$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: VyKsSARQXEg13sAWYD0wda6pqrQ3jm7W6mvakGLjoms= Subject key identifier: DE:1B:9C:F5:B1:33:32:8E:5C:51:11:AD:33:D7:5C:0E:34:E6:E7:54 Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 059F Signing time: Thu 24 Apr 2025 22:58:48 +0000 Manifest this update: Thu 24 Apr 2025 22:58:48 +0000 Manifest next update: Thu 01 May 2025 22:58:48 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: Clqk/1oDZbAab1ExcxXqgxHkzwDiqsXYGMw+GKxOadM=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: bmMn0IWRpy37XK6k+WXVEF+nIujAMD8B3cc9TjWsaYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Apr 24 22:58:48 2025 GMT Not After : May 1 22:58:48 2025 GMT Subject: CN=680ac228-1d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:b7:02:19:8a:95:d0:8e:12:7b:8f:58:27: 00:5e:57:fe:f7:eb:6e:96:c6:e3:d9:6c:91:93:b2: 35:30:b1:3b:ac:34:bd:20:6d:0f:ff:b9:df:5d:53: 12:a6:19:66:66:e0:a2:30:c9:0b:b9:25:15:84:67: c8:a2:65:98:2d:86:76:ac:93:5f:7c:46:cd:9f:ce: 32:34:1b:b3:cb:89:9d:8b:7b:02:7c:f1:c1:e3:cb: 89:32:7b:60:85:f9:04:85:a9:93:93:0b:34:8e:8b: c8:7f:51:f0:3c:da:4e:ad:25:38:13:74:b1:7a:2d: 3f:7f:15:d9:51:88:73:bd:17:44:41:0b:bf:b6:9a: 82:f0:6e:b3:c5:59:9a:2d:3e:9d:8a:5d:c8:44:e3: bd:95:28:81:38:d0:c4:2f:ef:f7:5a:9d:20:c1:a4: 9a:37:94:e0:73:65:a8:c6:78:52:f0:24:85:2c:3b: d3:7b:ca:bd:3a:5e:12:35:9f:b2:f7:93:b6:12:9a: c8:a7:6c:10:c5:63:47:4f:ef:19:db:00:26:4d:df: 29:05:d3:54:25:14:bb:2c:17:43:97:ca:e8:0e:b5: 03:a9:cc:1c:5c:f5:17:12:98:71:c7:63:b5:27:fe: 67:88:dc:8f:b4:fe:d8:f5:b3:de:80:30:b8:8e:ca: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1B:9C:F5:B1:33:32:8E:5C:51:11:AD:33:D7:5C:0E:34:E6:E7:54 X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ea:11:86:bf:40:a7:6f:d9:d5:05:cb:39:44:ab:0d:da:51: 15:2f:86:38:24:5b:64:37:b9:01:68:45:91:f6:59:6b:d1:28: 93:c8:72:3b:fc:9e:92:04:52:50:9c:54:46:b1:72:8f:76:1e: 14:5d:94:31:cf:11:80:c0:eb:de:ea:ff:fe:79:b5:6b:ee:93: 7a:b1:89:91:73:34:82:d6:2f:b7:c0:da:25:b3:8e:b4:30:6c: f9:5e:1b:ae:60:b3:85:2b:31:a9:a3:ac:e8:5d:93:3b:98:7a: ed:7b:8d:2a:da:25:a4:9a:d8:a1:51:f2:ef:ea:7a:fc:8c:21: b1:f1:4d:22:e9:4b:9e:66:8d:bc:d5:53:bd:58:03:30:9e:f4: b5:dd:2b:ed:30:3a:e0:e2:44:97:e8:93:c0:a7:d7:40:4d:00: ef:cb:c5:df:17:45:b5:5c:5a:0b:82:bd:97:df:31:bb:d7:1c: 54:e9:d4:70:42:88:74:6d:3d:3a:c5:f2:eb:2b:a6:e7:ae:45: 21:d6:6b:60:83:c4:9a:28:90:46:7d:44:cd:eb:bd:7b:fd:a7: 63:ad:a6:66:4e:d4:23:32:c7:76:25:3b:f7:ed:5a:e2:9d:92: 19:18:9c:44:f0:0f:65:32:19:f6:2a:36:80:be:ce:56:a1:49: ed:74:5f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjUwNDI0MjI1ODQ4WhcNMjUwNTAxMjI1ODQ4WjAYMRYwFAYD VQQDEw02ODBhYzIyOC0xZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUy3AhmKldCOEnuPWCcAXlf+9+tulsbj2WyRk7I1MLE7rDS9IG0P/7nfXVMS phlmZuCiMMkLuSUVhGfIomWYLYZ2rJNffEbNn84yNBuzy4mdi3sCfPHB48uJMntg hfkEhamTkws0jovIf1HwPNpOrSU4E3Sxei0/fxXZUYhzvRdEQQu/tpqC8G6zxVma LT6dil3IROO9lSiBONDEL+/3Wp0gwaSaN5Tgc2WoxnhS8CSFLDvTe8q9Ol4SNZ+y 95O2EprIp2wQxWNHT+8Z2wAmTd8pBdNUJRS7LBdDl8roDrUDqcwcXPUXEphxx2O1 J/5niNyPtP7Y9bPegDC4jsrahQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4bnPWx MzKOXFERrTPXXA405udUMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg6hGGv0Cnb9nVBcs5RKsN2lEVL4Y4JFtkN7kBaEWR9llr0SiTyHI7 /J6SBFJQnFRGsXKPdh4UXZQxzxGAwOve6v/+ebVr7pN6sYmRczSC1i+3wNols460 MGz5XhuuYLOFKzGpo6zoXZM7mHrte40q2iWkmtihUfLv6nr8jCGx8U0i6UueZo28 1VO9WAMwnvS13SvtMDrg4kSX6JPAp9dATQDvy8XfF0W1XFoLgr2X3zG71xxU6dRw Qoh0bT06xfLrK6bnrkUh1mtgg8SaKJBGfUTN6717/adjraZmTtQjMsd2JTv37Vri nZIZGJxE8A9lMhn2KjaAvs5WoUntdF+A -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:43 2025 by rpki-client