$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: ilMckMajHVrY+zxcy7HyCKJzYy1yjsKTW4xUB3MUiJI= Subject key identifier: C4:16:4B:7D:A3:7E:9E:B4:EC:9F:12:5D:3C:99:FC:9A:3F:C5:6B:0B Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 036F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 0360 Signing time: Mon 05 May 2025 00:36:51 +0000 Manifest this update: Mon 05 May 2025 00:36:51 +0000 Manifest next update: Mon 12 May 2025 00:36:51 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: l4PHc996ypfsd7YWMDlSXBjrJV8+PodyF60MRDfGs3g=) 2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: hWe9YX01SNRY++LLyLpvdVJBXAjQTAsl1yrwC2O21mY=) 3: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: KMxfzJx9x2vyWODkAAY5t+P6RpTmdDTdWRiAuSB0SyQ=) 4: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: EXWdfyEJT1f9crTXGSpRWWqKkko/3WFflLjeDGOj6XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: May 5 00:36:51 2025 GMT Not After : May 12 00:36:51 2025 GMT Subject: CN=68180823-01b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:33:d9:2d:07:7f:4b:71:d4:ae:e1:bd:22: b6:01:71:d2:6e:14:2d:3f:f2:4e:41:67:ab:7d:51: a6:d8:bc:0b:e9:5e:8a:12:3c:38:ce:d8:ff:04:ef: c0:56:50:51:07:e5:00:4f:71:9b:3e:c2:7e:d7:55: 8a:a7:69:b4:a4:bb:02:0c:72:76:97:83:a8:d3:2d: 4b:3d:2b:af:75:d0:1e:af:0f:4d:13:94:45:df:e3: 3e:80:ea:6f:8e:8c:df:e4:08:98:d7:d4:20:8f:fe: 9c:e7:19:f4:fb:1f:1c:40:2a:7e:23:22:91:55:23: 11:91:72:e4:51:09:c7:ff:74:fa:61:db:7f:7b:26: ae:e1:7e:e6:2c:ba:c7:e0:38:ad:e5:31:08:4c:24: e3:e1:aa:37:76:95:17:a2:e0:ee:40:57:48:ae:d0: 9a:b2:a9:49:50:48:4d:ea:2b:3a:e2:03:6a:47:76: 03:61:96:48:25:4d:6c:bf:e7:d0:e6:62:3c:c5:c1: 78:22:b4:8d:f9:7e:66:17:2c:c2:6d:eb:7c:e2:19: cc:c1:fa:e8:72:8c:4e:a5:36:47:7e:3a:41:48:bc: fb:72:e4:95:c7:ad:3c:52:6c:db:a0:43:5d:71:a1: d7:25:4f:5b:d6:fe:cb:d7:ec:fb:fb:d4:b6:15:a3: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:4B:7D:A3:7E:9E:B4:EC:9F:12:5D:3C:99:FC:9A:3F:C5:6B:0B X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:08:cc:a1:20:66:c5:96:7d:85:76:75:02:fd:30:a9:8a:96: 83:99:a4:01:1d:66:bb:1e:51:7b:dd:7e:50:8f:4b:f9:1c:67: 17:10:5c:3e:12:6d:16:c4:43:b8:ed:7b:94:8d:06:be:31:65: ba:e4:fe:ab:2e:c1:5e:9e:5b:d1:6b:0e:15:c0:eb:ac:d5:d6: 19:2c:f1:0b:16:26:e8:a2:fd:c1:d1:62:82:d6:55:50:98:60: 7e:02:4f:f3:7e:5b:26:52:0c:a0:65:44:f6:f4:86:ad:01:4d: 5e:87:e4:76:7c:df:42:dc:05:b2:eb:a8:9e:ce:ab:8b:ef:f7: 49:3a:94:19:83:e3:60:83:94:58:91:1e:37:e0:4d:86:dd:1d: 86:6b:9f:9b:2c:ce:a1:31:9c:78:f2:92:87:8e:3d:4b:c0:db: 3e:02:e3:f7:b1:c0:4e:a3:6f:f8:06:fd:60:e9:25:84:a2:d4: ad:71:60:2a:fe:60:58:79:4d:f8:77:ba:bd:2d:68:f8:e7:e7: 7e:e8:56:d1:f7:b6:d2:a6:e3:a8:d2:e7:d1:47:a9:30:49:af: dd:87:80:9a:77:29:15:69:9c:c3:45:48:7b:c8:35:5a:89:3c: 7b:91:f2:d7:0f:26:73:ae:0d:a7:db:9a:21:3d:f2:d1:d8:25: 20:ab:62:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjUwNTA1MDAzNjUxWhcNMjUwNTEyMDAzNjUxWjAYMRYwFAYD VQQDEw02ODE4MDgyMy0wMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1skz2S0Hf0tx1K7hvSK2AXHSbhQtP/JOQWerfVGm2LwL6V6KEjw4ztj/BO/A VlBRB+UAT3GbPsJ+11WKp2m0pLsCDHJ2l4Oo0y1LPSuvddAerw9NE5RF3+M+gOpv jozf5AiY19Qgj/6c5xn0+x8cQCp+IyKRVSMRkXLkUQnH/3T6Ydt/eyau4X7mLLrH 4Dit5TEITCTj4ao3dpUXouDuQFdIrtCasqlJUEhN6is64gNqR3YDYZZIJU1sv+fQ 5mI8xcF4IrSN+X5mFyzCbet84hnMwfrocoxOpTZHfjpBSLz7cuSVx608UmzboENd caHXJU9b1v7L1+z7+9S2FaPGkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQWS32j fp607J8SXTyZ/Jo/xWsLMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3CMyhIGbFln2FdnUC/TCpipaDmaQBHWa7HlF73X5Qj0v5HGcXEFw+ Em0WxEO47XuUjQa+MWW65P6rLsFenlvRaw4VwOus1dYZLPELFiboov3B0WKC1lVQ mGB+Ak/zflsmUgygZUT29IatAU1eh+R2fN9C3AWy66iezquL7/dJOpQZg+Ngg5RY kR434E2G3R2Ga5+bLM6hMZx48pKHjj1LwNs+AuP3scBOo2/4Bv1g6SWEotStcWAq /mBYeU34d7q9LWj45+d+6FbR97bSpuOo0ufRR6kwSa/dh4CadykVaZzDRUh7yDVa iTx7kfLXDyZzrg2n25ohPfLR2CUgq2LZ -----END CERTIFICATE-----Generated at Mon May 5 09:03:21 2025 by rpki-client