$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: hhLj+iztvpEBcmaTR2LcFFMOsCudBFmvjRuFem/otZY= Subject key identifier: 42:3B:33:BF:68:79:AE:EA:D4:6C:08:20:0A:6A:07:54:5C:46:58:91 Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: 97 Signing time: Thu 15 May 2025 05:38:54 +0000 Manifest this update: Thu 15 May 2025 05:38:53 +0000 Manifest next update: Thu 22 May 2025 05:38:53 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: Z8yTAIOKWoJnaANiQC+47z9O+fTUgL3mzg94bu6maGY=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: EOPx00rRZjGS/73Br0xTrWoW0kA4+3+SpewBHZe+BK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: May 15 05:38:53 2025 GMT Not After : May 22 05:38:53 2025 GMT Subject: CN=68257ded-ccf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:9d:a6:28:47:a4:6d:07:5c:18:4f:6e:43: 19:1b:50:b4:f1:ce:e6:16:f2:a3:b3:5f:db:54:9d: d0:28:39:61:c1:6f:30:62:48:d9:55:13:c2:7d:97: c7:5b:28:7e:f2:5a:9a:af:f4:57:69:be:4b:46:61: 96:d3:f0:df:c5:88:c5:ed:6f:fd:72:7f:19:f5:61: 58:67:eb:8f:39:8a:4c:2b:50:43:da:e6:40:79:ce: 02:9f:0a:f3:c4:6c:40:65:68:00:8d:65:37:ac:fc: d4:ba:59:d2:32:91:bc:a6:6c:ee:60:21:01:83:bc: f9:14:84:f6:22:af:70:3c:ca:bd:f6:9f:18:27:f6: fe:49:90:3a:6b:e8:f7:58:1d:ef:65:cd:ce:25:db: 74:eb:00:59:13:d4:86:0e:0e:ac:6f:99:81:1c:38: 44:86:74:ae:0f:ef:1e:82:c1:80:51:a3:0d:14:eb: ad:52:ff:17:c8:9a:74:dc:b6:79:47:ae:2d:78:40: a3:11:b6:72:d1:90:41:b6:93:d1:22:9e:26:71:7e: 5e:cb:67:e4:3d:77:a8:03:3d:19:1a:56:50:bb:a0: f7:f3:39:7b:63:33:07:24:00:e7:e4:e6:46:8f:8a: fa:b1:f6:58:e6:2f:5f:1c:15:60:74:ad:6b:30:63: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3B:33:BF:68:79:AE:EA:D4:6C:08:20:0A:6A:07:54:5C:46:58:91 X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:bd:71:cd:4e:2c:5b:d1:25:75:5f:55:75:d1:ff:06:a7:61: 79:67:79:a6:71:a6:6e:fb:00:b0:23:57:48:d9:bd:c4:68:37: 85:f9:99:10:3a:1a:05:1f:54:31:80:a7:be:fe:0e:b0:4b:48: 99:be:22:6d:e3:e5:ba:aa:cc:03:8f:45:4e:2b:c4:26:21:17: d8:87:b1:2a:88:78:2b:a7:a6:ac:f0:d9:20:e6:00:38:8f:63: 46:e2:b7:a9:ac:56:63:8c:9c:c5:67:67:01:ff:0f:a3:2a:f9: d3:f5:53:3d:3d:19:73:3a:86:29:d5:b2:1e:4d:ec:c3:49:a9: 68:39:88:cc:d0:5f:29:0a:a2:23:19:6d:95:48:4a:5e:5e:13: f5:37:c1:c7:1e:9b:4d:57:a1:f2:f2:d6:df:8a:46:87:3b:e1: 44:cb:3a:08:1c:be:56:04:16:99:a4:0f:af:59:a3:6a:9b:bb: 38:9b:7d:b9:98:47:22:7b:5a:7a:01:74:fa:26:4b:a8:f3:84: 31:26:5d:d8:af:f3:36:5f:0c:18:7b:d2:c0:ee:8d:b4:15:fc: 9f:c9:85:8a:07:17:fd:7c:cb:75:09:4e:eb:0b:c9:54:e2:49: b8:5b:f7:c4:d2:63:b2:df:3c:15:2b:93:5b:f3:29:53:de:8c: cf:08:95:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjUwNTE1MDUzODUzWhcNMjUwNTIyMDUzODUzWjAYMRYwFAYD VQQDEw02ODI1N2RlZC1jY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+qdpihHpG0HXBhPbkMZG1C08c7mFvKjs1/bVJ3QKDlhwW8wYkjZVRPCfZfH Wyh+8lqar/RXab5LRmGW0/DfxYjF7W/9cn8Z9WFYZ+uPOYpMK1BD2uZAec4Cnwrz xGxAZWgAjWU3rPzUulnSMpG8pmzuYCEBg7z5FIT2Iq9wPMq99p8YJ/b+SZA6a+j3 WB3vZc3OJdt06wBZE9SGDg6sb5mBHDhEhnSuD+8egsGAUaMNFOutUv8XyJp03LZ5 R64teECjEbZy0ZBBtpPRIp4mcX5ey2fkPXeoAz0ZGlZQu6D38zl7YzMHJADn5OZG j4r6sfZY5i9fHBVgdK1rMGPNvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI7M79o ea7q1GwIIApqB1RcRliRMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARvXHNTixb0SV1X1V10f8Gp2F5Z3mmcaZu+wCwI1dI2b3EaDeF+ZkQ OhoFH1QxgKe+/g6wS0iZviJt4+W6qswDj0VOK8QmIRfYh7EqiHgrp6as8Nkg5gA4 j2NG4reprFZjjJzFZ2cB/w+jKvnT9VM9PRlzOoYp1bIeTezDSaloOYjM0F8pCqIj GW2VSEpeXhP1N8HHHptNV6Hy8tbfikaHO+FEyzoIHL5WBBaZpA+vWaNqm7s4m325 mEcie1p6AXT6Jkuo84QxJl3Yr/M2XwwYe9LA7o20FfyfyYWKBxf9fMt1CU7rC8lU 4km4W/fE0mOy3zwVK5Nb8ylT3ozPCJVg -----END CERTIFICATE-----Generated at Thu May 15 15:49:25 2025 by rpki-client