$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json) Hash identifier: ZbsKTPAhPXYGRGc7l8U52LTjK72yupEfINx28WWgM4k= Subject key identifier: F0:A1:1E:9A:DA:74:5A:67:0C:2C:71:40:BC:E4:3F:4B:48:EA:8B:57 Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft Manifest number: 01A7 Signing time: Sat 05 Apr 2025 02:49:14 +0000 Manifest this update: Sat 05 Apr 2025 02:49:13 +0000 Manifest next update: Sat 12 Apr 2025 02:49:13 +0000 Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: eKwqtnDeovDGgYoMOjLdOdlyvJhvCA2JVBtrLiqxOlY=) 2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: wKqJN3HUJdyX5elWCqbGG36RonSJ+MBkLKESMLKx2qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30 Validity Not Before: Apr 5 02:49:13 2025 GMT Not After : Apr 12 02:49:13 2025 GMT Subject: CN=67f09a29-88ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3f:1b:c5:e5:96:54:32:91:6d:6d:9d:a9:b6: 56:77:00:37:5a:4b:c5:2f:1b:1b:c9:98:62:69:2c: 5f:d4:65:21:c8:e5:db:a5:34:ca:fd:c6:25:94:55: 9d:1a:67:a4:08:b0:99:40:e8:6b:0c:2d:ca:b0:81: 74:90:4c:80:1a:f9:e9:ea:b9:80:72:3e:f7:61:86: ce:87:d3:36:fe:f2:bd:5d:04:f5:85:eb:15:4a:86: 9d:c3:92:8d:ca:94:4c:c6:21:ba:f4:6f:7c:b1:8c: 84:0c:09:c2:36:73:ab:cb:f7:34:6a:48:e2:c4:93: bf:2c:94:d3:47:0d:7a:d4:5c:69:38:fd:6b:9a:a9: 63:ad:4a:8d:4b:5d:55:3c:e9:05:71:df:28:19:80: 4b:1d:dd:1d:14:bc:17:f7:b6:63:0a:d6:f5:a1:21: 78:0f:90:5b:2e:a9:01:02:cb:3b:9f:a9:aa:04:c0: 18:97:5f:76:63:26:0d:5a:2d:c3:70:d0:76:5e:e3: 4f:f8:45:3c:d4:5f:f2:71:b7:9f:e0:e5:d3:ab:f4: 95:42:16:8e:06:26:8a:60:9a:7c:5e:f3:dc:c1:f2: b9:d6:fc:b1:08:ed:b9:96:a8:e8:dc:d1:3a:62:01: 0a:82:f8:01:2f:30:f4:86:42:6f:d1:10:8c:12:d0: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A1:1E:9A:DA:74:5A:67:0C:2C:71:40:BC:E4:3F:4B:48:EA:8B:57 X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:54:ed:02:8a:4a:eb:19:fa:ae:f7:07:68:ae:07:56:1a:17: 24:30:39:21:28:81:57:93:88:ec:a6:98:4c:e1:51:fe:34:ad: c9:de:5c:e9:b8:f4:88:31:3a:0b:d1:10:f0:ca:76:ad:fd:6c: 29:2e:c5:66:20:8e:ab:54:12:f8:57:3f:7d:3f:73:0f:92:b4: ab:6d:fa:88:27:84:8f:0b:e5:5e:1f:8f:46:f7:08:39:5c:d6: d1:09:b5:bd:6d:8d:06:9a:ac:b5:fe:2a:18:10:b0:fd:cd:39: e3:d1:36:3c:14:3d:e1:5f:29:ec:24:10:88:42:a3:17:53:f6: 02:43:7d:5b:88:bf:bd:f1:aa:be:68:9f:b7:71:5e:63:55:48: f5:b7:0a:ca:b1:85:80:48:d1:08:34:09:11:db:ce:ca:f4:5b: 9b:ee:93:53:6a:1a:a3:a7:a8:57:2d:ad:c5:3c:47:34:14:bb: a5:e7:91:6d:fd:4b:a4:f2:34:02:33:53:a0:68:bc:2a:45:1b: 85:83:23:39:b4:71:d5:ae:4e:e9:d5:8c:b6:bf:21:e0:b8:8b: fd:4d:1c:85:d7:00:8c:76:01:31:a3:c5:04:83:6b:a2:89:e4: d2:d3:3b:0f:15:20:a3:41:e5:50:f3:fe:7d:35:c9:57:a8:1c: f2:30:87:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjUwNDA1MDI0OTEzWhcNMjUwNDEyMDI0OTEzWjAYMRYwFAYD VQQDEw02N2YwOWEyOS04OGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6D8bxeWWVDKRbW2dqbZWdwA3WkvFLxsbyZhiaSxf1GUhyOXbpTTK/cYllFWd GmekCLCZQOhrDC3KsIF0kEyAGvnp6rmAcj73YYbOh9M2/vK9XQT1hesVSoadw5KN ypRMxiG69G98sYyEDAnCNnOry/c0akjixJO/LJTTRw161FxpOP1rmqljrUqNS11V POkFcd8oGYBLHd0dFLwX97ZjCtb1oSF4D5BbLqkBAss7n6mqBMAYl192YyYNWi3D cNB2XuNP+EU81F/ycbef4OXTq/SVQhaOBiaKYJp8XvPcwfK51vyxCO25lqjo3NE6 YgEKgvgBLzD0hkJv0RCMEtBJ/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPChHpra dFpnDCxxQLzkP0tI6otXMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE ZEliVlZEVVliY3hYYWhLRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhVO0CikrrGfqu9wdorgdWGhckMDkhKIFXk4jspphM4VH+NK3J3lzp uPSIMToL0RDwynat/WwpLsVmII6rVBL4Vz99P3MPkrSrbfqIJ4SPC+VeH49G9wg5 XNbRCbW9bY0Gmqy1/ioYELD9zTnj0TY8FD3hXynsJBCIQqMXU/YCQ31biL+98aq+ aJ+3cV5jVUj1twrKsYWASNEINAkR287K9Fub7pNTahqjp6hXLa3FPEc0FLul55Ft /Uuk8jQCM1OgaLwqRRuFgyM5tHHVrk7p1Yy2vyHguIv9TRyF1wCMdgExo8UEg2ui ieTS0zsPFSCjQeVQ8/59NclXqBzyMIfO -----END CERTIFICATE-----Generated at Sat Apr 5 21:40:22 2025 by rpki-client