$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json) Hash identifier: 3JZPsr1MJjWuVEkydU5I4l3dq56+0i/4+m2jYgpzooQ= Subject key identifier: D9:3F:C3:58:05:2B:B3:3C:DC:CD:33:DD:49:58:60:F4:E8:20:CB:BC Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft Manifest number: 0149 Signing time: Sat 29 Mar 2025 03:42:44 +0000 Manifest this update: Sat 29 Mar 2025 03:42:44 +0000 Manifest next update: Sat 05 Apr 2025 03:42:44 +0000 Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: EsFoZt8AFyFDYBiVf3lJqS2z3QH3VDQTIUr0Jt49s0E=) 2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: Y/z+QgJxgPtT6JyUNYql0fBvgzOIBrxa3aegmRUI5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BA1 Validity Not Before: Mar 29 03:42:44 2025 GMT Not After : Apr 5 03:42:44 2025 GMT Subject: CN=67e76c34-e9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:75:ba:07:cf:d1:24:1e:7b:21:96:52:34:c9: 86:5f:79:17:ee:92:ff:1f:3a:8f:83:ef:0a:1e:f7: 08:0a:e6:be:c5:ae:58:6b:b7:30:d2:fa:c6:b7:e5: 3a:14:a2:f1:17:05:44:75:88:6c:2d:13:48:09:e3: 34:c3:70:fa:e5:75:9c:85:43:fb:26:5f:91:fc:5c: 30:25:f9:de:27:ff:67:7c:fd:a7:b7:9d:c9:73:8c: ed:8e:ec:bb:cb:d3:1e:32:f4:66:e4:ad:59:0b:0f: 26:ed:76:61:c0:8a:c0:c2:e7:9b:cb:95:24:a8:d2: 11:9b:f4:19:03:6b:df:27:47:a0:34:fc:2c:fd:01: bc:3c:dc:51:fe:82:e7:5f:f3:4a:4f:70:ca:19:ed: 5c:3e:96:cf:ca:0f:0f:e6:1b:d7:f1:b8:e5:17:dd: 01:85:87:3f:61:14:62:8f:73:06:45:2d:06:ac:29: a8:16:bc:52:5b:63:23:0e:b6:49:f4:3f:13:8f:00: af:7a:c9:7e:1e:17:90:c4:92:69:cd:2c:5a:ed:9e: 5d:9b:e2:36:03:41:3a:04:ff:d6:24:09:a4:df:9f: b7:d7:c7:4e:0f:cc:6a:01:69:d7:18:45:74:24:52: 4e:40:54:c4:ea:3f:19:a6:d1:42:16:8d:00:4a:85: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3F:C3:58:05:2B:B3:3C:DC:CD:33:DD:49:58:60:F4:E8:20:CB:BC X509v3 Authority Key Identifier: keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:a9:c6:b6:d4:d9:ed:8e:fa:ad:fb:83:cb:6d:71:ea:f6:36: ca:ee:4d:d0:43:ef:c5:de:0a:c0:90:f5:24:8f:a6:b1:9e:cb: f2:af:12:c1:e4:a0:6b:a5:ac:c0:da:9c:7c:df:6a:24:47:33: ed:48:a3:a1:06:05:77:9a:42:0b:c6:9d:93:74:0c:82:77:aa: fd:f4:93:12:c6:9f:66:41:9c:0d:bb:af:88:76:13:48:05:23: 7c:d4:e7:1b:7f:18:22:53:94:2b:b2:35:b0:61:ea:e0:99:c0: b8:2d:e6:09:99:5f:be:f6:20:38:79:35:c2:1e:f5:82:b9:61: 1a:48:ba:6f:14:cb:3e:6d:95:7b:ff:99:cc:c9:b2:a9:23:4b: 4f:31:12:bf:f8:32:c3:f5:9a:4e:28:04:41:9d:c7:3b:e1:93: 2f:17:ef:c6:16:a3:81:98:d1:15:e2:92:54:2d:a2:ad:81:d4: 9e:55:65:0c:42:ea:0a:2e:67:dc:ae:0c:30:7f:09:f1:d8:ef: c9:d6:ab:96:3a:d0:7f:a6:22:29:fa:f0:6f:9f:c0:53:bc:b9: 11:c5:2f:02:9b:9b:1d:4d:ea:e0:76:f0:81:b7:cb:8d:e4:9f: 86:19:8c:ff:48:1c:5f:cf:21:11:01:2c:b4:8b:a8:f1:b7:f4: 30:35:37:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQTExMTAvBgNVBAUTKEMxQ0IwOEFEM0VCODY2RDNDRDY0N0MxMzVEMEY1MkZB RUQyNTQ2QzQwHhcNMjUwMzI5MDM0MjQ0WhcNMjUwNDA1MDM0MjQ0WjAYMRYwFAYD VQQDEw02N2U3NmMzNC1lOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43W6B8/RJB57IZZSNMmGX3kX7pL/HzqPg+8KHvcICua+xa5Ya7cw0vrGt+U6 FKLxFwVEdYhsLRNICeM0w3D65XWchUP7Jl+R/FwwJfneJ/9nfP2nt53Jc4ztjuy7 y9MeMvRm5K1ZCw8m7XZhwIrAwueby5UkqNIRm/QZA2vfJ0egNPws/QG8PNxR/oLn X/NKT3DKGe1cPpbPyg8P5hvX8bjlF90BhYc/YRRij3MGRS0GrCmoFrxSW2MjDrZJ 9D8TjwCvesl+HheQxJJpzSxa7Z5dm+I2A0E6BP/WJAmk35+318dOD8xqAWnXGEV0 JFJOQFTE6j8ZptFCFo0ASoWhPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk/w1gF K7M83M0z3UlYYPToIMu8MB8GA1UdIwQYMBaAFMHLCK0+uGbTzWR8E10PUvrtJUbE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBMS84Q0NFM0VEQTE3 NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0UE5aSHdUWFE5Uy11MGxS c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djc0lyVDY0WnRQTlpId1RYUTlTLXUwbFJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBMS84Q0NFM0VEQTE3NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0 UE5aSHdUWFE5Uy11MGxSc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqqca21Nntjvqt+4PLbXHq9jbK7k3QQ+/F3grAkPUkj6axnsvyrxLB 5KBrpazA2px832okRzPtSKOhBgV3mkILxp2TdAyCd6r99JMSxp9mQZwNu6+IdhNI BSN81OcbfxgiU5QrsjWwYergmcC4LeYJmV++9iA4eTXCHvWCuWEaSLpvFMs+bZV7 /5nMybKpI0tPMRK/+DLD9ZpOKARBncc74ZMvF+/GFqOBmNEV4pJULaKtgdSeVWUM QuoKLmfcrgwwfwnx2O/J1quWOtB/piIp+vBvn8BTvLkRxS8Cm5sdTergdvCBt8uN 5J+GGYz/SBxfzyERASy0i6jxt/QwNTfu -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:04 2025 by rpki-client