$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json) Hash identifier: pqBWkjRoVR9bzZbRZx/c2/92585KBWZJpIVXnBtUiyM= Subject key identifier: CF:CE:F4:13:8F:A0:6C:D4:45:BD:80:96:A1:01:75:D6:BC:C9:EB:6C Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft Manifest number: 01B1 Signing time: Tue 13 May 2025 02:28:07 +0000 Manifest this update: Tue 13 May 2025 02:28:07 +0000 Manifest next update: Tue 20 May 2025 02:28:07 +0000 Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: 4v+fYLHueNLLKuVAEbcXim1Zpdz4bkvihRO9gYQfpa0=) 2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: Op5FiTtFCqiSuAmQrIrvzBwaHPhkdRDyeJuZKNddGfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Validity Not Before: May 13 02:28:07 2025 GMT Not After : May 20 02:28:07 2025 GMT Subject: CN=6822ae37-a2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:c1:d6:65:22:ba:bc:e6:a1:97:29:6b:47: 3e:3a:3b:0a:03:ee:85:d9:ec:4f:d6:4e:6a:13:9b: 94:b3:f8:4b:15:6e:32:42:0b:e8:df:ee:25:14:c5: 09:58:ce:a8:2b:c0:53:1c:d0:37:6c:56:f4:f1:8d: 54:0b:2e:c2:9a:7a:50:5a:2e:c4:ad:e8:74:35:67: be:4a:11:6c:4c:6e:32:00:a2:2d:58:e3:7f:28:c6: 43:7a:0b:0a:52:40:f1:db:f9:a2:1f:59:6f:41:d8: 1c:0f:42:f9:f8:d6:58:ec:20:7d:ac:11:ee:60:c2: 00:24:4c:1f:9a:6a:27:99:1f:1c:48:42:e5:6d:b6: 91:51:6d:89:a6:ab:38:a9:26:bf:97:5c:6e:2f:83: 93:5e:82:c4:44:2f:8a:87:5d:f8:fe:cd:a8:ba:2f: 1e:f5:ae:9d:c5:15:d8:a1:86:b0:cb:2e:cb:2f:46: 93:13:28:66:72:fe:e0:d6:bf:4c:0e:c2:ba:b9:d6: 21:b6:9f:8a:11:93:94:7d:71:ba:9a:a4:d3:d1:25: fa:b8:c3:60:de:6c:88:9d:44:85:e1:2a:6a:b3:7d: ee:9b:75:0f:3d:8f:0e:01:48:a0:42:01:b6:0a:a3: 2d:53:8f:31:a5:9c:fe:92:33:66:63:a6:bd:2e:c6: 39:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:F4:13:8F:A0:6C:D4:45:BD:80:96:A1:01:75:D6:BC:C9:EB:6C X509v3 Authority Key Identifier: keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d0:bd:fd:3b:12:78:73:33:f5:00:30:60:17:c6:f4:5c:b1: a4:6a:9f:c0:f9:e0:ba:5c:44:86:27:41:05:bb:4a:9f:6b:28: 11:dd:96:43:82:d2:af:aa:01:ba:eb:5c:52:7a:e9:92:70:db: fc:4b:15:5d:81:d9:09:8e:3a:de:9a:4a:32:6c:be:e7:2f:ab: 9c:03:bf:df:2c:e4:d8:5a:3f:56:0a:e4:cf:32:63:23:54:52: 2e:a5:a3:a4:0c:22:b1:2d:0d:12:9f:af:34:21:59:d0:b9:89: 62:93:6a:67:a8:01:c2:6b:db:5a:29:eb:50:2e:2d:b9:b7:5f: 06:9d:29:e2:2f:70:79:db:4e:ba:55:49:ff:6a:53:77:d7:c0: 51:f5:36:24:e5:68:5e:cb:b8:a6:a1:e3:39:5e:b3:7b:42:a6: 68:38:58:10:03:29:ac:83:b4:df:38:6e:e8:6e:16:3e:e0:ce: ab:f4:58:37:77:03:df:3d:82:2d:07:5c:25:06:36:ff:c0:e2: 32:e4:38:c6:91:4b:93:3d:fd:1e:16:5e:7a:36:f1:50:4a:90: 20:a3:c9:69:8f:41:c0:67:0b:1f:ca:e7:a1:5b:ba:3e:7c:ad: 8d:af:13:d7:9b:83:18:73:af:d3:40:de:5e:0c:89:57:69:33: 1d:dc:be:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1QTYxMTAvBgNVBAUTKDU5MEZBM0M2NzAwMEU5Njk4NTc5MUU2MzU1QUQxRjZE QUQ1QzE4NzYwHhcNMjUwNTEzMDIyODA3WhcNMjUwNTIwMDIyODA3WjAYMRYwFAYD VQQDEw02ODIyYWUzNy1hMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ATB1mUiurzmoZcpa0c+OjsKA+6F2exP1k5qE5uUs/hLFW4yQgvo3+4lFMUJ WM6oK8BTHNA3bFb08Y1UCy7CmnpQWi7Ereh0NWe+ShFsTG4yAKItWON/KMZDegsK UkDx2/miH1lvQdgcD0L5+NZY7CB9rBHuYMIAJEwfmmonmR8cSELlbbaRUW2Jpqs4 qSa/l1xuL4OTXoLERC+Kh134/s2oui8e9a6dxRXYoYawyy7LL0aTEyhmcv7g1r9M DsK6udYhtp+KEZOUfXG6mqTT0SX6uMNg3myInUSF4Spqs33um3UPPY8OAUigQgG2 CqMtU48xpZz+kjNmY6a9LsY5hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/O9BOP oGzURb2AlqEBdda8yetsMB8GA1UdIwQYMBaAFFkPo8ZwAOlphXkeY1WtH22tXBh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVBNi9DQTg2OTQ0QTlD NUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZXbUZlUjVqVmEwZmJhMWNH SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRLWp4bkFBNldtRmVSNWpWYTBmYmExY0dIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVBNi9DQTg2OTQ0QTlDNUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZX bUZlUjVqVmEwZmJhMWNHSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv0L39OxJ4czP1ADBgF8b0XLGkap/A+eC6XESGJ0EFu0qfaygR3ZZD gtKvqgG661xSeumScNv8SxVdgdkJjjremkoybL7nL6ucA7/fLOTYWj9WCuTPMmMj VFIupaOkDCKxLQ0Sn680IVnQuYlik2pnqAHCa9taKetQLi25t18GnSniL3B52066 VUn/alN318BR9TYk5Whey7imoeM5XrN7QqZoOFgQAymsg7TfOG7obhY+4M6r9Fg3 dwPfPYItB1wlBjb/wOIy5DjGkUuTPf0eFl56NvFQSpAgo8lpj0HAZwsfyuehW7o+ fK2NrxPXm4MYc6/TQN5eDIlXaTMd3L6/ -----END CERTIFICATE-----Generated at Thu May 15 03:48:33 2025 by rpki-client