$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: NVefbQlY6Z3ng5JhcO9zZ5KqqHORZon8N90iEuRULrc= Subject key identifier: D8:DC:C5:E6:54:C4:0D:40:7A:7B:43:DC:7A:4A:2C:9C:6D:89:A1:A0 Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 0361 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 0352 Signing time: Mon 07 Apr 2025 00:40:42 +0000 Manifest this update: Mon 07 Apr 2025 00:40:42 +0000 Manifest next update: Mon 14 Apr 2025 00:40:42 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: oENCJDJJi84gkva9SqbKX8325bKgGMA6kuJ4m/qr5q0=) 2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: hWe9YX01SNRY++LLyLpvdVJBXAjQTAsl1yrwC2O21mY=) 3: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: KMxfzJx9x2vyWODkAAY5t+P6RpTmdDTdWRiAuSB0SyQ=) 4: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: EXWdfyEJT1f9crTXGSpRWWqKkko/3WFflLjeDGOj6XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 00:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9 Validity Not Before: Apr 7 00:40:42 2025 GMT Not After : Apr 14 00:40:42 2025 GMT Subject: CN=67f31f0a-78e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:92:4d:28:c4:9d:71:b7:d3:57:42:a2:88: 66:52:90:d2:92:7a:39:aa:da:0b:85:a2:4e:7e:c4: af:56:56:73:a4:9b:ca:41:88:6c:ee:5e:fb:50:d1: 70:25:0f:77:af:04:c5:57:3f:60:4e:28:9c:0b:44: 44:e3:26:41:f6:f9:c8:93:b5:a0:b3:9d:fe:ad:45: 90:01:26:27:60:c1:9f:56:51:6c:21:8a:53:7a:a6: 53:e9:c9:88:a0:15:69:8f:83:1b:7c:81:57:c0:ff: bd:c6:92:32:8f:1d:57:9d:62:37:02:2c:0a:f2:c1: 3f:df:80:62:50:7b:dc:14:07:95:e0:c8:c0:cf:53: 00:9d:2c:dd:87:cf:b3:9b:0d:04:1d:dc:51:10:9e: f5:3e:fe:ac:d6:ba:58:16:74:8d:d9:7b:7b:98:e5: ba:6a:d8:b9:4f:83:ea:86:69:3f:d1:b5:24:d4:44: 38:09:ce:0b:69:2f:c8:b1:78:9c:b9:e3:60:f7:db: ea:81:84:3e:b3:7f:62:28:9f:1b:8b:25:43:c4:62: a0:e6:db:b7:56:fd:ab:1c:8f:12:ee:0b:dc:b4:05: 5c:f7:9a:91:21:84:e5:9b:f5:5d:09:41:26:22:7c: 55:c1:74:7d:d7:1f:56:40:f0:ae:ba:5b:2c:f7:c7: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DC:C5:E6:54:C4:0D:40:7A:7B:43:DC:7A:4A:2C:9C:6D:89:A1:A0 X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:39:89:67:1a:bd:08:4b:dc:cb:5c:05:c2:67:6c:c0:12:8b: 62:1f:4f:a8:db:e1:1b:fc:8f:48:0e:b6:4a:e3:07:a6:cf:e8: 67:ba:10:5b:4f:9c:a5:88:3c:15:89:df:d1:66:f2:4d:26:a2: 22:6c:e3:e0:e6:c0:76:e6:b0:04:ec:bf:92:86:1e:3b:5c:f1: d4:31:86:ad:77:c1:07:6a:51:be:46:a0:7d:2e:87:b8:16:2b: 7e:5a:04:05:c2:eb:5c:31:88:e4:d0:3a:d7:73:49:bc:66:c4: 15:13:f8:58:1b:6e:c3:dc:ca:1e:1c:26:82:b7:dc:a8:6a:f6: 5a:f3:60:5a:68:66:ca:14:1c:bf:e7:c3:4a:66:86:87:79:10: f8:fe:f2:7d:45:b0:9d:fb:d8:eb:c0:3d:2b:41:97:03:b4:45: 05:24:8e:91:df:8e:2c:fc:29:28:70:1c:b2:2b:5f:19:d2:d6: ba:00:b0:51:50:fc:17:e0:02:ee:dc:22:cf:bd:90:05:bd:d7: c3:33:69:e8:d0:b3:00:cd:bb:11:20:b4:85:82:4a:74:43:76: 33:d6:39:08:f5:c5:3a:b0:6d:14:ae:21:80:3a:1e:73:85:9b: d8:0b:e0:b0:11:c1:68:df:52:9d:52:f7:aa:78:d9:0a:f2:3a: 8c:dd:81:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjUwNDA3MDA0MDQyWhcNMjUwNDE0MDA0MDQyWjAYMRYwFAYD VQQDEw02N2YzMWYwYS03OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9KSTSjEnXG301dCoohmUpDSkno5qtoLhaJOfsSvVlZzpJvKQYhs7l77UNFw JQ93rwTFVz9gTiicC0RE4yZB9vnIk7Wgs53+rUWQASYnYMGfVlFsIYpTeqZT6cmI oBVpj4MbfIFXwP+9xpIyjx1XnWI3AiwK8sE/34BiUHvcFAeV4MjAz1MAnSzdh8+z mw0EHdxREJ71Pv6s1rpYFnSN2Xt7mOW6ati5T4Pqhmk/0bUk1EQ4Cc4LaS/IsXic ueNg99vqgYQ+s39iKJ8biyVDxGKg5tu3Vv2rHI8S7gvctAVc95qRIYTlm/VdCUEm InxVwXR91x9WQPCuulss98dIQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjcxeZU xA1AentD3HpKLJxtiaGgMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnOYlnGr0IS9zLXAXCZ2zAEotiH0+o2+Eb/I9IDrZK4wemz+hnuhBb T5yliDwVid/RZvJNJqIibOPg5sB25rAE7L+Shh47XPHUMYatd8EHalG+RqB9Loe4 Fit+WgQFwutcMYjk0DrXc0m8ZsQVE/hYG27D3MoeHCaCt9yoavZa82BaaGbKFBy/ 58NKZoaHeRD4/vJ9RbCd+9jrwD0rQZcDtEUFJI6R344s/CkocByyK18Z0ta6ALBR UPwX4ALu3CLPvZAFvdfDM2no0LMAzbsRILSFgkp0Q3Yz1jkI9cU6sG0UriGAOh5z hZvYC+CwEcFo31KdUveqeNkK8jqM3YEt -----END CERTIFICATE-----Generated at Tue Apr 8 14:46:36 2025 by rpki-client