$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json) Hash identifier: lUXYn16FUEiUln1dVLjAzNXCQtSIEMFT348uIsk33ng= Subject key identifier: EC:B8:41:6A:F3:30:DF:AC:CD:FC:E7:D6:ED:F6:5F:9A:1F:90:DA:B3 Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Certificate serial: 1C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft Manifest number: 1C4B Signing time: Mon 12 May 2025 16:08:47 +0000 Manifest this update: Mon 12 May 2025 16:08:46 +0000 Manifest next update: Mon 19 May 2025 16:08:46 +0000 Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: s0o9clGqmttzBd9ewTFTwuBbhEN75tg/dr2uijNYFQA=) 2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7257 (0x1c59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Validity Not Before: May 12 16:08:46 2025 GMT Not After : May 19 16:08:46 2025 GMT Subject: CN=68221d0f-dd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:6f:63:7a:57:99:e5:9c:5d:5c:79:77:a3: 86:26:d4:59:dc:34:be:8e:9a:b5:97:f0:84:29:c8: 00:e8:8d:bf:3b:10:1a:e2:dc:e1:3e:16:b8:c2:2f: 15:75:41:da:8a:2b:07:1c:b0:a3:ff:46:91:ad:8a: e7:23:10:29:05:ba:34:8d:17:51:9d:23:95:cd:51: 2d:8b:a4:da:1e:ca:f1:85:5d:a0:87:ee:43:d1:df: 8c:5f:ce:a5:1b:de:6b:be:f6:86:5e:89:db:d2:d3: 1c:29:01:90:be:3d:c0:4b:58:72:4e:ad:2e:46:9d: 5b:8b:2e:ca:e0:18:13:dd:2f:21:61:83:74:92:1c: 6c:15:18:6d:9c:8d:35:ea:55:ad:dc:47:9e:34:39: 52:dc:d6:7e:64:e8:44:44:88:4e:81:9f:70:3e:68: 51:97:07:cb:63:cb:61:77:49:11:aa:ee:0f:8f:3b: 74:c7:f8:3e:bb:c1:7e:39:a0:45:d0:5a:6a:6e:6b: db:94:f1:8f:74:61:03:cd:23:32:4b:d7:20:71:91: 4a:37:63:22:4f:f0:db:6c:fc:f7:b2:96:cd:30:b4: ab:59:5f:3b:3e:ce:5e:24:10:d9:16:f3:77:6b:b8: f4:fa:6b:86:5b:5b:c6:e3:5d:6f:96:7b:08:d9:eb: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B8:41:6A:F3:30:DF:AC:CD:FC:E7:D6:ED:F6:5F:9A:1F:90:DA:B3 X509v3 Authority Key Identifier: keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:44:e1:73:6e:5d:49:53:79:e2:cc:f9:51:6a:40:fb:4c:35: 1e:a8:27:2c:6d:c5:3b:60:49:cf:04:fd:c2:fb:af:ad:97:eb: 2b:85:93:64:7b:5f:61:d5:48:f9:c5:da:4b:3c:c6:35:fd:a4: 6e:29:13:db:25:97:f4:88:19:82:97:08:06:a1:93:24:48:76: ab:37:7d:54:6b:84:09:c6:02:98:f2:f0:38:9f:9e:25:d2:00: dd:eb:ce:dd:86:b2:a8:75:9c:af:93:08:f5:9a:1a:2c:9f:2a: a6:8c:0d:88:e0:0d:27:9d:13:ce:73:2d:c4:ed:1c:e0:2e:ac: db:5f:5f:68:0f:a0:e0:90:1c:60:3d:17:39:f4:0d:75:45:d0: 64:e8:c4:68:da:f5:bf:c7:8e:4f:99:22:e8:63:c1:5b:61:1d: 53:bf:af:a5:db:4f:30:ec:bc:ae:d7:ae:56:ae:06:a3:9b:dd: f8:de:90:ce:65:19:ef:59:24:b9:1d:83:88:3f:c3:d5:88:bb: 95:10:db:9e:ff:8a:e1:8c:56:d9:af:69:b2:d1:08:01:78:d3: 8b:dd:ef:d2:09:90:48:0b:9c:3c:d2:88:85:f0:ae:4e:21:e6: 54:98:0e:76:5d:3f:a8:2b:46:02:72:60:72:5b:14:51:d4:21: bf:d9:dd:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5 OEE1MDc1NEMwHhcNMjUwNTEyMTYwODQ2WhcNMjUwNTE5MTYwODQ2WjAYMRYwFAYD VQQDEw02ODIyMWQwZi1kZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+BvY3pXmeWcXVx5d6OGJtRZ3DS+jpq1l/CEKcgA6I2/OxAa4tzhPha4wi8V dUHaiisHHLCj/0aRrYrnIxApBbo0jRdRnSOVzVEti6TaHsrxhV2gh+5D0d+MX86l G95rvvaGXonb0tMcKQGQvj3AS1hyTq0uRp1biy7K4BgT3S8hYYN0khxsFRhtnI01 6lWt3EeeNDlS3NZ+ZOhERIhOgZ9wPmhRlwfLY8thd0kRqu4Pjzt0x/g+u8F+OaBF 0FpqbmvblPGPdGEDzSMyS9cgcZFKN2MiT/DbbPz3spbNMLSrWV87Ps5eJBDZFvN3 a7j0+muGW1vG411vlnsI2ev87QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOy4QWrz MN+szfzn1u32X5ofkNqzMB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcyOS9BN0ExQTI5QURGMTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQ elM5c2dJcFZGblNZcFFkVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7ROFzbl1JU3nizPlRakD7TDUeqCcsbcU7YEnPBP3C+6+tl+srhZNk e19h1Uj5xdpLPMY1/aRuKRPbJZf0iBmClwgGoZMkSHarN31Ua4QJxgKY8vA4n54l 0gDd687dhrKodZyvkwj1mhosnyqmjA2I4A0nnRPOcy3E7RzgLqzbX19oD6DgkBxg PRc59A11RdBk6MRo2vW/x45PmSLoY8FbYR1Tv6+l208w7Lyu165Wrgajm9343pDO ZRnvWSS5HYOIP8PViLuVENue/4rhjFbZr2my0QgBeNOL3e/SCZBIC5w80oiF8K5O IeZUmA52XT+oK0YCcmByWxRR1CG/2d0m -----END CERTIFICATE-----Generated at Mon May 12 22:51:27 2025 by rpki-client