$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft File: WapOuYXqXAVIVAS0XMNUp9Ghpso.mft (raw, json) Hash identifier: 6YgAMwtsOl0dDnurBVFHtd0c1amT/Uk6QXd2E6WW3r4= Subject key identifier: D1:90:97:42:BE:31:D5:5F:EB:40:3C:D3:9D:0E:A0:BF:92:F5:9D:C3 Authority key identifier: 59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA Certificate issuer: /CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft Manifest number: 01CB Signing time: Mon 05 May 2025 02:08:30 +0000 Manifest this update: Mon 05 May 2025 02:08:30 +0000 Manifest next update: Mon 12 May 2025 02:08:30 +0000 Files and hashes: 1: WapOuYXqXAVIVAS0XMNUp9Ghpso.crl (hash: ONjUoruBEas+tKrOyPVi68IfKV9Z8yZb5dDyLa1o7XM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Validity Not Before: May 5 02:08:30 2025 GMT Not After : May 12 02:08:30 2025 GMT Subject: CN=68181d9e-e765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:e3:f8:05:31:98:12:f6:9b:92:ee:99:35: 74:c1:40:00:7a:d1:b3:f1:af:da:a4:a1:69:3d:a5: 55:64:09:ab:6d:09:84:85:65:ee:a7:99:5f:13:ab: 7d:14:72:05:02:d4:2a:a0:c2:a8:45:40:dd:29:f7: 3c:50:8a:cc:af:93:bd:04:60:f2:24:28:0c:dc:7f: 33:a1:ee:69:33:17:e4:bb:23:57:24:60:06:8e:4e: bd:0b:5a:5a:e2:cc:8e:e7:9f:7c:a7:39:c5:f0:13: 07:c2:bb:e8:3f:c0:6c:6a:99:27:db:7b:a4:b1:14: d3:09:50:72:9a:d3:71:71:a5:27:40:15:7f:e7:77: 11:9c:4c:ca:cb:e8:52:ff:de:bf:a0:7d:25:6d:ef: 28:a1:b6:32:3f:fe:ac:dd:d5:41:a5:3c:26:9a:dd: 45:9c:4c:22:8f:05:96:88:f6:f8:d0:76:05:f1:2e: 06:17:45:05:fe:83:a8:03:dc:f6:b7:23:2c:a4:fe: d1:a3:45:cf:b9:48:9d:37:74:23:5e:7c:87:a7:38: e2:5c:05:d6:06:7e:d8:0f:35:94:c8:01:62:82:7d: 05:b3:1f:3e:25:be:76:28:52:25:53:4f:fc:55:38: 32:a7:db:99:21:b3:dc:32:b8:9d:f9:42:0d:93:c1: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:90:97:42:BE:31:D5:5F:EB:40:3C:D3:9D:0E:A0:BF:92:F5:9D:C3 X509v3 Authority Key Identifier: keyid:59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:14:c4:03:67:90:af:a8:94:4c:4d:0c:17:93:78:02:80:68: 54:68:c4:6f:3a:f5:66:03:52:b8:d4:81:42:9f:45:ca:c7:b5: 31:4e:96:7d:0c:25:bc:66:39:71:72:08:63:5d:57:9f:f3:8e: a8:b0:2c:5a:a7:0d:4e:1a:c5:03:47:2f:0a:a3:b2:ba:04:6d: 0a:dd:b4:24:28:40:b0:af:a2:a5:33:f2:c3:b3:eb:bb:d6:f8: 1b:1c:8f:37:1c:7b:7a:8d:27:74:54:8d:71:f3:03:e4:f2:68: ff:70:94:56:de:99:ad:6a:86:12:b1:e1:7a:53:b6:28:0d:69: 58:7b:a4:2e:ed:70:aa:62:4c:31:58:d8:6d:d0:d0:f8:60:d9: a2:c7:d2:68:e5:c1:ec:cd:1f:01:65:bf:0e:a4:85:60:cd:ac: 80:03:ed:a9:be:c1:bc:a5:a0:9a:1b:85:49:40:0f:38:a3:3e: a0:6f:7d:5c:5e:c6:8d:af:56:d2:09:90:d1:0a:ff:0b:52:da: 2c:65:72:9a:4f:8c:83:9e:4a:77:5b:1f:a2:a3:a6:49:16:2a: 43:ad:e5:6b:0b:45:04:c1:8f:09:a1:8b:8b:95:4d:dd:0e:1a: 38:ff:a6:4d:e1:df:09:37:01:f1:77:9e:78:ff:ea:b6:a2:02: 01:25:3e:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QzgxMTAvBgNVBAUTKDU5QUE0RUI5ODVFQTVDMDU0ODU0MDRCNDVDQzM1NEE3 RDFBMUE2Q0EwHhcNMjUwNTA1MDIwODMwWhcNMjUwNTEyMDIwODMwWjAYMRYwFAYD VQQDEw02ODE4MWQ5ZS1lNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG/j+AUxmBL2m5LumTV0wUAAetGz8a/apKFpPaVVZAmrbQmEhWXup5lfE6t9 FHIFAtQqoMKoRUDdKfc8UIrMr5O9BGDyJCgM3H8zoe5pMxfkuyNXJGAGjk69C1pa 4syO5598pznF8BMHwrvoP8Bsapkn23uksRTTCVBymtNxcaUnQBV/53cRnEzKy+hS /96/oH0lbe8oobYyP/6s3dVBpTwmmt1FnEwijwWWiPb40HYF8S4GF0UF/oOoA9z2 tyMspP7Ro0XPuUidN3QjXnyHpzjiXAXWBn7YDzWUyAFign0Fsx8+Jb52KFIlU0/8 VTgyp9uZIbPcMrid+UINk8ExxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGQl0K+ MdVf60A8050OoL+S9Z3DMB8GA1UdIwQYMBaAFFmqTrmF6lwFSFQEtFzDVKfRoabK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhBVklWQVMwWE1OVXA5R2hw c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhcE91WVhxWEFWSVZBUzBYTU5VcDlHaHBzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhB VklWQVMwWE1OVXA5R2hwc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQFMQDZ5CvqJRMTQwXk3gCgGhUaMRvOvVmA1K41IFCn0XKx7UxTpZ9 DCW8ZjlxcghjXVef846osCxapw1OGsUDRy8Ko7K6BG0K3bQkKECwr6KlM/LDs+u7 1vgbHI83HHt6jSd0VI1x8wPk8mj/cJRW3pmtaoYSseF6U7YoDWlYe6Qu7XCqYkwx WNht0ND4YNmix9Jo5cHszR8BZb8OpIVgzayAA+2pvsG8paCaG4VJQA84oz6gb31c XsaNr1bSCZDRCv8LUtosZXKaT4yDnkp3Wx+io6ZJFipDreVrC0UEwY8JoYuLlU3d Dho4/6ZN4d8JNwHxd554/+q2ogIBJT42 -----END CERTIFICATE-----Generated at Mon May 5 17:48:38 2025 by rpki-client