$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft File: p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json) Hash identifier: eTGp89xtqlt3EvgMaRQu9NY+SSkHPwisRGYSm7UyadI= Subject key identifier: DF:ED:02:2B:84:F6:D3:53:B2:26:98:08:7E:9E:52:B2:E0:A4:28:29 Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Certificate serial: 19DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft Manifest number: 19CA Signing time: Thu 24 Apr 2025 16:23:56 +0000 Manifest this update: Thu 24 Apr 2025 16:23:56 +0000 Manifest next update: Thu 01 May 2025 16:23:56 +0000 Files and hashes: 1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: VJVgQc4W0PsUx7RK70eT0ZIq4YMKV6m43g2OocvlMaI=) 2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: Pn8qccQRQVn2V5b6lFX/FWa2+EXb/L20S5gebLb7vvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6618 (0x19da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Validity Not Before: Apr 24 16:23:56 2025 GMT Not After : May 1 16:23:56 2025 GMT Subject: CN=680a659c-8ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:2c:ce:c2:2a:5c:83:ed:35:8b:e6:27:ca: 90:c3:34:9a:05:ab:5e:7e:86:17:38:c0:18:83:ec: e4:d0:a6:30:49:3f:c8:0f:df:63:b4:79:26:d8:da: 7e:0f:6c:5d:f8:89:db:4b:93:92:44:79:fc:6b:70: 73:a3:18:22:72:58:a8:34:3f:41:91:70:33:66:37: 68:00:cd:eb:cd:84:9e:ac:ce:42:10:de:08:6a:9a: 4e:0a:cb:74:21:ef:b8:be:43:2a:4d:07:b1:df:c8: ab:15:97:13:c3:0c:73:90:b1:5b:d0:67:b7:31:87: 4f:0c:d7:99:6a:97:53:eb:82:96:34:31:1d:36:51: 20:73:6f:5c:c5:a3:8e:aa:22:7c:8a:fc:be:e9:e4: 36:73:c7:be:15:c1:fd:87:89:df:37:a5:2a:4d:8c: 5f:92:9c:e3:47:3c:48:a0:c5:73:c2:d0:ce:06:12: a7:1e:f1:e6:59:40:bf:42:85:6c:ae:71:c9:21:a9: 05:a2:2a:16:26:06:1b:5b:4e:9d:27:64:9d:94:5a: 9c:5e:f6:ee:42:cf:55:b0:01:48:2e:ed:f0:02:af: 94:83:2b:9e:d7:b2:0d:42:60:0e:24:e1:5e:0d:a0: 5c:e8:69:7b:5b:11:95:4a:c1:21:df:96:bf:13:6f: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:ED:02:2B:84:F6:D3:53:B2:26:98:08:7E:9E:52:B2:E0:A4:28:29 X509v3 Authority Key Identifier: keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e3:d9:50:87:2e:ec:43:3a:78:be:3b:e1:07:f1:0c:48:17: 46:8d:64:bb:f6:e9:f5:90:cf:7e:17:60:a3:3e:b3:70:c6:8b: e4:74:f3:06:6d:9e:12:eb:38:a7:7e:b6:bf:52:56:af:be:30: 45:26:93:f2:84:a0:ac:bc:48:57:64:07:f8:e4:de:50:3b:4a: 6d:7d:15:f7:11:f9:d8:d6:84:aa:f3:98:66:80:e3:0b:29:10: ee:ea:c0:f1:aa:78:c7:9c:1c:c5:06:04:c9:5d:8c:4b:e1:98: d8:f2:be:b1:c3:14:b5:b0:98:01:26:8e:b7:6c:7a:19:ec:f4: 61:b5:a8:2a:37:c8:a2:4c:08:76:51:ac:a5:94:4b:17:ac:f3: be:10:dc:d5:74:ba:4d:60:71:44:e7:1e:65:b6:29:d8:c5:dd: 36:47:f3:d4:c2:9d:45:fb:7c:eb:77:cc:ed:68:3b:24:86:c6: 4a:93:de:38:3a:a4:7b:2a:ac:db:46:2b:24:52:f7:fe:ea:a0: 4d:ca:66:3c:0d:df:1b:e7:83:7a:15:c0:9b:42:c3:2e:bb:29: ef:a4:8a:b1:6d:67:38:6e:63:ef:43:5e:11:00:52:fc:79:04: e7:fa:bf:68:35:b6:33:64:15:6e:44:bc:9c:3b:a8:ed:f4:3b: 6f:46:2b:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhGQTI2MjcxODlF NTQyRjRERUYwHhcNMjUwNDI0MTYyMzU2WhcNMjUwNTAxMTYyMzU2WjAYMRYwFAYD VQQDEw02ODBhNjU5Yy04ZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshMszsIqXIPtNYvmJ8qQwzSaBatefoYXOMAYg+zk0KYwST/ID99jtHkm2Np+ D2xd+InbS5OSRHn8a3BzoxgiclioND9BkXAzZjdoAM3rzYSerM5CEN4IappOCst0 Ie+4vkMqTQex38irFZcTwwxzkLFb0Ge3MYdPDNeZapdT64KWNDEdNlEgc29cxaOO qiJ8ivy+6eQ2c8e+FcH9h4nfN6UqTYxfkpzjRzxIoMVzwtDOBhKnHvHmWUC/QoVs rnHJIakFoioWJgYbW06dJ2SdlFqcXvbuQs9VsAFILu3wAq+Ugyue17INQmAOJOFe DaBc6Gl7WxGVSsEh35a/E28W8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/tAiuE 9tNTsiaYCH6eUrLgpCgpMB8GA1UdIwQYMBaAFKfsIlhoL2+un4Q4+iYnGJ5UL03v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTkyQS80NTc5N0M1QzVB NEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2NmZoRGo2SmljWW5sUXZU ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Atd2lXR2d2YjY2ZmhEajZKaWNZbmxRdlRlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTkyQS80NTc5N0M1QzVBNEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2 NmZoRGo2SmljWW5sUXZUZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh49lQhy7sQzp4vjvhB/EMSBdGjWS79un1kM9+F2CjPrNwxovkdPMG bZ4S6zinfra/UlavvjBFJpPyhKCsvEhXZAf45N5QO0ptfRX3EfnY1oSq85hmgOML KRDu6sDxqnjHnBzFBgTJXYxL4ZjY8r6xwxS1sJgBJo63bHoZ7PRhtagqN8iiTAh2 UayllEsXrPO+ENzVdLpNYHFE5x5ltinYxd02R/PUwp1F+3zrd8ztaDskhsZKk944 OqR7KqzbRiskUvf+6qBNymY8Dd8b54N6FcCbQsMuuynvpIqxbWc4bmPvQ14RAFL8 eQTn+r9oNbYzZBVuRLycO6jt9DtvRiuK -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:37 2025 by rpki-client