$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json) Hash identifier: gojuv8CFE7T1k/XPRpg+f8A1wwWdvKRSt3WzJ8cULwE= Subject key identifier: F0:AF:A5:0B:32:B3:B6:CB:19:E3:8F:4A:02:5A:4C:2A:85:0E:FF:BD Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1F05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft Manifest number: 1EE0 Signing time: Mon 14 Apr 2025 16:03:33 +0000 Manifest this update: Mon 14 Apr 2025 16:03:33 +0000 Manifest next update: Mon 21 Apr 2025 16:03:33 +0000 Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: 9W87FdgBxQZY3NUNYunuxPotTtGlCqrf/8fl3OpltlM=) 2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c=) 3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 1vTwS6NmMwWfh2eOEtEYiCFnJVIHS5ywk/KgkT3QCd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7941 (0x1f05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: Apr 14 16:03:33 2025 GMT Not After : Apr 21 16:03:33 2025 GMT Subject: CN=67fd31d5-8f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:c0:ea:d1:3f:8d:77:43:b4:4a:48:4f:3a: ee:f5:f1:1a:8b:e2:ec:11:a0:2b:64:99:9d:aa:bb: ee:d2:e1:ff:96:e7:11:37:23:db:c7:28:27:35:f4: ce:44:58:63:f1:11:16:56:60:73:cd:09:28:bd:ae: b3:56:16:c0:11:1c:9e:ff:26:9b:e9:0e:b5:a3:16: fe:a7:d3:64:00:b8:2f:c7:60:ef:42:03:67:50:9a: 4f:54:79:c8:be:a5:02:c2:25:b4:da:ad:a7:e6:4f: fe:c8:4f:5c:5c:75:19:64:cd:13:68:4e:3b:90:37: af:dc:59:ec:c9:f4:2a:49:de:ff:6b:3e:82:4e:41: 92:2f:7c:7c:b8:c6:88:02:2a:19:9f:f9:52:59:cc: 1e:f0:b8:e0:a1:1b:82:29:37:c6:58:88:e7:08:9b: 6d:d4:21:42:a5:88:01:0f:de:76:a1:1c:b2:ee:3d: 9f:03:07:b3:33:7c:95:44:73:5b:9b:7d:59:86:b2: 7b:71:94:50:b0:f7:d2:4a:37:78:00:89:4a:6d:be: c4:e4:4d:56:f2:6d:69:4b:bf:75:84:3c:38:09:ec: d5:08:a8:63:f4:61:17:b2:33:db:2c:76:f3:ed:18: 89:e7:e7:06:52:27:5f:14:3d:90:df:de:37:ce:3f: 00:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AF:A5:0B:32:B3:B6:CB:19:E3:8F:4A:02:5A:4C:2A:85:0E:FF:BD X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8e:38:3e:0b:3a:d8:8d:59:e4:ce:82:96:16:68:03:70:8e: 21:3f:28:0e:af:ad:63:b5:1f:89:90:77:42:ab:50:ec:5e:ab: 55:e7:54:1a:b5:d3:71:17:de:58:8e:11:a7:97:bb:ae:d9:51: 5e:a8:ea:bd:db:b6:f4:07:28:7f:e7:1a:5a:3c:27:43:a9:93: 87:a8:12:b1:17:20:d0:23:a2:7f:85:dc:1e:ff:78:34:2f:95: 3a:f0:0a:e7:10:ab:e9:66:82:ac:15:c8:da:11:9a:5d:b4:b7: dc:03:07:6f:20:c8:3a:ff:fe:8b:d4:14:6f:a4:7b:68:2c:14: ac:87:bc:7d:8b:7d:1e:a2:72:c4:d1:0a:40:e7:22:e2:a6:ad: 57:9f:45:17:fe:79:f2:ca:cb:a3:47:38:09:68:7a:33:c5:f8: 39:b4:5a:20:1b:8d:78:d1:18:02:0b:93:75:d2:56:68:58:ae: c8:37:cd:d6:e3:a4:1d:a6:ad:85:44:55:06:07:6b:48:01:76: ea:0c:3c:0c:7d:da:00:65:fb:00:74:5a:e8:1c:5b:72:43:3f: 3d:35:a0:f5:98:97:2e:6c:b7:a2:a8:88:31:d2:dd:e3:b1:0d: 52:c4:96:9f:3f:c8:38:b1:c8:a1:b6:65:59:03:03:cd:42:d5: 52:c6:cf:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjUwNDE0MTYwMzMzWhcNMjUwNDIxMTYwMzMzWjAYMRYwFAYD VQQDEw02N2ZkMzFkNS04ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyojA6tE/jXdDtEpITzru9fEai+LsEaArZJmdqrvu0uH/lucRNyPbxygnNfTO RFhj8REWVmBzzQkova6zVhbAERye/yab6Q61oxb+p9NkALgvx2DvQgNnUJpPVHnI vqUCwiW02q2n5k/+yE9cXHUZZM0TaE47kDev3FnsyfQqSd7/az6CTkGSL3x8uMaI AioZn/lSWcwe8LjgoRuCKTfGWIjnCJtt1CFCpYgBD952oRyy7j2fAwezM3yVRHNb m31ZhrJ7cZRQsPfSSjd4AIlKbb7E5E1W8m1pS791hDw4CezVCKhj9GEXsjPbLHbz 7RiJ5+cGUidfFD2Q3943zj8AmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCvpQsy s7bLGeOPSgJaTCqFDv+9MB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzFFQS85QUYzRUQyODVFRUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpk QXJfQmJRdEpMYVBhcmdnUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSjjg+CzrYjVnkzoKWFmgDcI4hPygOr61jtR+JkHdCq1DsXqtV51Qa tdNxF95YjhGnl7uu2VFeqOq927b0Byh/5xpaPCdDqZOHqBKxFyDQI6J/hdwe/3g0 L5U68ArnEKvpZoKsFcjaEZpdtLfcAwdvIMg6//6L1BRvpHtoLBSsh7x9i30eonLE 0QpA5yLipq1Xn0UX/nnyysujRzgJaHozxfg5tFogG4140RgCC5N10lZoWK7IN83W 46Qdpq2FRFUGB2tIAXbqDDwMfdoAZfsAdFroHFtyQz89NaD1mJcubLeiqIgx0t3j sQ1SxJafP8g4scihtmVZAwPNQtVSxs8t -----END CERTIFICATE-----Generated at Wed Apr 16 17:15:24 2025 by rpki-client