$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft File: WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json) Hash identifier: QoXVWaCzJ36/Hbz3Jx7sK3OTZUpEZw86/NF0uoDOx40= Subject key identifier: BF:D4:E6:33:1D:04:66:B5:BD:7D:68:83:3C:40:21:7D:1B:D4:6F:AF Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF Certificate issuer: /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft Manifest number: 0575 Signing time: Fri 30 May 2025 23:30:55 +0000 Manifest this update: Fri 30 May 2025 23:30:55 +0000 Manifest next update: Fri 06 Jun 2025 23:30:55 +0000 Files and hashes: 1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: g2WSrnskR1I/v8f6DKPQb/7QUPa8szYVnpyZ8+YSUCs=) 2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: 6TM0Kz09gMjbJeG9e3468lar07wNf8zG8NNQJe1azz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF Validity Not Before: May 30 23:30:55 2025 GMT Not After : Jun 6 23:30:55 2025 GMT Subject: CN=683a3faf-c5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:9e:98:11:ef:37:92:9d:68:15:ca:57:58: 8b:de:ee:61:dc:fa:9f:d1:b0:04:62:a6:78:db:0d: b8:ec:db:3a:de:b9:9f:df:80:7e:5e:88:ec:09:9e: 03:62:10:8f:15:1d:3f:ea:c1:df:de:fc:b1:93:54: 10:2a:ce:1b:59:a3:96:a0:a1:ab:e0:02:43:05:61: d8:5b:7a:3f:c4:b8:1a:07:24:53:c0:d5:42:32:ec: 33:f9:96:ce:a9:69:4b:8f:3c:0b:42:b9:9b:18:8a: b5:4f:53:8d:e7:e2:8d:0c:7d:c7:5e:57:6a:71:14: f6:3b:67:12:4f:5b:45:e2:cf:35:3c:c1:19:a6:7f: fd:0e:56:cf:97:0e:3c:a5:ed:d7:15:0a:00:c2:41: 5f:c6:c0:07:f3:23:49:13:c2:15:04:14:d2:b7:70: 69:df:4c:85:07:f6:e9:a0:ef:d7:cd:c3:b0:2a:17: f9:e5:a0:3f:e7:4c:b6:0d:4a:a0:40:cc:aa:49:b9: d3:f9:d5:c0:d7:55:15:f2:eb:d3:3c:59:11:b4:e8: e8:3d:60:ac:65:cc:c5:23:85:1c:63:cc:ad:45:4c: 04:c7:81:59:c2:27:0e:90:d9:be:50:9c:79:1c:76: 12:03:5d:03:3b:a8:9a:7e:28:b5:9c:cc:c7:c8:31: 71:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D4:E6:33:1D:04:66:B5:BD:7D:68:83:3C:40:21:7D:1B:D4:6F:AF X509v3 Authority Key Identifier: keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:35:71:aa:08:2d:da:bb:10:7b:6e:e6:0f:85:5b:ff:01:b3: 02:a7:e2:ea:6c:11:4e:b3:2b:9e:82:d9:5e:2d:42:f6:40:cb: 48:6c:e5:ff:3b:ac:d0:9b:ad:6f:f7:4d:89:b7:f1:19:ec:32: d2:f0:9d:74:fb:75:57:e6:97:3b:bc:53:4c:74:81:0c:12:6a: ab:0e:1b:8f:52:6e:36:4b:6c:37:32:f6:32:e9:a2:cc:32:18: 98:ca:f4:14:93:af:d9:de:5d:d6:ff:a6:c5:ac:51:84:6f:31: eb:22:76:fa:45:55:71:1b:61:fd:2f:de:cc:da:25:f4:d2:06: eb:f1:ef:6e:43:f5:17:1d:30:ca:90:f9:1b:9f:4e:d6:7f:36: 5c:85:a6:af:19:a8:5a:1f:28:7b:dc:5a:a0:f0:fc:68:ab:f2: 16:67:4c:f7:1e:23:af:2c:65:f0:07:dc:ba:4e:56:1c:ce:03: 76:2a:0b:ce:3c:a8:48:a4:b8:2e:bb:4a:0c:9a:e2:2f:4a:1a: 93:3a:5e:d7:10:fb:d6:ac:a5:19:37:3a:85:e4:21:57:1c:46: ca:5c:bd:f6:f7:88:e5:c9:d9:bf:44:3b:e2:97:f3:17:24:d0: 76:01:83:fa:c5:5a:08:da:cf:b8:13:33:93:5e:67:e0:d3:3a: b9:52:2d:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc0MkQxMTAvBgNVBAUTKDU4MjIyNzAzNDBGMzJBRjhENzA5MjI2MTBCNzA4MEZD MzQxNzdBQ0YwHhcNMjUwNTMwMjMzMDU1WhcNMjUwNjA2MjMzMDU1WjAYMRYwFAYD VQQDEw02ODNhM2ZhZi1jNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgKemBHvN5KdaBXKV1iL3u5h3Pqf0bAEYqZ42w247Ns63rmf34B+XojsCZ4D YhCPFR0/6sHf3vyxk1QQKs4bWaOWoKGr4AJDBWHYW3o/xLgaByRTwNVCMuwz+ZbO qWlLjzwLQrmbGIq1T1ON5+KNDH3HXldqcRT2O2cST1tF4s81PMEZpn/9DlbPlw48 pe3XFQoAwkFfxsAH8yNJE8IVBBTSt3Bp30yFB/bpoO/XzcOwKhf55aA/50y2DUqg QMyqSbnT+dXA11UV8uvTPFkRtOjoPWCsZczFI4UcY8ytRUwEx4FZwicOkNm+UJx5 HHYSA10DO6iafii1nMzHyDFxwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/U5jMd BGa1vX1ogzxAIX0b1G+vMB8GA1UdIwQYMBaAFFgiJwNA8yr41wkiYQtwgPw0F3rP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzQyRC9FMkFGOUI3NkRF MjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2alhDU0poQzNDQV9EUVhl czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDSW5BMER6S3ZqWENTSmhDM0NBX0RRWGVzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzQyRC9FMkFGOUI3NkRFMjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2 alhDU0poQzNDQV9EUVhlczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFNXGqCC3auxB7buYPhVv/AbMCp+LqbBFOsyuegtleLUL2QMtIbOX/ O6zQm61v902Jt/EZ7DLS8J10+3VX5pc7vFNMdIEMEmqrDhuPUm42S2w3MvYy6aLM MhiYyvQUk6/Z3l3W/6bFrFGEbzHrInb6RVVxG2H9L97M2iX00gbr8e9uQ/UXHTDK kPkbn07WfzZchaavGahaHyh73Fqg8Pxoq/IWZ0z3HiOvLGXwB9y6TlYczgN2KgvO PKhIpLguu0oMmuIvShqTOl7XEPvWrKUZNzqF5CFXHEbKXL3294jlydm/RDvil/MX JNB2AYP6xVoI2s+4EzOTXmfg0zq5Ui2W -----END CERTIFICATE-----Generated at Sat May 31 16:36:47 2025 by rpki-client