$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json) Hash identifier: F79CqkRnCnizeeblqUFezxISllN6tMUUat0rcQRiWU8= Subject key identifier: 8E:68:95:36:AB:05:59:CA:75:8D:0F:B4:F2:C1:28:66:AE:78:4E:AA Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft Manifest number: 018A Signing time: Fri 25 Apr 2025 02:41:59 +0000 Manifest this update: Fri 25 Apr 2025 02:41:58 +0000 Manifest next update: Fri 02 May 2025 02:41:58 +0000 Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: cO4VoW6zE8KSArYadgaAXgCIT/6RdHalt96F/4ry8no=) 2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: HHXQFb70LXf16l4S8JzNbd5w8LQr3pgR5z+FBqxSlps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Validity Not Before: Apr 25 02:41:58 2025 GMT Not After : May 2 02:41:58 2025 GMT Subject: CN=680af676-2945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:f6:1e:66:06:5c:9d:33:0d:c2:08:26:24: 67:e1:1b:3b:da:b2:fa:8f:1f:e3:9e:8e:f4:dd:18: d3:f7:b2:73:4a:29:b3:1f:68:32:f6:72:42:e8:52: 23:57:95:fd:e2:bc:a3:96:16:26:4f:17:31:53:b5: 0f:47:62:39:4d:ff:c6:5d:18:c0:0e:32:89:48:ef: 95:fb:ba:96:37:de:86:24:1e:ee:c0:e8:f4:dc:09: 57:a3:28:8f:d9:b6:07:ed:14:0c:83:6f:04:be:4d: b2:7c:eb:48:39:36:af:a7:b4:9f:2f:e0:45:0e:fe: 23:32:36:3d:7d:62:ab:19:e2:ba:3b:75:9a:8a:67: 12:6e:28:ad:a6:31:24:56:68:d0:72:34:7f:80:c9: ab:98:76:1f:fc:12:68:01:dd:83:6c:f0:6a:24:50: ad:ba:11:64:51:d7:a3:9d:6a:be:40:3b:19:aa:73: 52:99:73:3f:55:42:f8:c5:21:6a:50:74:46:44:a3: 4e:ac:2d:b2:51:c2:9b:4f:ab:e9:61:78:31:f1:0e: 58:9d:93:e7:04:67:7b:31:e4:ef:40:02:ae:dc:04: aa:04:6a:6d:22:40:bc:94:bf:ea:7f:21:ec:e9:de: fa:de:6f:d9:ab:db:be:f9:b0:39:c1:2f:5e:d7:a5: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:68:95:36:AB:05:59:CA:75:8D:0F:B4:F2:C1:28:66:AE:78:4E:AA X509v3 Authority Key Identifier: keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:69:2d:f6:fe:51:69:d8:7d:95:97:28:65:60:8c:2d:13:1d: 0e:30:af:37:77:7e:38:dd:da:61:54:98:ce:14:19:04:fb:70: 16:e1:d3:e5:5c:69:00:1c:45:d2:8f:56:7a:1c:c6:8d:ee:ad: 55:33:cc:d6:05:71:37:dc:43:6a:a2:16:3f:18:87:1e:f5:c2: 0f:ce:0a:68:d2:15:99:88:5f:7c:fe:3d:68:ac:13:c2:5a:b2: bd:88:5b:ce:6d:d6:04:ca:03:d8:f9:db:96:a6:93:87:62:30: 84:05:f8:6f:3e:20:f5:7f:9f:10:08:9e:d8:68:22:26:b8:30: 9f:ab:d1:a6:68:46:1b:9b:e4:65:0a:7e:33:04:08:12:22:03: c0:e3:4d:ba:c7:5c:40:cb:c3:72:e6:41:6a:29:ff:e9:d2:83: 04:c2:b5:e7:5c:12:27:27:fa:e4:39:cf:d2:9b:b4:0b:9a:e0: fa:5f:c4:39:68:d7:c0:a4:31:c5:ec:65:30:1c:21:11:b6:4c: c2:41:03:39:39:7a:fe:e7:a4:00:1e:3b:08:59:e3:53:10:17: 75:5e:f6:32:76:a7:70:9f:dc:90:1d:d7:70:08:d3:94:de:37: 32:e8:e2:20:43:7d:ff:a7:c0:53:af:05:87:fd:8d:bf:1f:4e: 53:64:c3:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF QUVBNDQ1MUYwHhcNMjUwNDI1MDI0MTU4WhcNMjUwNTAyMDI0MTU4WjAYMRYwFAYD VQQDEw02ODBhZjY3Ni0yOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6D2HmYGXJ0zDcIIJiRn4Rs72rL6jx/jno703RjT97JzSimzH2gy9nJC6FIj V5X94ryjlhYmTxcxU7UPR2I5Tf/GXRjADjKJSO+V+7qWN96GJB7uwOj03AlXoyiP 2bYH7RQMg28Evk2yfOtIOTavp7SfL+BFDv4jMjY9fWKrGeK6O3WaimcSbiitpjEk VmjQcjR/gMmrmHYf/BJoAd2DbPBqJFCtuhFkUdejnWq+QDsZqnNSmXM/VUL4xSFq UHRGRKNOrC2yUcKbT6vpYXgx8Q5YnZPnBGd7MeTvQAKu3ASqBGptIkC8lL/qfyHs 6d763m/Zq9u++bA5wS9e16UpfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5olTar BVnKdY0PtPLBKGaueE6qMB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3 NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs bGN5ZWwySEEteTNxNmtSUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPaS32/lFp2H2VlyhlYIwtEx0OMK83d3443dphVJjOFBkE+3AW4dPl XGkAHEXSj1Z6HMaN7q1VM8zWBXE33ENqohY/GIce9cIPzgpo0hWZiF98/j1orBPC WrK9iFvObdYEygPY+duWppOHYjCEBfhvPiD1f58QCJ7YaCImuDCfq9GmaEYbm+Rl Cn4zBAgSIgPA4026x1xAy8Ny5kFqKf/p0oMEwrXnXBInJ/rkOc/Sm7QLmuD6X8Q5 aNfApDHF7GUwHCERtkzCQQM5OXr+56QAHjsIWeNTEBd1XvYydqdwn9yQHddwCNOU 3jcy6OIgQ33/p8BTrwWH/Y2/H05TZMP/ -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:29 2025 by rpki-client