$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft File: Wnot3qYsiQ6QHx3NQEb814zAtBw.mft (raw, json) Hash identifier: MSyB26xEXVdh/Hcd0mLGkcsKS6mH/xHxu/3SS6lGdis= Subject key identifier: FF:4E:34:AE:D3:DA:6E:D3:3B:CE:99:7F:F6:F2:63:FD:AA:7B:FF:68 Authority key identifier: 5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C Certificate issuer: /CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft Manifest number: 0672 Signing time: Wed 02 Apr 2025 22:19:13 +0000 Manifest this update: Wed 02 Apr 2025 22:19:13 +0000 Manifest next update: Wed 09 Apr 2025 22:19:13 +0000 Files and hashes: 1: Wnot3qYsiQ6QHx3NQEb814zAtBw.crl (hash: sKcNUOg31aV/+E6NZZ5reHx0uaUuhun3UEayjvgHs/I=) 2: 7C7FDC646FF711EBA7506161C4F9AE02.roa (hash: +n5J+qx7tpV2H+mHVC6O7TSh7QMWtrt2mfYoCJ9j4Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89AF Validity Not Before: Apr 2 22:19:13 2025 GMT Not After : Apr 9 22:19:13 2025 GMT Subject: CN=67edb7e1-7aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:fc:3f:a9:dc:eb:c7:a9:11:3f:2f:e5:8e: 34:a2:06:bc:c0:16:23:5a:a8:e6:f8:45:1b:20:6e: 7f:bf:d5:61:c1:70:55:68:27:b6:d7:0a:46:43:61: 1a:04:5f:d9:7f:b8:bc:7a:6f:89:72:ff:30:2b:28: a2:85:56:48:8b:50:8e:58:d2:b4:f2:d0:df:84:06: eb:4e:e2:32:cb:c9:8f:44:be:c9:92:d4:52:6e:79: 3b:ad:db:80:05:ce:03:6e:53:80:29:62:eb:d9:6c: f7:86:fe:5d:a7:31:60:f6:da:69:ab:20:c0:28:1f: ee:6a:76:a2:3f:c4:c9:9f:7d:1b:d5:ca:80:85:01: 38:67:59:bf:e8:59:9f:90:1b:20:bb:a0:5f:1b:b3: 46:43:cc:d0:7f:93:2b:43:c4:e0:54:5e:79:84:15: 34:f8:f6:83:79:f5:39:52:55:2c:2f:92:d3:93:34: 46:cc:b4:35:ce:87:31:03:05:22:10:01:af:49:db: cb:4e:9b:99:50:06:f3:77:cb:a1:7d:5f:03:2c:d2: 7a:43:48:09:4d:13:42:87:bc:dd:04:4d:30:f8:ea: 9a:cc:79:3c:65:3f:2a:51:a9:e9:66:46:8b:6b:59: 69:3a:b0:6f:cb:6d:ef:1b:d9:87:85:60:91:2b:ee: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4E:34:AE:D3:DA:6E:D3:3B:CE:99:7F:F6:F2:63:FD:AA:7B:FF:68 X509v3 Authority Key Identifier: keyid:5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:af:c5:ce:2e:a5:5c:e7:0c:d8:40:47:60:12:c6:bf:70:a7: d5:d8:97:6c:f3:df:1c:82:f2:a3:12:e1:57:e8:46:cc:8f:88: 98:cc:83:37:35:ca:5a:66:eb:5f:b5:c1:f9:6b:f6:57:41:8b: 53:1d:63:ac:dd:39:57:34:9a:18:18:c5:e3:f9:d7:b4:93:b5: e8:c4:48:59:bd:24:4c:97:be:40:7b:f4:9c:38:5d:a5:12:3c: 77:3c:ab:a7:89:1b:4b:2f:b8:24:83:f5:75:9f:9f:0e:d4:60: 89:3d:c9:70:44:1b:e9:cf:36:65:c4:2a:e0:17:e3:d4:25:30: bf:90:bb:5e:84:a7:8e:72:9a:8e:36:52:dd:0d:b0:4b:6f:4f: ca:7c:d7:d1:75:2b:77:9a:53:29:13:a6:c5:c8:4e:64:71:9c: 26:61:ab:ae:ef:06:07:56:f6:b4:f5:2b:38:0d:61:03:51:24: 71:c9:1d:0e:68:0b:95:a0:64:75:98:f2:62:06:24:51:56:a0: 96:31:b1:ab:c5:12:dd:62:a8:0c:23:02:f0:66:aa:d5:a9:16: c6:c9:ed:12:50:e3:4c:11:b2:92:0c:b7:b6:e8:b3:91:dd:02: 6f:f1:7f:0f:d9:95:ad:c1:3b:54:50:d5:b6:b3:5f:cc:57:a6: 48:b9:c4:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5QUYxMTAvBgNVBAUTKDVBN0EyRERFQTYyQzg5MEU5MDFGMURDRDQwNDZGQ0Q3 OENDMEI0MUMwHhcNMjUwNDAyMjIxOTEzWhcNMjUwNDA5MjIxOTEzWjAYMRYwFAYD VQQDEw02N2VkYjdlMS03YWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHj8P6nc68epET8v5Y40oga8wBYjWqjm+EUbIG5/v9VhwXBVaCe21wpGQ2Ea BF/Zf7i8em+Jcv8wKyiihVZIi1COWNK08tDfhAbrTuIyy8mPRL7JktRSbnk7rduA Bc4DblOAKWLr2Wz3hv5dpzFg9tppqyDAKB/uanaiP8TJn30b1cqAhQE4Z1m/6Fmf kBsgu6BfG7NGQ8zQf5MrQ8TgVF55hBU0+PaDefU5UlUsL5LTkzRGzLQ1zocxAwUi EAGvSdvLTpuZUAbzd8uhfV8DLNJ6Q0gJTRNCh7zdBE0w+OqazHk8ZT8qUanpZkaL a1lpOrBvy23vG9mHhWCRK+7uawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9ONK7T 2m7TO86Zf/byY/2qe/9oMB8GA1UdIwQYMBaAFFp6Ld6mLIkOkB8dzUBG/NeMwLQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlBRi8xODYwQ0ExQTZG RjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lRNlFIeDNOUUViODE0ekF0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dub3QzcVlzaVE2UUh4M05RRWI4MTR6QXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlBRi8xODYwQ0ExQTZGRjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lR NlFIeDNOUUViODE0ekF0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACr8XOLqVc5wzYQEdgEsa/cKfV2Jds898cgvKjEuFX6EbMj4iYzIM3 NcpaZutftcH5a/ZXQYtTHWOs3TlXNJoYGMXj+de0k7XoxEhZvSRMl75Ae/ScOF2l Ejx3PKuniRtLL7gkg/V1n58O1GCJPclwRBvpzzZlxCrgF+PUJTC/kLtehKeOcpqO NlLdDbBLb0/KfNfRdSt3mlMpE6bFyE5kcZwmYauu7wYHVva09Ss4DWEDUSRxyR0O aAuVoGR1mPJiBiRRVqCWMbGrxRLdYqgMIwLwZqrVqRbGye0SUONMEbKSDLe26LOR 3QJv8X8P2ZWtwTtUUNW2s1/MV6ZIucTb -----END CERTIFICATE-----Generated at Fri Apr 4 21:52:09 2025 by rpki-client