$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft File: wJ7fW2leBHksNRT0mPS7FEcJbvc.mft (raw, json) Hash identifier: PzTgqmSBU7eYdGLb8Dr1896JXUoAAQlfi0+9ugwt4XE= Subject key identifier: 41:50:C7:EE:9D:7D:55:1F:BA:67:0B:2C:5F:95:D1:AD:38:FE:8E:72 Authority key identifier: C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 Certificate issuer: /CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft Manifest number: C6 Signing time: Thu 13 Mar 2025 03:54:38 +0000 Manifest this update: Thu 13 Mar 2025 03:54:38 +0000 Manifest next update: Thu 20 Mar 2025 03:54:38 +0000 Files and hashes: 1: wJ7fW2leBHksNRT0mPS7FEcJbvc.crl (hash: QtQslyl40Rw7FAByblxFVm1xoAR4J78ReGLi2F46r9w=) 2: FC0907B8D45711EE93BD8B7CC4F9AE02.roa (hash: WEHBvskgD+7pAwM51UvYkvJPxMc31VB5wYczhy7vxrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B Validity Not Before: Mar 13 03:54:38 2025 GMT Not After : Mar 20 03:54:38 2025 GMT Subject: CN=67d256fe-497b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:e7:65:38:31:2d:27:10:f0:73:46:c1:f4: 2b:ec:e5:8b:93:ef:46:fa:3d:b6:4f:55:4a:7f:83: 2b:19:f5:90:59:f5:0a:0a:67:6a:50:ca:c0:bd:d9: 58:ac:a2:50:57:fb:91:38:22:20:8a:2f:f2:18:6a: 1f:53:6c:c2:38:65:85:b2:b2:59:87:f9:bc:e1:47: 01:5b:27:d0:68:ed:fc:cc:37:14:a3:ec:8d:0e:52: 4c:07:1e:5f:8b:ff:3d:44:04:d0:6f:8f:db:9e:be: 02:d2:83:1a:f2:51:2c:18:cd:80:cb:a5:44:54:a5: b9:39:92:01:b0:ea:2a:65:30:62:61:1e:53:55:8d: 09:8a:45:8f:d8:45:55:d8:31:99:84:94:f4:75:87: c5:ef:1a:72:20:28:48:33:9f:88:a9:ed:d7:45:0f: d0:f7:f9:7d:ab:92:9c:fd:a9:7c:74:a3:a9:ae:0c: bd:21:91:e6:80:ea:64:a9:1d:2c:c1:18:47:14:26: 77:72:b9:48:5c:cc:b5:79:36:7d:bf:8d:e9:8e:37: 1f:97:53:77:a3:04:af:c0:15:63:fa:5e:34:78:a8: bf:bf:a9:90:bc:77:1a:25:6f:f5:54:d7:dc:a7:9d: ff:94:86:dd:70:c1:3f:bb:61:37:89:9f:fa:34:f0: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:50:C7:EE:9D:7D:55:1F:BA:67:0B:2C:5F:95:D1:AD:38:FE:8E:72 X509v3 Authority Key Identifier: keyid:C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:1b:02:6f:01:df:ea:a1:3d:e5:25:b2:97:5d:b3:c5:b1:3b: eb:54:97:57:ac:74:30:82:55:de:d5:d1:86:46:90:41:6b:2a: 8b:63:17:93:73:66:97:00:34:87:4d:29:d9:8a:b1:0b:1f:35: 95:ad:b5:8f:e1:d3:00:6a:9a:58:4c:b1:f3:32:cf:c6:e9:5f: e7:27:c9:67:dc:2e:ca:8a:5a:b0:51:af:49:a2:a0:39:2d:09: 99:71:0e:4e:65:29:d5:7e:4d:9c:e5:63:4a:c0:ba:3f:ea:03: db:5c:5f:d6:ba:15:27:92:40:11:e4:75:75:08:16:fe:d8:f6: 10:4b:48:1f:85:d3:7e:ea:fa:1b:5c:75:f6:97:52:81:fb:41: ef:36:35:e9:0c:c0:a1:4b:6c:5f:62:19:79:f5:a3:fe:8f:c8: c7:56:33:38:03:07:9d:29:2c:29:87:d2:83:9c:29:e3:8d:43: 5d:2c:c7:3e:d8:bc:58:e7:57:96:e3:25:dd:72:10:2a:9c:b5: 21:d6:c0:dd:00:7a:16:02:09:8b:8c:09:31:0b:be:22:c6:30: 1d:70:0e:e2:e6:18:43:e2:dd:26:3f:3b:5d:78:ff:23:83:0f: 3c:2b:7f:e3:6b:42:b5:5f:c2:29:86:d5:93:f2:a3:8d:f4:ad: 8c:5a:31:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCMkIxMTAvBgNVBAUTKEMwOUVERjVCNjk1RTA0NzkyQzM1MTRGNDk4RjRCQjE0 NDcwOTZFRjcwHhcNMjUwMzEzMDM1NDM4WhcNMjUwMzIwMDM1NDM4WjAYMRYwFAYD VQQDEw02N2QyNTZmZS00OTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEznZTgxLScQ8HNGwfQr7OWLk+9G+j22T1VKf4MrGfWQWfUKCmdqUMrAvdlY rKJQV/uROCIgii/yGGofU2zCOGWFsrJZh/m84UcBWyfQaO38zDcUo+yNDlJMBx5f i/89RATQb4/bnr4C0oMa8lEsGM2Ay6VEVKW5OZIBsOoqZTBiYR5TVY0JikWP2EVV 2DGZhJT0dYfF7xpyIChIM5+Iqe3XRQ/Q9/l9q5Kc/al8dKOprgy9IZHmgOpkqR0s wRhHFCZ3crlIXMy1eTZ9v43pjjcfl1N3owSvwBVj+l40eKi/v6mQvHcaJW/1VNfc p53/lIbdcME/u2E3iZ/6NPBHowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFQx+6d fVUfumcLLF+V0a04/o5yMB8GA1UdIwQYMBaAFMCe31tpXgR5LDUU9Jj0uxRHCW73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEIyQi85QjgyMDZENENG OUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJIa3NOUlQwbVBTN0ZFY0pi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dKN2ZXMmxlQkhrc05SVDBtUFM3RkVjSmJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEIyQi85QjgyMDZENENGOUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJI a3NOUlQwbVBTN0ZFY0pidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVGwJvAd/qoT3lJbKXXbPFsTvrVJdXrHQwglXe1dGGRpBBayqLYxeT c2aXADSHTSnZirELHzWVrbWP4dMAappYTLHzMs/G6V/nJ8ln3C7KilqwUa9JoqA5 LQmZcQ5OZSnVfk2c5WNKwLo/6gPbXF/WuhUnkkAR5HV1CBb+2PYQS0gfhdN+6vob XHX2l1KB+0HvNjXpDMChS2xfYhl59aP+j8jHVjM4AwedKSwph9KDnCnjjUNdLMc+ 2LxY51eW4yXdchAqnLUh1sDdAHoWAgmLjAkxC74ixjAdcA7i5hhD4t0mPztdeP8j gw88K3/ja0K1X8IphtWT8qON9K2MWjHc -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:03 2025 by rpki-client