$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft File: Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json) Hash identifier: sXFx7IHbyiY8auWV52NW2lDCc0wJwhePQUQEexIisjE= Subject key identifier: F7:38:35:69:0D:10:61:58:16:01:49:0A:F7:02:BB:0C:02:D8:16:43 Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 Certificate issuer: /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft Manifest number: 01BF Signing time: Sat 29 Mar 2025 02:43:53 +0000 Manifest this update: Sat 29 Mar 2025 02:43:52 +0000 Manifest next update: Sat 05 Apr 2025 02:43:52 +0000 Files and hashes: 1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: ZzDCE1C7axmq7T+hK9VDRi6zglNVJUpvQxcs4lFuqog=) 2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: NZi3AS5kSmfmC1ciiMxez1kqC/wPD4BHzNn8bShQs48=) 3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: pq5PnlojK/GAJppMbTHRBS7cpCdExCrMiIQ6oauUaFM=) 4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: 2uW7Q5uLL5pnTePVa3NozZPJ/96p7ZLak+5a94dH9iU=) 5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: bTHUxxssWziIXGGDs3FaNbsdMbd0w+8+gyMv7kRJZqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F Validity Not Before: Mar 29 02:43:52 2025 GMT Not After : Apr 5 02:43:52 2025 GMT Subject: CN=67e75e68-d765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:28:62:05:9d:37:b0:9e:17:1f:f1:b1:c1:35: d9:89:35:67:d7:c1:bc:5e:7a:12:df:b5:48:13:be: 58:15:c4:ce:72:1c:9a:cc:71:40:c1:6e:b3:0e:a2: 89:a4:10:81:8e:40:be:0a:02:35:6f:31:fb:7b:47: 7e:6a:de:d0:27:7f:26:75:01:4f:02:51:c3:5d:44: 96:ef:05:3f:02:4d:1e:df:e4:bc:7a:dd:30:f9:23: 1a:62:38:c2:f7:1f:ee:7c:79:69:71:67:80:e1:e6: 59:50:62:83:e2:6c:80:51:89:a3:e2:4b:73:16:b8: 42:04:c7:4e:65:6c:51:6c:e0:7e:04:d0:77:f4:5a: 46:53:05:37:f3:1d:d0:54:13:9c:d4:10:38:26:50: f0:28:d4:29:bd:2c:ee:e7:32:e4:eb:ac:d5:42:26: 89:ad:12:3f:7c:fe:c5:e6:a2:aa:ba:69:00:38:39: 2b:e8:1b:e0:ee:08:c8:d9:cd:fd:a5:0c:8b:d8:ed: e6:1b:69:05:7a:86:a2:55:43:3f:5b:b1:56:38:0e: c7:14:e2:53:4c:f8:05:e9:ec:40:f2:a8:20:57:4f: 76:0f:32:fc:f3:0d:85:10:da:f9:b4:81:da:15:d0: 34:67:e3:09:a0:ab:41:93:1b:a3:03:6e:e8:89:90: a0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:38:35:69:0D:10:61:58:16:01:49:0A:F7:02:BB:0C:02:D8:16:43 X509v3 Authority Key Identifier: keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0b:1a:77:22:d2:ae:0d:2c:5b:78:ca:ce:12:d2:b9:4f:d5: b5:48:62:b2:13:47:e5:e7:d7:72:07:f9:95:bc:3d:aa:6e:4d: 54:ce:37:ea:ba:dd:0a:b1:3e:2b:ee:99:9f:c9:b2:da:96:38: 74:26:75:8b:5a:31:b2:45:21:c5:87:f6:1c:d7:0e:a1:54:00: 6b:ed:76:a2:e6:73:d3:86:b8:f1:79:92:2e:73:5f:34:93:57: d1:03:96:4d:6b:c0:93:ea:23:90:64:1e:ac:cf:61:74:cd:fd: 08:a3:5b:d6:3c:6c:8c:1a:c0:0b:3d:81:1b:b5:ec:90:cf:97: 67:99:67:80:e8:88:99:92:21:24:82:94:7a:c4:96:b8:d0:75: ce:2b:cd:7f:de:d8:56:4a:22:ee:d8:ad:c3:37:98:fd:1f:ef: bf:29:2d:5b:f9:a5:65:01:a8:41:d4:b2:b4:ba:ca:a7:43:fe: 68:8f:af:75:b5:f2:1a:ce:e6:c0:d1:3b:22:9b:04:62:60:61: e2:94:ba:7c:db:d7:15:37:f5:b3:31:86:5d:29:8d:32:17:5a: 56:66:81:e6:30:45:dd:ef:c7:21:53:80:25:88:18:5d:0b:95: b3:d6:ca:e1:1d:fb:19:63:35:6e:37:d2:c3:a9:c3:7a:29:d6: b2:f9:63:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDU5RERDMzk2OUI5ODYzQ0ZCNUExNTUyOEFBNEEzOTFB RjIzMzdGNDMwHhcNMjUwMzI5MDI0MzUyWhcNMjUwNDA1MDI0MzUyWjAYMRYwFAYD VQQDEw02N2U3NWU2OC1kNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ShiBZ03sJ4XH/GxwTXZiTVn18G8XnoS37VIE75YFcTOchyazHFAwW6zDqKJ pBCBjkC+CgI1bzH7e0d+at7QJ38mdQFPAlHDXUSW7wU/Ak0e3+S8et0w+SMaYjjC 9x/ufHlpcWeA4eZZUGKD4myAUYmj4ktzFrhCBMdOZWxRbOB+BNB39FpGUwU38x3Q VBOc1BA4JlDwKNQpvSzu5zLk66zVQiaJrRI/fP7F5qKqumkAODkr6Bvg7gjI2c39 pQyL2O3mG2kFeoaiVUM/W7FWOA7HFOJTTPgF6exA8qggV092DzL88w2FENr5tIHa FdA0Z+MJoKtBkxujA27oiZCgTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPc4NWkN EGFYFgFJCvcCuwwC2BZDMB8GA1UdIwQYMBaAFFndw5abmGPPtaFVKKpKORryM39D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi9GQkRGRkVDMDc2 ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4LTFvVlVvcWtvNUd2SXpm ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkM0RscHVZWTgtMW9WVW9xa281R3ZJemYwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi9GQkRGRkVDMDc2ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4 LTFvVlVvcWtvNUd2SXpmME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCACxp3ItKuDSxbeMrOEtK5T9W1SGKyE0fl59dyB/mVvD2qbk1Uzjfq ut0KsT4r7pmfybLaljh0JnWLWjGyRSHFh/Yc1w6hVABr7Xai5nPThrjxeZIuc180 k1fRA5ZNa8CT6iOQZB6sz2F0zf0Io1vWPGyMGsALPYEbteyQz5dnmWeA6IiZkiEk gpR6xJa40HXOK81/3thWSiLu2K3DN5j9H++/KS1b+aVlAahB1LK0usqnQ/5oj691 tfIazubA0TsimwRiYGHilLp829cVN/WzMYZdKY0yF1pWZoHmMEXd78chU4AliBhd C5Wz1srhHfsZYzVuN9LDqcN6Kday+WOg -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:19 2025 by rpki-client