$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: XzoN+ir/ZdufYWL5KIqvvPchVXIFT2QCaLn74AXcBrU= Subject key identifier: AF:72:6E:54:8D:91:0A:42:46:C6:0F:7A:E1:EE:E6:CA:00:AC:51:41 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 1B35 Signing time: Fri 04 Apr 2025 16:41:18 +0000 Manifest this update: Fri 04 Apr 2025 16:41:17 +0000 Manifest next update: Fri 11 Apr 2025 16:41:17 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: Z75rGLHCmy8hBs5TNwHlOc2cfF7bp9GyoyXuzToERTc=) 2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: eXJjjkwH5jRXforBrF78HYiKBo92Atf+IpNaNde3A4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7 Validity Not Before: Apr 4 16:41:17 2025 GMT Not After : Apr 11 16:41:17 2025 GMT Subject: CN=67f00bae-df8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:44:cc:4f:d7:18:37:ab:5d:41:2d:c8:cc: 0b:5c:21:63:63:59:a1:c3:0d:1e:43:38:90:81:e9: 29:aa:d2:62:ce:1f:be:36:aa:43:7a:d2:32:be:6f: 43:af:32:1f:02:09:91:0d:92:91:76:99:1c:43:6e: 8c:28:c1:34:1a:9b:d5:46:8d:44:8c:ee:50:d0:26: 7c:81:7d:89:61:12:8d:f3:83:d5:6c:7d:2c:7e:fd: c5:90:f8:90:bd:3b:cc:b1:40:44:bc:ab:01:f9:81: fa:c6:d1:4d:27:89:76:9c:c5:ff:3c:5f:f5:aa:e6: 76:00:09:08:2b:d9:c2:29:04:71:10:d7:a0:da:73: 79:68:40:0a:1e:1e:a2:03:7a:ef:5c:73:cc:74:30: eb:6d:ad:65:2a:27:f5:79:85:65:fa:77:a1:cc:7b: 0e:a8:9e:1a:76:80:a1:68:5b:3f:4f:ad:98:cb:7d: 98:ad:c6:c4:4b:2d:98:e8:20:f6:38:7b:0e:b7:99: 31:eb:78:35:b4:31:e3:69:c0:7a:03:e7:db:92:44: 4f:25:76:f0:c8:95:17:46:6f:75:23:46:5e:1c:1b: d0:65:80:ca:1f:e6:7e:39:73:76:f6:41:f1:60:b5: 3f:37:70:85:1c:31:0a:85:a8:eb:7a:0c:5f:3e:f4: 97:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:72:6E:54:8D:91:0A:42:46:C6:0F:7A:E1:EE:E6:CA:00:AC:51:41 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:85:1d:9e:d0:b8:cd:11:e5:d0:2e:2b:2d:46:9a:f9:37:08: f5:dd:42:45:e0:6b:e3:3f:02:d8:9d:81:ea:87:87:09:9b:8a: be:32:bb:a1:9d:d0:b1:cc:59:c2:06:0c:80:75:f2:dc:65:79: d3:cc:ec:54:2d:9b:f8:22:9d:c8:20:ff:48:21:e1:82:60:cf: af:eb:a5:4d:47:d3:46:5f:e0:60:8f:5f:76:ed:7e:2a:dc:ae: 0b:6f:0f:a8:90:66:b3:e5:fc:53:e0:25:6c:8f:08:08:ee:61: b4:fa:6d:20:e1:1c:8f:ef:71:4a:cc:90:58:b5:0e:e6:68:ff: fa:fb:35:78:4b:9f:4e:d5:a9:b1:e5:22:b5:df:6f:ee:b2:37: a6:53:06:61:6a:91:21:6e:98:0c:b3:56:d6:3a:a8:bc:37:9d: e3:b5:a1:f8:fd:b7:ad:5c:de:14:67:8d:31:4e:f4:74:2f:5f: d5:84:79:eb:3e:8d:36:94:be:bd:aa:5d:f1:6c:65:d7:11:e3: f3:5f:75:26:53:8e:61:e8:62:ee:af:7c:12:44:33:f3:53:c3: d5:f7:4e:fb:25:07:74:12:68:c0:30:91:10:6b:ba:fb:81:cf: fa:91:56:09:b3:32:9e:77:d7:b6:57:35:97:b0:a0:00:57:85: b1:1e:7a:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjUwNDA0MTY0MTE3WhcNMjUwNDExMTY0MTE3WjAYMRYwFAYD VQQDEw02N2YwMGJhZS1kZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk5EzE/XGDerXUEtyMwLXCFjY1mhww0eQziQgekpqtJizh++NqpDetIyvm9D rzIfAgmRDZKRdpkcQ26MKME0GpvVRo1EjO5Q0CZ8gX2JYRKN84PVbH0sfv3FkPiQ vTvMsUBEvKsB+YH6xtFNJ4l2nMX/PF/1quZ2AAkIK9nCKQRxENeg2nN5aEAKHh6i A3rvXHPMdDDrba1lKif1eYVl+nehzHsOqJ4adoChaFs/T62Yy32YrcbESy2Y6CD2 OHsOt5kx63g1tDHjacB6A+fbkkRPJXbwyJUXRm91I0ZeHBvQZYDKH+Z+OXN29kHx YLU/N3CFHDEKhajregxfPvSXUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9yblSN kQpCRsYPeuHu5soArFFBMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjhR2e0LjNEeXQListRpr5Nwj13UJF4GvjPwLYnYHqh4cJm4q+Mruh ndCxzFnCBgyAdfLcZXnTzOxULZv4Ip3IIP9IIeGCYM+v66VNR9NGX+Bgj1927X4q 3K4Lbw+okGaz5fxT4CVsjwgI7mG0+m0g4RyP73FKzJBYtQ7maP/6+zV4S59O1amx 5SK132/usjemUwZhapEhbpgMs1bWOqi8N53jtaH4/betXN4UZ40xTvR0L1/VhHnr Po02lL69ql3xbGXXEePzX3UmU45h6GLur3wSRDPzU8PV9077JQd0EmjAMJEQa7r7 gc/6kVYJszKed9e2VzWXsKAAV4WxHnoz -----END CERTIFICATE-----Generated at Sun Apr 6 12:54:27 2025 by rpki-client