$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json) Hash identifier: Uw0wkycVaRXgIdShZWLgpV+LQhfr65OrsPaUb5nYGXo= Subject key identifier: 52:24:BE:89:93:10:89:8C:39:07:4C:B9:47:9F:B0:63:1E:02:F6:C0 Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0AE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft Manifest number: 0ADF Signing time: Tue 08 Apr 2025 19:18:38 +0000 Manifest this update: Tue 08 Apr 2025 19:18:37 +0000 Manifest next update: Tue 15 Apr 2025 19:18:37 +0000 Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: mjkf3W4+n6W0Q/QlEA+e5jffNDy+4jSaq2QEN7Nqq8Y=) 2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: rV9YrFg6go0MiFJ8tUWSdfC7gBsVxBRYRUaLWwozGAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 19:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2792 (0xae8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3 Validity Not Before: Apr 8 19:18:37 2025 GMT Not After : Apr 15 19:18:37 2025 GMT Subject: CN=67f5768e-e79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:08:3d:e2:fa:f8:80:e1:23:5d:96:fa:31: d7:62:11:99:b8:3a:8f:ff:18:2b:06:8a:f1:a8:cb: 8c:e6:f9:56:26:43:31:0f:7f:d0:ab:7d:06:c2:eb: 3c:bb:d2:f4:2f:de:3e:80:99:92:f1:70:55:9e:43: 5d:02:64:5d:60:87:14:73:fd:72:ff:45:e7:39:6f: 6a:3b:ea:30:82:28:14:13:64:8f:a6:36:d7:a6:83: 44:62:4c:40:5a:d9:2a:4c:0b:a2:9d:bd:7f:f3:42: d2:65:06:f3:c9:c4:7c:f6:d6:0e:d6:21:de:3d:b5: 39:63:75:5f:16:46:ad:58:84:7d:b1:d9:37:a4:84: 82:64:b6:30:46:1d:40:65:46:b0:09:6b:a5:1f:b8: 49:fa:1a:12:de:da:0c:17:74:df:6b:2a:85:89:83: 2f:ee:c6:d2:d1:25:eb:fa:4a:19:cc:90:a7:8f:2d: 92:0b:ff:30:64:52:f4:a8:8e:82:49:5d:79:3b:52: fc:34:be:af:70:6a:36:0f:75:9a:8f:54:54:60:5e: bf:f5:84:fd:52:50:37:4c:33:05:36:c6:d5:44:df: 29:14:0a:7f:72:f1:1d:06:01:99:30:b1:49:f3:10: 3b:bf:e3:39:fe:57:5f:b0:aa:c8:df:b3:7b:1d:d7: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:24:BE:89:93:10:89:8C:39:07:4C:B9:47:9F:B0:63:1E:02:F6:C0 X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fb:31:3f:83:a2:93:09:10:b8:7c:02:e6:6c:c5:b0:f7:1d: 75:ef:b3:48:f2:68:60:35:e8:2b:f4:e7:0d:06:5b:49:4e:89: ef:53:a9:95:81:ce:a8:bb:94:a7:90:39:0a:1c:2e:cf:00:f8: 75:89:d7:7f:52:dc:5b:be:76:79:76:b6:c1:09:d6:50:e4:93: 4b:ed:11:c1:93:d0:24:88:df:90:50:bc:04:f7:25:81:e1:2f: 24:33:df:73:55:cf:1e:00:c3:37:ce:5d:60:b7:93:80:e8:a4: 4a:d9:cb:01:41:b3:6a:13:83:6f:63:f7:80:4c:2d:02:e5:08: 1c:6d:3f:c1:d3:1c:28:c0:a9:1d:51:28:89:30:f9:e0:99:21: ec:ee:bf:0f:20:95:ea:00:b5:ca:4a:70:5a:79:41:93:7d:0e: 21:68:68:0b:53:5e:fb:e7:7d:c1:8c:52:84:39:38:f1:fe:1a: a4:a8:0c:af:e0:90:91:fa:57:c1:ab:7d:fb:b3:eb:c1:9b:43: 29:64:be:4f:d6:c5:ca:0d:f6:e8:8b:a5:1d:f5:df:7e:6a:0a: f5:6f:3c:5f:ad:0b:3b:87:c0:43:ef:f4:c4:31:75:e1:1e:47: c4:84:28:a4:02:03:16:f4:66:f7:e7:6e:c5:d8:0a:a3:e6:bd: 2c:0d:16:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjUwNDA4MTkxODM3WhcNMjUwNDE1MTkxODM3WjAYMRYwFAYD VQQDEw02N2Y1NzY4ZS1lNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYMIPeL6+IDhI12W+jHXYhGZuDqP/xgrBorxqMuM5vlWJkMxD3/Qq30Gwus8 u9L0L94+gJmS8XBVnkNdAmRdYIcUc/1y/0XnOW9qO+owgigUE2SPpjbXpoNEYkxA WtkqTAuinb1/80LSZQbzycR89tYO1iHePbU5Y3VfFkatWIR9sdk3pISCZLYwRh1A ZUawCWulH7hJ+hoS3toMF3TfayqFiYMv7sbS0SXr+koZzJCnjy2SC/8wZFL0qI6C SV15O1L8NL6vcGo2D3Waj1RUYF6/9YT9UlA3TDMFNsbVRN8pFAp/cvEdBgGZMLFJ 8xA7v+M5/ldfsKrI37N7Hdc+owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIkvomT EImMOQdMuUefsGMeAvbAMB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5 SDRYaTFaRDkxZlFHZlF1OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr+zE/g6KTCRC4fALmbMWw9x1177NI8mhgNegr9OcNBltJTonvU6mV gc6ou5SnkDkKHC7PAPh1idd/UtxbvnZ5drbBCdZQ5JNL7RHBk9AkiN+QULwE9yWB 4S8kM99zVc8eAMM3zl1gt5OA6KRK2csBQbNqE4NvY/eATC0C5QgcbT/B0xwowKkd USiJMPngmSHs7r8PIJXqALXKSnBaeUGTfQ4haGgLU177533BjFKEOTjx/hqkqAyv 4JCR+lfBq337s+vBm0MpZL5P1sXKDfboi6Ud9d9+agr1bzxfrQs7h8BD7/TEMXXh HkfEhCikAgMW9Gb3527F2Aqj5r0sDRbv -----END CERTIFICATE-----Generated at Thu Apr 10 17:15:50 2025 by rpki-client