$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json) Hash identifier: 8q0h9ttw21lEKF6i5S0K2ACNmKekdnNHO9nrLeGkgeo= Subject key identifier: 1C:0A:36:DA:C8:84:31:B6:15:EA:22:44:9E:5C:B6:D4:E8:4E:AD:8E Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 038E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft Manifest number: 038A Signing time: Thu 15 May 2025 00:51:08 +0000 Manifest this update: Thu 15 May 2025 00:51:07 +0000 Manifest next update: Thu 22 May 2025 00:51:07 +0000 Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: YReaJwIyu8IL3FJo9gMbWpJXgRdvaz2XgOr0/MQforU=) 2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: l4NiEiTB+02p0Uj+cCqIOLwgHYhCmg6R+xhxmoCEOiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: May 15 00:51:07 2025 GMT Not After : May 22 00:51:07 2025 GMT Subject: CN=68253a7c-ea1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:a6:5b:90:34:37:6b:64:15:e8:c6:ec:ec: a9:3d:8c:8e:ba:f9:b1:ce:34:33:e8:fc:c9:1f:3a: 6e:a0:36:01:6b:8f:dd:10:fa:40:ad:6f:30:1d:08: 95:d8:08:94:a7:be:cd:d3:2e:ed:a8:c7:b7:fa:3e: f7:3d:a3:ef:a5:02:40:57:0b:5e:48:9e:44:db:df: 3a:e4:05:29:ff:16:ed:9a:48:6f:f7:46:c4:55:be: bf:97:95:4a:d7:5c:c4:52:bc:94:34:71:bd:76:73: bf:57:92:1e:0c:67:f2:63:0d:2f:e4:5f:a6:ca:31: d3:0e:2a:5e:d8:8f:7a:6b:de:55:6e:3b:05:20:dd: b7:8a:58:4c:d6:b0:9c:7c:4b:46:2f:e9:08:1f:75: 8d:3c:df:95:26:53:cd:d0:7d:c6:54:44:51:d1:27: 6a:bb:03:75:cd:aa:ca:53:ee:56:12:f6:19:fc:ca: ae:57:48:a4:58:db:da:49:eb:bf:aa:1b:5d:fe:af: e6:0f:dc:f9:f5:41:32:f2:da:ff:0c:af:e4:9f:c6: 34:99:74:04:07:22:f8:b6:13:32:ee:9a:3c:28:e4: 48:29:ee:40:03:72:3f:fe:0a:40:42:c7:91:d6:6c: e3:1c:92:48:5f:57:9c:a2:6d:99:05:a8:f7:52:fa: 79:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0A:36:DA:C8:84:31:B6:15:EA:22:44:9E:5C:B6:D4:E8:4E:AD:8E X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c8:b7:ab:a1:1b:37:97:9d:64:1f:9e:e8:e2:8e:41:5e:ba: 46:8a:36:66:6b:cb:e1:e8:0d:30:ce:06:6b:8f:40:3a:8b:0b: ed:a5:16:60:bd:62:78:1b:23:6e:e9:d3:7f:1b:d1:5f:29:15: c5:a9:2a:89:8a:0e:5d:97:c4:8f:eb:60:38:8f:59:0c:a5:98: 9a:3e:f9:9a:13:c1:d4:6e:71:7b:ae:1d:82:42:b7:c6:f8:84: 18:6e:bc:6f:11:ce:e8:b5:6f:f6:9e:77:36:d7:b8:32:3d:a6: e0:ee:e2:8b:5c:a3:7f:75:7a:9a:6a:72:9f:44:76:e3:54:08: ef:84:75:64:4a:86:64:16:f1:ea:3c:d3:b2:dc:2a:5d:a5:04: 00:12:1e:e1:a3:f4:3f:b9:fa:a2:47:3b:53:49:7e:4f:b1:16: 8a:04:f8:98:f6:a2:5c:98:7b:3b:43:aa:1b:44:ed:ce:08:16: 5e:ce:cf:fa:24:e7:8f:7e:1c:fd:07:4f:1c:1b:18:49:f5:e4: 4a:f2:c5:f1:38:f5:37:db:be:a0:f6:bf:8a:e9:78:8f:2a:4b: 6b:fa:b6:a0:26:76:e5:01:14:f4:75:b0:74:65:a0:ee:d2:5d: cc:5c:50:12:1f:23:c3:33:82:47:c5:c4:e7:42:54:b2:60:cc: 60:40:87:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjUwNTE1MDA1MTA3WhcNMjUwNTIyMDA1MTA3WjAYMRYwFAYD VQQDEw02ODI1M2E3Yy1lYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MemW5A0N2tkFejG7OypPYyOuvmxzjQz6PzJHzpuoDYBa4/dEPpArW8wHQiV 2AiUp77N0y7tqMe3+j73PaPvpQJAVwteSJ5E29865AUp/xbtmkhv90bEVb6/l5VK 11zEUryUNHG9dnO/V5IeDGfyYw0v5F+myjHTDipe2I96a95VbjsFIN23ilhM1rCc fEtGL+kIH3WNPN+VJlPN0H3GVERR0SdquwN1zarKU+5WEvYZ/MquV0ikWNvaSeu/ qhtd/q/mD9z59UEy8tr/DK/kn8Y0mXQEByL4thMy7po8KORIKe5AA3I//gpAQseR 1mzjHJJIX1ecom2ZBaj3Uvp56QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwKNtrI hDG2FeoiRJ5cttToTq2OMB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz aWtMaFhNMGdwWVR0enR3bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8yLeroRs3l51kH57o4o5BXrpGijZma8vh6A0wzgZrj0A6iwvtpRZg vWJ4GyNu6dN/G9FfKRXFqSqJig5dl8SP62A4j1kMpZiaPvmaE8HUbnF7rh2CQrfG +IQYbrxvEc7otW/2nnc217gyPabg7uKLXKN/dXqaanKfRHbjVAjvhHVkSoZkFvHq PNOy3CpdpQQAEh7ho/Q/ufqiRztTSX5PsRaKBPiY9qJcmHs7Q6obRO3OCBZezs/6 JOePfhz9B08cGxhJ9eRK8sXxOPU3276g9r+K6XiPKktr+ragJnblART0dbB0ZaDu 0l3MXFASHyPDM4JHxcTnQlSyYMxgQIe7 -----END CERTIFICATE-----Generated at Thu May 15 16:36:35 2025 by rpki-client