$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: wFnWsCczwyoO+blbkA3jsqBJQMKDs5MC5wamDDgpeNg= Subject key identifier: A0:BA:D1:39:81:EB:42:E4:27:2C:ED:79:70:C1:01:65:0E:CF:81:4E Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0984 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 0969 Signing time: Fri 04 Apr 2025 20:22:23 +0000 Manifest this update: Fri 04 Apr 2025 20:22:23 +0000 Manifest next update: Fri 11 Apr 2025 20:22:23 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: HSaraheY8wCgxozrDtaJ+oD+3vB25cdcRbyUYdkwFvY=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2436 (0x984) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14 Validity Not Before: Apr 4 20:22:23 2025 GMT Not After : Apr 11 20:22:23 2025 GMT Subject: CN=67f03f7f-0c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:53:62:58:cc:e3:b0:4c:28:4e:71:9e:d2: 21:7d:0b:21:ee:a0:51:51:54:9b:45:f8:5d:86:3c: 60:2c:15:c1:e4:a5:6d:59:3b:42:40:5f:3f:42:7e: 9f:65:b6:ae:fc:49:dd:45:16:40:0e:35:6c:0b:8a: a1:8b:34:bc:83:8d:4b:bf:cc:43:9b:0a:b5:87:39: c8:db:29:2d:d0:f1:b4:02:02:b4:56:81:fc:89:67: a7:da:ba:56:93:ce:e4:10:71:7c:92:f0:34:b3:df: d5:49:75:d6:3a:fe:5c:fd:20:c7:fc:77:20:2d:6d: 76:d5:0a:88:cb:ba:e9:0d:fd:72:b3:57:b1:a2:47: 43:92:8f:cd:62:59:76:23:d8:14:d7:01:34:84:3b: 70:95:83:3f:98:ae:ad:b2:fa:ef:d4:30:3c:13:c0: 36:1f:b6:f8:3b:4c:92:d5:54:9a:60:83:dd:39:8a: 08:a8:f4:23:c6:94:f7:3c:87:e3:54:c4:ea:eb:69: c7:76:93:d8:2d:e8:1f:43:c4:16:3a:21:be:a6:2c: 1d:e7:19:9a:80:43:d1:3a:18:0a:c2:ee:63:85:b4: c5:70:f8:09:30:1f:62:eb:e2:09:02:71:16:c3:95: 00:c8:b1:9b:42:1e:e8:33:31:7b:2d:22:8f:b1:86: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BA:D1:39:81:EB:42:E4:27:2C:ED:79:70:C1:01:65:0E:CF:81:4E X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b3:8e:d5:f8:d4:01:0b:4e:03:8f:be:9d:4a:9a:64:03:03: 5e:77:36:35:b2:1c:89:46:54:35:b5:20:0c:25:e8:84:8f:73: ab:2b:ca:3c:d5:97:31:62:2c:dc:70:fb:38:e4:0d:9a:13:93: 17:2c:23:57:dd:fa:47:34:7e:22:16:b7:a4:b3:78:e7:25:41: 19:db:ed:92:d8:59:f0:24:b8:7a:d8:12:3d:f9:2b:36:cf:27: 3f:6e:05:f2:ff:26:c3:30:65:db:fc:c1:31:45:2f:71:f0:bc: a0:32:7a:82:04:5e:0b:00:2f:68:a8:d1:2e:85:b1:be:96:b0: 7f:8d:a7:02:ea:ba:9f:1e:dc:f2:a2:e4:60:70:4f:50:5e:5a: f7:31:b3:8b:80:e7:51:5f:eb:9b:2a:9e:eb:5e:5e:f2:66:1f: e0:d7:80:85:df:e8:2b:ba:72:81:d5:b2:24:7d:7e:15:f6:f7: 75:12:7c:47:70:7f:f3:76:cc:d9:de:92:01:fd:bf:81:d8:1e: 5c:21:d9:ab:d4:86:80:67:ec:fa:6c:cf:25:d8:e6:b4:20:b5: e6:aa:fd:a8:e7:b8:75:d5:2f:bb:0b:1b:aa:e3:28:15:37:35: 69:d6:10:19:d3:d3:ac:b9:76:42:8b:a0:72:e9:c6:df:db:a6: 09:70:e1:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUwNDA0MjAyMjIzWhcNMjUwNDExMjAyMjIzWjAYMRYwFAYD VQQDEw02N2YwM2Y3Zi0wYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwThTYljM47BMKE5xntIhfQsh7qBRUVSbRfhdhjxgLBXB5KVtWTtCQF8/Qn6f Zbau/EndRRZADjVsC4qhizS8g41Lv8xDmwq1hznI2ykt0PG0AgK0VoH8iWen2rpW k87kEHF8kvA0s9/VSXXWOv5c/SDH/HcgLW121QqIy7rpDf1ys1exokdDko/NYll2 I9gU1wE0hDtwlYM/mK6tsvrv1DA8E8A2H7b4O0yS1VSaYIPdOYoIqPQjxpT3PIfj VMTq62nHdpPYLegfQ8QWOiG+piwd5xmagEPROhgKwu5jhbTFcPgJMB9i6+IJAnEW w5UAyLGbQh7oMzF7LSKPsYbstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKC60TmB 60LkJyzteXDBAWUOz4FOMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTs47V+NQBC04Dj76dSppkAwNedzY1shyJRlQ1tSAMJeiEj3OrK8o8 1ZcxYizccPs45A2aE5MXLCNX3fpHNH4iFreks3jnJUEZ2+2S2FnwJLh62BI9+Ss2 zyc/bgXy/ybDMGXb/MExRS9x8LygMnqCBF4LAC9oqNEuhbG+lrB/jacC6rqfHtzy ouRgcE9QXlr3MbOLgOdRX+ubKp7rXl7yZh/g14CF3+grunKB1bIkfX4V9vd1EnxH cH/zdszZ3pIB/b+B2B5cIdmr1IaAZ+z6bM8l2Oa0ILXmqv2o57h11S+7Cxuq4ygV NzVp1hAZ09OsuXZCi6By6cbf26YJcOG+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:21 2025 by rpki-client