$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: ZfNviCnOewtGM7/994/Gg6G1prftkK9WH1U3iGx5V9o= Subject key identifier: 88:84:E2:57:0D:C3:FB:21:C7:AF:AA:47:E3:CE:29:78:E1:72:63:EC Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 09AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 0994 Signing time: Wed 14 May 2025 20:14:20 +0000 Manifest this update: Wed 14 May 2025 20:14:20 +0000 Manifest next update: Wed 21 May 2025 20:14:20 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: ChHd55YW4WA/mdzaxhgrgR/jaOPVtpGL22z2w3H8gGA=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: xmJbA6IxBO4/+GmddqWiUZSxhJO/ZzoQBxBDrxW+61c=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: 1aQRLZv1BGCnnNcNnCRaokdzw4E8uFS548+f2rZZdFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2476 (0x9ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: May 14 20:14:20 2025 GMT Not After : May 21 20:14:20 2025 GMT Subject: CN=6824f99c-0ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:6e:fa:ca:c5:58:36:52:f5:c5:1b:08:0a: 44:ed:7e:17:53:88:39:0e:7b:1f:e8:6b:3c:1e:af: fb:a1:c8:9a:a8:eb:26:11:d0:c5:ad:4e:f5:88:87: 54:a3:2f:f3:7d:68:c9:d0:ed:35:03:01:9e:3a:56: ad:6e:e4:65:7a:21:a9:59:c9:56:02:c1:f6:d5:97: ae:5d:3d:c3:e7:e7:75:24:5d:37:5a:43:9d:34:e0: 41:14:69:cc:3e:56:33:f3:95:55:2c:a6:c2:b0:3c: 1e:b9:b1:5d:d1:4c:86:07:b3:8b:68:0a:16:f0:45: d4:2a:ff:1e:08:bb:79:37:96:2c:93:ef:04:89:c2: 30:f6:84:9d:d2:41:e6:e7:1c:75:16:65:e6:aa:a9: 93:b7:f0:70:75:1e:7d:b0:f5:aa:e3:35:e4:73:4a: ed:83:a6:7b:4c:6e:12:94:bd:6e:26:9d:80:83:09: 35:fa:12:39:ef:44:1f:18:3d:58:30:ba:53:a3:17: db:49:41:b7:df:de:ff:3a:a0:f9:ff:4b:8f:d1:c2: be:95:6f:1c:b0:41:0c:34:dd:61:83:30:91:2e:fa: cb:aa:ae:ab:fa:67:b3:4b:2c:16:a3:82:74:c0:74: fd:e8:cc:16:44:54:cb:07:f1:1f:b4:cc:8e:f5:f2: 93:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:84:E2:57:0D:C3:FB:21:C7:AF:AA:47:E3:CE:29:78:E1:72:63:EC X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:44:0a:4e:36:b6:16:8d:bb:0f:af:94:5e:6a:0b:49:72:88: 6e:c0:e1:0f:f5:d0:55:b0:04:6d:38:3e:7b:ff:4a:53:35:2f: c7:34:62:a3:09:90:ca:14:69:e1:05:1b:cc:95:d0:fe:1e:d4: 03:9a:67:92:01:3c:8f:3a:c0:36:dd:ec:c0:d4:d3:66:94:e7: 48:fd:a9:3f:b4:de:3c:55:04:57:57:2b:cd:df:11:0d:ba:76: 3f:bf:86:bc:2a:0d:02:ba:3d:67:e6:40:1a:bd:0f:08:ad:03: f8:02:07:64:7e:22:d0:17:f3:a4:74:9f:80:b4:d1:cf:a8:b4: e5:53:3b:ff:12:b4:f5:98:d2:50:04:df:f2:83:5b:44:54:5d: 30:6b:23:5e:ec:d3:cf:c8:9d:e9:ac:0c:18:46:3a:dd:7e:07: 9c:69:2b:7a:7a:7d:f1:73:94:07:4d:48:4f:57:d7:0f:d5:2c: 55:c6:4a:fe:ff:c9:43:57:2e:d3:ed:8f:93:19:12:bb:75:4d: 43:f4:2d:59:90:02:d2:eb:d8:96:60:f9:98:f6:9e:a1:0f:11: 81:18:fb:9f:bc:2a:c8:fc:ea:38:79:50:ff:02:df:07:89:6d: da:41:d0:25:fc:c8:8f:99:9c:a0:fe:45:0e:f3:75:a9:f0:c5: b6:f0:d5:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjUwNTE0MjAxNDIwWhcNMjUwNTIxMjAxNDIwWjAYMRYwFAYD VQQDEw02ODI0Zjk5Yy0wYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDBu+srFWDZS9cUbCApE7X4XU4g5Dnsf6Gs8Hq/7ociaqOsmEdDFrU71iIdU oy/zfWjJ0O01AwGeOlatbuRleiGpWclWAsH21ZeuXT3D5+d1JF03WkOdNOBBFGnM PlYz85VVLKbCsDweubFd0UyGB7OLaAoW8EXUKv8eCLt5N5Ysk+8EicIw9oSd0kHm 5xx1FmXmqqmTt/BwdR59sPWq4zXkc0rtg6Z7TG4SlL1uJp2Agwk1+hI570QfGD1Y MLpToxfbSUG3397/OqD5/0uP0cK+lW8csEEMNN1hgzCRLvrLqq6r+mezSywWo4J0 wHT96MwWRFTLB/EftMyO9fKTWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiE4lcN w/shx6+qR+POKXjhcmPsMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGRApONrYWjbsPr5ReagtJcohuwOEP9dBVsARtOD57/0pTNS/HNGKj CZDKFGnhBRvMldD+HtQDmmeSATyPOsA23ezA1NNmlOdI/ak/tN48VQRXVyvN3xEN unY/v4a8Kg0Cuj1n5kAavQ8IrQP4AgdkfiLQF/OkdJ+AtNHPqLTlUzv/ErT1mNJQ BN/yg1tEVF0wayNe7NPPyJ3prAwYRjrdfgecaSt6en3xc5QHTUhPV9cP1SxVxkr+ /8lDVy7T7Y+TGRK7dU1D9C1ZkALS69iWYPmY9p6hDxGBGPufvCrI/Oo4eVD/At8H iW3aQdAl/MiPmZyg/kUO83Wp8MW28NUa -----END CERTIFICATE-----Generated at Thu May 15 18:13:56 2025 by rpki-client