$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft File: wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json) Hash identifier: sN2q/TzMJ/MI7FMpNrBOMJUiERsGTmq5P9jV6DzMYCs= Subject key identifier: 05:DD:2A:40:81:06:32:A6:B1:1F:07:C7:27:B1:45:21:D3:8E:CC:A5 Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 Certificate issuer: /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Certificate serial: 084C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft Manifest number: 083B Signing time: Wed 14 May 2025 20:55:33 +0000 Manifest this update: Wed 14 May 2025 20:55:33 +0000 Manifest next update: Wed 21 May 2025 20:55:33 +0000 Files and hashes: 1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: K17CHqlnMfuNGytOJca2y/fE6XYU0D5dC2DSvLvfv1M=) 2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: QZ10qMscHBVTnnzL5dWHSJRPlyRwjNAbgp4PK8ErxtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Validity Not Before: May 14 20:55:33 2025 GMT Not After : May 21 20:55:33 2025 GMT Subject: CN=68250345-051c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:e1:f0:cb:5a:51:81:26:fc:3e:9d:81:08: 31:21:2f:14:d7:10:61:9d:2d:e2:13:f8:2c:fb:90: f1:b4:73:c6:cf:f7:54:53:89:98:24:77:b0:bd:e7: e0:0a:59:58:87:f2:19:eb:f5:bf:77:25:bf:41:36: b4:7a:5f:14:24:ad:59:c2:3c:98:2b:84:4a:6f:ad: 89:a6:7f:44:eb:de:c1:de:0e:3d:4c:cf:30:ad:1e: 1a:4e:67:32:e3:b4:c3:84:77:b5:74:05:ee:11:3b: a0:c3:d7:d5:da:31:b3:ba:b6:24:23:d1:43:a5:61: 4d:96:cc:03:79:6d:1b:fb:12:2f:27:e3:77:d2:fb: 42:75:57:ae:0e:9b:b4:fe:96:4f:8f:1c:08:84:a0: 6a:25:41:b5:1b:61:1d:19:2d:f2:cf:b9:f8:c1:64: c0:9c:c5:40:46:2c:c0:d6:9a:8e:4f:fd:37:84:79: b4:41:ba:da:b0:1a:8d:db:d8:30:e9:0f:c1:b9:4a: d2:f1:9e:39:b8:16:35:af:19:5f:9d:bd:29:69:79: 24:61:e3:fc:b3:47:14:30:34:8c:34:33:ed:9b:64: 02:20:8e:07:58:73:7b:a9:a0:99:ae:52:39:29:f8: a9:a6:b0:56:d1:93:8d:63:fe:eb:63:b8:94:51:01: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DD:2A:40:81:06:32:A6:B1:1F:07:C7:27:B1:45:21:D3:8E:CC:A5 X509v3 Authority Key Identifier: keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:47:d3:e6:54:dd:93:cf:4e:db:13:2b:01:d5:0a:d9:21:9e: d8:f8:a8:64:78:8e:b8:33:47:c1:13:6d:d3:8c:ba:b8:05:6a: 24:48:55:e2:83:58:a0:ec:a7:08:40:6d:a5:ae:60:ce:d6:c1: e0:90:45:b2:26:da:11:f5:ef:4a:94:12:e2:bd:52:db:29:3d: cd:1e:b5:b0:a9:fa:90:b3:ca:9e:a6:70:7f:e4:b4:df:c6:d7: 3f:2e:ec:03:fa:8a:7c:63:ae:d8:e8:f2:7d:2e:bd:42:4e:98: db:63:99:1b:06:68:07:36:72:07:36:6c:dc:6e:23:8e:29:01: ce:9d:d3:14:d6:c0:9e:96:b7:60:29:e2:00:c7:06:0b:90:68: e6:fc:da:38:77:d8:c8:c1:f2:6a:7e:91:b7:47:d7:b6:e1:cf: 6e:c4:70:9d:98:b6:bb:16:3e:ce:24:47:93:95:d5:6d:7b:45: 54:8e:60:fa:04:96:41:d3:05:24:4f:76:5d:4c:75:91:45:8a: 82:fc:c8:3e:33:0b:ec:2f:16:b6:4e:00:90:15:4a:f1:a7:7b: 29:44:14:98:dc:04:97:ac:b4:cb:de:3d:eb:b6:8e:1b:26:42: 7a:1e:ed:18:d6:0c:11:78:b2:f9:f8:44:77:38:fc:cd:60:0d: bb:47:2a:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERDMxMTAvBgNVBAUTKEMyRTBCNTgzREE0MERCNkREODMzMDUxQzA1MjQ1OTlF MUE1OTAyQzYwHhcNMjUwNTE0MjA1NTMzWhcNMjUwNTIxMjA1NTMzWjAYMRYwFAYD VQQDEw02ODI1MDM0NS0wNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ7h8MtaUYEm/D6dgQgxIS8U1xBhnS3iE/gs+5DxtHPGz/dUU4mYJHewvefg CllYh/IZ6/W/dyW/QTa0el8UJK1ZwjyYK4RKb62Jpn9E697B3g49TM8wrR4aTmcy 47TDhHe1dAXuETugw9fV2jGzurYkI9FDpWFNlswDeW0b+xIvJ+N30vtCdVeuDpu0 /pZPjxwIhKBqJUG1G2EdGS3yz7n4wWTAnMVARizA1pqOT/03hHm0QbrasBqN29gw 6Q/BuUrS8Z45uBY1rxlfnb0paXkkYeP8s0cUMDSMNDPtm2QCII4HWHN7qaCZrlI5 KfipprBW0ZONY/7rY7iUUQHXMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXdKkCB BjKmsR8HxyexRSHTjsylMB8GA1UdIwQYMBaAFMLgtYPaQNtt2DMFHAUkWZ4aWQLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0REMy8wRDcxNTAzMkQw OTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIyM1lNd1VjQlNSWm5ocFpB c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d1QzFnOXBBMjIzWU13VWNCU1JabmhwWkFzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0REMy8wRDcxNTAzMkQwOTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIy M1lNd1VjQlNSWm5ocFpBc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnR9PmVN2Tz07bEysB1QrZIZ7Y+KhkeI64M0fBE23TjLq4BWokSFXi g1ig7KcIQG2lrmDO1sHgkEWyJtoR9e9KlBLivVLbKT3NHrWwqfqQs8qepnB/5LTf xtc/LuwD+op8Y67Y6PJ9Lr1CTpjbY5kbBmgHNnIHNmzcbiOOKQHOndMU1sCelrdg KeIAxwYLkGjm/No4d9jIwfJqfpG3R9e24c9uxHCdmLa7Fj7OJEeTldVte0VUjmD6 BJZB0wUkT3ZdTHWRRYqC/Mg+MwvsLxa2TgCQFUrxp3spRBSY3ASXrLTL3j3rto4b JkJ6Hu0Y1gwReLL5+ER3OPzNYA27RypZ -----END CERTIFICATE-----Generated at Fri May 16 07:01:53 2025 by rpki-client