4e:44:02:ab:f5:c0:2a:f7:fc:1d:49:46: 47:c0:57:79:1e:98:6d:ee:2a:9f:6c:86:f1:f9:a1: 86:7b:38:b9:b1:0c:13:88:3b:33:75:9f:91:7a:0b: 6e:17:04:88:89:11:63:c9:e3:e1:e6:1b:ab:7f:d5: c4:10:f5:73:16:04:38:f0:87:25:c4:7c:68:b8:82: a5:f3:a0:83:19:8c:45:51:df:e0:44:8e:c2:b9:f9: 5c:1c:ca:33:d7:16:4e:bb:eb:66:d7:94:c6:e8:e8: b4:48:8c:4f:b9:69:fe:53:0c:31:0c:3e:52:2a:d4: c8:40:6c:22:e5:a5:84:a8:0d:77:2b:3c:ed:f3:34: b6:c0:ab:65:7f:1e:04:11:00:18:6c:74:87:3c:09: 25:91:84:9f:0f:43:98:f0:96:8c:bc:9e:e1:49:e3: 0d:50:35:cc:f5:14:7c:77:0b:5a:db:39:1b:09:86: 91:07:32:78:5c:21:15:57:df:df:74:bb:72:ae:0f: 17:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D7:16:24:DE:5E:7A:97:94:21:65:70:CB:8E:26:32:B6:27:BA:19 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:62:cf:68:22:32:32:09:cf:82:5d:e1:2a:1a:23:99:83:03: 0c:48:00:cd:f0:37:f7:e9:6d:7b:4a:e8:f7:5e:1d:69:ef:d6: 9f:26:7b:44:f2:90:42:93:7c:33:ee:c7:4f:66:af:3f:0f:8f: e9:14:98:f2:85:ed:73:44:2e:be:99:42:c9:52:c8:eb:95:ce: a1:e5:32:48:70:5d:89:d2:f8:0c:94:ee:80:eb:b5:b2:85:e5: 5f:88:12:00:9d:32:3c:04:16:72:30:48:7f:48:5e:44:04:31: 44:ac:fc:23:0b:e1:0a:fb:68:f9:17:de:03:be:51:4c:4c:dd: e8:37:51:fc:21:b2:3f:a9:37:e6:6e:c7:f2:da:57:dd:44:4a: 63:c8:1d:81:6c:87:f6:9e:a2:c7:37:b9:a1:ec:36:a4:be:ef: 62:4c:0f:3d:ce:78:7c:16:99:f1:cc:4d:7e:97:23:4c:b4:f1: 1e:2d:ff:6c:08:27:47:f1:6e:34:a8:20:d5:ab:c2:39:fa:a7: ed:df:f7:6f:d5:1d:b2:03:77:63:56:0d:90:0f:ef:90:40:f1: 2b:01:f1:23:11:29:38:56:e8:b8:53:73:d0:93:6a:7b:53:84: eb:91:91:b3:93:e5:87:fc:b0:cf:ec:f1:ae:01:f0:d1:57:f2: 92:9e:9c:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUwNDI0MjAxMzE0WhcNMjUwNTAxMjAxMzE0WjAYMRYwFAYD VQQDEw02ODBhOWI1YS00M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tbjr7FQ+WLx44HkSGdwz49ccYWSGa5hgj5LmWkJrFPMRQkUqVGJbOb8DVJH RUdwvJYaiG/+qPKoCzYQenhORAKr9cAq9/wdSUZHwFd5Hpht7iqfbIbx+aGGezi5 sQwTiDszdZ+RegtuFwSIiRFjyePh5hurf9XEEPVzFgQ48IclxHxouIKl86CDGYxF Ud/gRI7CuflcHMoz1xZOu+tm15TG6Oi0SIxPuWn+UwwxDD5SKtTIQGwi5aWEqA13 Kzzt8zS2wKtlfx4EEQAYbHSHPAklkYSfD0OY8JaMvJ7hSeMNUDXM9RR8dwta2zkb CYaRBzJ4XCEVV9/fdLtyrg8XqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7XFiTe XnqXlCFlcMuOJjK2J7oZMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZYs9oIjIyCc+CXeEqGiOZgwMMSADN8Df36W17Suj3Xh1p79afJntE 8pBCk3wz7sdPZq8/D4/pFJjyhe1zRC6+mULJUsjrlc6h5TJIcF2J0vgMlO6A67Wy heVfiBIAnTI8BBZyMEh/SF5EBDFErPwjC+EK+2j5F94DvlFMTN3oN1H8IbI/qTfm bsfy2lfdREpjyB2BbIf2nqLHN7mh7Dakvu9iTA89znh8FpnxzE1+lyNMtPEeLf9s CCdH8W40qCDVq8I5+qft3/dv1R2yA3djVg2QD++QQPErAfEjESk4Vui4U3PQk2p7 U4TrkZGzk+WH/LDP7PGuAfDRV/KSnpwB -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:39 2025 by rpki-client