$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: BgDHkp91Kf6frOIUIj7nI9WVd+yTUihsFhmb04OJIGU= Subject key identifier: 22:85:1C:B8:B4:59:2A:AE:58:50:19:CA:45:CE:71:AC:63:B3:6D:96 Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 3467 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 3467 Signing time: Fri 04 Apr 2025 14:54:33 +0000 Manifest this update: Fri 04 Apr 2025 14:54:33 +0000 Manifest next update: Fri 11 Apr 2025 14:54:33 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: UB8TbImku+BfUi4wXvef9T54a5t0Gqb8dd/F2iE0XSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13415 (0x3467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE Validity Not Before: Apr 4 14:54:33 2025 GMT Not After : Apr 11 14:54:33 2025 GMT Subject: CN=67eff2a9-1370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:aa:c0:42:82:d6:0a:ce:c1:68:20:81:fa: 72:7f:64:0f:83:ff:89:21:84:9a:0c:09:1a:03:9c: 94:d7:b0:69:76:a3:1d:69:1d:6c:e9:03:a8:9b:d2: 73:5c:5c:64:17:1f:36:f9:24:8d:c9:03:de:d2:c2: 6e:81:e6:da:00:bb:57:a1:09:44:c9:15:9a:13:b6: b6:c7:a1:eb:0d:f7:bb:1e:75:b8:6f:64:2a:44:08: 15:85:e8:c7:eb:8a:e4:e0:b6:c8:57:94:2e:21:41: 0b:c9:8a:5b:bb:00:04:f9:41:1a:3b:fe:2f:38:12: 73:88:9b:8a:0f:dd:26:df:c1:d5:4a:dc:49:e5:11: e3:70:3a:e0:83:44:6b:4f:2f:7d:e7:3f:59:69:67: 99:64:1d:dd:af:d2:c9:4c:46:c0:73:f8:e5:70:b1: 80:29:1c:2d:22:8d:6c:29:a3:66:b6:96:67:05:84: 2c:77:1a:a9:f6:58:7e:b3:73:69:1b:43:a9:1f:08: 70:f8:e6:53:e4:6c:4f:eb:7c:f1:4b:62:08:99:28: 20:fd:30:59:d2:4f:88:ad:2e:a5:bb:a6:4f:6f:3c: 88:7b:f3:ca:df:e7:ef:ae:cd:80:b9:ec:34:17:96: bd:76:28:a1:75:f8:0c:bb:bd:3a:d6:b0:98:4e:a8: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:1C:B8:B4:59:2A:AE:58:50:19:CA:45:CE:71:AC:63:B3:6D:96 X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9a:ea:36:3f:7c:4e:38:fa:de:0a:f4:34:a6:07:da:63:ae: c5:e2:f8:0a:f9:3b:d6:50:54:71:f7:83:4c:b7:b6:a9:6d:5d: d0:43:dd:bf:61:33:76:bf:ec:2f:f5:6d:4e:cd:71:58:41:5f: c4:e5:e8:7a:df:17:32:35:05:8a:bc:28:8c:77:51:56:bd:4e: b9:a0:9d:4a:91:a2:93:d2:2c:7f:be:fb:d3:a4:fd:10:0f:03: ff:ec:b2:2a:75:b2:81:00:67:00:53:32:fc:f4:7c:36:7f:ae: 5b:2a:8e:df:dd:bc:84:23:0e:85:6f:3e:0f:e9:41:8b:cc:eb: 5b:73:cb:a7:00:83:55:3b:83:a5:07:49:53:fc:b9:7c:13:ef: e2:82:1a:2b:03:06:10:de:03:5b:f3:cd:90:ee:d6:b9:6b:14: 4d:d6:49:3a:39:ef:be:76:bc:3b:4f:82:72:d8:d3:ce:60:59: 3a:e5:16:bc:43:41:0a:84:03:4d:51:ab:53:ae:e5:14:e6:b5: c5:aa:06:59:13:a3:74:47:c9:24:63:86:93:a5:6e:ac:18:f7: 1e:7a:0d:05:37:15:6b:cc:97:be:27:e9:f9:66:96:dc:73:1e: ae:70:8e:6e:e8:9c:7f:86:d2:bc:73:c3:c8:3e:c4:3f:ea:25: 3a:55:70:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjUwNDA0MTQ1NDMzWhcNMjUwNDExMTQ1NDMzWjAYMRYwFAYD VQQDEw02N2VmZjJhOS0xMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JqqwEKC1grOwWgggfpyf2QPg/+JIYSaDAkaA5yU17BpdqMdaR1s6QOom9Jz XFxkFx82+SSNyQPe0sJugebaALtXoQlEyRWaE7a2x6HrDfe7HnW4b2QqRAgVhejH 64rk4LbIV5QuIUELyYpbuwAE+UEaO/4vOBJziJuKD90m38HVStxJ5RHjcDrgg0Rr Ty995z9ZaWeZZB3dr9LJTEbAc/jlcLGAKRwtIo1sKaNmtpZnBYQsdxqp9lh+s3Np G0OpHwhw+OZT5GxP63zxS2IImSgg/TBZ0k+IrS6lu6ZPbzyIe/PK3+fvrs2Auew0 F5a9diihdfgMu7061rCYTqhkHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKFHLi0 WSquWFAZykXOcaxjs22WMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsmuo2P3xOOPreCvQ0pgfaY67F4vgK+TvWUFRx94NMt7apbV3QQ92/ YTN2v+wv9W1OzXFYQV/E5eh63xcyNQWKvCiMd1FWvU65oJ1KkaKT0ix/vvvTpP0Q DwP/7LIqdbKBAGcAUzL89Hw2f65bKo7f3byEIw6Fbz4P6UGLzOtbc8unAINVO4Ol B0lT/Ll8E+/ighorAwYQ3gNb882Q7ta5axRN1kk6Oe++drw7T4Jy2NPOYFk65Ra8 Q0EKhANNUatTruUU5rXFqgZZE6N0R8kkY4aTpW6sGPceeg0FNxVrzJe+J+n5Zpbc cx6ucI5u6Jx/htK8c8PIPsQ/6iU6VXAV -----END CERTIFICATE-----Generated at Sat Apr 5 18:25:02 2025 by rpki-client