$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft File: WFBPIARWFTaBikTQvkFutQVej0g.mft (raw, json) Hash identifier: oRp+I4lqIcfO2kRL2nJBXQXF2M/WegHDHqXRmRFzePs= Subject key identifier: 85:A2:2F:05:92:C3:07:10:58:84:82:1B:28:B5:D0:61:44:69:61:FE Authority key identifier: 58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 Certificate issuer: /CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Certificate serial: 1940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft Manifest number: 2C01 Signing time: Mon 14 Apr 2025 16:27:05 +0000 Manifest this update: Mon 14 Apr 2025 16:27:04 +0000 Manifest next update: Mon 21 Apr 2025 16:27:04 +0000 Files and hashes: 1: WFBPIARWFTaBikTQvkFutQVej0g.crl (hash: mn616OElsUNP52bfv6uWtsqJy+qyc+TL6qRDqYWUrws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6464 (0x1940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Validity Not Before: Apr 14 16:27:04 2025 GMT Not After : Apr 21 16:27:04 2025 GMT Subject: CN=67fd3759-ad27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:81:57:52:de:67:63:7f:ff:e8:68:a4:7a: 4d:15:8a:02:e0:3e:94:45:b9:17:3e:78:14:e7:57: 4b:9a:32:41:98:51:a8:09:a4:b8:cf:fd:f0:fd:d5: 2e:9f:10:30:29:20:7a:65:8f:ca:2a:b4:ff:22:64: 86:e1:21:5b:b4:04:ea:9d:cd:55:72:88:11:a4:9e: f4:e9:08:48:25:bb:5e:c7:06:3a:ff:6d:09:8c:90: 04:e8:3d:a1:53:cd:45:6c:45:76:b2:58:92:c6:f9: 87:18:3d:55:14:47:84:02:3c:e8:f7:2f:de:00:20: e7:1a:d4:bc:05:35:f4:3a:b8:e5:80:15:cc:16:3a: b9:a1:9b:d0:c9:59:15:ab:5d:fe:aa:1f:21:d2:ea: a8:11:6b:45:cd:9d:6b:59:d8:d2:b7:01:fc:91:7a: d3:1a:fa:91:50:7b:10:1a:ee:3f:5b:65:8c:93:79: 53:09:5b:b7:1c:69:23:6a:8f:c7:d1:5c:82:a6:cd: 65:c4:e3:6d:88:cb:bc:83:98:fa:09:ea:fb:96:c0: e9:81:86:b2:63:58:6a:aa:56:6e:6c:20:f1:3c:62: b8:c7:06:d8:e1:00:76:dc:d8:23:3b:a1:ce:3d:d2: 19:1b:8b:d3:f7:b0:c7:f3:13:8e:57:5e:9e:ee:4d: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A2:2F:05:92:C3:07:10:58:84:82:1B:28:B5:D0:61:44:69:61:FE X509v3 Authority Key Identifier: keyid:58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3b:bc:29:ac:f7:ea:fd:f6:5a:dd:69:fb:14:af:99:3a:54: 04:79:07:26:1b:9a:f9:a1:a7:b8:a5:8b:66:7a:8f:bc:87:ae: 56:48:04:8d:f8:da:6b:e4:8f:41:c8:6e:65:fc:8d:0c:c9:4b: bf:54:a4:04:86:a3:3e:d1:e2:f1:2a:33:01:df:35:12:48:57: 56:da:51:b8:b7:1a:08:e8:7c:74:74:4d:47:65:ff:67:5a:5d: a3:af:39:29:ca:5e:78:78:a5:a9:16:da:7d:f4:09:96:9f:9d: 64:c6:a0:fa:f4:06:9a:1b:96:65:10:82:4b:5d:fa:b5:ec:dc: 08:80:e9:a8:59:ee:02:8d:7d:c2:4a:66:a3:4d:6d:d7:a5:ed: 07:21:46:ed:77:70:b9:84:08:b8:2d:c6:94:0d:9f:4d:cf:d0: 95:42:24:e6:ec:97:d9:da:2a:77:91:ff:2b:47:a5:99:81:4b: 2d:1e:1d:92:da:60:b0:50:00:c4:36:35:df:58:d5:f1:b9:ac: 69:b0:b8:6f:c3:38:14:8c:8d:d1:f2:30:a1:77:f4:bd:36:b4: 9d:e3:d1:25:10:11:fa:de:c6:3d:71:bb:d9:49:4b:50:12:d4: 33:f8:39:54:81:2a:e0:50:d0:dc:1f:d3:f9:68:2f:6b:b2:50: c4:47:83:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKDU4NTA0RjIwMDQ1NjE1MzY4MThBNDREMEJFNDE2RUI1 MDU1RThGNDgwHhcNMjUwNDE0MTYyNzA0WhcNMjUwNDIxMTYyNzA0WjAYMRYwFAYD VQQDEw02N2ZkMzc1OS1hZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzziBV1LeZ2N//+hopHpNFYoC4D6URbkXPngU51dLmjJBmFGoCaS4z/3w/dUu nxAwKSB6ZY/KKrT/ImSG4SFbtATqnc1VcogRpJ706QhIJbtexwY6/20JjJAE6D2h U81FbEV2sliSxvmHGD1VFEeEAjzo9y/eACDnGtS8BTX0OrjlgBXMFjq5oZvQyVkV q13+qh8h0uqoEWtFzZ1rWdjStwH8kXrTGvqRUHsQGu4/W2WMk3lTCVu3HGkjao/H 0VyCps1lxONtiMu8g5j6Cer7lsDpgYayY1hqqlZubCDxPGK4xwbY4QB23NgjO6HO PdIZG4vT97DH8xOOV16e7k22DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWiLwWS wwcQWISCGyi10GFEaWH+MB8GA1UdIwQYMBaAFFhQTyAEVhU2gYpE0L5BbrUFXo9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZUYUJpa1RRdmtGdXRRVmVq MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGQlBJQVJXRlRhQmlrVFF2a0Z1dFFWZWowZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZU YUJpa1RRdmtGdXRRVmVqMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtO7wprPfq/fZa3Wn7FK+ZOlQEeQcmG5r5oae4pYtmeo+8h65WSASN +Npr5I9ByG5l/I0MyUu/VKQEhqM+0eLxKjMB3zUSSFdW2lG4txoI6Hx0dE1HZf9n Wl2jrzkpyl54eKWpFtp99AmWn51kxqD69AaaG5ZlEIJLXfq17NwIgOmoWe4CjX3C SmajTW3Xpe0HIUbtd3C5hAi4LcaUDZ9Nz9CVQiTm7JfZ2ip3kf8rR6WZgUstHh2S 2mCwUADENjXfWNXxuaxpsLhvwzgUjI3R8jChd/S9NrSd49ElEBH63sY9cbvZSUtQ EtQz+DlUgSrgUNDcH9P5aC9rslDER4OO -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:38 2025 by rpki-client