$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft File: WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json) Hash identifier: 91ia++NrEtT/Hb0VwqjCExGU2U9wicg0akiR8U89LWM= Subject key identifier: 1E:3B:7C:2B:ED:61:88:0A:4C:4E:D6:0A:78:10:CC:76:EE:8C:4E:ED Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF Certificate issuer: /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF Certificate serial: 055A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft Manifest number: 0556 Signing time: Fri 28 Mar 2025 23:40:23 +0000 Manifest this update: Fri 28 Mar 2025 23:40:22 +0000 Manifest next update: Fri 04 Apr 2025 23:40:22 +0000 Files and hashes: 1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: lKezeqVD5K29p1S18JmXDBEiXEfDqjWlel0Tj4kudkc=) 2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: 6TM0Kz09gMjbJeG9e3468lar07wNf8zG8NNQJe1azz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F742D Validity Not Before: Mar 28 23:40:22 2025 GMT Not After : Apr 4 23:40:22 2025 GMT Subject: CN=67e73367-ea91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:8c:65:f5:c9:83:bf:69:5f:04:27:62:d6: 6c:02:96:b9:6e:00:5c:fc:cd:e5:04:e3:b7:14:16: 2f:25:bf:66:74:da:87:3d:3a:4b:82:b3:aa:2c:0d: 26:56:ce:a1:69:d5:e7:19:77:b9:6f:59:91:cf:70: eb:5c:54:99:53:25:e3:0d:47:38:cb:f5:a7:a4:f0: 75:06:32:31:02:3a:6b:7e:70:a1:00:05:cd:54:7a: c0:46:33:5c:67:3b:ee:b0:13:43:4d:be:1a:b9:84: 15:68:0d:e7:47:21:e9:0c:52:98:6d:23:aa:49:4c: b4:6b:79:54:a6:58:a7:b4:3b:d1:d3:c6:1a:62:cb: 5f:2e:8e:91:7a:ff:0f:69:e9:b5:8c:bf:2a:76:a7: 79:a3:d8:d7:7d:21:8f:d0:4e:a3:b8:f0:74:19:1e: 64:20:3b:1b:55:46:1e:b1:36:7b:30:64:18:70:ef: 27:6e:67:ef:9a:57:c6:1b:a4:74:9e:7e:53:fb:8d: b3:47:1a:1f:b8:92:7b:99:68:84:d1:1b:2e:71:12: 13:a8:62:36:50:d1:db:c4:b5:bf:6e:29:82:f5:4f: b4:87:2d:18:f4:0d:71:c2:cf:78:36:7e:12:f7:86: f5:ac:e4:6b:7f:b8:e6:10:70:8c:9a:16:f8:cf:31: e7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3B:7C:2B:ED:61:88:0A:4C:4E:D6:0A:78:10:CC:76:EE:8C:4E:ED X509v3 Authority Key Identifier: keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4c:c0:44:32:a2:1d:24:9b:40:d2:13:b5:83:b9:ae:48:de: 24:92:6a:25:c3:ea:cf:5d:6f:49:cb:02:22:ad:92:b7:61:95: e8:3c:fd:5f:6e:a3:4d:a7:0a:71:1a:03:23:0e:ad:df:df:fc: 1c:fd:e5:78:61:c1:55:f7:17:52:72:e1:cf:db:79:7f:4a:92: 8d:ce:b6:47:c7:f6:db:f6:25:8d:f7:29:37:97:43:3f:31:07: 24:94:ec:e2:d3:a6:0b:80:b2:5d:74:4f:f9:9d:47:c4:92:c0: d7:27:ba:4b:0c:84:3f:bd:31:97:2c:a6:27:cc:29:f1:dd:e6: 63:ce:40:6c:9c:2c:77:f6:d4:eb:56:a3:6b:d1:da:6f:bd:e0: d6:58:ee:f6:4a:c5:dd:32:d4:9b:73:ca:e2:0a:bb:77:40:44: ae:fc:99:85:69:89:12:12:1d:c6:0e:aa:65:1f:9f:dd:f9:e3: 65:6a:f4:7f:66:0f:8e:48:03:1c:d4:89:72:73:d0:d3:cf:f9: 2c:24:f6:22:69:fb:96:ad:12:ce:75:40:31:1d:4b:08:94:87: 91:04:32:23:27:37:0a:0b:7a:07:b0:14:d3:89:b2:49:21:36: e8:32:4d:94:eb:51:1b:ac:f8:84:0b:b9:2e:ab:c8:00:cf:19: 2a:13:e6:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc0MkQxMTAvBgNVBAUTKDU4MjIyNzAzNDBGMzJBRjhENzA5MjI2MTBCNzA4MEZD MzQxNzdBQ0YwHhcNMjUwMzI4MjM0MDIyWhcNMjUwNDA0MjM0MDIyWjAYMRYwFAYD VQQDEw02N2U3MzM2Ny1lYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHiMZfXJg79pXwQnYtZsApa5bgBc/M3lBOO3FBYvJb9mdNqHPTpLgrOqLA0m Vs6hadXnGXe5b1mRz3DrXFSZUyXjDUc4y/WnpPB1BjIxAjprfnChAAXNVHrARjNc ZzvusBNDTb4auYQVaA3nRyHpDFKYbSOqSUy0a3lUplintDvR08YaYstfLo6Rev8P aem1jL8qdqd5o9jXfSGP0E6juPB0GR5kIDsbVUYesTZ7MGQYcO8nbmfvmlfGG6R0 nn5T+42zRxofuJJ7mWiE0RsucRITqGI2UNHbxLW/bimC9U+0hy0Y9A1xws94Nn4S 94b1rORrf7jmEHCMmhb4zzHnJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB47fCvt YYgKTE7WCngQzHbujE7tMB8GA1UdIwQYMBaAFFgiJwNA8yr41wkiYQtwgPw0F3rP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzQyRC9FMkFGOUI3NkRF MjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2alhDU0poQzNDQV9EUVhl czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDSW5BMER6S3ZqWENTSmhDM0NBX0RRWGVzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzQyRC9FMkFGOUI3NkRFMjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2 alhDU0poQzNDQV9EUVhlczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwTMBEMqIdJJtA0hO1g7muSN4kkmolw+rPXW9JywIirZK3YZXoPP1f bqNNpwpxGgMjDq3f3/wc/eV4YcFV9xdScuHP23l/SpKNzrZHx/bb9iWN9yk3l0M/ MQcklOzi06YLgLJddE/5nUfEksDXJ7pLDIQ/vTGXLKYnzCnx3eZjzkBsnCx39tTr VqNr0dpvveDWWO72SsXdMtSbc8riCrt3QESu/JmFaYkSEh3GDqplH5/d+eNlavR/ Zg+OSAMc1Ilyc9DTz/ksJPYiafuWrRLOdUAxHUsIlIeRBDIjJzcKC3oHsBTTibJJ ITboMk2U61EbrPiEC7kuq8gAzxkqE+Yx -----END CERTIFICATE-----Generated at Fri Apr 4 21:23:01 2025 by rpki-client