$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: yFtxFoi99fEYKYGsNS5+2FWj9U301hAU+6+oz+erqkc= Subject key identifier: AE:F1:B1:FB:63:42:59:05:2B:62:17:29:4E:F9:CD:45:A5:D4:53:4B Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 3478 Signing time: Thu 08 May 2025 14:54:48 +0000 Manifest this update: Thu 08 May 2025 14:54:47 +0000 Manifest next update: Thu 15 May 2025 14:54:47 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: FLaZI1ub3GQf45WBLXFkk7ESSVKamCexPjOrVjrVudc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 14:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Validity Not Before: May 8 14:54:47 2025 GMT Not After : May 15 14:54:47 2025 GMT Subject: CN=681cc5b7-c85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:f3:3c:b1:2c:12:6c:98:18:15:c3:7d:e4: 0e:4a:0d:08:3e:f3:27:73:ac:5a:79:cc:68:4a:0a: 23:f4:62:0c:6f:8a:38:2e:dc:8f:1d:eb:0d:6c:95: d3:76:ea:de:67:b4:1e:6a:86:11:9f:a4:83:ae:ed: 05:83:21:6d:2e:51:34:cd:ad:8c:40:35:4b:dc:24: 4b:e1:4e:13:88:6f:42:8b:7a:41:2c:d8:25:36:bf: 13:ac:19:42:a7:1d:86:92:92:4c:1d:da:cd:38:ab: 66:9c:64:fa:2c:4d:33:9d:0c:7e:a1:f3:6c:31:fe: 05:8e:67:3f:5a:72:55:ff:a8:7b:9c:13:a7:f7:13: 7d:ad:96:b8:ca:5f:f8:86:46:d1:24:4d:96:8e:bc: be:b5:4c:17:42:5b:c8:9b:6d:0f:34:7a:c0:04:f6: df:c3:3d:6d:e6:6a:cf:ff:57:c2:7b:9f:f5:c0:cd: f7:66:4a:fb:f6:f3:89:b2:d4:bf:b7:6b:57:3a:68: 0e:29:f5:df:21:db:ed:63:af:a7:2a:3a:65:4a:00: a6:ce:15:39:69:58:d1:94:75:5d:98:2d:33:2a:37: b1:51:c9:1d:93:85:67:fe:da:5b:ed:3c:d2:a3:a7: 0a:7d:1a:e6:bb:99:2d:e2:59:58:4d:2d:64:cc:85: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F1:B1:FB:63:42:59:05:2B:62:17:29:4E:F9:CD:45:A5:D4:53:4B X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:58:41:9d:56:1a:a8:fc:0d:b1:04:d9:d4:2c:d8:a9:c0:78: 45:91:da:be:2b:d9:7d:08:ed:54:4a:c9:e8:76:f0:a9:dd:46: 5c:6b:19:ca:fa:47:80:6c:e1:c3:8c:fb:b0:28:9c:5e:c3:8c: bd:2f:55:f8:f2:29:c9:81:2c:7d:40:91:9e:8a:69:c7:e6:82: 2a:43:34:be:c4:70:13:61:a6:d1:f3:4e:62:a3:99:9a:04:64: aa:f8:a1:9b:08:68:c2:f3:e8:13:af:58:cb:02:65:ac:2e:e0: 8b:5d:7d:fa:7b:d7:e4:43:35:e6:55:cd:5e:d6:7f:2d:3d:69: ed:15:7f:88:78:ec:9a:0e:9d:21:d2:cf:6b:d1:7e:4b:18:fa: 7c:80:c3:11:3c:47:59:e8:7c:ec:2a:e0:22:b8:f6:27:a8:14: c2:86:08:b3:4b:bc:5f:98:39:42:93:71:1b:94:3c:c5:bc:ea: b2:0a:ab:ae:1f:6f:47:86:19:bf:7c:96:6c:29:40:0a:44:60: d1:08:32:20:cd:98:fa:fe:6c:6f:3c:92:83:1a:36:6e:82:a0: 6a:b1:62:71:82:2b:d6:88:b9:1d:7b:3e:f9:34:ee:e6:87:7b: 2f:59:0d:1f:bf:39:e6:a9:02:fd:36:79:72:c5:00:1f:d9:b9: d0:ab:21:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjUwNTA4MTQ1NDQ3WhcNMjUwNTE1MTQ1NDQ3WjAYMRYwFAYD VQQDEw02ODFjYzViNy1jODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWHzPLEsEmyYGBXDfeQOSg0IPvMnc6xaecxoSgoj9GIMb4o4LtyPHesNbJXT dureZ7QeaoYRn6SDru0FgyFtLlE0za2MQDVL3CRL4U4TiG9Ci3pBLNglNr8TrBlC px2GkpJMHdrNOKtmnGT6LE0znQx+ofNsMf4Fjmc/WnJV/6h7nBOn9xN9rZa4yl/4 hkbRJE2Wjry+tUwXQlvIm20PNHrABPbfwz1t5mrP/1fCe5/1wM33Zkr79vOJstS/ t2tXOmgOKfXfIdvtY6+nKjplSgCmzhU5aVjRlHVdmC0zKjexUckdk4Vn/tpb7TzS o6cKfRrmu5kt4llYTS1kzIXfjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7xsftj QlkFK2IXKU75zUWl1FNLMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFWEGdVhqo/A2xBNnULNipwHhFkdq+K9l9CO1USsnodvCp3UZcaxnK +keAbOHDjPuwKJxew4y9L1X48inJgSx9QJGeimnH5oIqQzS+xHATYabR805io5ma BGSq+KGbCGjC8+gTr1jLAmWsLuCLXX36e9fkQzXmVc1e1n8tPWntFX+IeOyaDp0h 0s9r0X5LGPp8gMMRPEdZ6HzsKuAiuPYnqBTChgizS7xfmDlCk3EblDzFvOqyCquu H29Hhhm/fJZsKUAKRGDRCDIgzZj6/mxvPJKDGjZugqBqsWJxgivWiLkdez75NO7m h3svWQ0fvznmqQL9NnlyxQAf2bnQqyFO -----END CERTIFICATE-----Generated at Sat May 10 03:58:23 2025 by rpki-client