$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft File: p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json) Hash identifier: zkAXTVeKjh6xB4KwS7njsvAc/yWfKd9S2RKWq54L5Uw= Subject key identifier: 79:16:B0:42:94:D1:66:1E:E0:32:31:14:33:C4:29:5C:CD:3C:B9:7C Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Certificate serial: 19D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft Manifest number: 19C4 Signing time: Sat 12 Apr 2025 16:20:08 +0000 Manifest this update: Sat 12 Apr 2025 16:20:07 +0000 Manifest next update: Sat 19 Apr 2025 16:20:07 +0000 Files and hashes: 1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: 1VePqEoU2jjnjVrhbgKIsNg9s0Vgp2fBls4DvS8Qy4g=) 2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: Pn8qccQRQVn2V5b6lFX/FWa2+EXb/L20S5gebLb7vvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 16:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6612 (0x19d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Validity Not Before: Apr 12 16:20:07 2025 GMT Not After : Apr 19 16:20:07 2025 GMT Subject: CN=67fa92b8-4953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6c:81:dc:20:09:b3:34:82:42:fa:f5:2c:60: e1:ff:eb:fa:92:b1:2a:49:ed:8f:59:14:c3:b7:4a: a4:d2:b6:fa:d8:68:d5:37:dc:05:5e:5f:3a:ef:92: 47:57:be:21:ef:af:01:d4:fc:e2:c6:0d:83:92:62: da:54:38:35:2f:05:dd:f7:42:82:7a:93:23:67:8d: d2:43:18:6a:de:ed:47:88:a9:e4:db:b4:49:28:e0: 36:5f:6e:25:d7:a6:83:dd:3d:9f:57:28:4c:b6:29: 89:d9:e6:08:14:78:70:64:e0:cf:58:c4:8a:d6:8c: 10:0a:4c:9d:46:de:97:d4:0b:b4:ac:e6:28:ef:8f: 83:fc:99:03:43:ea:bd:ff:4a:c0:31:0b:60:45:80: 5f:35:42:4c:0a:09:f4:ab:09:e2:fa:1a:06:8b:b9: 5d:78:5a:85:d1:b4:ee:a8:54:d3:b8:e2:0c:eb:16: c1:3d:97:bf:86:b1:33:03:82:a2:9f:dc:c5:0c:a1: d6:46:ee:e1:b3:19:86:4b:8c:6f:26:af:9e:35:b2: 41:57:24:3c:3c:10:ae:03:5b:ec:09:34:f5:b2:fd: fa:00:4f:b5:0a:53:f0:e9:2c:38:70:c0:02:f2:cd: eb:2c:9a:3f:bd:fa:8e:f8:a2:39:d4:14:68:f0:68: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:16:B0:42:94:D1:66:1E:E0:32:31:14:33:C4:29:5C:CD:3C:B9:7C X509v3 Authority Key Identifier: keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c5:6b:d6:0c:24:70:05:50:90:7e:50:b8:c7:3c:1c:d1:9a: d1:63:97:e7:7e:cb:cb:aa:65:56:fd:95:96:88:da:a8:4b:d9: 79:d9:aa:48:fc:5a:34:c6:34:b4:90:95:8f:f1:e6:b3:bc:37: d9:db:84:2c:db:4a:bc:3a:5d:67:85:9a:4d:98:62:8b:46:13: bd:6a:07:aa:de:68:73:cb:1a:dc:2f:9c:66:a7:6d:58:52:4f: 0b:92:23:bd:ef:bb:20:06:e7:ba:15:b8:05:24:5a:25:ec:d2: 63:1d:d7:5e:41:57:5d:6c:12:eb:35:e1:a5:1c:6f:1d:bc:75: 24:cf:2f:64:d8:c4:b5:1a:91:1a:34:6c:aa:4c:de:33:a5:35: fe:83:78:ad:de:67:9e:57:5a:09:27:18:d7:78:c3:4b:55:f3: 86:d5:3a:17:3d:33:05:8d:e8:8f:43:f3:5c:3a:61:ef:66:14: 14:d9:ce:47:96:82:01:92:5d:be:fd:c4:d1:c0:48:ef:73:8e: e2:f2:79:d2:d5:1a:5b:0c:54:2c:01:d2:fe:ae:cc:16:21:d5: 1c:8e:ca:af:e7:ea:80:ca:e6:72:c2:18:ca:16:c9:23:f9:5c: 30:63:f1:4c:7a:0c:ef:80:f4:a9:e5:c0:b5:a9:ec:11:66:17: 70:a0:42:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhGQTI2MjcxODlF NTQyRjRERUYwHhcNMjUwNDEyMTYyMDA3WhcNMjUwNDE5MTYyMDA3WjAYMRYwFAYD VQQDEw02N2ZhOTJiOC00OTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22yB3CAJszSCQvr1LGDh/+v6krEqSe2PWRTDt0qk0rb62GjVN9wFXl8675JH V74h768B1Pzixg2DkmLaVDg1LwXd90KCepMjZ43SQxhq3u1HiKnk27RJKOA2X24l 16aD3T2fVyhMtimJ2eYIFHhwZODPWMSK1owQCkydRt6X1Au0rOYo74+D/JkDQ+q9 /0rAMQtgRYBfNUJMCgn0qwni+hoGi7ldeFqF0bTuqFTTuOIM6xbBPZe/hrEzA4Ki n9zFDKHWRu7hsxmGS4xvJq+eNbJBVyQ8PBCuA1vsCTT1sv36AE+1ClPw6Sw4cMAC 8s3rLJo/vfqO+KI51BRo8GgnBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkWsEKU 0WYe4DIxFDPEKVzNPLl8MB8GA1UdIwQYMBaAFKfsIlhoL2+un4Q4+iYnGJ5UL03v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTkyQS80NTc5N0M1QzVB NEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2NmZoRGo2SmljWW5sUXZU ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Atd2lXR2d2YjY2ZmhEajZKaWNZbmxRdlRlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTkyQS80NTc5N0M1QzVBNEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2 NmZoRGo2SmljWW5sUXZUZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgxWvWDCRwBVCQflC4xzwc0ZrRY5fnfsvLqmVW/ZWWiNqoS9l52apI /Fo0xjS0kJWP8eazvDfZ24Qs20q8Ol1nhZpNmGKLRhO9ageq3mhzyxrcL5xmp21Y Uk8LkiO977sgBue6FbgFJFol7NJjHddeQVddbBLrNeGlHG8dvHUkzy9k2MS1GpEa NGyqTN4zpTX+g3it3meeV1oJJxjXeMNLVfOG1ToXPTMFjeiPQ/NcOmHvZhQU2c5H loIBkl2+/cTRwEjvc47i8nnS1RpbDFQsAdL+rswWIdUcjsqv5+qAyuZywhjKFskj +VwwY/FMegzvgPSp5cC1qewRZhdwoEIW -----END CERTIFICATE-----Generated at Sun Apr 13 01:48:25 2025 by rpki-client