$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft File: Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json) Hash identifier: HNvJp967FbOkBujbQhTcprWGKCcvzN16qD+zlT8Yl94= Subject key identifier: 67:D9:FA:A2:F4:EA:70:41:2A:2F:13:D8:53:EB:6E:5C:D1:30:C3:7D Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft Manifest number: 067F Signing time: Thu 24 Apr 2025 22:05:57 +0000 Manifest this update: Thu 24 Apr 2025 22:05:57 +0000 Manifest next update: Thu 01 May 2025 22:05:57 +0000 Files and hashes: 1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: a1vYINrWGvd4Q4qL1HEEpxX/x22MqacfLXSawlXN4Xo=) 2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: nbo+aRpaKhKrr9ll2EHatjWC4IcNme0KBXjobYgnQ18=) 3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: K06objCZTkF4R2m4Es3RoZwatUsJt3KTozD/Y+CKlGA=) 4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: dk7hZcw60oBzYDsH/VfIiPOBe+wfd9KvvAO7IK7LLKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Validity Not Before: Apr 24 22:05:57 2025 GMT Not After : May 1 22:05:57 2025 GMT Subject: CN=680ab5c5-1a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:c2:7b:10:87:16:d6:f5:72:8a:f3:1c:94: 45:5d:07:77:7a:ea:9e:2b:ba:cd:41:8c:bd:0d:79: 82:24:4b:1d:ac:ac:63:44:f3:27:da:0e:da:32:2e: 0c:a6:73:47:7b:12:b6:c7:fd:af:e9:eb:f7:50:58: f7:f3:1f:b1:5c:29:a6:c9:2e:33:62:5a:13:e8:9c: 37:c5:53:85:c9:7b:66:0c:5c:32:47:d2:09:ad:f7: c8:95:1f:1f:26:c4:b4:53:ad:23:d4:c1:ca:cd:87: 7d:e1:5a:62:86:4e:a2:31:87:f4:f3:a3:11:28:18: db:05:f4:28:81:ff:7b:5d:eb:24:d4:f4:93:1b:c0: 9f:ef:82:3f:e2:9d:de:c2:8d:de:32:73:ab:88:c0: 88:54:67:c6:98:62:26:75:4a:8c:ce:06:09:a8:55: 31:2d:57:89:f3:88:dc:8c:6f:18:19:82:03:84:a3: b3:a0:aa:dc:da:b5:af:c2:7a:0f:e3:15:0f:f2:35: 40:42:52:38:6b:a0:bc:f2:7b:3d:67:2a:2b:97:70: e3:23:6c:3b:8e:bb:70:1f:50:aa:1c:ad:9a:11:e6: f0:3a:1b:83:54:25:4d:98:c5:33:ce:df:ec:81:7e: bc:06:4a:d6:3a:6c:d3:71:a9:bc:19:1f:7b:3e:33: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D9:FA:A2:F4:EA:70:41:2A:2F:13:D8:53:EB:6E:5C:D1:30:C3:7D X509v3 Authority Key Identifier: keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:30:e1:42:c7:40:a5:fb:18:ab:ce:10:3a:2b:dd:bb:2a:9c: a3:7d:c3:ed:fd:c3:60:e1:52:72:72:c9:c3:89:57:6e:3b:6c: ee:46:bd:03:cb:a8:a6:51:92:7d:d9:90:0d:5f:ce:79:96:d1: 05:07:c4:4f:e5:bd:14:d3:ab:3f:96:b0:0e:c5:73:af:b7:67: 4c:96:e5:15:52:f8:08:3e:f5:ad:eb:22:f7:76:c2:b0:89:a5: 7e:e4:3c:12:f4:96:78:87:4a:cb:09:97:38:26:ad:fc:25:8c: c0:5b:64:8d:51:e2:aa:a4:5b:09:a3:7c:d1:da:fd:05:09:33: 5d:83:ab:0c:d0:77:e5:45:68:cb:23:38:9e:a0:87:45:e4:bb: 31:e7:2d:5f:71:10:0a:3c:2c:40:8a:48:ef:e5:6f:f6:67:dc: bd:5a:55:2a:90:80:78:68:c7:75:42:b5:26:3d:98:40:32:fd: 68:ca:6e:5e:56:b6:db:19:56:85:72:5c:14:85:c7:78:11:6d: 42:5e:37:86:3e:8c:04:75:5e:3e:e5:87:58:f6:df:d3:6c:27: 1d:be:04:69:08:f4:fb:48:dd:fa:54:c1:a6:a9:af:1a:e9:40: 44:d8:7c:61:26:0a:47:eb:17:87:4d:86:3b:7b:1d:80:3a:8b: a7:ce:8a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhBQUM2NzBGRkVG QzdCNjlBMUIwHhcNMjUwNDI0MjIwNTU3WhcNMjUwNTAxMjIwNTU3WjAYMRYwFAYD VQQDEw02ODBhYjVjNS0xYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+PCexCHFtb1corzHJRFXQd3euqeK7rNQYy9DXmCJEsdrKxjRPMn2g7aMi4M pnNHexK2x/2v6ev3UFj38x+xXCmmyS4zYloT6Jw3xVOFyXtmDFwyR9IJrffIlR8f JsS0U60j1MHKzYd94Vpihk6iMYf086MRKBjbBfQogf97Xesk1PSTG8Cf74I/4p3e wo3eMnOriMCIVGfGmGImdUqMzgYJqFUxLVeJ84jcjG8YGYIDhKOzoKrc2rWvwnoP 4xUP8jVAQlI4a6C88ns9Zyorl3DjI2w7jrtwH1CqHK2aEebwOhuDVCVNmMUzzt/s gX68BkrWOmzTcam8GR97PjMfhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfZ+qL0 6nBBKi8T2FPrblzRMMN9MB8GA1UdIwQYMBaAFFrJfJEpmi+pyM7YqsZw/+/Htpob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI2MC9ENzhEMkFBMjcx QTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2bkl6dGlxeG5EXzc4ZTJt aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzbDhrU21hTDZuSXp0aXF4bkRfNzhlMm1ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzI2MC9ENzhEMkFBMjcxQTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2 bkl6dGlxeG5EXzc4ZTJtaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/MOFCx0Cl+xirzhA6K927KpyjfcPt/cNg4VJycsnDiVduO2zuRr0D y6imUZJ92ZANX855ltEFB8RP5b0U06s/lrAOxXOvt2dMluUVUvgIPvWt6yL3dsKw iaV+5DwS9JZ4h0rLCZc4Jq38JYzAW2SNUeKqpFsJo3zR2v0FCTNdg6sM0HflRWjL IzieoIdF5Lsx5y1fcRAKPCxAikjv5W/2Z9y9WlUqkIB4aMd1QrUmPZhAMv1oym5e VrbbGVaFclwUhcd4EW1CXjeGPowEdV4+5YdY9t/TbCcdvgRpCPT7SN36VMGmqa8a 6UBE2HxhJgpH6xeHTYY7ex2AOounzoqt -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:19 2025 by rpki-client