$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft File: WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json) Hash identifier: 75FIqlqO/rQm58y1+57Kk4SHVvXhCLOIsoDtUf2aGQo= Subject key identifier: E0:C1:8C:7D:56:58:16:E1:CA:01:37:FD:18:F6:D9:2D:6D:F2:6C:7A Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0B51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft Manifest number: 0B3C Signing time: Fri 04 Apr 2025 19:17:49 +0000 Manifest this update: Fri 04 Apr 2025 19:17:49 +0000 Manifest next update: Fri 11 Apr 2025 19:17:49 +0000 Files and hashes: 1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: kIwB470YW6OuEDeyRVdki/CazNu0d2lhwd+w7hmnEaE=) 2: D8FCAB6C750611EFAE4AA240C4F9AE02.roa (hash: BNtUgizLuW7VE24IioUopOhcnv7kySphvSn8ooQaevk=) 3: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: E4bzrx7poQwdk1jQHWl7doZB/UzexRVv4xP96OZmdAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2897 (0xb51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85 Validity Not Before: Apr 4 19:17:49 2025 GMT Not After : Apr 11 19:17:49 2025 GMT Subject: CN=67f0305d-cf12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:d3:c7:a2:ae:d4:81:93:75:b1:d8:05:e2: 37:af:0e:be:fe:f4:5b:c5:ec:47:37:4d:97:2b:ca: 63:16:c3:34:b9:3a:ad:5e:c1:2c:db:35:49:75:16: f7:5d:b5:97:5b:8e:5f:6c:34:47:e4:96:13:c8:02: bd:7f:96:87:f3:f9:70:e5:90:5e:c8:ed:5c:71:a9: c9:db:6b:6a:0d:a8:01:6d:b5:b5:58:38:89:d8:79: 3a:ae:10:3e:91:2a:7c:27:c6:77:67:62:a8:4f:89: 54:c8:2c:7d:94:78:d5:88:97:ff:44:40:42:43:75: 3e:da:72:c8:96:38:d2:2a:a8:77:a8:ab:88:38:d1: 8a:e3:5d:63:45:90:9b:69:69:c3:4e:e9:ff:6a:e8: 29:6c:fa:e3:e6:07:a8:ae:fd:24:83:72:13:6f:8e: 8d:c7:32:2d:25:8b:16:8e:d5:d7:15:ff:67:9c:54: be:7e:18:06:d4:fc:7e:04:26:23:cb:64:3a:c9:95: 35:e6:83:1c:8b:96:8b:38:9b:17:b4:cb:07:92:36: 90:32:67:67:af:d7:ac:30:b4:07:a3:b0:df:a7:a4: 5d:4a:5c:0f:31:ec:17:a9:f8:24:fb:d7:a5:63:55: 6b:1b:f3:59:42:7e:0f:e3:73:c1:44:24:bd:39:c4: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C1:8C:7D:56:58:16:E1:CA:01:37:FD:18:F6:D9:2D:6D:F2:6C:7A X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9d:29:9e:8b:20:56:8e:84:0b:52:1f:fe:aa:7a:be:62:ac: 8d:77:b4:8b:48:15:53:e0:89:ae:00:91:f6:e9:f4:36:c3:53: 6a:91:66:81:b9:51:e0:fd:36:98:a9:84:b4:52:90:26:03:2a: 95:5e:77:88:34:e1:8e:64:34:c4:6b:cb:ba:51:2e:96:43:95: 4e:2f:ab:75:96:04:81:66:dc:9c:26:0c:05:8c:b9:20:2a:1f: 12:56:a3:29:05:7b:87:b4:bb:c8:0e:2a:32:61:a9:52:9b:e2: ea:69:e0:42:a5:71:00:56:78:65:d0:8f:f0:8e:82:97:fe:81: 47:52:11:36:79:f6:05:07:62:76:29:43:81:51:f1:09:21:6c: 75:db:85:1e:16:8a:b4:a8:ac:93:3b:34:9c:d9:9f:77:4e:f8: c9:ee:f0:96:34:3d:fb:eb:bc:c0:ba:7e:e9:f5:f2:a2:6a:ae: 70:91:40:ee:63:e1:69:20:ce:25:a2:ea:cf:5b:86:b8:05:21: c1:14:ae:55:a3:32:1f:a9:7e:aa:14:0b:03:ba:25:b5:fa:10: 0e:24:1c:58:0f:18:31:b6:44:f7:63:e0:30:00:8a:8e:72:e7: 8c:83:c4:a0:8e:d5:2d:45:2b:01:33:ba:ee:32:9f:f1:03:c1: ed:b9:1e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjUwNDA0MTkxNzQ5WhcNMjUwNDExMTkxNzQ5WjAYMRYwFAYD VQQDEw02N2YwMzA1ZC1jZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuvTx6Ku1IGTdbHYBeI3rw6+/vRbxexHN02XK8pjFsM0uTqtXsEs2zVJdRb3 XbWXW45fbDRH5JYTyAK9f5aH8/lw5ZBeyO1ccanJ22tqDagBbbW1WDiJ2Hk6rhA+ kSp8J8Z3Z2KoT4lUyCx9lHjViJf/REBCQ3U+2nLIljjSKqh3qKuIONGK411jRZCb aWnDTun/augpbPrj5georv0kg3ITb46NxzItJYsWjtXXFf9nnFS+fhgG1Px+BCYj y2Q6yZU15oMci5aLOJsXtMsHkjaQMmdnr9esMLQHo7Dfp6RdSlwPMewXqfgk+9el Y1VrG/NZQn4P43PBRCS9OcSa9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODBjH1W WBbhygE3/Rj22S1t8mx6MB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Q4NS82MkNFRDQ4RTMzRTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2Qt M3c2eEJXT3B0QndlUy1mSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLnSmeiyBWjoQLUh/+qnq+YqyNd7SLSBVT4ImuAJH26fQ2w1NqkWaB uVHg/TaYqYS0UpAmAyqVXneINOGOZDTEa8u6US6WQ5VOL6t1lgSBZtycJgwFjLkg Kh8SVqMpBXuHtLvIDioyYalSm+LqaeBCpXEAVnhl0I/wjoKX/oFHUhE2efYFB2J2 KUOBUfEJIWx124UeFoq0qKyTOzSc2Z93TvjJ7vCWND3767zAun7p9fKiaq5wkUDu Y+FpIM4lourPW4a4BSHBFK5VozIfqX6qFAsDuiW1+hAOJBxYDxgxtkT3Y+AwAIqO cueMg8SgjtUtRSsBM7ruMp/xA8HtuR5v -----END CERTIFICATE-----Generated at Sun Apr 6 12:24:09 2025 by rpki-client