$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json) Hash identifier: FgW2KdYF7ACaNUB5uQPWtTch9guKRxp8jUFFUFofz10= Subject key identifier: 41:27:58:FE:BE:71:3A:74:C4:EC:AE:C9:CA:5D:D0:35:19:5C:F0:1C Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft Manifest number: DA Signing time: Sat 29 Mar 2025 04:58:05 +0000 Manifest this update: Sat 29 Mar 2025 04:58:05 +0000 Manifest next update: Sat 05 Apr 2025 04:58:05 +0000 Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: LPbyd/8yTu81NUXZRwnzvkpKU0C/yAB1lgcbcBccWF0=) 2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: ENR1qEuttVnNRROdOyzWRsQ7bm7evUlkAyBRhI4KcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F Validity Not Before: Mar 29 04:58:05 2025 GMT Not After : Apr 5 04:58:05 2025 GMT Subject: CN=67e77ddd-e627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f8:30:52:4f:ab:15:51:6d:af:98:6c:e2:1f: 08:b6:2e:f9:6d:b5:9d:33:ac:ee:c2:91:62:74:0d: 68:c1:f7:0f:98:3e:5c:af:04:16:99:3f:1c:99:49: 32:6d:4b:8d:bd:7d:af:40:1a:52:9b:27:c8:3b:56: 16:bb:8d:3b:89:22:e1:3b:44:1d:e8:22:ed:68:6b: ca:ad:23:56:ec:8c:29:10:f1:a0:68:1c:de:3a:e7: 57:76:2b:52:b1:f8:b9:90:33:ca:8c:e4:60:06:62: 62:81:ec:30:97:bf:da:77:99:dd:34:cd:01:df:e9: e9:13:31:dc:a5:31:87:e5:e1:c9:78:bb:81:7e:04: 6e:bd:24:72:49:71:fc:9f:63:20:aa:6c:69:4b:f9: 64:7d:b4:37:85:27:66:f5:2c:71:27:c8:22:f7:3f: 5d:ba:70:50:2e:34:0e:99:2b:38:1a:1b:ea:75:63: 27:9b:a3:f2:dc:ed:52:93:a4:89:14:9d:c0:bc:4f: 61:0c:b3:2a:5f:ee:98:25:ec:da:de:00:ee:08:1a: c7:01:7b:a8:ac:db:74:d8:11:69:2b:0c:d5:ea:a6: 18:40:9e:58:e0:9f:53:a7:2f:4a:7a:ec:6c:be:73: 3b:bd:4a:54:7a:7c:58:83:2f:2e:92:fb:31:67:52: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:27:58:FE:BE:71:3A:74:C4:EC:AE:C9:CA:5D:D0:35:19:5C:F0:1C X509v3 Authority Key Identifier: keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:cc:15:39:a7:e5:b1:51:29:81:b0:65:d9:a5:86:dd:b7:10: a4:71:3c:99:83:3b:68:89:a7:86:8f:55:7f:0a:02:6b:06:f8: 66:aa:82:9f:ab:62:39:b1:65:b2:e6:02:32:ff:dd:6f:7e:55: b8:3f:de:71:68:39:43:52:be:78:09:03:e5:bb:45:b9:ae:a3: a2:34:46:74:6f:57:f1:8f:a0:d9:ad:a9:63:a7:fe:06:38:64: 57:8d:b7:14:1f:8d:55:db:58:74:5a:b6:fe:80:f4:68:bc:4b: a0:67:de:8f:fd:71:b7:3a:29:f4:15:47:b0:9f:6d:57:39:dc: 19:df:a5:72:1a:71:e7:70:d7:b5:91:50:a3:9a:6b:0a:0e:03: 76:ad:c2:66:74:12:ce:cf:63:a7:9f:c2:e3:95:44:6c:df:9f: d6:48:86:77:51:e7:08:fd:06:b7:62:a2:55:e6:32:7e:23:76: 04:22:5b:f3:99:44:51:6b:f0:6a:56:fe:8c:40:0f:d5:34:27: cd:84:dd:e7:d4:c0:7f:e5:30:6e:cc:75:0e:a9:a6:a0:a0:d1: f2:47:76:b2:9f:ef:b2:d0:c6:c9:2b:2f:fd:43:f1:19:93:5b: f5:93:9f:16:b7:62:ab:2b:cc:3a:18:de:28:7a:60:de:ec:bd: 50:b6:40:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEMyMTEyRjQ0RDQ0NThGMTg1Q0RCOUFEOUE5MUFGODI5 MDY0ODlDQzYwHhcNMjUwMzI5MDQ1ODA1WhcNMjUwNDA1MDQ1ODA1WjAYMRYwFAYD VQQDEw02N2U3N2RkZC1lNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/gwUk+rFVFtr5hs4h8Iti75bbWdM6zuwpFidA1owfcPmD5crwQWmT8cmUky bUuNvX2vQBpSmyfIO1YWu407iSLhO0Qd6CLtaGvKrSNW7IwpEPGgaBzeOudXditS sfi5kDPKjORgBmJigewwl7/ad5ndNM0B3+npEzHcpTGH5eHJeLuBfgRuvSRySXH8 n2MgqmxpS/lkfbQ3hSdm9SxxJ8gi9z9dunBQLjQOmSs4GhvqdWMnm6Py3O1Sk6SJ FJ3AvE9hDLMqX+6YJeza3gDuCBrHAXuorNt02BFpKwzV6qYYQJ5Y4J9Tpy9Keuxs vnM7vUpUenxYgy8ukvsxZ1JIdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEnWP6+ cTp0xOyuycpd0DUZXPAcMB8GA1UdIwQYMBaAFMIRL0TURY8YXNua2aka+CkGSJzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri84N0MzNDU0Q0M0 NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4aGMyNXJacVJyNEtRWklu TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri84N0MzNDU0Q0M0NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4 aGMyNXJacVJyNEtRWkluTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtzBU5p+WxUSmBsGXZpYbdtxCkcTyZgztoiaeGj1V/CgJrBvhmqoKf q2I5sWWy5gIy/91vflW4P95xaDlDUr54CQPlu0W5rqOiNEZ0b1fxj6DZraljp/4G OGRXjbcUH41V21h0Wrb+gPRovEugZ96P/XG3Oin0FUewn21XOdwZ36VyGnHncNe1 kVCjmmsKDgN2rcJmdBLOz2Onn8LjlURs35/WSIZ3UecI/Qa3YqJV5jJ+I3YEIlvz mURRa/BqVv6MQA/VNCfNhN3n1MB/5TBuzHUOqaagoNHyR3ayn++y0MbJKy/9Q/EZ k1v1k58Wt2KrK8w6GN4oemDe7L1QtkB2 -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:30 2025 by rpki-client