$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft File: WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json) Hash identifier: DaDnr9UIKgUrHO8pxHd4VsXEXo6+iFNtheUfp3uecJ8= Subject key identifier: A8:C0:BC:AD:3D:7C:E9:3B:00:BB:AE:2B:78:BF:94:4F:EC:56:56:1A Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF Certificate issuer: /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft Manifest number: 0566 Signing time: Mon 28 Apr 2025 23:53:02 +0000 Manifest this update: Mon 28 Apr 2025 23:53:01 +0000 Manifest next update: Mon 05 May 2025 23:53:01 +0000 Files and hashes: 1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: Ux5MqyjNTfcAYtVIKAwspx7RviC3v9ivl338HvSWkGs=) 2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: 6TM0Kz09gMjbJeG9e3468lar07wNf8zG8NNQJe1azz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 23:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF Validity Not Before: Apr 28 23:53:01 2025 GMT Not After : May 5 23:53:01 2025 GMT Subject: CN=681014de-3c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:21:f7:5d:a1:72:0f:df:65:3f:d7:e7:6c: 33:0d:aa:db:55:9c:f1:b0:d0:d3:66:36:41:a5:07: f7:ca:7d:d4:04:b5:4c:ad:5c:01:a8:11:38:c7:35: 35:a1:ac:24:37:33:89:97:5a:15:d9:d7:80:76:55: e7:e5:8a:89:51:60:11:18:b7:9b:04:ad:3d:73:2f: 18:0a:d5:61:32:05:e3:cf:a9:54:c7:99:3d:46:15: bd:bb:90:e2:9b:30:f2:f2:be:82:21:3d:a8:dd:70: cd:16:7b:46:67:4e:9c:cc:be:b3:1b:a3:9a:ab:6b: 3b:fd:e6:79:f5:ea:3c:a6:68:a5:b6:69:c2:33:76: 31:a6:85:a7:35:58:38:8f:46:0b:c3:e0:d5:48:64: fa:11:65:4f:9b:8c:0e:aa:ed:12:eb:d4:c6:dd:0d: 84:7b:8c:3a:e3:bd:be:2f:0e:70:be:67:52:3b:67: 23:d3:8a:2a:19:73:1e:0b:4b:ed:8b:84:c6:f4:ee: c2:39:1a:a5:c8:70:d5:bb:99:64:ad:16:6f:d7:b6: ee:92:e0:36:24:15:eb:05:4d:09:47:88:31:d1:e8: 5a:51:6a:bb:37:20:71:f1:c2:1d:4c:0f:8a:c4:07: 2d:1a:6b:84:3b:ad:52:42:9a:e8:73:ca:17:dd:77: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C0:BC:AD:3D:7C:E9:3B:00:BB:AE:2B:78:BF:94:4F:EC:56:56:1A X509v3 Authority Key Identifier: keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:5f:20:de:fa:4a:2d:1e:22:60:87:74:3f:e0:20:de:c9:26: 3c:5f:6f:2c:bb:0a:e9:1d:71:cc:4b:f6:62:6a:67:bd:9d:3d: 20:1f:dd:65:1f:56:0c:00:4e:df:61:ed:1c:5e:2c:59:00:ce: 14:41:7b:6d:bc:68:19:4c:94:34:df:a9:8a:47:ce:a8:2d:b0: 9a:62:13:a7:3e:27:b4:f2:1d:85:ba:d3:80:ce:92:96:ee:9b: 1b:fd:21:a6:f3:47:6b:31:70:60:bb:51:3b:df:fa:1c:2b:83: e9:51:2d:d6:96:45:dd:02:de:ad:04:24:80:65:e5:27:fa:fa: 3e:26:33:3b:c2:ac:db:02:55:bc:1d:40:80:4a:1c:b7:11:c5: 9a:97:25:77:14:ab:0f:99:7c:55:56:07:3e:d7:39:70:49:0c: 2c:d8:f0:35:32:cf:5c:3d:00:15:36:be:44:b9:59:32:fd:de: 67:e3:49:76:87:ce:85:fb:fe:8b:ac:ab:2f:3a:32:9e:37:05: f7:b0:c1:d6:57:28:66:0b:89:bd:9d:86:df:58:aa:fe:15:53: bc:fa:77:8e:a1:6d:66:b4:20:0e:1f:9c:2d:45:dc:95:5c:27: e9:59:3a:a8:14:e1:81:ea:d8:c9:f6:f6:c0:45:f9:23:30:86: b6:3d:9f:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc0MkQxMTAvBgNVBAUTKDU4MjIyNzAzNDBGMzJBRjhENzA5MjI2MTBCNzA4MEZD MzQxNzdBQ0YwHhcNMjUwNDI4MjM1MzAxWhcNMjUwNTA1MjM1MzAxWjAYMRYwFAYD VQQDEw02ODEwMTRkZS0zYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQMh912hcg/fZT/X52wzDarbVZzxsNDTZjZBpQf3yn3UBLVMrVwBqBE4xzU1 oawkNzOJl1oV2deAdlXn5YqJUWARGLebBK09cy8YCtVhMgXjz6lUx5k9RhW9u5Di mzDy8r6CIT2o3XDNFntGZ06czL6zG6Oaq2s7/eZ59eo8pmiltmnCM3YxpoWnNVg4 j0YLw+DVSGT6EWVPm4wOqu0S69TG3Q2Ee4w6472+Lw5wvmdSO2cj04oqGXMeC0vt i4TG9O7CORqlyHDVu5lkrRZv17bukuA2JBXrBU0JR4gx0ehaUWq7NyBx8cIdTA+K xActGmuEO61SQproc8oX3XdDxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjAvK09 fOk7ALuuK3i/lE/sVlYaMB8GA1UdIwQYMBaAFFgiJwNA8yr41wkiYQtwgPw0F3rP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzQyRC9FMkFGOUI3NkRF MjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2alhDU0poQzNDQV9EUVhl czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDSW5BMER6S3ZqWENTSmhDM0NBX0RRWGVzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzQyRC9FMkFGOUI3NkRFMjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2 alhDU0poQzNDQV9EUVhlczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1XyDe+kotHiJgh3Q/4CDeySY8X28suwrpHXHMS/Ziame9nT0gH91l H1YMAE7fYe0cXixZAM4UQXttvGgZTJQ036mKR86oLbCaYhOnPie08h2FutOAzpKW 7psb/SGm80drMXBgu1E73/ocK4PpUS3WlkXdAt6tBCSAZeUn+vo+JjM7wqzbAlW8 HUCAShy3EcWalyV3FKsPmXxVVgc+1zlwSQws2PA1Ms9cPQAVNr5EuVky/d5n40l2 h86F+/6LrKsvOjKeNwX3sMHWVyhmC4m9nYbfWKr+FVO8+neOoW1mtCAOH5wtRdyV XCfpWTqoFOGB6tjJ9vbARfkjMIa2PZ++ -----END CERTIFICATE-----Generated at Tue Apr 29 19:21:17 2025 by rpki-client