$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft File: WYYa7M8NRdskqH6ohHvxmZH--vY.mft (raw, json) Hash identifier: cVaUdXraBvIG/MWBPtQA4sG3mQDKXtSjoLVDmd5DPWw= Subject key identifier: 41:52:9D:D5:11:D1:90:C7:D5:5D:EC:E8:6A:36:F6:C7:7D:E5:66:7B Authority key identifier: 59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6 Certificate issuer: /CN=A913A7CB/serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6 Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft Manifest number: 0921 Signing time: Sun 20 Apr 2025 20:02:44 +0000 Manifest this update: Sun 20 Apr 2025 20:02:44 +0000 Manifest next update: Sun 27 Apr 2025 20:02:44 +0000 Files and hashes: 1: WYYa7M8NRdskqH6ohHvxmZH--vY.crl (hash: +AW8tX8BhtH1Fp6zhA0Jmy9ye5nHMvv0ktEkCxLdqEk=) 2: 0D7DDD3A9D0B11EAAD024D44C4F9AE02.roa (hash: lX+JZDDq3ZYyafGSIvld6YBtL+lupg7yLEB2CMhRXcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7CB, serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6 Validity Not Before: Apr 20 20:02:44 2025 GMT Not After : Apr 27 20:02:44 2025 GMT Subject: CN=680552e4-d337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ef:97:8c:3f:fe:83:f4:35:4e:a9:87:cd:08: 59:03:ba:a1:f9:8d:36:1f:d6:2d:cb:f5:b7:be:67: 97:1f:2e:08:a1:78:04:95:fd:e5:ea:d2:af:44:bb: cf:01:55:d1:56:24:cc:23:28:4b:68:11:d3:96:c3: 1e:6f:29:02:91:af:53:b0:0e:34:da:d6:2a:a8:46: 47:c0:c6:ad:e1:33:23:52:df:65:a9:34:d2:7a:a3: c8:0b:0f:7e:82:03:e4:a3:23:16:82:45:28:f0:03: ab:8a:55:01:43:0e:d1:02:a1:f2:e5:7d:ba:4a:d5: 55:6d:f4:ab:ba:65:f9:02:32:14:0f:71:df:74:b3: 37:5f:b0:45:24:a3:41:72:9e:51:27:ea:bc:9c:c4: 55:4b:1c:a6:dd:6d:56:98:35:db:87:3f:a7:10:7d: d1:eb:37:79:1b:0c:84:90:aa:8f:e8:13:88:d3:f5: 26:26:58:13:cc:b3:69:5d:64:39:a8:d1:3c:88:98: b5:08:7b:05:8f:d1:c5:43:de:36:19:c0:4d:e5:ba: 6a:ab:8f:a8:03:57:70:59:d9:e6:36:26:f4:d9:76: 20:53:73:26:c8:65:e4:34:df:97:dd:7d:9c:12:bc: 6f:c1:05:8c:65:c0:93:4d:42:2f:fa:eb:e1:1e:ce: e6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:52:9D:D5:11:D1:90:C7:D5:5D:EC:E8:6A:36:F6:C7:7D:E5:66:7B X509v3 Authority Key Identifier: keyid:59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:6d:d0:07:e8:06:c8:60:91:9f:74:81:25:ac:8f:fa:da:b3: e9:6a:3e:16:2e:23:2c:5f:14:10:bb:f7:06:84:8d:b1:d7:13: 8b:75:cd:99:19:0b:2a:a3:4f:eb:14:02:b3:68:77:c5:cb:b7: ed:be:ae:1b:36:03:81:b8:dc:72:59:1a:b8:08:be:bf:37:73: 05:80:36:a0:d3:81:84:2c:a5:f6:7f:85:68:78:3a:ff:95:f1: 11:8b:39:67:e9:ee:99:b8:78:76:d2:e8:a1:56:cc:42:a9:a1: 4b:3d:13:73:7a:fa:cc:50:c3:85:e0:8b:b6:a5:0c:2e:3f:3a: 51:55:63:2c:8b:4c:41:57:10:c3:bf:1b:94:1d:e8:8e:a8:69: c6:e8:5b:ba:a7:be:7c:00:13:ef:5a:50:d9:c7:c7:c8:78:99: 43:e2:84:e9:84:f5:d6:10:19:db:76:08:1e:1f:3b:fe:47:5a: 98:36:25:f5:ee:cc:af:eb:24:58:27:a5:e8:e7:74:ae:e8:71: b3:07:96:34:92:35:69:f0:1c:62:4a:5e:67:a4:64:28:15:de: 89:0d:1a:a3:a3:b3:5b:87:a5:e5:cf:62:95:89:69:13:42:62: 40:84:84:10:c5:46:f6:6c:fd:6b:d5:84:d7:6e:9c:b2:ff:85: b8:a1:76:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3Q0IxMTAvBgNVBAUTKDU5ODYxQUVDQ0YwRDQ1REIyNEE4N0VBODg0N0JGMTk5 OTFGRUZBRjYwHhcNMjUwNDIwMjAwMjQ0WhcNMjUwNDI3MjAwMjQ0WjAYMRYwFAYD VQQDEw02ODA1NTJlNC1kMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3O+XjD/+g/Q1TqmHzQhZA7qh+Y02H9Yty/W3vmeXHy4IoXgElf3l6tKvRLvP AVXRViTMIyhLaBHTlsMebykCka9TsA402tYqqEZHwMat4TMjUt9lqTTSeqPICw9+ ggPkoyMWgkUo8AOrilUBQw7RAqHy5X26StVVbfSrumX5AjIUD3HfdLM3X7BFJKNB cp5RJ+q8nMRVSxym3W1WmDXbhz+nEH3R6zd5GwyEkKqP6BOI0/UmJlgTzLNpXWQ5 qNE8iJi1CHsFj9HFQ942GcBN5bpqq4+oA1dwWdnmNib02XYgU3MmyGXkNN+X3X2c ErxvwQWMZcCTTUIv+uvhHs7mkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFSndUR 0ZDH1V3s6Go29sd95WZ7MB8GA1UdIwQYMBaAFFmGGuzPDUXbJKh+qIR78ZmR/vr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdDQi8wNjI0ODJCMDlE MEExMUVBODAxQ0IyNDNDNEY5QUUwMi9XWVlhN004TlJkc2txSDZvaEh2eG1aSC0t dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZWWE3TThOUmRza3FINm9oSHZ4bVpILS12WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdDQi8wNjI0ODJCMDlEMEExMUVBODAxQ0IyNDNDNEY5QUUwMi9XWVlhN004TlJk c2txSDZvaEh2eG1aSC0tdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQbdAH6AbIYJGfdIElrI/62rPpaj4WLiMsXxQQu/cGhI2x1xOLdc2Z GQsqo0/rFAKzaHfFy7ftvq4bNgOBuNxyWRq4CL6/N3MFgDag04GELKX2f4VoeDr/ lfERizln6e6ZuHh20uihVsxCqaFLPRNzevrMUMOF4Iu2pQwuPzpRVWMsi0xBVxDD vxuUHeiOqGnG6Fu6p758ABPvWlDZx8fIeJlD4oTphPXWEBnbdggeHzv+R1qYNiX1 7syv6yRYJ6Xo53Su6HGzB5Y0kjVp8BxiSl5npGQoFd6JDRqjo7Nbh6Xlz2KViWkT QmJAhIQQxUb2bP1r1YTXbpyy/4W4oXaA -----END CERTIFICATE-----Generated at Tue Apr 22 20:05:21 2025 by rpki-client