$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft File: Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json) Hash identifier: HWkOppNz+Ad2e0gBdvHtqGFyk03fy2B/knIrNwt9/T0= Subject key identifier: 1C:87:42:F6:3D:8D:7C:BF:DD:13:2A:CD:E0:02:9C:97:F3:87:00:98 Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft Manifest number: 07 Signing time: Thu 03 Apr 2025 07:27:29 +0000 Manifest this update: Thu 03 Apr 2025 07:27:28 +0000 Manifest next update: Thu 10 Apr 2025 07:27:28 +0000 Files and hashes: 1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: pbZgCxSvSMFzuM5Uk0+MQn1KZRPC2MgJX2CfCzleu9w=) 2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: uW1VF7Kvr3qqb0xY8fd0nDeotf3CK4ccwfdt9+YehUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A82 Validity Not Before: Apr 3 07:27:28 2025 GMT Not After : Apr 10 07:27:28 2025 GMT Subject: CN=67ee3860-b699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:28:2e:cf:33:62:46:4d:5c:41:f9:4a:2d: 40:cb:4e:f0:6c:42:4e:80:fe:1b:be:e0:35:28:9b: 7a:bd:69:12:55:36:a7:a3:a7:59:4f:01:d2:46:32: b7:23:c6:44:9e:d6:b0:b7:ee:a5:a9:9f:d3:91:f5: b9:87:54:92:f2:5e:47:ae:00:f8:de:0e:c3:e8:3d: d3:75:31:ac:2f:98:0b:c4:66:e8:17:22:e1:7d:e0: 98:29:d5:09:11:55:2b:59:0c:1e:c6:9d:19:2a:c5: d2:69:bb:fc:65:5c:5c:a2:d9:30:80:b7:7d:c4:af: 72:ee:1a:4e:8b:3f:54:04:f2:26:c1:71:52:96:1c: 54:fa:4a:f8:f6:c2:c3:13:bd:fc:9e:52:d8:5a:e3: 9f:e1:34:0c:6f:bc:6f:1d:77:2c:48:3b:99:e0:f6: f7:87:f7:53:30:e7:01:64:da:c7:d7:2d:55:da:24: c5:ff:ac:93:35:39:06:a9:31:ad:fa:55:fb:e7:a2: 4a:9d:1c:a1:e6:ee:6c:49:f6:0f:ac:14:4b:e0:f7: ec:18:fe:93:a9:4e:05:c6:17:be:2e:e8:32:29:c4: 32:9b:33:d3:a1:23:91:34:c2:83:ed:3b:d9:ea:05: e0:46:77:50:86:e7:ab:4f:c0:30:65:63:14:4e:ea: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:87:42:F6:3D:8D:7C:BF:DD:13:2A:CD:E0:02:9C:97:F3:87:00:98 X509v3 Authority Key Identifier: keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:9a:9b:9b:d0:a5:68:c7:70:ab:ca:4e:6b:12:81:e8:01:71: 15:fd:22:f3:5c:da:5a:47:d2:40:8a:04:4b:d7:3b:9c:41:7f: 38:9b:36:61:bf:42:42:3f:dc:c4:d4:a7:b4:0b:1c:22:5e:c6: bc:37:41:f3:2a:dd:33:1c:76:22:a7:b1:54:92:d9:e7:43:3e: 5f:db:7c:de:1c:93:a6:d9:12:b2:d5:a0:b3:68:f2:c2:4d:b6: ac:44:4f:40:ba:68:33:51:21:8b:c4:05:c7:7b:75:35:3c:10: c7:53:2b:fa:31:d6:7b:ab:b5:04:ef:fe:cc:76:a5:85:4d:36: 08:13:31:cf:21:55:68:88:df:83:e6:66:a5:20:d3:44:a0:97: d9:f8:59:f8:c9:f6:c4:38:be:32:b4:e1:48:e7:f5:3d:fd:c9: 38:98:3a:68:96:45:64:9c:c5:3a:79:df:88:7e:29:35:62:f5: 3a:ed:4b:26:58:cf:01:f1:1d:9c:5a:a0:01:1b:d3:12:cb:4e: fc:d4:31:6c:f6:db:87:0f:14:35:3d:28:e9:ca:40:46:3b:e3: 63:5e:8c:5e:83:04:cd:dc:29:7d:74:96:0e:1d:02:b1:49:5b: 55:97:43:ce:13:ce:fa:92:54:69:77:1a:49:05:1f:f9:40:d4: 91:1a:23:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUE4MjExMC8GA1UEBRMoNUFCRUNEOEVBQUQzN0VBNTdBRUI5MzlGMkMwQjE0Mjk3 NDg0MUY4QTAeFw0yNTA0MDMwNzI3MjhaFw0yNTA0MTAwNzI3MjhaMBgxFjAUBgNV BAMTDTY3ZWUzODYwLWI2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI6iguzzNiRk1cQflKLUDLTvBsQk6A/hu+4DUom3q9aRJVNqejp1lPAdJGMrcj xkSe1rC37qWpn9OR9bmHVJLyXkeuAPjeDsPoPdN1MawvmAvEZugXIuF94Jgp1QkR VStZDB7GnRkqxdJpu/xlXFyi2TCAt33Er3LuGk6LP1QE8ibBcVKWHFT6Svj2wsMT vfyeUtha45/hNAxvvG8ddyxIO5ng9veH91Mw5wFk2sfXLVXaJMX/rJM1OQapMa36 VfvnokqdHKHm7mxJ9g+sFEvg9+wY/pOpTgXGF74u6DIpxDKbM9OhI5E0woPtO9nq BeBGd1CG56tPwDBlYxRO6q3FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHIdC9j2N fL/dEyrN4AKcl/OHAJgwHwYDVR0jBBgwFoAUWr7NjqrTfqV665OfLAsUKXSEH4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1QTgyL0JCOThBNDVFMDkw ODExRjBBNDkzRTkyMkM0RjlBRTAyL1dyN05qcXJUZnFWNjY1T2ZMQXNVS1hTRUg0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3I3TmpxclRmcVY2NjVPZkxBc1VLWFNFSDRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 QTgyL0JCOThBNDVFMDkwODExRjBBNDkzRTkyMkM0RjlBRTAyL1dyN05qcXJUZnFW NjY1T2ZMQXNVS1hTRUg0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALmam5vQpWjHcKvKTmsSgegBcRX9IvNc2lpH0kCKBEvXO5xBfzibNmG/ QkI/3MTUp7QLHCJexrw3QfMq3TMcdiKnsVSS2edDPl/bfN4ck6bZErLVoLNo8sJN tqxET0C6aDNRIYvEBcd7dTU8EMdTK/ox1nurtQTv/sx2pYVNNggTMc8hVWiI34Pm ZqUg00Sgl9n4WfjJ9sQ4vjK04Ujn9T39yTiYOmiWRWScxTp534h+KTVi9TrtSyZY zwHxHZxaoAEb0xLLTvzUMWz224cPFDU9KOnKQEY742NejF6DBM3cKX10lg4dArFJ W1WXQ84TzvqSVGl3GkkFH/lA1JEaIwI= -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:01 2025 by rpki-client