$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json) Hash identifier: dGKAtOrXAzNoKXzyhO2ckzK8UZ9aOUe4kJF51Asv7WE= Subject key identifier: 52:0D:B7:17:1D:BC:BC:D4:A8:7A:A4:DE:F0:9C:CB:BC:6C:C3:33:A0 Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft Manifest number: 019A Signing time: Sat 29 Mar 2025 02:57:58 +0000 Manifest this update: Sat 29 Mar 2025 02:57:58 +0000 Manifest next update: Sat 05 Apr 2025 02:57:58 +0000 Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: fPqA+Jb9hlD6KfyKJ22rfQFjhyBlo0TXq/iJ9u707no=) 2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: Op5FiTtFCqiSuAmQrIrvzBwaHPhkdRDyeJuZKNddGfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275A6 Validity Not Before: Mar 29 02:57:58 2025 GMT Not After : Apr 5 02:57:58 2025 GMT Subject: CN=67e761b6-59b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:1c:b4:8b:ae:cb:09:66:b3:ec:84:26:c6: 23:76:a7:08:d7:f1:7d:e3:c9:5a:4c:25:92:1e:02: c1:5d:8b:c0:fe:44:a6:33:2b:5c:1a:83:8b:cf:73: 97:35:b4:72:6f:d8:f2:e2:d2:16:cc:5a:8a:c6:ac: b4:c5:a9:9c:00:98:f2:87:d2:f5:3c:88:fc:62:19: d4:0c:76:b4:be:59:27:32:2f:71:d8:67:54:7a:04: c4:29:e5:6f:e0:82:82:1f:37:29:b4:ff:cf:44:55: ac:da:92:6a:c9:ad:13:9c:37:a0:6c:c6:e2:ec:14: 18:15:ed:a6:a4:b9:92:e3:28:59:90:65:91:84:1c: cd:c2:3f:11:7c:60:de:cf:c1:f8:ae:50:fc:15:d9: 21:c7:4a:07:67:a7:0b:2e:80:a5:6c:fa:c8:41:02: 5d:20:2f:f8:0c:7c:24:1e:d3:20:7f:b8:ec:53:d3: 1d:89:df:2e:32:62:95:e9:77:37:99:cb:30:74:f9: 55:cf:3d:3b:93:74:6b:13:32:79:f3:78:d4:81:a9: ea:56:87:79:85:95:2a:ac:60:1f:a3:61:6e:f3:fd: 3a:18:19:1a:3e:39:1c:48:dc:f0:6f:cb:7a:54:98: 4e:59:74:fa:8d:e0:08:65:a0:74:d7:8d:34:0e:d4: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0D:B7:17:1D:BC:BC:D4:A8:7A:A4:DE:F0:9C:CB:BC:6C:C3:33:A0 X509v3 Authority Key Identifier: keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:83:42:e1:11:e9:69:14:d3:d3:a8:b5:59:6b:6f:ba:f0:e7: 93:8c:ad:f7:0a:ba:1d:df:42:5d:37:4d:56:ea:9b:e3:78:28: 78:71:4c:66:51:de:10:64:85:2c:f4:8b:3b:f8:8c:50:3f:4d: dc:fa:7c:ca:25:cb:05:12:d1:92:02:50:6c:b6:6c:66:f5:1d: e8:d5:e4:e9:24:53:c1:a7:61:32:1f:e2:a1:6e:12:15:df:23: bf:74:24:14:33:6a:0d:e0:f5:bd:f4:89:13:d3:2a:83:e2:f8: 73:38:28:a2:10:1b:51:2c:60:58:f5:f9:5a:0b:9c:06:64:ef: cd:27:77:16:10:f9:86:38:a9:34:64:ae:76:89:0b:31:04:61: 76:a0:3e:02:52:b2:f3:52:54:34:83:5f:53:f7:78:36:55:ae: cc:ad:ed:c4:d7:ec:75:5a:df:54:bd:5f:d0:a3:9a:2c:c2:fd: e7:8f:40:83:b2:8f:2a:ce:54:1f:af:e1:0a:3c:4c:48:2f:d9: d3:47:f0:3b:7c:06:4c:be:4a:50:23:ca:5f:91:b0:05:90:ab: af:8f:98:64:e5:a3:5d:63:c5:01:77:29:46:7c:d4:aa:16:79: 85:2c:a8:1c:b9:dc:f0:90:ba:f8:92:75:92:18:ab:47:e9:81: 9a:dd:7d:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1QTYxMTAvBgNVBAUTKDU5MEZBM0M2NzAwMEU5Njk4NTc5MUU2MzU1QUQxRjZE QUQ1QzE4NzYwHhcNMjUwMzI5MDI1NzU4WhcNMjUwNDA1MDI1NzU4WjAYMRYwFAYD VQQDEw02N2U3NjFiNi01OWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsMctIuuywlms+yEJsYjdqcI1/F948laTCWSHgLBXYvA/kSmMytcGoOLz3OX NbRyb9jy4tIWzFqKxqy0xamcAJjyh9L1PIj8YhnUDHa0vlknMi9x2GdUegTEKeVv 4IKCHzcptP/PRFWs2pJqya0TnDegbMbi7BQYFe2mpLmS4yhZkGWRhBzNwj8RfGDe z8H4rlD8Fdkhx0oHZ6cLLoClbPrIQQJdIC/4DHwkHtMgf7jsU9Mdid8uMmKV6Xc3 mcswdPlVzz07k3RrEzJ583jUganqVod5hZUqrGAfo2Fu8/06GBkaPjkcSNzwb8t6 VJhOWXT6jeAIZaB01400DtQpPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFINtxcd vLzUqHqk3vCcy7xswzOgMB8GA1UdIwQYMBaAFFkPo8ZwAOlphXkeY1WtH22tXBh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVBNi9DQTg2OTQ0QTlD NUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZXbUZlUjVqVmEwZmJhMWNH SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRLWp4bkFBNldtRmVSNWpWYTBmYmExY0dIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVBNi9DQTg2OTQ0QTlDNUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZX bUZlUjVqVmEwZmJhMWNHSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5g0LhEelpFNPTqLVZa2+68OeTjK33Crod30JdN01W6pvjeCh4cUxm Ud4QZIUs9Is7+IxQP03c+nzKJcsFEtGSAlBstmxm9R3o1eTpJFPBp2EyH+KhbhIV 3yO/dCQUM2oN4PW99IkT0yqD4vhzOCiiEBtRLGBY9flaC5wGZO/NJ3cWEPmGOKk0 ZK52iQsxBGF2oD4CUrLzUlQ0g19T93g2Va7Mre3E1+x1Wt9UvV/Qo5oswv3nj0CD so8qzlQfr+EKPExIL9nTR/A7fAZMvkpQI8pfkbAFkKuvj5hk5aNdY8UBdylGfNSq FnmFLKgcudzwkLr4knWSGKtH6YGa3X2j -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:59 2025 by rpki-client