$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft File: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft (raw, json) Hash identifier: eCO3i86v560upjxOkrlBWixoo///7WVJC+QMlQj8gk0= Subject key identifier: 60:FE:DE:CE:0D:AC:C7:7D:70:F7:0B:4C:0B:8B:A3:6E:45:9B:76:81 Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Certificate serial: 0BED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft Manifest number: 0BCF Signing time: Fri 04 Apr 2025 19:00:50 +0000 Manifest this update: Fri 04 Apr 2025 19:00:50 +0000 Manifest next update: Fri 11 Apr 2025 19:00:50 +0000 Files and hashes: 1: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl (hash: cQleLp7zBvks1KIsHWqdHXCndcAQ7IwrJ0EgmFFqvfo=) 2: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (hash: FL+VVzcPFPFYFK/eeGMO2XGhtXdZWZTlmhO3w7UvF4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3053 (0xbed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7E85 Validity Not Before: Apr 4 19:00:50 2025 GMT Not After : Apr 11 19:00:50 2025 GMT Subject: CN=67f02c62-eca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:4a:a0:98:4e:01:7f:49:f0:af:10:7a:68: 6c:cb:e2:9f:f0:8c:05:64:f0:83:02:67:18:1b:38: 5a:42:e6:c9:0c:86:00:af:77:3b:30:96:06:46:b1: 80:bc:09:61:00:95:d7:fe:b3:3c:7d:73:d6:59:ee: 8a:7d:05:eb:f9:95:91:7b:f1:1c:df:40:64:97:6f: 47:c5:22:38:74:19:9f:6b:4e:c2:4d:63:4e:6a:22: 7d:91:d9:74:df:c5:0e:68:14:02:fa:f5:ee:6b:d0: a3:dc:b2:ce:dc:16:9b:e5:a2:91:a9:be:b7:16:bc: fb:72:49:71:a6:e5:1b:65:96:69:25:b6:59:a5:88: f1:63:fb:27:60:c8:20:2f:d7:3d:5a:79:e7:05:17: c9:cd:77:d6:0f:b8:0b:e0:e8:30:4d:42:78:90:36: e7:f3:c0:23:58:68:76:60:3e:11:3c:15:04:db:87: 31:69:4b:e9:58:fb:e7:18:dd:f2:bb:c8:25:d6:6f: f9:e3:57:36:17:8c:ea:83:7b:2d:b1:aa:c7:f9:fb: e2:49:8b:ff:6c:5f:f6:88:88:c8:07:da:aa:33:e5: d4:ba:81:5d:73:7c:4d:24:6f:cc:97:6c:22:be:3f: 71:0f:cb:66:07:7a:3a:4e:30:b7:35:87:b5:34:e7: 44:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FE:DE:CE:0D:AC:C7:7D:70:F7:0B:4C:0B:8B:A3:6E:45:9B:76:81 X509v3 Authority Key Identifier: keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7c:24:fe:a8:46:1f:09:d7:19:47:fb:c0:b4:63:cf:d2:d1: af:b6:df:8b:55:4c:c7:35:0d:b6:6a:61:19:1d:1b:25:03:3a: c9:22:a5:43:a9:ae:07:b6:e5:e9:d9:e4:87:95:1a:50:b4:8e: e8:3f:a1:6f:cf:c3:0d:61:06:7f:51:2b:d8:ac:97:28:a4:56: b2:6f:c4:7d:0b:ea:01:77:c7:94:f3:e7:ca:4e:e3:dc:30:09: 0b:cf:48:d6:ea:8f:6e:bf:bf:17:95:75:cb:b5:5d:52:01:87: f4:ab:21:2f:f2:c3:fa:69:cc:2c:c3:5b:df:82:75:6d:2f:fd: 97:0a:82:89:95:5a:d0:11:80:4c:ff:92:d2:dc:58:c3:01:c9: 75:d9:e4:9d:5d:2b:fe:5a:17:be:bc:3e:fd:c0:51:36:cd:31: da:47:87:16:62:c8:72:3d:d6:b2:b7:6a:43:7a:51:49:38:1d: b1:2c:87:43:ae:ca:17:06:0e:0f:2c:04:59:42:1f:e8:77:40: de:9f:7e:91:c5:73:ad:a4:75:4d:52:0d:b2:65:98:51:6f:13: 34:f1:bd:a5:57:2f:25:95:f1:40:16:05:04:1c:86:9c:11:5c: e6:1e:dd:c3:e6:54:95:78:20:99:e3:fc:cc:b9:d5:46:f4:37: 6e:d0:90:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdFODUxMTAvBgNVBAUTKDU5Njg1MkQ1Mjk5NEZCQjY3QTYzNzlBQjFFMEFGNTE0 NTUzRUU4ODYwHhcNMjUwNDA0MTkwMDUwWhcNMjUwNDExMTkwMDUwWjAYMRYwFAYD VQQDEw02N2YwMmM2Mi1lY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b5KoJhOAX9J8K8Qemhsy+Kf8IwFZPCDAmcYGzhaQubJDIYAr3c7MJYGRrGA vAlhAJXX/rM8fXPWWe6KfQXr+ZWRe/Ec30Bkl29HxSI4dBmfa07CTWNOaiJ9kdl0 38UOaBQC+vXua9Cj3LLO3Bab5aKRqb63Frz7cklxpuUbZZZpJbZZpYjxY/snYMgg L9c9WnnnBRfJzXfWD7gL4OgwTUJ4kDbn88AjWGh2YD4RPBUE24cxaUvpWPvnGN3y u8gl1m/541c2F4zqg3stsarH+fviSYv/bF/2iIjIB9qqM+XUuoFdc3xNJG/Ml2wi vj9xD8tmB3o6TjC3NYe1NOdEiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGD+3s4N rMd9cPcLTAuLo25Fm3aBMB8GA1UdIwQYMBaAFFloUtUplPu2emN5qx4K9RRVPuiG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0U4NS9CMkUwRTVBRTFD MzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03WjZZM21ySGdyMUZGVS02 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dXaFMxU21VLTdaNlkzbXJIZ3IxRkZVLTZJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0U4NS9CMkUwRTVBRTFDMzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03 WjZZM21ySGdyMUZGVS02SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZfCT+qEYfCdcZR/vAtGPP0tGvtt+LVUzHNQ22amEZHRslAzrJIqVD qa4HtuXp2eSHlRpQtI7oP6Fvz8MNYQZ/USvYrJcopFayb8R9C+oBd8eU8+fKTuPc MAkLz0jW6o9uv78XlXXLtV1SAYf0qyEv8sP6acwsw1vfgnVtL/2XCoKJlVrQEYBM /5LS3FjDAcl12eSdXSv+Whe+vD79wFE2zTHaR4cWYshyPdayt2pDelFJOB2xLIdD rsoXBg4PLARZQh/od0Den36RxXOtpHVNUg2yZZhRbxM08b2lVy8llfFAFgUEHIac EVzmHt3D5lSVeCCZ4/zMudVG9Ddu0JA3 -----END CERTIFICATE-----Generated at Sat Apr 5 21:08:09 2025 by rpki-client