$ rpki-client -vvf rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft File: wrYFvbTytu0rBR3EKy6AP7YHjk0.mft (raw, json) Hash identifier: sA05kHv3xF/4HhMQm5XR/dI191OrYfV/tFqN4+OL9Us= Subject key identifier: CD:C4:94:E8:42:B0:97:E8:A3:ED:36:EF:5A:34:FE:35:31:52:31:04 Authority key identifier: C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D Certificate issuer: /CN=A91F692A/serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft Manifest number: 0230 Signing time: Fri 25 Apr 2025 01:40:50 +0000 Manifest this update: Fri 25 Apr 2025 01:40:50 +0000 Manifest next update: Fri 02 May 2025 01:40:50 +0000 Files and hashes: 1: wrYFvbTytu0rBR3EKy6AP7YHjk0.crl (hash: zUFo0sF3xhFTd5HcNQCFrBlPfxZAq3R2nmjq15qbeYs=) 2: 11AA6C3E22A111ED848DF584C4F9AE02.roa (hash: uqzxT9Bkkkw/d9KeeEuTKcCxRKlVwtLIu+mRX+pqh+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.crl rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F692A, serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D Validity Not Before: Apr 25 01:40:50 2025 GMT Not After : May 2 01:40:50 2025 GMT Subject: CN=680ae822-506a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c4:2b:6d:16:94:b0:d5:91:b7:26:b6:1a:69: e7:cd:cb:ae:bc:ab:10:69:9e:41:0e:53:fc:79:6a: fb:92:a8:16:ea:46:12:c5:cb:52:7b:da:d0:ca:47: 83:d7:11:0a:7a:76:d4:01:20:eb:d3:9a:db:b4:86: 49:5d:67:6c:49:ea:53:47:cf:fc:75:13:3b:59:2b: c9:59:0d:fd:b9:65:a6:12:64:6a:23:51:d9:c8:7d: 59:96:56:e0:39:d7:32:11:5c:88:4a:f7:f5:b9:4e: e8:a6:71:e6:15:6c:41:77:0f:57:4f:b1:91:ef:f6: 9a:46:ca:c4:66:9e:53:8d:56:3a:cd:5a:eb:16:14: 46:d0:3d:c4:bf:03:44:e8:77:d5:96:c0:78:2c:62: da:6b:f5:1e:1f:6e:ee:83:6c:1d:95:7c:47:c8:e2: 99:59:24:66:a1:9b:f9:3d:b7:90:84:5e:a8:56:ed: 8c:72:e0:ed:2b:ae:1e:49:f8:2c:f1:93:57:57:a5: e4:0e:f5:af:78:c8:20:fa:f0:21:b1:e0:94:58:de: 41:ff:93:f2:81:4d:c6:a3:36:7c:73:4e:a5:37:0f: 56:c3:23:cb:57:41:0f:63:14:2b:09:3b:ec:1f:78: b7:47:7a:a1:42:f9:2d:9e:9d:36:b6:c6:a9:f5:4b: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C4:94:E8:42:B0:97:E8:A3:ED:36:EF:5A:34:FE:35:31:52:31:04 X509v3 Authority Key Identifier: keyid:C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:98:fc:52:2f:21:79:8e:27:8b:cb:ae:af:da:3c:51:76:1a: 41:7f:54:ac:1e:bc:34:da:79:20:bb:1f:93:e1:f4:90:3f:9f: 4e:3d:84:07:19:cb:d9:ff:78:77:46:ba:ee:73:23:7c:09:b8: 17:13:2b:a1:f7:d8:1e:2c:de:21:5d:2b:6c:f6:1e:ae:c5:fb: 8b:d8:1c:30:16:04:46:63:b1:5c:b2:bb:c3:b4:d8:7d:c2:ed: 4d:e7:e2:9a:cb:a9:2a:fd:a9:d9:a8:eb:b8:7d:97:20:b3:52: 7b:f7:b0:66:54:97:7b:65:1b:db:5a:3a:71:3a:ec:ae:b0:1a: de:90:83:33:9c:78:6d:2b:1f:63:e0:85:02:08:62:b6:a4:ac: 85:2a:0a:72:d7:07:b0:ee:3a:13:76:e4:d9:20:62:80:f5:e1: a6:f6:3b:d8:e6:32:d7:f9:3a:ad:dc:f1:83:5c:28:3d:d8:23: 04:07:48:41:15:7a:be:9d:5c:3c:67:a4:c1:6a:7a:b5:23:b3: 59:1a:4c:fc:60:f2:28:64:29:ec:f5:be:a5:1f:52:19:7f:1d: 3c:1a:fe:a7:85:68:ba:8b:6a:79:3f:86:6d:ba:17:10:2c:05: fd:43:af:8f:f7:68:9f:ed:0b:ee:ea:2a:0d:02:48:0e:c0:42: 14:ca:4f:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5MkExMTAvBgNVBAUTKEMyQjYwNUJEQjRGMkI2RUQyQjA1MURDNDJCMkU4MDNG QjYwNzhFNEQwHhcNMjUwNDI1MDE0MDUwWhcNMjUwNTAyMDE0MDUwWjAYMRYwFAYD VQQDEw02ODBhZTgyMi01MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cQrbRaUsNWRtya2GmnnzcuuvKsQaZ5BDlP8eWr7kqgW6kYSxctSe9rQykeD 1xEKenbUASDr05rbtIZJXWdsSepTR8/8dRM7WSvJWQ39uWWmEmRqI1HZyH1Zllbg OdcyEVyISvf1uU7opnHmFWxBdw9XT7GR7/aaRsrEZp5TjVY6zVrrFhRG0D3EvwNE 6HfVlsB4LGLaa/UeH27ug2wdlXxHyOKZWSRmoZv5PbeQhF6oVu2McuDtK64eSfgs 8ZNXV6XkDvWveMgg+vAhseCUWN5B/5PygU3GozZ8c06lNw9WwyPLV0EPYxQrCTvs H3i3R3qhQvktnp02tsap9UtfswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3ElOhC sJfoo+0271o0/jUxUjEEMB8GA1UdIwQYMBaAFMK2Bb208rbtKwUdxCsugD+2B45N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjkyQS80ODlFMEYwQzIy OUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1MHJCUjNFS3k2QVA3WUhq azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dyWUZ2YlR5dHUwckJSM0VLeTZBUDdZSGprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjkyQS80ODlFMEYwQzIyOUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1 MHJCUjNFS3k2QVA3WUhqazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBumPxSLyF5jieLy66v2jxRdhpBf1SsHrw02nkgux+T4fSQP59OPYQH GcvZ/3h3RrrucyN8CbgXEyuh99geLN4hXSts9h6uxfuL2BwwFgRGY7FcsrvDtNh9 wu1N5+Kay6kq/anZqOu4fZcgs1J797BmVJd7ZRvbWjpxOuyusBrekIMznHhtKx9j 4IUCCGK2pKyFKgpy1wew7joTduTZIGKA9eGm9jvY5jLX+Tqt3PGDXCg92CMEB0hB FXq+nVw8Z6TBanq1I7NZGkz8YPIoZCns9b6lH1IZfx08Gv6nhWi6i2p5P4ZtuhcQ LAX9Q6+P92if7Qvu6ioNAkgOwEIUyk8/ -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:07 2025 by rpki-client