$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft File: WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json) Hash identifier: sddFFlclt1191ZnvFd1Jm8ZJdCwWPE8fy2jcZ4av/5w= Subject key identifier: D1:40:F6:4A:A5:C0:E5:D1:44:14:30:71:24:2C:94:69:76:CD:E3:3A Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft Manifest number: 0AFE Signing time: Fri 28 Mar 2025 19:28:42 +0000 Manifest this update: Fri 28 Mar 2025 19:28:41 +0000 Manifest next update: Fri 04 Apr 2025 19:28:41 +0000 Files and hashes: 1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: DyUm8A7wWNW2vj5GtNSdd6qdxa+Ig8iWv1vn6JC2tNc=) 2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: AeTLEvIImEeEIFDLcyyzsKZIqpZz08BSLMKw6j/d4o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990 Validity Not Before: Mar 28 19:28:41 2025 GMT Not After : Apr 4 19:28:41 2025 GMT Subject: CN=67e6f86a-82e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8c:c0:4a:88:55:54:ed:e9:ba:96:d5:85:06: e2:07:a4:3a:42:a3:59:e0:96:80:a1:e7:8e:79:79: 3c:f0:b6:87:f9:63:b8:0b:2a:0d:41:01:67:16:c0: b0:aa:30:f9:27:b7:a6:b6:b1:4f:d8:ab:7e:ca:a3: 64:69:c9:09:1b:ac:cd:cd:ba:c5:08:75:53:7d:fd: 04:2d:ff:e4:f9:73:02:2e:4b:b3:96:d8:8a:9d:b2: 67:ee:46:59:53:33:e5:fe:a7:90:24:38:23:1f:1d: 9e:7c:0c:7c:ed:fc:3e:2c:36:56:e3:51:d9:ed:c8: 9b:be:a8:03:c2:56:cc:55:22:24:7c:0e:64:83:b5: 6d:d5:b1:7b:77:8e:00:7f:ab:86:99:b1:e5:e5:0d: f3:5f:0f:12:00:e2:f9:14:0e:2c:e7:d1:bb:08:9f: 74:ca:7e:38:81:09:97:28:f4:a5:e1:9f:93:68:7d: 3d:e0:af:57:15:a8:bc:08:48:4f:1e:c6:6a:a4:de: 38:a9:f0:b3:7e:ec:72:38:fa:28:a1:9e:e7:82:21: d0:6d:2b:1e:8d:23:e0:ad:88:e5:6d:4a:60:50:e6: 4c:aa:e0:87:9d:c7:e7:15:a9:ee:d9:06:71:0a:52: 6d:31:68:d1:dc:61:6a:a1:7d:7c:cd:46:ea:9e:91: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:40:F6:4A:A5:C0:E5:D1:44:14:30:71:24:2C:94:69:76:CD:E3:3A X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:da:18:e2:fe:5a:7c:4c:13:12:39:c7:45:af:2f:45:f5:5d: 35:b7:ec:ee:2c:8a:11:4a:af:a0:4c:b1:e9:e7:d1:3f:03:b8: 4e:8f:f6:71:90:c3:45:fb:5c:e4:fb:65:3b:c9:17:49:86:14: c2:2d:0b:46:7a:1d:5b:b5:71:9e:08:c1:f3:6b:f1:b1:0b:dd: 08:46:b0:4f:ee:19:ef:1e:a8:53:ca:d5:d7:2b:23:84:96:a3: c9:4c:c2:0b:26:81:6f:d5:ea:3d:ff:18:3f:fb:ba:b4:57:96: 69:ff:92:b1:c8:25:16:c3:10:2e:6d:8a:d7:78:0e:73:03:9c: 39:06:f4:34:06:98:12:c1:ee:8b:96:2a:da:5d:5c:9c:fd:46: 02:39:00:5b:b9:46:9d:d2:2a:c7:e4:32:0d:33:a1:37:cd:80: f0:f2:70:a2:f9:05:54:77:1a:b4:3c:45:71:e6:61:e2:46:92: 66:4d:fa:fd:a1:02:fd:52:8d:06:1a:3d:ab:47:25:0d:3e:87: f3:02:d6:e2:ad:63:b4:33:cf:53:4c:3b:65:22:71:77:05:ab: 8a:44:51:5c:73:12:a8:de:a5:bf:cb:9d:8c:1e:43:55:5c:6e: b9:d6:f0:7a:3e:64:48:65:fd:06:04:f2:62:f7:82:bb:a4:61: 21:f4:47:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjUwMzI4MTkyODQxWhcNMjUwNDA0MTkyODQxWjAYMRYwFAYD VQQDEw02N2U2Zjg2YS04MmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IzASohVVO3pupbVhQbiB6Q6QqNZ4JaAoeeOeXk88LaH+WO4CyoNQQFnFsCw qjD5J7emtrFP2Kt+yqNkackJG6zNzbrFCHVTff0ELf/k+XMCLkuzltiKnbJn7kZZ UzPl/qeQJDgjHx2efAx87fw+LDZW41HZ7cibvqgDwlbMVSIkfA5kg7Vt1bF7d44A f6uGmbHl5Q3zXw8SAOL5FA4s59G7CJ90yn44gQmXKPSl4Z+TaH094K9XFai8CEhP HsZqpN44qfCzfuxyOPoooZ7ngiHQbSsejSPgrYjlbUpgUOZMquCHncfnFanu2QZx ClJtMWjR3GFqoX18zUbqnpFYwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFA9kql wOXRRBQwcSQslGl2zeM6MB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr2hji/lp8TBMSOcdFry9F9V01t+zuLIoRSq+gTLHp59E/A7hOj/Zx kMNF+1zk+2U7yRdJhhTCLQtGeh1btXGeCMHza/GxC90IRrBP7hnvHqhTytXXKyOE lqPJTMILJoFv1eo9/xg/+7q0V5Zp/5KxyCUWwxAubYrXeA5zA5w5BvQ0BpgSwe6L liraXVyc/UYCOQBbuUad0irH5DINM6E3zYDw8nCi+QVUdxq0PEVx5mHiRpJmTfr9 oQL9Uo0GGj2rRyUNPofzAtbirWO0M89TTDtlInF3BauKRFFccxKo3qW/y52MHkNV XG651vB6PmRIZf0GBPJi94K7pGEh9EcO -----END CERTIFICATE-----Generated at Fri Apr 4 18:24:15 2025 by rpki-client