$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: 8iFn28QB0W298LzDUfWhZ+X70ce+pKU+2Hz2vEeHJzw= Subject key identifier: F0:FB:49:62:5F:4D:11:78:D6:A4:69:13:A1:CD:48:B2:67:27:14:B8 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0BF8 Signing time: Thu 08 May 2025 18:43:30 +0000 Manifest this update: Thu 08 May 2025 18:43:29 +0000 Manifest next update: Thu 15 May 2025 18:43:29 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: xDMpF9dECrx/ltK/ouWLXMVRFNhil9u+8nxjb4NVd+M=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: 5Pl69Ojf2kmCxfLr0FSueU3iqe1LbesPtFydiCfx1IQ=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5dNjtUvyRJQ8rKds7M86B2djQAg4WheDaP9EfyZTla8=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: bqf4/Z70iNIgP7UdmtL9Kr8ESUyHQDpHnkrIZZGc+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 18:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: May 8 18:43:29 2025 GMT Not After : May 15 18:43:29 2025 GMT Subject: CN=681cfb52-af13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:c5:51:f7:79:9b:24:e2:7f:a9:db:56:80: 91:fc:69:a8:d4:21:a9:c2:64:95:46:5f:d4:7a:5f: 6f:c9:fd:4d:31:1b:3a:04:b6:d2:12:d7:81:4b:36: e7:91:03:87:2c:fe:07:aa:22:19:4c:d0:76:51:73: 49:0c:36:dc:05:da:9a:95:7e:e1:5f:37:09:af:bb: d0:7e:90:02:d9:e3:a7:c8:56:da:bd:a5:d3:5f:39: ea:2c:8c:5a:32:a4:21:1b:1d:d7:9f:96:88:13:67: d0:e6:ef:42:d9:52:3f:39:c4:f2:e0:d2:e7:be:23: e6:58:01:c8:d6:48:b8:8e:04:de:a3:8b:c4:77:12: 63:87:f3:43:c3:72:4c:3a:f5:75:28:9b:69:e9:f2: 72:bd:a1:ff:9f:69:77:db:8d:5b:1c:11:a3:f7:87: 8c:a3:4e:c5:38:2e:c8:20:85:85:e2:7f:78:f2:5c: b6:28:e1:c3:01:b3:ad:86:0c:df:23:37:90:23:9b: 99:f3:e2:f1:2e:ba:91:7b:48:51:d1:44:7b:c9:40: bc:e3:85:1c:31:54:1c:e4:1a:e1:7a:38:74:0d:74: 0e:f5:3a:13:89:95:9b:8f:18:a2:09:d1:2b:37:8b: 28:09:59:8f:14:ae:77:1f:63:4a:f5:7e:e6:32:82: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FB:49:62:5F:4D:11:78:D6:A4:69:13:A1:CD:48:B2:67:27:14:B8 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:78:fa:c9:15:9a:71:33:fe:56:ae:52:c4:3a:6c:13:d3:b5: 9e:44:56:fe:77:34:38:8c:70:a9:b0:97:b7:c3:a3:6a:6f:7f: d2:5e:ca:18:4e:30:e7:41:e9:18:12:2d:61:44:a2:b3:7e:fd: ce:3c:21:cd:1c:d5:b7:e3:fb:68:05:51:06:e9:b1:74:fc:78: fc:25:66:73:08:b4:24:08:11:be:b0:fb:22:cf:6e:6b:78:58: 13:81:07:d8:6a:39:8c:a3:4a:c2:0a:dc:f4:f1:36:0c:01:36: d2:ff:ed:59:2a:8a:1f:40:b2:85:ae:6c:ef:10:7a:ac:91:be: da:87:25:ed:eb:7c:95:89:1a:89:06:31:5c:a5:46:f2:85:18: 62:e1:33:1f:45:c9:fe:ee:33:b6:e5:f7:e0:d9:8f:fd:36:14: 35:2c:c3:b1:83:56:43:48:1d:cd:1e:e3:c8:40:17:b4:7c:92: cd:e8:15:c6:80:8c:c0:3a:5c:8f:62:49:dc:6b:08:38:39:21: 17:aa:db:19:de:01:4a:ce:b4:79:1f:be:46:6d:5e:1e:fb:ad: da:68:6f:5b:89:cc:6e:d3:f3:86:04:9a:18:1b:a1:8a:9b:ba: 52:56:3c:d4:b6:ad:6f:55:c9:b2:e7:b8:79:e5:09:05:ac:0d: 57:f1:11:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjUwNTA4MTg0MzI5WhcNMjUwNTE1MTg0MzI5WjAYMRYwFAYD VQQDEw02ODFjZmI1Mi1hZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2zFUfd5myTif6nbVoCR/Gmo1CGpwmSVRl/Uel9vyf1NMRs6BLbSEteBSzbn kQOHLP4HqiIZTNB2UXNJDDbcBdqalX7hXzcJr7vQfpAC2eOnyFbavaXTXznqLIxa MqQhGx3Xn5aIE2fQ5u9C2VI/OcTy4NLnviPmWAHI1ki4jgTeo4vEdxJjh/NDw3JM OvV1KJtp6fJyvaH/n2l3241bHBGj94eMo07FOC7IIIWF4n948ly2KOHDAbOthgzf IzeQI5uZ8+LxLrqRe0hR0UR7yUC844UcMVQc5Brhejh0DXQO9ToTiZWbjxiiCdEr N4soCVmPFK53H2NK9X7mMoJwqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPD7SWJf TRF41qRpE6HNSLJnJxS4MB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwePrJFZpxM/5WrlLEOmwT07WeRFb+dzQ4jHCpsJe3w6Nqb3/SXsoY TjDnQekYEi1hRKKzfv3OPCHNHNW34/toBVEG6bF0/Hj8JWZzCLQkCBG+sPsiz25r eFgTgQfYajmMo0rCCtz08TYMATbS/+1ZKoofQLKFrmzvEHqskb7ahyXt63yViRqJ BjFcpUbyhRhi4TMfRcn+7jO25ffg2Y/9NhQ1LMOxg1ZDSB3NHuPIQBe0fJLN6BXG gIzAOlyPYkncawg4OSEXqtsZ3gFKzrR5H75GbV4e+63aaG9bicxu0/OGBJoYG6GK m7pSVjzUtq1vVcmy57h55QkFrA1X8RHC -----END CERTIFICATE-----Generated at Sat May 10 16:39:09 2025 by rpki-client