$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft File: WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json) Hash identifier: IDV2hN7DFB4FL6QkGbUmksNDtEckXJT01cA3F2OtNX0= Subject key identifier: D1:E2:B3:C6:DD:01:65:00:D4:41:DC:09:16:4B:2C:9E:61:3A:48:0B Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft Manifest number: 4E Signing time: Mon 07 Apr 2025 06:11:53 +0000 Manifest this update: Mon 07 Apr 2025 06:11:53 +0000 Manifest next update: Mon 14 Apr 2025 06:11:53 +0000 Files and hashes: 1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: 6GTNhxTIA8wfccxBIeVbfU2nLn+6wa72AE7BDeVT3W8=) 2: ADAFE3AACD8211EF93F95A60C4F9AE02.roa (hash: rHSLmABxeKGefv4fizfNEKuj+yiAF7dF0zr55F5icfk=) 3: 8BDA27AECD8211EF9AF32B60C4F9AE02.roa (hash: SRE4u+ZLkkQwTNZtgQHHWugE/1HeTsB1q8P4gYfjQs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F Validity Not Before: Apr 7 06:11:53 2025 GMT Not After : Apr 14 06:11:53 2025 GMT Subject: CN=67f36ca9-34c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:15:06:07:82:b3:8b:48:f4:61:ed:8d:db: aa:69:90:82:c8:e8:1a:e7:bc:81:ea:78:dc:f2:b8: 49:30:2c:00:a5:26:88:3d:d2:b8:9b:8b:d6:cd:d6: 13:82:20:d9:41:3e:40:80:1d:22:6e:30:0f:fd:f2: 49:4a:e8:20:45:0c:c8:7b:b5:a3:6e:bf:f7:a8:8e: 32:d6:c7:99:75:48:58:bc:c0:0b:80:4b:f8:4c:10: 5d:c5:f9:0a:a0:36:18:11:1e:d9:08:b8:a8:cc:54: 96:ae:c0:7c:6c:29:6c:1a:fb:18:9a:07:9f:30:a4: de:27:6a:a8:3e:51:0a:b9:17:5d:7e:0d:d1:6e:52: f1:9f:47:b9:73:c3:96:2d:76:6a:78:34:c8:af:9f: 34:b5:f9:82:87:d0:b3:eb:3b:e7:02:26:9a:38:c4: 13:1e:3c:7e:b8:2c:86:03:d9:dd:7e:66:c4:40:85: db:bc:7e:4a:80:12:d0:e1:18:a5:53:ce:8b:b6:54: 41:45:5a:b5:4d:c2:b4:71:83:e4:d6:54:e8:c4:4f: 25:ee:1a:2a:1d:0e:e6:eb:56:04:5d:b9:c5:82:a4: 82:1e:aa:0b:c4:dd:b3:ea:1e:6b:e6:8b:63:33:9e: b8:5d:60:78:6a:0a:7b:8f:25:fd:96:7e:2d:bc:1b: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E2:B3:C6:DD:01:65:00:D4:41:DC:09:16:4B:2C:9E:61:3A:48:0B X509v3 Authority Key Identifier: keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:69:f1:df:2a:5a:f7:3c:2e:d1:fe:c1:36:47:1a:84:87:61: ab:7c:6b:89:89:1b:a8:6c:dd:19:90:86:be:19:71:fa:c7:6d: 41:50:92:18:84:d3:3d:15:e8:15:e2:38:70:f3:9f:bd:6a:21: 70:d3:e2:3e:31:b1:a8:78:49:e0:50:6f:8c:dd:1b:3d:a8:6a: 31:c9:f7:7c:dc:9d:d0:7f:2f:1f:a3:aa:74:2c:14:34:d4:48: 50:b6:07:bd:7e:78:22:fc:2f:4a:09:2f:54:d4:2e:74:00:34: e6:de:3f:2a:48:80:eb:42:10:67:bb:76:04:1f:36:bf:9f:3d: d2:35:0f:ee:52:fb:d7:3d:8d:15:97:bc:4e:48:07:96:49:7f: dd:a0:0b:14:40:54:e3:e6:a3:ec:68:0d:90:30:b2:9d:ef:e5: 85:c7:53:0c:c3:17:e1:ae:71:bb:48:db:ac:3c:55:35:73:63: b9:57:62:b9:96:3b:cf:83:52:77:a7:55:b0:b6:d9:c1:fc:c3: e4:ea:7c:56:e5:6e:61:a5:c8:ca:f7:86:30:09:32:61:b2:29: 87:23:6f:75:f0:08:ed:ac:d7:4d:e4:b8:fc:55:8e:25:e5:1d: 50:60:2b:a6:d9:25:94:a1:73:d3:0a:97:79:b3:ee:ae:90:50: 28:35:31:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoNUE1NkM0REU5NDIzQjlFMkI4MDBBQjdFMDQwRENBM0Uw OUYyMzQ3NTAeFw0yNTA0MDcwNjExNTNaFw0yNTA0MTQwNjExNTNaMBgxFjAUBgNV BAMTDTY3ZjM2Y2E5LTM0YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCksRUGB4Kzi0j0Ye2N26ppkILI6BrnvIHqeNzyuEkwLAClJog90ribi9bN1hOC INlBPkCAHSJuMA/98klK6CBFDMh7taNuv/eojjLWx5l1SFi8wAuAS/hMEF3F+Qqg NhgRHtkIuKjMVJauwHxsKWwa+xiaB58wpN4naqg+UQq5F11+DdFuUvGfR7lzw5Yt dmp4NMivnzS1+YKH0LPrO+cCJpo4xBMePH64LIYD2d1+ZsRAhdu8fkqAEtDhGKVT zou2VEFFWrVNwrRxg+TWVOjETyXuGiodDubrVgRducWCpIIeqgvE3bPqHmvmi2Mz nrhdYHhqCnuPJf2Wfi28GyzXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0eKzxt0B ZQDUQdwJFkssnmE6SAswHwYDVR0jBBgwFoAUWlbE3pQjueK4AKt+BA3KPgnyNHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzgzRkQ2QjJFQTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyL1dsYkUzcFFqdWVLNEFLdC1CQTNLUGdueU5I VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2xiRTNwUWp1ZUs0QUt0LUJBM0tQZ255TkhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzgzRkQ2QjJFQTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyL1dsYkUzcFFqdWVL NEFLdC1CQTNLUGdueU5IVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADtp8d8qWvc8LtH+wTZHGoSHYat8a4mJG6hs3RmQhr4ZcfrHbUFQkhiE 0z0V6BXiOHDzn71qIXDT4j4xsah4SeBQb4zdGz2oajHJ93zcndB/Lx+jqnQsFDTU SFC2B71+eCL8L0oJL1TULnQANObePypIgOtCEGe7dgQfNr+fPdI1D+5S+9c9jRWX vE5IB5ZJf92gCxRAVOPmo+xoDZAwsp3v5YXHUwzDF+GucbtI26w8VTVzY7lXYrmW O8+DUnenVbC22cH8w+TqfFblbmGlyMr3hjAJMmGyKYcjb3XwCO2s103kuPxVjiXl HVBgK6bZJZShc9MKl3mz7q6QUCg1MTY= -----END CERTIFICATE-----Generated at Mon Apr 7 11:16:56 2025 by rpki-client