$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft File: WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json) Hash identifier: jRWzXIjKogyFYlfd5AmK+A3WxPbs0uNlx1eJMaGFHKM= Subject key identifier: B3:C5:EA:0F:F1:9A:0C:F1:38:EA:3F:18:4E:54:23:BC:95:D4:F0:4E Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6 Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft Manifest number: 010E Signing time: Sun 11 May 2025 03:52:48 +0000 Manifest this update: Sun 11 May 2025 03:52:48 +0000 Manifest next update: Sun 18 May 2025 03:52:48 +0000 Files and hashes: 1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: vb+5LOMq1+Pgfhfjp/8pnZPTWMYTC7Ihno29OO9WX0o=) 2: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: bc2WkbYAbuGAx2Gf2EfnLZLtMVMYcpQMrHnCADXGRJs=) 3: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: pLOgKyFyMkYkgWZ7IaxS8IlsIuIv5okTjVaTAgIeoac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6 Validity Not Before: May 11 03:52:48 2025 GMT Not After : May 18 03:52:48 2025 GMT Subject: CN=68201f10-97a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:3d:a3:36:c3:39:cd:b8:a9:91:f3:1b:72: f3:e3:dc:60:49:9c:50:8c:8e:f3:56:3d:a3:ff:85: 25:a3:1d:20:91:ed:49:77:00:b9:1e:fe:99:33:0a: 79:b5:a7:d3:3c:78:cd:85:22:12:66:22:b1:89:ac: 49:c7:a5:90:14:3c:ab:ff:dc:2c:3d:ae:3a:ff:4b: 94:ba:4d:ef:c8:e3:b3:68:25:aa:2a:18:d9:fe:2d: fb:e2:9c:67:42:27:dc:af:c9:b8:b0:2f:44:9f:c4: 1c:af:6b:0d:de:5a:4d:f1:96:b8:04:e4:a3:64:b5: 0f:9a:d1:ea:77:c3:be:99:72:1f:e5:5b:27:e4:ec: 00:4e:37:3d:d4:7a:ce:91:ab:42:2c:32:a7:c8:2c: 46:08:e0:1a:89:6a:e4:fe:a1:93:71:c8:1f:25:6e: d6:c0:9d:8e:21:02:12:4f:25:18:fa:18:44:c3:dc: 2b:ee:47:61:5b:10:aa:ef:1f:01:95:36:b4:a1:1c: 84:70:be:e1:6c:b2:a3:f1:e2:40:2f:ac:23:4a:e9: 13:5c:ea:88:20:b4:cb:ab:29:ff:b4:a2:64:68:94: 12:06:0e:e3:2a:d3:11:15:70:13:31:13:fc:dc:de: ca:a3:e4:dc:57:3d:3c:17:83:9f:0a:e3:5a:05:e0: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C5:EA:0F:F1:9A:0C:F1:38:EA:3F:18:4E:54:23:BC:95:D4:F0:4E X509v3 Authority Key Identifier: keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:68:45:e3:43:0d:77:84:e7:3f:2b:16:cc:7b:66:72:4b:f0: 04:93:0b:e0:2f:cb:7b:70:e3:f1:37:25:a4:8e:e8:1c:16:8e: 43:35:eb:da:2d:d5:bf:90:e9:21:49:86:d3:39:87:3d:33:2f: f8:46:d0:fe:55:17:90:9b:15:97:40:06:d1:7e:6c:b1:c4:15: 16:f5:9f:4d:0e:2a:df:b6:3e:bb:a5:06:3d:4f:a7:b0:76:7a: 21:4e:50:25:14:64:43:9b:fc:e5:85:1d:3b:29:0d:17:53:dd: 33:89:03:9f:3b:ce:a8:6a:1a:b5:a7:bf:b8:33:dd:f8:68:cd: 1d:7a:29:66:7e:6f:32:f6:ac:a3:90:e4:11:a1:fe:b1:bb:c5: 83:8f:87:e8:5d:e0:8b:31:d5:47:67:55:fb:bc:4b:d6:68:46: 14:5a:bd:41:6c:2a:f7:d5:18:23:bc:f8:46:96:71:1c:74:c6: c3:cf:90:27:18:43:78:58:1e:55:b0:fc:ea:2b:8b:68:c7:26: 33:3c:8e:e0:dc:39:2d:41:b5:c3:df:7c:9d:d9:c2:1f:83:48: 7a:90:3e:c9:00:06:4c:70:28:27:3d:c9:78:60:39:01:2c:f8: 3b:59:a8:f2:7b:8a:bb:c8:6e:1e:2b:29:28:35:20:ee:d3:52: 83:94:5f:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBQjkxMTAvBgNVBAUTKDU5Q0EwRUQ2Qjk2QjcwQzI5QjNERDhFNEVDNTk4RUEx MkUwREMyRTYwHhcNMjUwNTExMDM1MjQ4WhcNMjUwNTE4MDM1MjQ4WjAYMRYwFAYD VQQDEw02ODIwMWYxMC05N2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4s9ozbDOc24qZHzG3Lz49xgSZxQjI7zVj2j/4Ulox0gke1JdwC5Hv6ZMwp5 tafTPHjNhSISZiKxiaxJx6WQFDyr/9wsPa46/0uUuk3vyOOzaCWqKhjZ/i374pxn Qifcr8m4sC9En8Qcr2sN3lpN8Za4BOSjZLUPmtHqd8O+mXIf5Vsn5OwATjc91HrO katCLDKnyCxGCOAaiWrk/qGTccgfJW7WwJ2OIQISTyUY+hhEw9wr7kdhWxCq7x8B lTa0oRyEcL7hbLKj8eJAL6wjSukTXOqIILTLqyn/tKJkaJQSBg7jKtMRFXATMRP8 3N7Ko+TcVz08F4OfCuNaBeAAowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPF6g/x mgzxOOo/GE5UI7yV1PBOMB8GA1UdIwQYMBaAFFnKDta5a3DCmz3Y5OxZjqEuDcLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FCOS9BQjU3NTMwNjlC MTMxMUVFQUFBQTM5ODJDNEY5QUUwMi9XY29PMXJscmNNS2JQZGprN0ZtT29TNE53 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1djb08xcmxyY01LYlBkams3Rm1Pb1M0Tnd1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0FCOS9BQjU3NTMwNjlCMTMxMUVFQUFBQTM5ODJDNEY5QUUwMi9XY29PMXJscmNN S2JQZGprN0ZtT29TNE53dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJaEXjQw13hOc/KxbMe2ZyS/AEkwvgL8t7cOPxNyWkjugcFo5DNeva LdW/kOkhSYbTOYc9My/4RtD+VReQmxWXQAbRfmyxxBUW9Z9NDirftj67pQY9T6ew dnohTlAlFGRDm/zlhR07KQ0XU90ziQOfO86oahq1p7+4M934aM0deilmfm8y9qyj kOQRof6xu8WDj4foXeCLMdVHZ1X7vEvWaEYUWr1BbCr31RgjvPhGlnEcdMbDz5An GEN4WB5VsPzqK4toxyYzPI7g3DktQbXD33yd2cIfg0h6kD7JAAZMcCgnPcl4YDkB LPg7Wajye4q7yG4eKykoNSDu01KDlF8L -----END CERTIFICATE-----Generated at Mon May 12 23:17:40 2025 by rpki-client