$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: QxRAhtkkTDyrKR8uu8O1ic61gHzQG5oljQfZi/UOZjI= Subject key identifier: 6D:5B:81:1F:A0:41:6F:28:4E:5C:DB:1C:F2:75:0F:2F:06:A1:05:0F Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 14BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 1902 Signing time: Wed 14 May 2025 16:57:16 +0000 Manifest this update: Wed 14 May 2025 16:57:15 +0000 Manifest next update: Wed 21 May 2025 16:57:15 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: xIm38PYoWg0FTovWyFrLAJ5PHnAor/RuwEkfL3VCIJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5306 (0x14ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: May 14 16:57:15 2025 GMT Not After : May 21 16:57:15 2025 GMT Subject: CN=6824cb6c-4160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:21:08:fb:2b:2a:e1:67:09:e8:dc:e3:ee: 0a:aa:a6:81:27:8c:42:b2:53:2e:d9:ce:17:02:4e: 9a:ce:16:ef:65:21:54:93:c8:63:6b:d6:14:2e:f0: 12:f1:90:da:ea:f8:65:c2:96:07:8d:cd:1a:30:5b: 88:c2:eb:92:6b:04:6b:18:74:9c:fa:f7:b7:5f:d5: 95:1d:28:ce:6a:83:75:85:e2:8b:5f:cc:b5:c6:c4: 80:92:f0:10:f0:92:67:60:c8:a5:ca:8f:3c:37:a7: 0c:3d:c7:b9:9a:38:5b:30:21:cc:85:e0:0e:24:db: 74:fe:76:e9:8d:1f:33:87:07:3e:e6:6e:21:66:d8: c3:c9:4f:56:f6:1d:8d:31:6f:7d:8c:3b:62:8a:9d: 92:7c:32:18:19:58:30:96:d4:9e:df:41:7f:eb:85: 3b:8e:70:5a:cd:09:a2:15:3e:eb:67:6f:5c:e5:1a: ef:91:e9:4f:e5:91:97:84:a3:ce:bb:bc:cd:8b:d1: b2:7a:ed:2b:b0:f1:83:13:d0:b6:fe:1e:ad:83:71: 8e:45:d7:95:f4:e4:9e:00:47:a2:f9:13:61:d8:83: 2d:5a:28:c9:41:1e:a9:84:0a:de:a4:39:d8:73:dc: 07:42:4b:5e:ce:44:00:d3:69:cd:d0:d6:a5:a9:b6: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5B:81:1F:A0:41:6F:28:4E:5C:DB:1C:F2:75:0F:2F:06:A1:05:0F X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a7:f1:9e:e1:9d:26:ae:2a:9a:a2:7c:3c:56:15:79:11:6b: f1:53:23:2c:80:6e:00:80:3b:ba:0d:f2:f7:fe:5c:0b:c0:96: 4c:40:28:3c:42:cc:81:9d:b9:2a:76:b3:64:b3:74:a4:e1:0f: 34:6a:39:06:42:18:4b:8f:dc:05:f9:4b:40:04:81:6f:6e:b1: 3f:8c:20:c3:d2:61:a5:39:12:d3:bb:1e:20:af:fe:de:a7:3f: 34:de:e7:2b:7c:c2:b1:dd:36:76:a2:4f:ae:7b:a6:da:c2:df: 0f:02:5b:63:2a:37:df:25:a3:1c:e1:45:76:8b:43:a5:c7:aa: cc:2c:0d:b3:28:7d:8e:90:b2:85:4b:98:6b:02:90:d5:33:f9: 2b:06:8c:37:7e:17:5c:fc:54:8e:54:e5:6d:7c:c0:58:2e:db: aa:c7:41:5b:6d:20:95:13:67:4f:b1:88:86:48:a5:d4:25:08: a1:1e:e1:2b:5f:92:0d:50:02:00:e5:f7:2e:a7:8e:f4:da:2e: 8a:ee:ec:3b:77:24:79:09:69:ef:10:03:f3:84:96:19:58:9e: 29:34:68:05:be:c2:a8:c7:e6:66:0f:32:7e:cc:9e:e3:ae:b9: de:6a:c1:ea:db:d0:55:16:40:39:5f:f7:c5:86:4c:55:5f:e2: cc:02:fd:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjUwNTE0MTY1NzE1WhcNMjUwNTIxMTY1NzE1WjAYMRYwFAYD VQQDEw02ODI0Y2I2Yy00MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqMhCPsrKuFnCejc4+4KqqaBJ4xCslMu2c4XAk6azhbvZSFUk8hja9YULvAS 8ZDa6vhlwpYHjc0aMFuIwuuSawRrGHSc+ve3X9WVHSjOaoN1heKLX8y1xsSAkvAQ 8JJnYMilyo88N6cMPce5mjhbMCHMheAOJNt0/nbpjR8zhwc+5m4hZtjDyU9W9h2N MW99jDtiip2SfDIYGVgwltSe30F/64U7jnBazQmiFT7rZ29c5RrvkelP5ZGXhKPO u7zNi9Gyeu0rsPGDE9C2/h6tg3GORdeV9OSeAEei+RNh2IMtWijJQR6phArepDnY c9wHQktezkQA02nN0NalqbbORwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1bgR+g QW8oTlzbHPJ1Dy8GoQUPMB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1p/Ge4Z0mriqaonw8VhV5EWvxUyMsgG4AgDu6DfL3/lwLwJZMQCg8 QsyBnbkqdrNks3Sk4Q80ajkGQhhLj9wF+UtABIFvbrE/jCDD0mGlORLTux4gr/7e pz803ucrfMKx3TZ2ok+ue6bawt8PAltjKjffJaMc4UV2i0Olx6rMLA2zKH2OkLKF S5hrApDVM/krBow3fhdc/FSOVOVtfMBYLtuqx0FbbSCVE2dPsYiGSKXUJQihHuEr X5INUAIA5fcup4702i6K7uw7dyR5CWnvEAPzhJYZWJ4pNGgFvsKox+ZmDzJ+zJ7j rrneasHq29BVFkA5X/fFhkxVX+LMAv18 -----END CERTIFICATE-----Generated at Fri May 16 13:19:11 2025 by rpki-client