$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json) Hash identifier: T+PLs/VL9vSI1haj8dujOIJhw7MFX7MDN9pOT93hQmA= Subject key identifier: 23:22:4B:35:B7:EE:31:81:14:BB:1F:A8:D8:36:18:94:A4:12:4B:21 Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 0F7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft Manifest number: 0F6A Signing time: Thu 10 Apr 2025 17:35:20 +0000 Manifest this update: Thu 10 Apr 2025 17:35:19 +0000 Manifest next update: Thu 17 Apr 2025 17:35:19 +0000 Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: 9++VdbdGboaKX9J3yfYdHkRfQUrLav0XLKPrfx5p8bA=) 2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: brx75mAIZcLmrMrMmInTA2Jwy5WbjMuVgkiLF5aIeqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 17:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3964 (0xf7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: Apr 10 17:35:19 2025 GMT Not After : Apr 17 17:35:19 2025 GMT Subject: CN=67f80158-9f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:18:6c:f1:c1:cc:4e:4c:35:68:3e:9a:f8: 11:9f:be:92:a2:db:40:53:86:0d:c4:93:fb:f5:1c: f7:67:89:27:bd:c6:a6:e9:9b:bd:8e:3e:64:c6:91: ab:66:48:64:2e:f6:5d:c1:d3:fb:b2:c7:d0:b7:92: be:8e:62:03:f4:02:c1:32:16:10:b0:2e:00:f5:73: 21:11:fc:d9:a4:4e:64:cd:e5:b0:54:a2:5e:83:28: 3a:c6:6e:69:47:6d:0b:cc:29:24:ce:75:2e:8b:fe: 93:45:cb:d3:34:3f:9e:54:22:e4:7c:fd:45:34:75: 33:8a:da:ad:71:76:4e:5f:6d:54:44:85:d7:e0:07: 69:6f:0d:96:7b:27:cd:a1:bf:22:db:a7:3a:11:ce: 04:6e:fe:46:ec:b5:7f:f1:97:ad:31:b6:52:88:59: ac:d5:ca:5e:e6:91:6a:b0:60:39:59:92:5c:9e:a2: 0d:75:1a:44:17:2c:6c:17:96:36:7a:05:04:b1:2c: 55:5b:42:a1:09:de:d2:bd:bb:9c:17:a2:90:7a:7f: a0:dd:1a:69:b3:ce:b9:00:d4:b0:77:f7:ad:31:6d: 83:b1:06:be:40:30:b1:51:57:5b:bd:a7:e7:e6:b2: 46:0b:ef:dd:3c:07:43:e6:50:61:be:7a:76:00:6d: 7b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:22:4B:35:B7:EE:31:81:14:BB:1F:A8:D8:36:18:94:A4:12:4B:21 X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2f:12:da:fa:42:8f:01:5b:db:cc:81:bb:71:28:dc:ad:9b: 41:5b:2a:25:dc:b2:64:3f:0e:aa:99:51:e7:6b:6c:a4:a7:56: c5:44:69:9e:09:6d:61:26:71:7e:e9:2f:3a:40:ea:28:cc:d5: d3:2f:61:aa:b6:17:52:fc:cd:8d:d6:f9:78:94:0f:7b:c4:68: 44:41:a7:ff:6b:0b:91:9b:09:95:0f:22:f5:8a:b4:7e:36:8c: b1:88:c1:49:2c:84:2a:31:56:4c:87:2d:bd:13:e9:ed:05:c3: 2f:9f:14:9d:c7:04:d7:26:9b:89:91:75:f4:87:29:6a:b9:8a: 08:56:1e:3e:6f:4d:92:44:75:39:b6:d3:46:d9:0c:bf:27:ad: 48:be:fc:d4:eb:a2:0c:3d:bf:6d:85:1a:d8:6c:ea:d2:05:f4: 1f:16:38:49:49:fe:75:03:b2:c7:6b:db:ad:b5:13:8e:64:68: 96:c9:fc:1f:06:fa:fd:87:f7:18:0b:67:a7:8c:1b:44:0a:11: c7:f2:da:c8:bb:dc:03:b2:0c:c5:fa:45:b3:e3:7e:f4:9e:b0: b1:ea:1b:63:97:3b:9e:87:a2:b8:59:5e:f5:45:db:5d:9f:59: aa:94:67:4c:75:4d:88:21:88:58:27:2e:a7:a8:12:d5:b8:0b: e5:ef:9b:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjUwNDEwMTczNTE5WhcNMjUwNDE3MTczNTE5WjAYMRYwFAYD VQQDEw02N2Y4MDE1OC05ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbQYbPHBzE5MNWg+mvgRn76SottAU4YNxJP79Rz3Z4knvcam6Zu9jj5kxpGr ZkhkLvZdwdP7ssfQt5K+jmID9ALBMhYQsC4A9XMhEfzZpE5kzeWwVKJegyg6xm5p R20LzCkkznUui/6TRcvTND+eVCLkfP1FNHUzitqtcXZOX21URIXX4Adpbw2WeyfN ob8i26c6Ec4Ebv5G7LV/8ZetMbZSiFms1cpe5pFqsGA5WZJcnqINdRpEFyxsF5Y2 egUEsSxVW0KhCd7SvbucF6KQen+g3Rpps865ANSwd/etMW2DsQa+QDCxUVdbvafn 5rJGC+/dPAdD5lBhvnp2AG17OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMiSzW3 7jGBFLsfqNg2GJSkEkshMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTZCRC85OEE1REY5QzY1ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNU YkE4bHJ4bGJOd041bDdGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyLxLa+kKPAVvbzIG7cSjcrZtBWyol3LJkPw6qmVHna2ykp1bFRGme CW1hJnF+6S86QOoozNXTL2GqthdS/M2N1vl4lA97xGhEQaf/awuRmwmVDyL1irR+ NoyxiMFJLIQqMVZMhy29E+ntBcMvnxSdxwTXJpuJkXX0hylquYoIVh4+b02SRHU5 ttNG2Qy/J61IvvzU66IMPb9thRrYbOrSBfQfFjhJSf51A7LHa9uttROOZGiWyfwf Bvr9h/cYC2enjBtEChHH8trIu9wDsgzF+kWz4370nrCx6htjlzueh6K4WV71Rdtd n1mqlGdMdU2IIYhYJy6nqBLVuAvl75se -----END CERTIFICATE-----Generated at Sat Apr 12 18:59:45 2025 by rpki-client