$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json) Hash identifier: BfP4vY9HQShsmRxmXzauTN78iaDq6PGKRai0UXiPvDQ= Subject key identifier: BB:14:91:F4:0E:D0:5B:C2:D4:F8:69:92:91:01:46:DE:60:7D:9B:C1 Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft Manifest number: 02CA Signing time: Tue 13 May 2025 01:12:24 +0000 Manifest this update: Tue 13 May 2025 01:12:24 +0000 Manifest next update: Tue 20 May 2025 01:12:24 +0000 Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: GMzEaYp9jEOmzEAi3bpvgmAyz1ySgQ+3nJyPYYaG4zQ=) 2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: SKYjC2+Kll4ZZKRgRzaVrVL/om+GJv0anlAPWT1K3TE=) 3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: +tMP8g15DFcYp7mMqY0WVEOydxXfPdFwqrShsC1V228=) 4: 8409527078B011EE8D737723C4F9AE02.roa (hash: 0ZYVM7VxDyYQJk7ae/RUp5ynDYTJuRZ5sT+0mo9VS4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Validity Not Before: May 13 01:12:24 2025 GMT Not After : May 20 01:12:24 2025 GMT Subject: CN=68229c78-c859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:44:bd:c1:59:a5:22:11:c6:11:3a:34:84: 64:60:09:0f:be:e9:0f:5d:fc:99:c9:cc:d5:6f:36: cb:fb:e0:01:e0:93:a4:0d:aa:6e:a7:a4:7a:57:60: 34:56:ab:ee:45:62:35:9f:1d:17:1a:be:32:d3:d3: 8d:c0:b6:31:29:ee:6a:98:77:5f:d3:af:a9:22:d2: b2:4a:87:e7:5d:95:a3:70:48:f8:ec:c7:d7:47:b4: 16:40:2c:79:ac:54:4c:05:12:b1:31:de:c8:c8:27: 49:ac:fa:a9:89:25:38:26:7d:53:de:f4:f4:45:4d: b8:17:2e:17:25:b8:b4:e7:65:32:a7:b1:7b:8f:43: 19:05:a3:01:14:10:f0:06:1b:b4:d3:1f:a2:4a:1f: ab:52:46:df:be:1b:93:02:2b:7d:c4:9a:50:9d:74: e2:4e:8c:9a:ee:bd:8e:86:c5:15:d8:60:31:38:67: 9a:a0:49:b8:01:b6:e3:f8:b8:9d:2e:7b:81:3d:5c: 3e:06:d1:9d:c2:5f:7a:1a:4c:a2:5d:e0:ac:75:32: 21:a5:d2:f0:84:bb:19:85:91:74:e1:fc:99:9c:f7: f4:f4:e7:77:1f:7b:35:dd:fd:65:a5:40:ee:dd:de: 86:b2:a7:9d:f4:81:7f:73:5f:b7:67:08:51:3e:48: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:14:91:F4:0E:D0:5B:C2:D4:F8:69:92:91:01:46:DE:60:7D:9B:C1 X509v3 Authority Key Identifier: keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:18:ae:f9:83:9e:d6:92:9d:98:f2:f9:3b:51:d3:9c:19:14: 92:3a:3d:60:4a:11:61:18:e4:f4:1d:7b:c7:01:48:a9:1b:55: 28:a8:af:b3:75:f7:e8:26:06:98:ca:10:cb:6b:a0:5b:50:4e: 11:a2:33:75:0e:62:3c:f4:fc:7a:24:02:1f:53:9f:3c:6c:a9: d9:6b:6b:b9:c1:02:4c:bc:66:ec:99:3d:14:f4:97:15:f6:0b: fc:ae:44:14:65:c7:c7:20:08:ad:3c:2a:f5:c7:77:1f:18:7d: 53:be:c9:02:0b:0c:30:c5:88:06:33:ce:2f:0d:ab:69:dc:c7: ce:14:d3:9b:8b:fd:29:f9:c1:ec:22:77:53:ea:e0:89:28:e7: 11:86:5b:b4:1f:65:00:36:a8:9c:75:68:1e:b7:b2:1d:1b:56: f9:c8:39:b1:40:b1:45:a6:47:ce:a8:8f:b9:e1:e5:69:c9:d8: bf:7c:3b:60:b6:5f:fe:5e:84:d6:4c:50:01:e7:0a:03:f1:37: 79:b9:f4:fe:2c:77:30:0a:19:88:34:ec:5c:1e:7c:8a:22:80: ad:31:e6:17:70:2f:ca:ed:4f:e3:d6:fc:ed:f0:f0:5e:16:ad: 05:ec:43:88:12:26:a4:c9:c0:42:b7:14:e1:34:32:1b:68:01: c8:21:d2:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEyRkIxMTAvBgNVBAUTKDU5MTE4REQ3NTNGMDUzMEVEQzJCOEMzQkUyNjNCRURC MENDRUJDMEUwHhcNMjUwNTEzMDExMjI0WhcNMjUwNTIwMDExMjI0WjAYMRYwFAYD VQQDEw02ODIyOWM3OC1jODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoa1EvcFZpSIRxhE6NIRkYAkPvukPXfyZyczVbzbL++AB4JOkDapup6R6V2A0 VqvuRWI1nx0XGr4y09ONwLYxKe5qmHdf06+pItKySofnXZWjcEj47MfXR7QWQCx5 rFRMBRKxMd7IyCdJrPqpiSU4Jn1T3vT0RU24Fy4XJbi052Uyp7F7j0MZBaMBFBDw Bhu00x+iSh+rUkbfvhuTAit9xJpQnXTiToya7r2OhsUV2GAxOGeaoEm4Abbj+Lid LnuBPVw+BtGdwl96GkyiXeCsdTIhpdLwhLsZhZF04fyZnPf09Od3H3s13f1lpUDu 3d6Gsqed9IF/c1+3ZwhRPkiSMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsUkfQO 0FvC1PhpkpEBRt5gfZvBMB8GA1UdIwQYMBaAFFkRjddT8FMO3CuMO+JjvtsMzrwO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTJGQi9FMEQ2NDUxNEVE MUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3N2NLNHc3NG1PLTJ3ek92 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSR04xMVB3VXc3Y0s0dzc0bU8tMnd6T3ZBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTJGQi9FMEQ2NDUxNEVEMUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3 N2NLNHc3NG1PLTJ3ek92QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2GK75g57Wkp2Y8vk7UdOcGRSSOj1gShFhGOT0HXvHAUipG1UoqK+z dffoJgaYyhDLa6BbUE4RojN1DmI89Px6JAIfU588bKnZa2u5wQJMvGbsmT0U9JcV 9gv8rkQUZcfHIAitPCr1x3cfGH1TvskCCwwwxYgGM84vDatp3MfOFNObi/0p+cHs IndT6uCJKOcRhlu0H2UANqicdWget7IdG1b5yDmxQLFFpkfOqI+54eVpydi/fDtg tl/+XoTWTFAB5woD8Td5ufT+LHcwChmINOxcHnyKIoCtMeYXcC/K7U/j1vzt8PBe Fq0F7EOIEiakycBCtxThNDIbaAHIIdLn -----END CERTIFICATE-----Generated at Wed May 14 15:20:29 2025 by rpki-client