$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json) Hash identifier: IvWNcHzF1cZ8/B0wA7s1s32fVTtwZIgSWkNO8uTIA/o= Subject key identifier: 50:D9:24:06:04:15:05:F5:2A:90:2B:44:00:49:70:55:2D:91:8C:E3 Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Certificate serial: 0584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft Manifest number: 057F Signing time: Wed 16 Apr 2025 22:56:45 +0000 Manifest this update: Wed 16 Apr 2025 22:56:45 +0000 Manifest next update: Wed 23 Apr 2025 22:56:45 +0000 Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: tyVtdVnAVvGu3QuHgD2zYzhuikzCHJwY+AFBCsKN5hI=) 2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: uguUMCdjeeoR+3BZNUcz2rlEWQIIVlblf1lRNkNHvS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 22:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412 (0x584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Validity Not Before: Apr 16 22:56:45 2025 GMT Not After : Apr 23 22:56:45 2025 GMT Subject: CN=680035ad-00bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:3e:6b:8f:c9:0c:09:f0:7e:f6:6c:1d:79: 42:65:b2:32:48:a2:f3:d3:e1:68:df:80:3e:04:80: ad:41:70:ef:70:7f:83:20:89:7b:e7:58:e0:12:ff: 9f:f3:0c:44:cd:37:3c:28:b2:df:95:8b:0f:c1:92: d4:7b:72:20:51:78:64:4f:27:25:c0:38:52:fe:8f: d4:bc:c8:69:ae:cb:ca:a9:aa:a0:3a:9e:1f:d1:9e: 58:b3:0c:ca:bb:8b:3f:44:17:17:27:81:45:dc:d1: cb:cd:a4:55:ba:6d:c5:c8:8b:9e:ce:70:61:53:0b: 78:d9:12:79:39:66:2e:35:93:ce:87:78:49:b9:41: 7e:1f:52:3a:3b:2d:f0:2f:6c:01:74:2c:da:61:c8: c5:33:d5:15:3c:61:07:91:8e:6f:0f:df:c9:66:7f: 18:7c:71:24:a0:e9:77:61:e6:5b:0d:9d:c6:9b:66: 96:dc:50:1f:85:6c:d8:6f:24:2b:fd:cd:d3:32:f1: fe:d1:2d:e3:23:f0:fe:bc:0d:fd:75:72:09:6a:2b: 97:1c:02:83:97:10:6a:2c:fd:d9:81:ac:7f:79:c8: 73:70:0f:a6:69:1b:c1:0f:2a:4f:e8:58:b3:a6:22: a8:90:c3:35:b1:56:a7:83:2d:7c:71:43:2d:64:96: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D9:24:06:04:15:05:F5:2A:90:2B:44:00:49:70:55:2D:91:8C:E3 X509v3 Authority Key Identifier: keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b4:23:06:00:14:45:23:6a:93:ef:8e:c3:b6:42:ef:d8:57: cb:eb:8d:e7:aa:f1:ca:f5:34:ba:9f:9f:1f:8a:e4:1f:6f:f1: a4:e9:be:7c:22:f8:0d:49:6f:f8:7c:42:d7:e6:2f:53:8e:8e: d8:72:c2:e1:14:57:cb:84:31:e7:26:21:76:93:81:7b:8f:d4: 98:36:e7:5b:93:48:31:90:62:47:a1:90:fc:9e:ae:de:47:45: 30:c7:46:a0:44:05:9a:03:4d:62:9d:86:3d:2c:6a:c6:c2:52: a3:51:89:89:88:cc:94:f0:c7:75:eb:ba:d8:8e:a2:af:66:2c: 08:0f:d8:bc:6f:29:12:fd:a1:7f:74:1b:a9:84:52:95:08:7e: 8d:43:75:45:90:e5:7c:ea:07:6c:dd:05:39:1a:a7:c8:9b:f8: 28:47:3a:1a:11:9a:c7:8b:ad:08:26:01:4f:7a:6e:74:43:67: 86:0d:0a:b2:16:9b:97:8f:93:b1:7e:26:ef:f9:29:c1:78:0e: a1:66:34:e4:1d:67:4d:70:04:5f:49:19:a4:5c:f2:77:f4:09: 35:50:35:d1:83:f0:a6:47:37:29:f1:c0:dc:1a:cf:5f:fc:9e: c3:54:05:31:db:d4:3f:70:c6:eb:50:1a:33:d3:54:1f:c7:a7: 1f:75:f2:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVGMjUxMTAvBgNVBAUTKDVBNjg0NDFGQjlEMUI3OTBGQzZDNzk5RTM5NTEwMUQ5 Mjc2MDk2N0QwHhcNMjUwNDE2MjI1NjQ1WhcNMjUwNDIzMjI1NjQ1WjAYMRYwFAYD VQQDEw02ODAwMzVhZC0wMGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZc+a4/JDAnwfvZsHXlCZbIySKLz0+Fo34A+BICtQXDvcH+DIIl751jgEv+f 8wxEzTc8KLLflYsPwZLUe3IgUXhkTyclwDhS/o/UvMhprsvKqaqgOp4f0Z5YswzK u4s/RBcXJ4FF3NHLzaRVum3FyIueznBhUwt42RJ5OWYuNZPOh3hJuUF+H1I6Oy3w L2wBdCzaYcjFM9UVPGEHkY5vD9/JZn8YfHEkoOl3YeZbDZ3Gm2aW3FAfhWzYbyQr /c3TMvH+0S3jI/D+vA39dXIJaiuXHAKDlxBqLP3Zgax/echzcA+maRvBDypP6Fiz piKokMM1sVangy18cUMtZJYVywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDZJAYE FQX1KpArRABJcFUtkYzjMB8GA1UdIwQYMBaAFFpoRB+50beQ/Gx5njlRAdknYJZ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUYyNS9GOEVEOEI4QUQz NUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1RDhiSG1lT1ZFQjJTZGds bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dtaEVIN25SdDVEOGJIbWVPVkVCMlNkZ2xuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUYyNS9GOEVEOEI4QUQzNUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1 RDhiSG1lT1ZFQjJTZGdsbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEtCMGABRFI2qT747DtkLv2FfL643nqvHK9TS6n58fiuQfb/Gk6b58 IvgNSW/4fELX5i9Tjo7YcsLhFFfLhDHnJiF2k4F7j9SYNudbk0gxkGJHoZD8nq7e R0Uwx0agRAWaA01inYY9LGrGwlKjUYmJiMyU8Md167rYjqKvZiwID9i8bykS/aF/ dBuphFKVCH6NQ3VFkOV86gds3QU5GqfIm/goRzoaEZrHi60IJgFPem50Q2eGDQqy FpuXj5Oxfibv+SnBeA6hZjTkHWdNcARfSRmkXPJ39Ak1UDXRg/CmRzcp8cDcGs9f /J7DVAUx29Q/cMbrUBoz01Qfx6cfdfJ3 -----END CERTIFICATE-----Generated at Fri Apr 18 19:17:38 2025 by rpki-client