$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft File: wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json) Hash identifier: trv227ZBH2W+v/T+W+GczPCe+zfR0Y5NXzsf7qpbuCY= Subject key identifier: 65:D5:08:3C:E3:06:20:76:F6:CF:98:EB:F8:5C:07:FF:90:F5:C2:94 Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Certificate serial: 2FD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft Manifest number: 2FCC Signing time: Sun 04 May 2025 15:25:07 +0000 Manifest this update: Sun 04 May 2025 15:25:07 +0000 Manifest next update: Sun 11 May 2025 15:25:07 +0000 Files and hashes: 1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: U3ZEnT2cH2vtZob+wOPAln3quEUV1CVyIVPGwyzMcfo=) 2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: qjc1TRQ4aj3UWDrfE4OMe7D9VpKX+4bRXdtLVlC/TX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12245 (0x2fd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Validity Not Before: May 4 15:25:07 2025 GMT Not After : May 11 15:25:07 2025 GMT Subject: CN=681786d3-869d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:53:39:f5:46:13:0c:5e:2c:77:63:60:cf: 6e:0b:57:42:6f:bb:cd:65:1a:86:d0:3c:81:d0:76: 39:e4:97:2d:78:8c:cd:8a:51:d4:87:73:88:d4:f8: 61:97:07:89:1e:dd:5e:77:3f:66:9e:d4:65:15:09: 3b:95:48:6a:8a:6f:30:01:91:86:5b:73:40:3c:16: d6:6e:88:2b:f7:62:98:36:48:69:bd:d9:41:1f:60: 32:b3:e6:12:9a:09:78:6d:c5:64:80:02:c8:9e:b3: f1:82:28:27:92:a9:d4:4a:11:b4:64:9f:91:a4:7b: fa:ae:6d:26:24:c9:58:10:8c:e5:ce:37:88:38:c6: 51:0a:23:83:5a:80:0c:eb:1c:98:b9:78:3f:b6:9f: 11:c9:07:d0:ac:d1:12:e0:84:03:13:53:b3:68:96: 96:78:0c:31:30:b9:ec:fb:24:b5:5d:11:d3:aa:0b: b0:d5:55:7c:ad:36:32:7b:1d:36:f2:8e:8d:1d:ac: 91:f4:96:6c:67:bc:50:89:c8:4f:94:d1:cb:d2:43: 1e:7e:d6:45:2d:c2:05:47:6b:cf:d8:dc:8a:a5:81: ec:e0:17:e8:81:4f:13:8a:f0:ae:ef:51:38:88:69: 24:18:21:96:59:df:83:1b:af:13:73:38:fe:20:03: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D5:08:3C:E3:06:20:76:F6:CF:98:EB:F8:5C:07:FF:90:F5:C2:94 X509v3 Authority Key Identifier: keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a4:26:43:d6:c6:34:bc:f3:65:a4:77:d3:7c:db:cb:0c:81: 07:ba:c7:d5:1f:af:6d:cb:eb:ab:48:4b:c6:a7:80:d5:3e:62: a9:b1:2c:df:1c:86:b1:6b:00:59:24:99:7c:45:7e:51:29:55: 7f:dd:d6:c1:8e:ea:5c:90:d3:0c:df:a8:c0:c2:31:1c:f8:25: e8:3f:75:ac:24:e3:82:a5:08:55:18:3b:d0:5c:83:22:ec:55: 15:92:b0:19:43:37:c6:d9:2a:fd:20:b1:32:91:e1:1e:7f:31: 3b:c7:4a:2b:f7:98:c2:d0:97:20:6c:75:4f:2f:c3:07:5d:b4: e2:90:92:e7:65:4d:43:be:4a:b6:c6:5f:7c:c3:0c:e1:c8:47: 61:5e:4a:99:b3:21:46:5e:db:89:40:7d:a4:b0:b0:86:3d:0d: 12:82:38:92:46:24:f8:53:7e:d0:20:97:9a:be:84:92:0e:53: 44:f9:28:e9:7a:26:99:d5:32:77:8f:0a:5a:bb:52:b8:08:41: 6d:71:e8:ca:1f:c5:32:dd:4f:81:c8:c1:7a:01:1d:05:70:39: ff:40:d0:53:bc:ef:c0:aa:c6:4b:38:e7:9f:68:9d:ca:d0:42: 6c:88:ea:85:5e:f4:2d:a7:26:9b:91:ed:81:27:e6:cb:1f:1c: 3a:38:9c:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NUMxMTAvBgNVBAUTKEMwRjdEOEQ2RDU0MTYzNzY1RkY2RjNFMkZCMzM3RkNG RTE1MDcyMTkwHhcNMjUwNTA0MTUyNTA3WhcNMjUwNTExMTUyNTA3WjAYMRYwFAYD VQQDEw02ODE3ODZkMy04NjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzhTOfVGEwxeLHdjYM9uC1dCb7vNZRqG0DyB0HY55JcteIzNilHUh3OI1Phh lweJHt1edz9mntRlFQk7lUhqim8wAZGGW3NAPBbWbogr92KYNkhpvdlBH2Ays+YS mgl4bcVkgALInrPxgignkqnUShG0ZJ+RpHv6rm0mJMlYEIzlzjeIOMZRCiODWoAM 6xyYuXg/tp8RyQfQrNES4IQDE1OzaJaWeAwxMLns+yS1XRHTqguw1VV8rTYyex02 8o6NHayR9JZsZ7xQichPlNHL0kMeftZFLcIFR2vP2NyKpYHs4BfogU8TivCu71E4 iGkkGCGWWd+DG68Tczj+IANm6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXVCDzj BiB29s+Y6/hcB/+Q9cKUMB8GA1UdIwQYMBaAFMD32NbVQWN2X/bz4vszf8/hUHIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ1Qy81QThBRDA4ODBC MTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkzWmY5dlBpLXpOX3otRlFj aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQZlkxdFZCWTNaZjl2UGktek5fei1GUWNoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ1Qy81QThBRDA4ODBCMTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkz WmY5dlBpLXpOX3otRlFjaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTpCZD1sY0vPNlpHfTfNvLDIEHusfVH69ty+urSEvGp4DVPmKpsSzf HIaxawBZJJl8RX5RKVV/3dbBjupckNMM36jAwjEc+CXoP3WsJOOCpQhVGDvQXIMi 7FUVkrAZQzfG2Sr9ILEykeEefzE7x0or95jC0JcgbHVPL8MHXbTikJLnZU1Dvkq2 xl98wwzhyEdhXkqZsyFGXtuJQH2ksLCGPQ0SgjiSRiT4U37QIJeavoSSDlNE+Sjp eiaZ1TJ3jwpau1K4CEFtcejKH8Uy3U+ByMF6AR0FcDn/QNBTvO/AqsZLOOefaJ3K 0EJsiOqFXvQtpyabke2BJ+bLHxw6OJww -----END CERTIFICATE-----Generated at Mon May 5 03:03:01 2025 by rpki-client