$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft File: wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json) Hash identifier: KlSTDeDe9h2IPBqRAMc2OnMtRXNL544axrnjN8xKB/Q= Subject key identifier: 09:78:EB:E1:D2:E1:F2:6B:BF:D4:F0:D3:F5:3C:73:32:A9:04:6C:99 Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D Certificate issuer: /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Certificate serial: 054F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft Manifest number: 0549 Signing time: Sat 10 May 2025 23:02:22 +0000 Manifest this update: Sat 10 May 2025 23:02:21 +0000 Manifest next update: Sat 17 May 2025 23:02:21 +0000 Files and hashes: 1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: WOcxkVEr+qbD9BYIJWSNwbyGK4XiqjRG/8kXdlmv3Zw=) 2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: bEuAdA3yRgHUx1B8M9eSaNpdhvP9aDsmMm6seL8p7oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Validity Not Before: May 10 23:02:21 2025 GMT Not After : May 17 23:02:21 2025 GMT Subject: CN=681fdafd-ac77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:43:62:4e:01:a1:05:d6:58:c6:79:36:be: a5:cd:bd:a9:2c:8a:f7:ad:73:a6:38:87:4e:f0:de: f3:3b:0d:aa:9b:ae:01:16:4f:87:6f:1f:d9:5d:1d: 26:9d:05:56:eb:f5:a3:11:cd:37:22:31:5a:88:56: 42:20:91:a6:cd:ac:47:d9:39:a0:31:20:ee:ab:0b: 0e:ec:c1:61:cc:28:08:a0:e7:aa:3e:82:b2:f9:d9: fb:35:84:d2:8e:fa:b7:70:52:f3:dc:f3:aa:c1:38: c9:50:8b:cf:fd:11:06:f2:26:d8:1e:52:2b:bc:b3: 3c:e8:30:72:5f:f6:a0:15:1d:81:26:d8:f4:3d:a5: a9:30:35:9f:c8:a5:82:49:d6:f3:89:18:c4:23:b4: 96:6c:a1:82:3d:7e:38:a9:63:69:f8:80:1a:7d:eb: 67:e8:3e:bd:17:be:89:10:4b:0a:68:4b:79:e3:55: 50:60:bb:e6:ce:27:86:78:fd:0d:be:2b:8a:3d:5a: 64:85:85:40:a3:d9:a0:4e:ea:7d:c6:77:b6:17:fd: 2e:e8:93:97:61:0e:0d:e3:b5:79:8e:3e:1f:1b:a4: 8d:91:ce:d8:e8:2e:60:d7:9f:79:2f:13:d8:14:47: 71:32:69:c6:27:fb:fd:84:a0:18:17:c9:c3:c1:61: b9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:78:EB:E1:D2:E1:F2:6B:BF:D4:F0:D3:F5:3C:73:32:A9:04:6C:99 X509v3 Authority Key Identifier: keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c1:76:59:cc:46:27:32:1b:97:50:70:a7:af:56:f1:d8:e7: fb:65:0f:c8:79:66:41:ca:f6:31:89:d9:41:68:34:90:ec:93: 7d:60:29:e9:5e:8e:e8:10:56:9d:34:47:ab:bb:46:f1:c1:77: 37:ba:14:73:9e:d0:67:f3:21:11:f1:18:ae:e0:27:7c:c1:c8: f3:ee:d8:c0:97:08:61:12:ad:a4:45:19:91:3d:a5:16:c0:46: 58:12:a8:97:f1:3c:29:4a:ae:36:12:66:d2:f1:ca:4f:63:98: 2b:1d:ee:b7:b4:f5:8d:0b:73:c4:07:0e:97:0c:03:6e:30:0f: aa:e9:91:b2:43:c4:6c:3e:6b:8d:47:45:c9:11:d6:44:c0:ff: 4f:f5:a9:21:9f:33:32:58:c8:98:cb:fd:9f:be:27:c1:44:18: 80:f2:5f:21:c3:85:e9:b9:fa:b2:76:fc:29:79:45:bc:37:61: 40:4a:29:25:9e:a3:7e:ea:ad:32:b3:be:51:44:12:36:37:96: 72:cf:3f:91:26:cf:57:33:f9:2c:c2:ce:5c:44:4a:d6:6c:94: 3f:10:53:72:48:46:f2:18:11:c3:f1:cb:fa:53:15:9c:7a:4b: 9d:94:20:2a:9f:59:2f:fc:06:c3:cd:1f:89:2a:9c:f5:c2:3a: 47:8c:b1:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE QUFBMTc4NEQwHhcNMjUwNTEwMjMwMjIxWhcNMjUwNTE3MjMwMjIxWjAYMRYwFAYD VQQDEw02ODFmZGFmZC1hYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuExDYk4BoQXWWMZ5Nr6lzb2pLIr3rXOmOIdO8N7zOw2qm64BFk+Hbx/ZXR0m nQVW6/WjEc03IjFaiFZCIJGmzaxH2TmgMSDuqwsO7MFhzCgIoOeqPoKy+dn7NYTS jvq3cFLz3POqwTjJUIvP/REG8ibYHlIrvLM86DByX/agFR2BJtj0PaWpMDWfyKWC SdbziRjEI7SWbKGCPX44qWNp+IAafetn6D69F76JEEsKaEt541VQYLvmzieGeP0N viuKPVpkhYVAo9mgTup9xne2F/0u6JOXYQ4N47V5jj4fG6SNkc7Y6C5g1595LxPY FEdxMmnGJ/v9hKAYF8nDwWG5CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl46+HS 4fJrv9Tw0/U8czKpBGyZMB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ d244VHpvY2lWZ2ZhcWhlRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxwXZZzEYnMhuXUHCnr1bx2Of7ZQ/IeWZByvYxidlBaDSQ7JN9YCnp Xo7oEFadNEeru0bxwXc3uhRzntBn8yER8Riu4Cd8wcjz7tjAlwhhEq2kRRmRPaUW wEZYEqiX8TwpSq42EmbS8cpPY5grHe63tPWNC3PEBw6XDANuMA+q6ZGyQ8RsPmuN R0XJEdZEwP9P9akhnzMyWMiYy/2fvifBRBiA8l8hw4XpufqydvwpeUW8N2FASikl nqN+6q0ys75RRBI2N5Zyzz+RJs9XM/ksws5cRErWbJQ/EFNySEbyGBHD8cv6UxWc ekudlCAqn1kv/AbDzR+JKpz1wjpHjLGs -----END CERTIFICATE-----Generated at Mon May 12 18:16:13 2025 by rpki-client