$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft File: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft (raw, json) Hash identifier: P8pnomh2jZs8KGyGv0IlAuEJMG5klPI5Co83MY/7V28= Subject key identifier: 66:2C:64:22:8E:6B:51:AE:D4:9B:3C:02:B3:F4:A7:F0:3C:BD:3E:A1 Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft Manifest number: 0BD9 Signing time: Thu 24 Apr 2025 18:48:19 +0000 Manifest this update: Thu 24 Apr 2025 18:48:18 +0000 Manifest next update: Thu 01 May 2025 18:48:18 +0000 Files and hashes: 1: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl (hash: B95ZjgSHVmFLCofLDe/19r69ZDVUggQ7VTyeX+rIAvE=) 2: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (hash: FL+VVzcPFPFYFK/eeGMO2XGhtXdZWZTlmhO3w7UvF4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7E85, serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Validity Not Before: Apr 24 18:48:18 2025 GMT Not After : May 1 18:48:18 2025 GMT Subject: CN=680a8773-20f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:1e:3c:87:cb:e1:4e:e3:20:c2:bd:15:d7: d2:ec:ec:4a:b5:aa:4c:6e:17:e4:7a:46:1e:a2:e9: b9:46:c7:65:cc:c0:eb:29:58:b1:5a:0f:92:29:2b: 32:09:4e:64:3d:eb:f5:dd:24:66:a2:7a:ac:e4:c2: de:23:d1:09:1a:c5:da:3a:da:b9:16:f7:18:2b:6d: fa:c8:dd:a1:f2:2d:21:b3:c9:41:a6:7d:9c:63:a0: 3e:a4:17:2d:fd:8d:af:8f:1c:4f:42:e4:c6:49:2f: 92:01:e3:7d:9f:d2:5d:1f:66:bc:ad:ad:90:aa:86: 5e:0d:47:a3:ce:f8:d4:24:9e:27:ba:de:58:f6:f2: 36:92:fd:7e:ee:aa:9e:48:a4:ce:70:f6:b7:df:14: ff:31:9f:eb:2e:3d:8b:fa:cb:3d:26:ca:c4:e0:7f: f1:d4:98:96:8d:cc:94:2b:d0:3a:66:53:cf:35:17: 10:18:a7:16:83:a4:bd:60:b3:8e:d3:02:71:0d:82: a9:6e:e6:29:13:ea:7e:43:e8:cc:05:e2:53:c2:b8: b6:78:12:8b:7b:06:b4:96:c9:4a:f9:31:22:51:a9: 81:26:0e:06:64:b2:fa:93:3e:da:66:2a:9e:09:f6: cd:3c:96:01:bf:66:c4:92:a5:25:83:af:e0:0a:ee: 74:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2C:64:22:8E:6B:51:AE:D4:9B:3C:02:B3:F4:A7:F0:3C:BD:3E:A1 X509v3 Authority Key Identifier: keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ec:4e:a5:d2:3a:db:90:e1:e9:ac:f5:0d:d8:d7:5e:12:1e: cf:40:2b:cb:d2:84:c9:8a:c9:9f:12:c3:d1:7b:91:82:62:d5: 9e:eb:4f:55:16:32:33:da:9c:15:ee:53:7f:a2:af:08:65:cf: de:0e:24:5c:00:43:a0:56:19:30:d1:41:bd:0f:6b:48:90:10: f0:ac:95:8d:a0:d8:4c:25:c7:e3:24:7c:64:22:a0:f8:ca:72: b5:8a:ca:fb:3d:b1:da:6e:32:e9:79:c4:e5:f2:b8:92:dc:8f: 71:dc:a8:2a:87:5c:b9:6f:87:b8:80:63:e3:74:89:3c:c6:c0: 35:bd:78:eb:0a:b3:6e:3f:92:ee:68:bf:d6:93:74:9a:23:37: e8:86:e6:98:c9:f7:14:c0:10:66:49:40:bb:ec:39:48:da:b9: dd:8c:ef:42:33:39:4a:0e:fc:1a:36:13:9d:9c:62:7f:61:b3: 9e:49:82:cc:cd:56:6b:00:b7:a1:89:16:05:ff:5d:52:16:ca: 24:2f:c0:bc:c1:02:94:1d:0b:e1:c8:29:20:ef:fc:8c:57:b0: 4f:61:81:f5:9a:92:e6:75:b5:99:30:27:3b:e5:99:97:73:42: 4c:6a:7f:33:a9:b1:b4:64:0a:e3:2d:47:79:95:69:7b:bc:0a: 21:4d:92:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdFODUxMTAvBgNVBAUTKDU5Njg1MkQ1Mjk5NEZCQjY3QTYzNzlBQjFFMEFGNTE0 NTUzRUU4ODYwHhcNMjUwNDI0MTg0ODE4WhcNMjUwNTAxMTg0ODE4WjAYMRYwFAYD VQQDEw02ODBhODc3My0yMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kkePIfL4U7jIMK9FdfS7OxKtapMbhfkekYeoum5RsdlzMDrKVixWg+SKSsy CU5kPev13SRmonqs5MLeI9EJGsXaOtq5FvcYK236yN2h8i0hs8lBpn2cY6A+pBct /Y2vjxxPQuTGSS+SAeN9n9JdH2a8ra2QqoZeDUejzvjUJJ4nut5Y9vI2kv1+7qqe SKTOcPa33xT/MZ/rLj2L+ss9JsrE4H/x1JiWjcyUK9A6ZlPPNRcQGKcWg6S9YLOO 0wJxDYKpbuYpE+p+Q+jMBeJTwri2eBKLewa0lslK+TEiUamBJg4GZLL6kz7aZiqe CfbNPJYBv2bEkqUlg6/gCu505wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYsZCKO a1Gu1Js8ArP0p/A8vT6hMB8GA1UdIwQYMBaAFFloUtUplPu2emN5qx4K9RRVPuiG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0U4NS9CMkUwRTVBRTFD MzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03WjZZM21ySGdyMUZGVS02 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dXaFMxU21VLTdaNlkzbXJIZ3IxRkZVLTZJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0U4NS9CMkUwRTVBRTFDMzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03 WjZZM21ySGdyMUZGVS02SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs7E6l0jrbkOHprPUN2NdeEh7PQCvL0oTJismfEsPRe5GCYtWe609V FjIz2pwV7lN/oq8IZc/eDiRcAEOgVhkw0UG9D2tIkBDwrJWNoNhMJcfjJHxkIqD4 ynK1isr7PbHabjLpecTl8riS3I9x3Kgqh1y5b4e4gGPjdIk8xsA1vXjrCrNuP5Lu aL/Wk3SaIzfohuaYyfcUwBBmSUC77DlI2rndjO9CMzlKDvwaNhOdnGJ/YbOeSYLM zVZrALehiRYF/11SFsokL8C8wQKUHQvhyCkg7/yMV7BPYYH1mpLmdbWZMCc75ZmX c0JMan8zqbG0ZArjLUd5lWl7vAohTZJt -----END CERTIFICATE-----Generated at Sat Apr 26 04:09:38 2025 by rpki-client