$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json) Hash identifier: JbrlRrhUK4NWUA2TFVy4wNI+oAcn4Z+yTGh++VddGPQ= Subject key identifier: 5E:2B:4C:8A:91:FA:26:FE:5D:CB:50:17:C6:75:F4:4F:A1:9B:27:98 Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft Manifest number: 02DC Signing time: Fri 09 May 2025 01:08:08 +0000 Manifest this update: Fri 09 May 2025 01:08:08 +0000 Manifest next update: Fri 16 May 2025 01:08:08 +0000 Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: C9Z32ESQZJdVMLUzOJju3nibsUIBP1XfeQasfZSUob0=) 2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: 8qDmsi4NSZMggZYlQgPxLbNv2s0d0VPr9Uca3xZmDtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 01:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Validity Not Before: May 9 01:08:08 2025 GMT Not After : May 16 01:08:08 2025 GMT Subject: CN=681d5578-7890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:87:45:67:fd:e3:3c:0a:47:79:78:0c:66: c4:b0:65:1f:c8:3d:c8:64:b1:ae:0c:52:4d:82:d7: b0:24:37:0b:44:56:11:43:42:e7:41:c1:c0:e1:29: e3:01:9c:dc:2d:5c:28:80:fc:04:22:ef:96:63:3c: 85:a9:dd:00:1f:84:d0:52:9f:e3:b3:f8:b6:b1:1c: c1:11:d5:8d:cf:da:1b:17:20:85:1b:1c:ba:f3:5f: bb:b6:31:17:8d:23:87:d3:34:bc:04:26:bc:8f:b5: 71:cb:87:9d:c4:22:6e:30:9b:0e:3c:d7:c6:a9:59: a9:e5:45:0d:32:83:be:2c:af:ba:1d:ee:75:2d:de: a7:2e:8b:4d:9b:72:56:6c:73:75:78:bb:09:66:74: 1a:a4:f4:8a:77:9e:5d:0c:c9:0d:46:6c:54:86:49: 3a:91:e2:f8:41:49:7b:3a:0e:3c:0e:e5:de:86:da: 63:f2:38:76:fd:19:da:c0:2b:b3:9c:e0:04:c5:b9: 5d:a8:26:09:50:3b:d9:d1:d2:22:f6:83:24:d2:11: 3e:ab:4c:1b:04:ad:ba:26:44:fd:e4:5e:db:45:5b: 95:50:0e:74:80:35:be:92:73:7c:ac:f8:ef:f3:54: e4:b1:25:a5:f8:b1:71:12:5f:57:09:c9:da:9d:82: 01:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2B:4C:8A:91:FA:26:FE:5D:CB:50:17:C6:75:F4:4F:A1:9B:27:98 X509v3 Authority Key Identifier: keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:97:d2:a8:3a:66:c6:ea:00:e5:3b:da:7c:1c:2c:5d:8b:98: f9:79:6f:57:5b:f6:e1:38:e0:f0:01:a5:d5:10:8d:1c:2e:1c: 7f:ac:88:d2:16:00:d0:a7:e1:2f:50:e6:1b:7b:c5:32:88:a3: 05:88:23:30:3d:0d:67:93:6f:0b:a3:d4:19:d0:33:e1:4b:07: 70:07:3d:2d:67:6b:ba:84:e7:32:c6:82:12:b3:8f:f3:81:84: b2:46:88:87:bd:25:e5:8c:27:ef:19:df:16:86:1c:c2:b3:ad: 0a:7b:54:f7:76:b8:b7:4a:b9:9f:c0:9f:98:e0:26:ac:c6:84: 84:b8:39:44:d2:5a:64:49:7a:6c:87:cf:b7:8b:5e:59:2b:93: fa:53:74:f7:e5:a6:7f:3d:dc:4b:54:38:05:7f:86:43:65:72: af:b2:3c:44:e3:f4:51:c2:26:f6:b0:86:bc:e3:74:df:02:51: 9b:bc:11:eb:6e:aa:5b:69:7f:81:ea:f8:c6:96:13:dc:b9:8e: 24:95:90:a2:af:46:66:27:1a:f2:e2:34:ca:90:26:40:87:73: 55:04:88:fe:be:ff:b9:97:ec:55:9e:8e:3e:57:b0:88:b0:a0: 30:ea:29:8e:c7:1a:41:8f:ec:82:ce:7e:cc:ee:8a:d2:7c:d1: 5b:41:4b:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFCOTAxMTAvBgNVBAUTKDVBQzM2REU5NTkzNkI4N0EwMTBBMkE0QkE5MTU2OTVB Njk5OTA3MUQwHhcNMjUwNTA5MDEwODA4WhcNMjUwNTE2MDEwODA4WjAYMRYwFAYD VQQDEw02ODFkNTU3OC03ODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7mHRWf94zwKR3l4DGbEsGUfyD3IZLGuDFJNgtewJDcLRFYRQ0LnQcHA4Snj AZzcLVwogPwEIu+WYzyFqd0AH4TQUp/js/i2sRzBEdWNz9obFyCFGxy681+7tjEX jSOH0zS8BCa8j7Vxy4edxCJuMJsOPNfGqVmp5UUNMoO+LK+6He51Ld6nLotNm3JW bHN1eLsJZnQapPSKd55dDMkNRmxUhkk6keL4QUl7Og48DuXehtpj8jh2/RnawCuz nOAExbldqCYJUDvZ0dIi9oMk0hE+q0wbBK26JkT95F7bRVuVUA50gDW+knN8rPjv 81TksSWl+LFxEl9XCcnanYIBywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4rTIqR +ib+XctQF8Z19E+hmyeYMB8GA1UdIwQYMBaAFFrDbelZNrh6AQoqS6kVaVppmQcd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUI5MC9GODBDRUZBQ0Uy M0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVIb0JDaXBMcVJWcFdtbVpC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzTnQ2VmsydUhvQkNpcExxUlZwV21tWkJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUI5MC9GODBDRUZBQ0UyM0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVI b0JDaXBMcVJWcFdtbVpCeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtl9KoOmbG6gDlO9p8HCxdi5j5eW9XW/bhOODwAaXVEI0cLhx/rIjS FgDQp+EvUOYbe8UyiKMFiCMwPQ1nk28Lo9QZ0DPhSwdwBz0tZ2u6hOcyxoISs4/z gYSyRoiHvSXljCfvGd8WhhzCs60Ke1T3dri3SrmfwJ+Y4CasxoSEuDlE0lpkSXps h8+3i15ZK5P6U3T35aZ/PdxLVDgFf4ZDZXKvsjxE4/RRwib2sIa843TfAlGbvBHr bqpbaX+B6vjGlhPcuY4klZCir0ZmJxry4jTKkCZAh3NVBIj+vv+5l+xVno4+V7CI sKAw6imOxxpBj+yCzn7M7orSfNFbQUvA -----END CERTIFICATE-----Generated at Sat May 10 09:58:12 2025 by rpki-client