$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json) Hash identifier: SUNFMRf2Zo79LCzNPJM1D72OQy+POWJDf/u6xgp/l9k= Subject key identifier: 7A:79:EF:90:B6:C7:9E:FB:DD:9A:74:D2:6D:5F:32:E9:F5:57:D3:52 Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft Manifest number: 2C92 Signing time: Fri 16 May 2025 15:55:53 +0000 Manifest this update: Fri 16 May 2025 15:55:52 +0000 Manifest next update: Fri 23 May 2025 15:55:52 +0000 Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: 5+E9VgF5+2UFiklZ7qzDysZDO2d5OcT34TE4elRTpWQ=) 2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: cju0VYTCW5l5cCttT6iUNk+nPOjz7EuL15pDsjAAXc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Validity Not Before: May 16 15:55:52 2025 GMT Not After : May 23 15:55:52 2025 GMT Subject: CN=68276009-c0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:d3:d4:7f:e9:3b:f9:32:f6:80:3d:cb:82: 75:ae:06:b8:b5:3e:4f:5d:1e:b3:28:15:de:7f:ea: 00:89:b3:23:64:59:2d:56:b7:a7:cf:04:ea:21:ec: 11:07:ce:e8:f8:e4:d8:3d:0c:d8:51:d8:71:2d:5a: ca:ba:5d:bd:98:51:bd:82:34:40:17:88:74:1a:66: ca:21:3a:82:da:7f:05:3e:55:8d:79:ed:03:12:c7: ae:27:84:c8:2f:6d:27:1d:58:f5:e0:a8:bd:46:b4: 93:89:4a:39:97:9f:ab:8d:42:6d:af:bd:66:13:d5: d4:35:0f:8b:ea:bd:87:ee:93:0b:bf:87:dd:49:15: eb:85:78:1c:d3:59:b3:be:de:b8:2e:b9:57:a8:ee: 11:b7:02:90:36:a2:b4:fc:0e:c5:86:e4:84:d0:01: e4:4d:56:52:42:bd:93:0e:39:57:16:4a:76:13:31: 78:f4:51:a0:e5:89:a6:c8:60:b9:55:b0:6f:cd:82: 3c:2d:64:bb:2e:a8:c3:5a:4d:c6:c8:af:5d:1d:45: 3f:06:2e:7c:de:ac:fa:7d:24:e8:6f:e2:bf:5f:4f: 1d:66:8e:ed:28:d0:e9:46:78:b7:58:54:74:14:7f: 57:67:ff:e4:dd:fe:a3:8c:b8:51:50:de:6a:fe:24: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:79:EF:90:B6:C7:9E:FB:DD:9A:74:D2:6D:5F:32:E9:F5:57:D3:52 X509v3 Authority Key Identifier: keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:96:3a:37:77:38:7e:ea:e7:6f:b7:e4:78:10:6a:ff:06:42: a8:a9:c3:12:e6:af:67:05:3c:a1:c8:0b:ea:5b:42:d5:85:46: 55:7b:6c:17:69:07:3c:6e:50:ca:41:ad:64:40:e1:e3:69:de: 62:a7:4c:74:3c:49:0e:67:91:6d:49:1e:e6:7e:31:46:76:22: 6d:d3:82:7c:43:55:ad:46:40:91:b5:62:2a:03:34:d7:d7:76: 87:d3:4d:6a:29:3d:54:e2:09:a4:6a:05:e2:50:99:f9:5a:2b: c5:48:50:96:05:5a:d1:6e:8a:ee:27:6c:f6:ef:ac:48:fd:3d: 6a:d4:38:f9:37:96:0b:76:87:06:47:4a:b6:8b:f9:b0:a2:e7: a2:5d:0c:a7:a1:77:73:a2:b4:c4:50:28:e8:49:3b:8b:2d:0a: cc:99:c1:cf:f3:5a:75:ed:ca:98:7e:78:09:d4:3d:8e:5b:a0: aa:37:40:a9:2c:05:78:68:d2:ef:bd:69:68:f3:22:7a:9b:ca: dd:90:ec:09:c1:9d:f2:65:2b:ba:5a:39:e2:b2:8d:d2:bf:a1: ac:6f:b0:30:80:fe:34:ec:6a:47:97:63:0c:fe:20:06:f1:db: 64:6b:69:09:eb:f6:3a:ec:ea:fd:86:48:9e:ef:72:88:c7:31: 00:12:dc:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NDAxMTAvBgNVBAUTKDU4QTk5NTg3RDU2MzhEODY4OEMyNTg5MEM3ODQxRjMy NTFCNDk2RDcwHhcNMjUwNTE2MTU1NTUyWhcNMjUwNTIzMTU1NTUyWjAYMRYwFAYD VQQDEw02ODI3NjAwOS1jMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSnT1H/pO/ky9oA9y4J1rga4tT5PXR6zKBXef+oAibMjZFktVrenzwTqIewR B87o+OTYPQzYUdhxLVrKul29mFG9gjRAF4h0GmbKITqC2n8FPlWNee0DEseuJ4TI L20nHVj14Ki9RrSTiUo5l5+rjUJtr71mE9XUNQ+L6r2H7pMLv4fdSRXrhXgc01mz vt64LrlXqO4RtwKQNqK0/A7FhuSE0AHkTVZSQr2TDjlXFkp2EzF49FGg5YmmyGC5 VbBvzYI8LWS7LqjDWk3GyK9dHUU/Bi583qz6fSTob+K/X08dZo7tKNDpRni3WFR0 FH9XZ//k3f6jjLhRUN5q/iSQ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp575C2 x5773Zp00m1fMun1V9NSMB8GA1UdIwQYMBaAFFiplYfVY42GiMJYkMeEHzJRtJbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0MC82RTVBQzQ1NEZE MkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZYUl3bGlReDRRZk1sRzBs dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLbVZoOVZqallhSXdsaVF4NFFmTWxHMGx0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0MC82RTVBQzQ1NEZEMkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZ YUl3bGlReDRRZk1sRzBsdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiljo3dzh+6udvt+R4EGr/BkKoqcMS5q9nBTyhyAvqW0LVhUZVe2wX aQc8blDKQa1kQOHjad5ip0x0PEkOZ5FtSR7mfjFGdiJt04J8Q1WtRkCRtWIqAzTX 13aH001qKT1U4gmkagXiUJn5WivFSFCWBVrRboruJ2z276xI/T1q1Dj5N5YLdocG R0q2i/mwoueiXQynoXdzorTEUCjoSTuLLQrMmcHP81p17cqYfngJ1D2OW6CqN0Cp LAV4aNLvvWlo8yJ6m8rdkOwJwZ3yZSu6Wjniso3Sv6Gsb7AwgP407GpHl2MM/iAG 8dtka2kJ6/Y67Or9hkie73KIxzEAEtyO -----END CERTIFICATE-----Generated at Sat May 17 06:49:46 2025 by rpki-client