$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json) Hash identifier: OvDeZyuY3KJ7Oa9EMPQ95nGXNoQ/tijA6/c/NK5T+PQ= Subject key identifier: FF:21:27:96:E6:C1:A8:66:D8:E8:52:FB:3A:B6:06:5F:6F:31:C8:52 Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft Manifest number: 015D Signing time: Wed 07 May 2025 03:13:42 +0000 Manifest this update: Wed 07 May 2025 03:13:41 +0000 Manifest next update: Wed 14 May 2025 03:13:41 +0000 Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: Q1Np36VkEvcmGcn2Pzqc11Av5sStoPbv6s170tpXgmo=) 2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: Y/z+QgJxgPtT6JyUNYql0fBvgzOIBrxa3aegmRUI5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 03:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BA1, serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Validity Not Before: May 7 03:13:41 2025 GMT Not After : May 14 03:13:41 2025 GMT Subject: CN=681acfe6-fc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:de:83:03:6c:c6:fd:3e:16:89:50:07:64: 1e:7c:5d:f9:05:55:3c:7b:bc:47:c2:ac:b2:83:c0: f5:c2:1a:19:d9:f1:bb:d3:b5:1c:ee:13:ca:f0:ef: 41:e3:83:a3:91:ed:75:10:10:77:7b:67:38:a8:bb: ef:80:51:85:3c:2f:25:83:7f:dd:fb:53:39:19:40: b8:95:0e:5e:41:db:cd:5e:6f:1e:a9:fb:15:62:82: c5:75:f8:7b:c9:d8:bc:8a:03:0a:6b:8b:d5:97:b3: 99:d6:18:f0:8a:ad:56:7f:e3:ad:be:1b:cb:fe:59: 8b:0e:1a:42:e0:ca:95:ad:e9:b4:50:66:00:02:29: 7e:9b:2e:9e:9d:30:6d:c2:34:9f:db:2f:9d:fd:4c: 1c:3d:3a:35:31:26:77:cf:d4:61:6f:1d:0f:a6:97: 39:e5:47:61:3a:91:d2:8e:03:1e:0b:d4:4b:b7:0f: a9:25:ed:42:a9:68:0a:d5:14:b5:0f:8b:87:b6:57: 8f:61:b6:81:2e:c8:f5:55:3e:44:31:da:23:22:b4: 39:1b:3d:86:3d:86:fe:ac:9d:7e:50:ad:74:f6:0e: 33:c6:2c:da:0e:c3:78:7b:7e:c7:b1:0e:50:d2:11: 64:04:a1:10:e0:38:11:8d:55:c8:1c:62:fa:a7:c7: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:21:27:96:E6:C1:A8:66:D8:E8:52:FB:3A:B6:06:5F:6F:31:C8:52 X509v3 Authority Key Identifier: keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:2d:40:10:57:41:9b:32:3a:6d:fa:11:ae:51:91:d5:33:dd: 62:02:f5:09:7e:36:93:22:2f:ce:b2:b2:d2:eb:12:a5:66:43: db:53:af:a2:cb:5a:bb:11:af:45:c8:53:0f:df:61:41:71:a7: 1f:d0:92:53:68:bb:0d:54:4c:24:2a:0a:8a:68:cb:19:b8:d5: be:1f:1d:05:35:bc:d0:00:da:41:95:bf:57:12:b9:6d:4e:d9: 5e:5b:d8:fb:ab:87:60:ce:d0:44:1c:c3:db:38:59:35:a2:4c: e0:ea:fa:54:4e:a1:2b:4b:ac:01:28:7a:65:58:d2:7e:9f:8f: 54:cc:c7:ce:af:c6:ab:17:64:12:63:df:10:87:ec:5f:f5:1f: 5d:a7:d4:57:1b:b3:a8:88:b7:a2:6a:dc:f1:56:64:8d:69:ec: be:f3:2c:7d:09:5f:eb:38:8c:8f:24:51:1b:50:b6:06:0e:2f: 3b:ae:2d:0e:16:9d:b6:5c:8f:57:3c:00:67:cf:bd:0d:72:93: f5:8a:f1:a3:52:2c:92:3f:a1:be:4e:08:99:0d:8d:ba:61:e4: 0d:b6:35:c7:d6:ed:54:90:6e:1c:2a:39:d7:f5:15:ce:7e:4c: 8a:a3:86:d0:86:be:26:40:53:f0:d8:d0:2e:58:92:61:79:14: f3:a9:7b:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQTExMTAvBgNVBAUTKEMxQ0IwOEFEM0VCODY2RDNDRDY0N0MxMzVEMEY1MkZB RUQyNTQ2QzQwHhcNMjUwNTA3MDMxMzQxWhcNMjUwNTE0MDMxMzQxWjAYMRYwFAYD VQQDEw02ODFhY2ZlNi1mYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8HegwNsxv0+FolQB2QefF35BVU8e7xHwqyyg8D1whoZ2fG707Uc7hPK8O9B 44Ojke11EBB3e2c4qLvvgFGFPC8lg3/d+1M5GUC4lQ5eQdvNXm8eqfsVYoLFdfh7 ydi8igMKa4vVl7OZ1hjwiq1Wf+OtvhvL/lmLDhpC4MqVrem0UGYAAil+my6enTBt wjSf2y+d/UwcPTo1MSZ3z9Rhbx0Pppc55UdhOpHSjgMeC9RLtw+pJe1CqWgK1RS1 D4uHtlePYbaBLsj1VT5EMdojIrQ5Gz2GPYb+rJ1+UK109g4zxizaDsN4e37HsQ5Q 0hFkBKEQ4DgRjVXIHGL6p8dWyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8hJ5bm wahm2OhS+zq2Bl9vMchSMB8GA1UdIwQYMBaAFMHLCK0+uGbTzWR8E10PUvrtJUbE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBMS84Q0NFM0VEQTE3 NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0UE5aSHdUWFE5Uy11MGxS c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djc0lyVDY0WnRQTlpId1RYUTlTLXUwbFJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBMS84Q0NFM0VEQTE3NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0 UE5aSHdUWFE5Uy11MGxSc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3LUAQV0GbMjpt+hGuUZHVM91iAvUJfjaTIi/OsrLS6xKlZkPbU6+i y1q7Ea9FyFMP32FBcacf0JJTaLsNVEwkKgqKaMsZuNW+Hx0FNbzQANpBlb9XErlt TtleW9j7q4dgztBEHMPbOFk1okzg6vpUTqErS6wBKHplWNJ+n49UzMfOr8arF2QS Y98Qh+xf9R9dp9RXG7OoiLeiatzxVmSNaey+8yx9CV/rOIyPJFEbULYGDi87ri0O Fp22XI9XPABnz70NcpP1ivGjUiySP6G+TgiZDY26YeQNtjXH1u1UkG4cKjnX9RXO fkyKo4bQhr4mQFPw2NAuWJJheRTzqXvM -----END CERTIFICATE-----Generated at Thu May 8 15:54:19 2025 by rpki-client