$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: aSGPBDe54r7DG9bvWZVYRizgRH+WzzWLE624z9LN1JQ= Subject key identifier: 31:96:DE:CE:D5:C4:13:84:53:75:F4:DD:A9:CD:E1:4E:03:3F:B1:77 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 0831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 0829 Signing time: Fri 04 Apr 2025 20:58:52 +0000 Manifest this update: Fri 04 Apr 2025 20:58:52 +0000 Manifest next update: Fri 11 Apr 2025 20:58:52 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: TXW7PM03vdp3k1Yac4ZjqqOqnBFyXsJ92eUMcmfaEek=) 2: 3443D714D46111ECB708EA24C4F9AE02.roa (hash: cLcDxJaeMDwKIqi4j9iCoiD5WtzTHERGSbREs6JVCus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF Validity Not Before: Apr 4 20:58:52 2025 GMT Not After : Apr 11 20:58:52 2025 GMT Subject: CN=67f0480c-39b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:bc:82:5f:92:fb:00:9d:e3:8b:02:b6:01: 33:91:35:0d:0b:21:d2:72:11:88:10:0a:13:fc:16: 3c:da:fb:78:d0:c8:6d:9d:20:4c:2a:c3:db:a6:ef: 4a:b5:47:91:e4:ee:b2:40:b0:b2:be:59:95:73:05: f0:c6:fe:fb:73:7d:c2:13:51:1f:ed:a4:c2:17:40: 02:cd:28:5b:99:35:d0:7b:1d:07:41:e1:0c:ad:ec: bd:f4:2d:3d:f6:5c:62:aa:59:4a:7c:cf:37:2d:a4: c0:1d:2b:2d:4e:b8:70:ba:03:64:c7:8e:9b:60:1f: 6b:06:66:4a:ed:61:09:00:27:47:e7:de:32:5f:c4: 09:ab:56:0c:fb:88:23:94:31:33:cd:3c:a5:7f:66: e2:ae:1b:0b:67:79:10:e6:4e:d8:a6:be:e4:2e:16: e5:fe:f8:73:75:13:07:aa:bc:b2:bc:35:b9:9d:5b: 22:9c:16:ef:d0:d7:48:7f:76:5a:bd:49:bd:61:c7: 1c:7d:16:53:35:b4:a3:ab:46:fc:ae:c7:8d:3b:13: c3:65:b6:72:a7:cd:93:59:bb:49:b8:d6:3e:e5:05: d1:c4:85:6f:93:f5:37:05:df:0b:d1:3e:53:2b:7d: be:a9:ef:87:d5:82:e4:50:89:7b:d9:6a:75:05:b8: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:DE:CE:D5:C4:13:84:53:75:F4:DD:A9:CD:E1:4E:03:3F:B1:77 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:5e:8d:db:2f:81:be:1e:df:11:44:2a:79:bd:e6:0d:0a:41: d0:0f:be:f8:e3:b6:a5:bd:c4:4d:e2:83:ab:f5:ae:47:4d:ac: 93:00:c8:c7:78:a8:fb:3a:81:8f:2b:e7:06:23:4f:f8:11:ba: 0e:a5:b0:01:83:e0:a7:f8:32:15:48:38:a2:9f:71:9c:8a:3f: de:b1:89:25:27:3b:45:5a:ca:81:be:ba:1b:c0:3b:a5:fd:2f: 91:d4:3f:be:e3:56:d3:7e:bc:fd:94:a0:4c:8d:bb:6b:d8:86: 9d:ae:b7:4e:11:13:6d:9f:3b:05:06:80:e6:13:41:72:4c:d1: 74:84:09:07:19:dd:12:28:06:e9:18:bd:25:06:9f:ee:84:1b: 8f:8d:e5:81:b5:8f:13:3f:29:25:73:28:8f:b2:c4:14:95:ac: a1:22:50:52:68:7e:a8:82:19:10:37:f3:f3:8a:9a:a3:7f:3f: c3:49:0b:3c:c5:06:1c:e7:c8:31:a3:99:f5:4a:76:0f:ac:b3: 10:2f:75:2d:92:88:c3:66:7e:64:05:8e:2d:16:8b:b3:bd:d5: ce:5f:7f:45:24:29:5f:d2:f0:25:a6:03:ff:b0:fe:24:21:36: 6d:b9:46:84:e9:b4:5e:7e:7a:3f:28:17:80:d7:e0:78:22:dd: 46:7e:22:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUwNDA0MjA1ODUyWhcNMjUwNDExMjA1ODUyWjAYMRYwFAYD VQQDEw02N2YwNDgwYy0zOWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO68gl+S+wCd44sCtgEzkTUNCyHSchGIEAoT/BY82vt40MhtnSBMKsPbpu9K tUeR5O6yQLCyvlmVcwXwxv77c33CE1Ef7aTCF0ACzShbmTXQex0HQeEMrey99C09 9lxiqllKfM83LaTAHSstTrhwugNkx46bYB9rBmZK7WEJACdH594yX8QJq1YM+4gj lDEzzTylf2birhsLZ3kQ5k7Ypr7kLhbl/vhzdRMHqryyvDW5nVsinBbv0NdIf3Za vUm9YcccfRZTNbSjq0b8rseNOxPDZbZyp82TWbtJuNY+5QXRxIVvk/U3Bd8L0T5T K32+qe+H1YLkUIl72Wp1Bbih4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGW3s7V xBOEU3X03anN4U4DP7F3MB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnXo3bL4G+Ht8RRCp5veYNCkHQD77447alvcRN4oOr9a5HTayTAMjH eKj7OoGPK+cGI0/4EboOpbABg+Cn+DIVSDiin3Gcij/esYklJztFWsqBvrobwDul /S+R1D++41bTfrz9lKBMjbtr2IadrrdOERNtnzsFBoDmE0FyTNF0hAkHGd0SKAbp GL0lBp/uhBuPjeWBtY8TPyklcyiPssQUlayhIlBSaH6oghkQN/Pzipqjfz/DSQs8 xQYc58gxo5n1SnYPrLMQL3UtkojDZn5kBY4tFouzvdXOX39FJClf0vAlpgP/sP4k ITZtuUaE6bRefno/KBeA1+B4It1GfiIm -----END CERTIFICATE-----Generated at Sat Apr 5 11:40:02 2025 by rpki-client