$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json) Hash identifier: hyOxjEut2BOFkUO26Dy9R+nPzdeOIvpX0RF6Bkt0ncI= Subject key identifier: 6A:D9:0A:7A:03:65:7C:05:85:EB:E5:F9:34:EF:08:6C:5C:51:63:54 Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft Manifest number: 02D1 Signing time: Thu 17 Apr 2025 01:03:07 +0000 Manifest this update: Thu 17 Apr 2025 01:03:07 +0000 Manifest next update: Thu 24 Apr 2025 01:03:07 +0000 Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: Y2zW1mVuE06nduuTmWJeRyJC5w2tlNJkgZbVVb1BrRQ=) 2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: 8qDmsi4NSZMggZYlQgPxLbNv2s0d0VPr9Uca3xZmDtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Validity Not Before: Apr 17 01:03:07 2025 GMT Not After : Apr 24 01:03:07 2025 GMT Subject: CN=6800534b-052f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:e4:71:b4:a7:35:b3:38:d5:f3:89:0d:c3: 60:67:f9:b5:c1:1b:3a:61:fd:df:b1:79:5f:71:b9: 89:6e:20:1b:94:e8:2b:44:49:bb:f6:0b:ef:83:e1: 1d:40:70:a7:46:6f:79:b4:06:65:d3:00:70:4e:56: 03:f9:6b:1e:18:1c:64:47:10:8d:db:d1:f4:f9:a3: 75:aa:b4:81:84:2d:3e:0b:dd:b7:78:8f:75:ef:25: 7e:4b:09:78:cb:f8:37:a9:5f:5a:05:67:b5:3e:44: 16:76:58:c8:74:74:cb:93:32:52:32:6e:16:74:59: 49:88:5b:f4:29:cf:93:b4:6d:7f:bc:3a:9e:55:5a: ca:2d:ea:74:e0:e2:e4:dc:38:62:e1:c0:e7:5f:01: 4b:8e:b5:c4:fb:03:33:19:5b:30:39:7d:76:ea:5e: 2e:0c:03:25:5c:e6:ff:61:e7:00:c7:4b:cb:90:63: b8:45:7e:b6:4e:73:67:0e:74:6e:31:69:56:42:4e: bc:46:c8:ec:dc:d1:d6:6a:61:3b:10:50:b6:93:6c: c6:fa:e4:e3:0e:df:bd:dc:06:cf:1a:75:58:fb:02: 54:3f:fd:87:30:01:95:56:6e:0a:18:ad:a5:4f:17: 10:68:fa:0f:d4:7a:61:a6:96:fd:35:42:8f:5b:e0: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D9:0A:7A:03:65:7C:05:85:EB:E5:F9:34:EF:08:6C:5C:51:63:54 X509v3 Authority Key Identifier: keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7d:a8:8a:58:6d:39:87:44:e0:12:2c:cf:4a:95:97:e9:b0: f3:ea:5c:60:8e:43:93:37:45:f6:8d:c0:54:8d:57:ae:1f:90: ff:5a:f1:35:ce:d0:3b:15:01:28:5f:38:db:f9:cc:92:95:7a: fc:d9:1d:96:6b:9d:73:6e:14:b2:e4:b2:e0:b4:e4:07:41:69: 1b:53:82:c2:92:b6:d3:0d:98:ba:9f:b2:da:06:0e:50:40:ab: a4:4a:ee:6b:e5:96:70:7a:06:e8:a3:bd:b6:a0:d0:b0:84:18: e7:d1:aa:c5:dc:4f:9d:61:f1:9a:fe:a2:15:72:76:6b:d2:75: fb:0f:bc:93:8e:84:f3:68:8a:61:17:c7:b9:d5:ce:8e:a8:4d: 11:cc:df:8c:64:55:fb:db:e4:48:b3:fd:29:e6:22:9f:2f:bb: 5c:ae:a2:dc:b9:2e:d8:57:61:d3:d7:ad:17:a9:d7:a2:04:77: 3a:81:55:d9:7b:02:bd:a4:db:bf:ec:6f:76:67:8b:10:f4:16: 47:b2:84:6a:45:35:33:e9:d8:95:06:c7:54:79:8b:4b:55:ef: 01:98:b9:d9:74:c0:61:9c:16:f3:6f:1d:4d:a4:f1:b1:27:69: d8:fc:e0:15:6c:ac:b2:8a:87:b5:54:28:a4:c2:2e:cb:ae:75: c6:f2:dc:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFCOTAxMTAvBgNVBAUTKDVBQzM2REU5NTkzNkI4N0EwMTBBMkE0QkE5MTU2OTVB Njk5OTA3MUQwHhcNMjUwNDE3MDEwMzA3WhcNMjUwNDI0MDEwMzA3WjAYMRYwFAYD VQQDEw02ODAwNTM0Yi0wNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cfkcbSnNbM41fOJDcNgZ/m1wRs6Yf3fsXlfcbmJbiAblOgrREm79gvvg+Ed QHCnRm95tAZl0wBwTlYD+WseGBxkRxCN29H0+aN1qrSBhC0+C923eI917yV+Swl4 y/g3qV9aBWe1PkQWdljIdHTLkzJSMm4WdFlJiFv0Kc+TtG1/vDqeVVrKLep04OLk 3Dhi4cDnXwFLjrXE+wMzGVswOX126l4uDAMlXOb/YecAx0vLkGO4RX62TnNnDnRu MWlWQk68Rsjs3NHWamE7EFC2k2zG+uTjDt+93AbPGnVY+wJUP/2HMAGVVm4KGK2l TxcQaPoP1Hphppb9NUKPW+DJQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrZCnoD ZXwFhevl+TTvCGxcUWNUMB8GA1UdIwQYMBaAFFrDbelZNrh6AQoqS6kVaVppmQcd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUI5MC9GODBDRUZBQ0Uy M0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVIb0JDaXBMcVJWcFdtbVpC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzTnQ2VmsydUhvQkNpcExxUlZwV21tWkJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUI5MC9GODBDRUZBQ0UyM0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVI b0JDaXBMcVJWcFdtbVpCeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNfaiKWG05h0TgEizPSpWX6bDz6lxgjkOTN0X2jcBUjVeuH5D/WvE1 ztA7FQEoXzjb+cySlXr82R2Wa51zbhSy5LLgtOQHQWkbU4LCkrbTDZi6n7LaBg5Q QKukSu5r5ZZwegboo722oNCwhBjn0arF3E+dYfGa/qIVcnZr0nX7D7yTjoTzaIph F8e51c6OqE0RzN+MZFX72+RIs/0p5iKfL7tcrqLcuS7YV2HT160XqdeiBHc6gVXZ ewK9pNu/7G92Z4sQ9BZHsoRqRTUz6diVBsdUeYtLVe8BmLnZdMBhnBbzbx1NpPGx J2nY/OAVbKyyioe1VCikwi7LrnXG8tyQ -----END CERTIFICATE-----Generated at Fri Apr 18 10:34:47 2025 by rpki-client