$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: WnArquT8QflGab7X72D7MQHRVbjqnOqktQk/OrM7lxk= Subject key identifier: 8B:6B:C1:07:5D:D1:93:6B:45:89:1B:95:57:A2:8C:BD:26:B5:2D:9E Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 017B Signing time: Thu 13 Mar 2025 02:42:37 +0000 Manifest this update: Thu 13 Mar 2025 02:42:37 +0000 Manifest next update: Thu 20 Mar 2025 02:42:37 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: PmaTlGgHzUWELQwjO6+lA2BT7QF7o8eD1JkiDyein3k=) 2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: QaySh+U2ImR7fI4OfAXAG1QKvLn5LnVgI5Wmw5xhFUc=) 3: AD88248C1FBE11EE97342E64C4F9AE02.roa (hash: GPafla64VUamN9CnaYJ2F+XELitJmP/fVhbH40kAovU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 02:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD Validity Not Before: Mar 13 02:42:37 2025 GMT Not After : Mar 20 02:42:37 2025 GMT Subject: CN=67d2461d-85e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:8f:39:0a:c0:1b:fa:d4:5d:9c:20:51:65: f6:d1:8d:28:70:51:28:d9:d8:b8:c2:0b:3f:bc:35: b8:93:a0:75:ea:64:c8:4e:fa:08:e7:40:ba:fc:77: 19:fc:9d:75:76:5e:eb:9c:9b:e9:2d:53:ab:1c:0b: db:21:26:35:5e:92:42:fb:6c:24:72:db:4a:71:f1: 96:41:21:28:d1:6a:2e:7e:a6:af:c5:9e:0e:65:83: 7c:32:d0:cb:7a:c4:e8:e5:9f:65:c8:cc:ea:ab:ec: 46:13:a6:91:1a:78:8e:18:8c:0e:32:08:57:95:c8: 75:b0:0f:e4:e3:15:c5:5d:4f:ad:46:37:3f:b7:3f: 75:74:65:4e:01:d7:3e:7f:c0:58:29:81:8a:ea:99: e5:b3:4c:cf:68:29:e9:d3:9c:fc:ad:11:86:d7:64: 75:04:1e:e4:34:4a:70:1e:db:54:7c:93:57:ba:9d: 99:a2:d3:d9:ca:d1:77:65:71:2c:fa:ac:21:ab:82: 8e:8a:79:d1:9f:f0:bc:88:b5:99:09:75:4a:62:fd: 6b:ca:4a:aa:08:75:ff:03:d1:37:93:77:98:3f:3b: 59:fb:be:c8:66:4e:bb:6f:58:37:bb:60:fb:6d:2a: 33:d7:63:29:db:dd:3e:ce:76:b3:77:59:a6:83:12: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6B:C1:07:5D:D1:93:6B:45:89:1B:95:57:A2:8C:BD:26:B5:2D:9E X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1f:3f:ed:21:7b:63:c6:60:4d:88:a9:3e:39:cf:c2:c6:bf: 3f:31:46:e8:9a:e0:ba:0d:a8:ed:f5:70:3e:c8:7c:c3:0d:7d: 1e:03:ad:a1:b5:58:78:fa:6c:bf:36:e9:d7:50:6a:bc:c5:ca: 87:47:2a:6c:f8:c1:3e:f2:49:5d:69:39:57:d8:4e:1d:31:b4: ea:29:e5:bf:c9:ac:29:1c:82:00:5c:3c:4b:bd:56:69:af:27: 1c:94:c7:99:46:84:20:dc:89:95:06:2b:2e:b8:97:b6:3c:49: be:7f:7c:35:b4:80:a2:36:38:26:b4:5b:94:48:a8:11:e7:77: e0:08:0f:ef:e1:38:e9:37:f9:be:3e:b8:a7:37:99:03:d5:0e: 4b:05:16:42:4e:a8:9b:b4:db:37:dd:4c:07:33:56:f9:7d:6d: 0b:22:ef:c9:a0:8f:11:57:ae:9e:43:e9:cd:f0:da:ce:f4:75: d8:1b:41:e6:de:0a:d5:ff:50:9a:06:24:8a:68:b1:10:90:54: 2c:49:bb:fb:04:ae:63:d4:d6:23:20:32:88:94:af:ec:68:73: 46:40:5f:89:53:c9:a3:5a:8e:03:da:f6:4c:98:15:dd:88:c5: 6f:eb:60:2a:77:ff:50:1e:7f:cc:39:ba:fc:22:f9:0a:5c:7c: 1c:09:9f:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjUwMzEzMDI0MjM3WhcNMjUwMzIwMDI0MjM3WjAYMRYwFAYD VQQDEw02N2QyNDYxZC04NWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYOPOQrAG/rUXZwgUWX20Y0ocFEo2di4wgs/vDW4k6B16mTITvoI50C6/HcZ /J11dl7rnJvpLVOrHAvbISY1XpJC+2wkcttKcfGWQSEo0WoufqavxZ4OZYN8MtDL esTo5Z9lyMzqq+xGE6aRGniOGIwOMghXlch1sA/k4xXFXU+tRjc/tz91dGVOAdc+ f8BYKYGK6pnls0zPaCnp05z8rRGG12R1BB7kNEpwHttUfJNXup2ZotPZytF3ZXEs +qwhq4KOinnRn/C8iLWZCXVKYv1rykqqCHX/A9E3k3eYPztZ+77IZk67b1g3u2D7 bSoz12Mp290+znazd1mmgxJI4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItrwQdd 0ZNrRYkblVeijL0mtS2eMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArHz/tIXtjxmBNiKk+Oc/Cxr8/MUbomuC6Dajt9XA+yHzDDX0eA62h tVh4+my/NunXUGq8xcqHRyps+ME+8kldaTlX2E4dMbTqKeW/yawpHIIAXDxLvVZp rycclMeZRoQg3ImVBisuuJe2PEm+f3w1tICiNjgmtFuUSKgR53fgCA/v4TjpN/m+ PrinN5kD1Q5LBRZCTqibtNs33UwHM1b5fW0LIu/JoI8RV66eQ+nN8NrO9HXYG0Hm 3grV/1CaBiSKaLEQkFQsSbv7BK5j1NYjIDKIlK/saHNGQF+JU8mjWo4D2vZMmBXd iMVv62Aqd/9QHn/MObr8IvkKXHwcCZ9v -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:09 2025 by rpki-client