$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft File: Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json) Hash identifier: XmDd0JyCd8TE4aJok6t4uFzvpU4B5OUEBXvKG1u4suc= Subject key identifier: 1D:48:5B:FA:35:FD:B5:85:9A:7F:43:B3:BB:E9:6D:47:09:4C:44:D5 Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft Manifest number: 0674 Signing time: Wed 02 Apr 2025 22:19:55 +0000 Manifest this update: Wed 02 Apr 2025 22:19:55 +0000 Manifest next update: Wed 09 Apr 2025 22:19:55 +0000 Files and hashes: 1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: wDBltUycdfitCTi2yhZMPwGuQvl4BT5X/QrR3fmAqVI=) 2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: nbo+aRpaKhKrr9ll2EHatjWC4IcNme0KBXjobYgnQ18=) 3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: K06objCZTkF4R2m4Es3RoZwatUsJt3KTozD/Y+CKlGA=) 4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: dk7hZcw60oBzYDsH/VfIiPOBe+wfd9KvvAO7IK7LLKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3260 Validity Not Before: Apr 2 22:19:55 2025 GMT Not After : Apr 9 22:19:55 2025 GMT Subject: CN=67edb80b-0085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:50:06:d0:17:06:54:29:2c:71:48:2e:f7: f0:f4:e6:9d:4d:cb:92:a9:32:fd:bc:a4:90:54:52: 07:9d:1a:bc:6e:6e:fc:aa:7b:17:b4:6c:a8:eb:48: 4f:de:c9:fb:e9:d8:4a:f4:e3:55:dd:97:1f:a2:5a: e5:95:bb:c5:7d:5d:43:8e:78:42:43:08:57:e1:9e: 16:e2:bb:b7:a1:43:cd:77:3a:c9:cd:b1:0c:25:67: 02:5d:f8:e5:0a:14:ef:2d:16:e9:c2:a1:b3:07:a1: f2:c9:ca:3c:6d:dc:f1:9e:ae:35:7d:ca:f5:62:92: 6d:f9:71:17:6a:01:8d:76:0f:1f:5f:95:ea:89:9a: 86:0d:b0:4a:57:75:97:43:22:45:a9:a5:6e:2f:b2: d5:6a:08:f6:0e:ee:83:9d:c7:3f:43:0a:1a:91:30: a9:cb:e5:f1:ab:5f:dc:c4:2b:40:1b:e9:c7:e0:08: 9a:f4:5b:1f:46:98:c7:af:1b:69:a3:6d:6e:21:3f: cc:1b:9f:c4:42:9d:dc:04:3d:e2:bc:ed:c5:72:5d: 30:f5:dc:72:34:16:2e:56:5b:0b:6d:d0:6b:01:a7: 8f:5e:04:64:28:75:42:e6:b3:57:2e:4a:a2:7f:4e: 8c:7a:ce:11:4e:f6:92:ee:25:28:f4:9d:ab:18:d3: a3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:48:5B:FA:35:FD:B5:85:9A:7F:43:B3:BB:E9:6D:47:09:4C:44:D5 X509v3 Authority Key Identifier: keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:21:20:e4:71:a6:df:cf:a5:bd:58:cb:6c:69:fa:5b:54:96: 7e:10:0a:2c:21:2d:c6:3b:85:41:db:f7:a0:1b:87:82:3c:a9: fd:4c:8d:45:60:f4:61:c6:5e:65:45:82:1c:9b:af:b8:26:fb: e4:23:77:71:cc:2d:21:55:f6:56:a1:d1:db:96:cf:f3:c0:84: 86:b8:61:91:07:27:ee:df:4e:15:df:3e:71:b4:65:70:e9:b3: 7d:02:34:b1:73:66:d0:1f:ce:c1:41:50:1c:34:0b:48:f2:57: 56:5c:08:28:59:f4:c1:e1:fb:8d:4b:7a:ca:63:58:dc:ee:45: 77:7c:aa:60:45:be:71:ca:b4:de:e5:8c:34:64:3a:b8:de:a1: 55:fa:48:55:63:b2:33:41:db:5d:cd:5b:dd:06:19:0b:25:ec: b5:ba:e1:45:af:69:bf:0e:e2:47:8f:78:ba:67:18:32:ac:5b: fa:cf:1c:84:7c:1b:42:93:3b:2e:ae:fd:cd:48:80:b5:bb:05: ac:88:df:8b:3f:cc:6f:13:86:17:3b:b7:6c:b7:48:f1:0a:08: 04:f5:54:fc:cc:b4:8a:d9:16:d8:6c:01:22:f7:dc:e0:70:ba: 80:12:52:ec:18:ff:44:8e:75:e0:9f:a4:10:b2:86:24:75:fc: ed:06:75:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhBQUM2NzBGRkVG QzdCNjlBMUIwHhcNMjUwNDAyMjIxOTU1WhcNMjUwNDA5MjIxOTU1WjAYMRYwFAYD VQQDEw02N2VkYjgwYi0wMDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaVQBtAXBlQpLHFILvfw9OadTcuSqTL9vKSQVFIHnRq8bm78qnsXtGyo60hP 3sn76dhK9ONV3ZcfolrllbvFfV1DjnhCQwhX4Z4W4ru3oUPNdzrJzbEMJWcCXfjl ChTvLRbpwqGzB6Hyyco8bdzxnq41fcr1YpJt+XEXagGNdg8fX5XqiZqGDbBKV3WX QyJFqaVuL7LVagj2Du6Dncc/QwoakTCpy+Xxq1/cxCtAG+nH4Aia9FsfRpjHrxtp o21uIT/MG5/EQp3cBD3ivO3Fcl0w9dxyNBYuVlsLbdBrAaePXgRkKHVC5rNXLkqi f06Mes4RTvaS7iUo9J2rGNOj+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1IW/o1 /bWFmn9Ds7vpbUcJTETVMB8GA1UdIwQYMBaAFFrJfJEpmi+pyM7YqsZw/+/Htpob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI2MC9ENzhEMkFBMjcx QTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2bkl6dGlxeG5EXzc4ZTJt aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzbDhrU21hTDZuSXp0aXF4bkRfNzhlMm1ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzI2MC9ENzhEMkFBMjcxQTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2 bkl6dGlxeG5EXzc4ZTJtaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfISDkcabfz6W9WMtsafpbVJZ+EAosIS3GO4VB2/egG4eCPKn9TI1F YPRhxl5lRYIcm6+4JvvkI3dxzC0hVfZWodHbls/zwISGuGGRByfu304V3z5xtGVw 6bN9AjSxc2bQH87BQVAcNAtI8ldWXAgoWfTB4fuNS3rKY1jc7kV3fKpgRb5xyrTe 5Yw0ZDq43qFV+khVY7IzQdtdzVvdBhkLJey1uuFFr2m/DuJHj3i6ZxgyrFv6zxyE fBtCkzsurv3NSIC1uwWsiN+LP8xvE4YXO7dst0jxCggE9VT8zLSK2RbYbAEi99zg cLqAElLsGP9EjnXgn6QQsoYkdfztBnWi -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:11 2025 by rpki-client