$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft File: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json) Hash identifier: v1PHT86YaAaupRIKSf6wtAa45EG9jHdextzG4GXY4FI= Subject key identifier: F2:CB:2D:9B:2C:9E:4A:1B:E1:FB:A9:43:B5:8B:FC:25:6A:D8:3D:01 Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 Certificate issuer: /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft Manifest number: 8B Signing time: Sat 31 May 2025 06:04:45 +0000 Manifest this update: Sat 31 May 2025 06:04:45 +0000 Manifest next update: Sat 07 Jun 2025 06:04:45 +0000 Files and hashes: 1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: jaFftwqiGBflGcGRtCjp1kNw6n1IdtKhgJpeya8MyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Validity Not Before: May 31 06:04:45 2025 GMT Not After : Jun 7 06:04:45 2025 GMT Subject: CN=683a9bfd-ead7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:e7:e9:04:f0:6d:05:63:ab:22:10:9d:f2: 91:d0:0e:65:de:bb:af:af:9d:b4:50:e9:a9:86:46: d9:24:cd:2a:01:31:76:1a:25:cd:99:2d:50:df:fc: 69:c7:73:79:5d:c9:ec:71:98:48:5f:b8:04:6b:3c: a7:c3:85:d8:b7:71:41:2c:5e:ce:11:63:12:fa:1e: 83:11:1b:af:2e:44:27:11:e0:32:5a:65:72:e4:48: bc:ed:5c:cd:e6:99:99:0f:19:1f:db:77:b2:cf:04: c1:c5:ff:46:8c:bc:9b:a4:aa:1d:dc:cf:79:37:e0: 69:55:6f:2e:cd:fd:34:05:28:f4:52:68:a6:92:0d: 64:53:b6:1d:8e:e2:a9:ee:80:a0:c5:69:b8:4f:7a: 7e:6a:12:81:a7:69:b9:b7:5a:5f:fe:f1:ca:ed:42: e7:99:5b:bf:ba:d6:af:46:08:fc:d3:10:18:d1:24: 23:33:3f:2c:ac:d9:c1:9f:9f:dd:e8:26:8b:e6:02: d3:96:6f:ba:a4:2b:e8:27:4c:1b:2c:21:ab:ea:ff: 00:72:43:1d:28:98:a0:41:08:db:a6:99:3a:3c:22: f6:e4:c6:a1:1c:4d:85:9b:0a:84:31:a4:df:93:2e: 7c:04:f0:b6:cf:5c:08:ae:53:d0:a7:80:8a:8a:04: 99:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:2D:9B:2C:9E:4A:1B:E1:FB:A9:43:B5:8B:FC:25:6A:D8:3D:01 X509v3 Authority Key Identifier: keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:58:52:9d:db:ea:e8:21:e5:8a:c8:bb:46:0e:dd:b5:31:a8: 44:39:e0:88:02:70:8a:65:22:17:2f:e3:cd:09:f6:14:3d:56: ac:31:fe:51:ce:9e:2d:38:75:12:e5:33:4c:45:6d:21:9b:ea: b1:a4:66:51:46:3b:e0:89:8c:c8:bd:89:10:1f:c9:6f:01:58: de:b5:37:d1:c2:1c:40:b2:7c:2e:79:a6:4c:9a:65:62:51:c4: 22:d1:5e:d5:36:30:d5:6c:f1:8f:72:5a:88:c8:db:c2:32:ec: a3:14:8d:0e:23:96:55:3f:4c:9e:da:c9:b2:f8:3a:56:d5:26: b5:31:97:75:35:8d:86:46:51:2b:6e:85:e0:77:5b:4a:29:32: 71:c7:cb:8f:16:88:36:56:6f:1a:b4:16:ac:dc:13:47:b2:7d: 77:9f:ba:c4:c5:97:9e:b6:c2:8b:27:c2:54:e4:d7:16:8b:4f: b7:95:fe:ea:6d:93:27:b8:f4:5f:15:df:2e:fd:bc:c8:28:60: a1:54:f7:ec:e2:d5:6e:98:47:4c:4a:1e:3d:e7:88:89:b6:99: 65:09:fa:4f:92:26:cb:2e:18:8d:db:a2:9c:6a:53:02:ec:5f: 91:f3:67:09:2a:1a:6d:25:23:6b:1e:ee:a1:88:59:de:68:d6: b3:37:d0:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKEMyOTYzRjNBODU0RkQ2RDRFNjEwMTk5RTY3NDA4M0Q4 QUFBMTJFNTAwHhcNMjUwNTMxMDYwNDQ1WhcNMjUwNjA3MDYwNDQ1WjAYMRYwFAYD VQQDEw02ODNhOWJmZC1lYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA007n6QTwbQVjqyIQnfKR0A5l3ruvr520UOmphkbZJM0qATF2GiXNmS1Q3/xp x3N5XcnscZhIX7gEazynw4XYt3FBLF7OEWMS+h6DERuvLkQnEeAyWmVy5Ei87VzN 5pmZDxkf23eyzwTBxf9GjLybpKod3M95N+BpVW8uzf00BSj0Umimkg1kU7YdjuKp 7oCgxWm4T3p+ahKBp2m5t1pf/vHK7ULnmVu/utavRgj80xAY0SQjMz8srNnBn5/d 6CaL5gLTlm+6pCvoJ0wbLCGr6v8AckMdKJigQQjbppk6PCL25MahHE2FmwqEMaTf ky58BPC2z1wIrlPQp4CKigSZgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLLLZss nkob4fupQ7WL/CVq2D0BMB8GA1UdIwQYMBaAFMKWPzqFT9bU5hAZnmdAg9iqoS5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wQjJFOEI1MDY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi93cFlfT29WUDF0VG1FQm1lWjBDRDJLcWhM bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dwWV9Pb1ZQMXRUbUVCbWVaMENEMktxaExsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wQjJFOEI1MDY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi93cFlfT29WUDF0 VG1FQm1lWjBDRDJLcWhMbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiWFKd2+roIeWKyLtGDt21MahEOeCIAnCKZSIXL+PNCfYUPVasMf5R zp4tOHUS5TNMRW0hm+qxpGZRRjvgiYzIvYkQH8lvAVjetTfRwhxAsnwueaZMmmVi UcQi0V7VNjDVbPGPclqIyNvCMuyjFI0OI5ZVP0ye2smy+DpW1Sa1MZd1NY2GRlEr boXgd1tKKTJxx8uPFog2Vm8atBas3BNHsn13n7rExZeetsKLJ8JU5NcWi0+3lf7q bZMnuPRfFd8u/bzIKGChVPfs4tVumEdMSh4954iJtpllCfpPkibLLhiN26KcalMC 7F+R82cJKhptJSNrHu6hiFneaNazN9CJ -----END CERTIFICATE-----Generated at Sat May 31 17:51:35 2025 by rpki-client