$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json) Hash identifier: nTqISbuMeaACTnKIs9JNgw04MBrbJKPrLAKlHzLWA3Y= Subject key identifier: 9E:0E:89:66:79:1B:4F:3C:DC:FB:52:D2:E5:B2:80:D5:AD:42:68:07 Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft Manifest number: 07A0 Signing time: Mon 12 May 2025 21:03:34 +0000 Manifest this update: Mon 12 May 2025 21:03:34 +0000 Manifest next update: Mon 19 May 2025 21:03:34 +0000 Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: i2cxj2eJgz7mSUkYB7zi7H1YxosQytt21qiS1AOzGr0=) 2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: ciOpG8qRab9sKkVmGRn2hy7gpdalC9pHnHF+YnHZNHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Validity Not Before: May 12 21:03:34 2025 GMT Not After : May 19 21:03:34 2025 GMT Subject: CN=68226226-1df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:90:e7:c0:57:4d:56:88:40:41:43:ee:bd: 15:3a:1b:c9:9b:02:4c:9e:35:d0:59:95:3f:00:02: eb:4e:c5:ea:ca:06:6c:64:c1:75:77:34:8c:3f:f3: 45:92:48:54:5f:aa:43:5c:20:83:60:96:f6:0f:70: 86:93:ce:e2:34:3e:13:a4:da:4a:22:14:5a:d4:a7: 76:47:e8:bd:9d:39:3b:e1:81:a3:4d:77:9c:48:1a: 30:18:d5:d6:50:5d:df:4c:28:13:c8:2a:05:b3:a7: d3:0c:6c:ff:58:a7:06:0f:a5:b3:50:f3:75:36:29: ac:80:7a:52:74:b9:7b:49:35:63:21:21:69:14:cf: 81:26:8f:2a:61:f1:2a:78:1f:d5:e4:0a:94:0f:65: bf:4d:32:c4:fe:d4:55:b7:8b:63:90:76:98:50:da: b2:ad:e9:2c:b8:c4:56:3a:e4:90:9d:b7:4d:df:da: 95:00:c0:b6:05:8a:57:fc:fa:a5:bf:a4:5c:be:bb: b2:47:da:6f:51:72:7d:e7:84:3c:c1:07:1f:87:30: 3b:56:8a:82:fe:d6:c8:7c:ef:0a:4c:8a:cc:71:0e: 63:87:c2:e7:88:17:9d:8c:39:31:0e:43:f0:c6:6f: 93:1e:1d:72:9d:65:ca:99:ba:a9:36:25:b7:b7:0e: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0E:89:66:79:1B:4F:3C:DC:FB:52:D2:E5:B2:80:D5:AD:42:68:07 X509v3 Authority Key Identifier: keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6b:23:e3:e7:8d:ba:21:cf:c6:a7:98:54:9d:52:9c:fe:39: 6a:16:f7:11:c4:1f:17:1b:06:86:a0:52:6c:25:8c:e1:14:08: f3:61:5c:0e:f7:d4:4d:c1:a6:f2:8a:b4:96:2e:94:86:34:42: e2:30:56:18:af:23:d4:0b:d1:3b:15:b6:f7:9b:a8:3f:94:69: cc:b7:11:8c:eb:6f:92:05:69:b3:0d:a0:83:50:e1:1f:0b:a1: 1a:ae:ff:a7:2f:45:39:fc:67:49:5b:8c:62:78:c3:7f:45:8d: 4e:d1:e9:1e:14:8d:c7:3a:21:8b:09:1a:ac:0f:cf:38:fc:9e: 7b:49:16:41:d4:bb:48:23:44:86:df:e4:4b:48:9f:bd:c7:e5: 40:9c:10:cf:95:ae:12:0f:00:94:df:b9:44:64:e1:49:c4:16: 4a:c2:f4:59:43:04:9f:8d:1b:71:37:10:80:30:cf:c8:07:d0: 9f:07:24:86:1f:2a:54:bd:97:4a:82:dd:10:29:ee:2f:5e:ce: b1:e6:11:c2:da:ec:4b:10:17:7d:36:7e:fd:4d:d7:ff:00:13: 7a:c3:87:6c:40:81:5f:fc:1b:59:73:88:7e:31:4e:cf:8d:a0: 72:26:1f:a6:87:c6:02:53:55:f8:15:f9:ac:fc:1b:1e:87:c6: de:b6:34:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx OUIwNjI1MEQwHhcNMjUwNTEyMjEwMzM0WhcNMjUwNTE5MjEwMzM0WjAYMRYwFAYD VQQDEw02ODIyNjIyNi0xZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosmQ58BXTVaIQEFD7r0VOhvJmwJMnjXQWZU/AALrTsXqygZsZMF1dzSMP/NF kkhUX6pDXCCDYJb2D3CGk87iND4TpNpKIhRa1Kd2R+i9nTk74YGjTXecSBowGNXW UF3fTCgTyCoFs6fTDGz/WKcGD6WzUPN1NimsgHpSdLl7STVjISFpFM+BJo8qYfEq eB/V5AqUD2W/TTLE/tRVt4tjkHaYUNqyreksuMRWOuSQnbdN39qVAMC2BYpX/Pql v6RcvruyR9pvUXJ954Q8wQcfhzA7VoqC/tbIfO8KTIrMcQ5jh8LniBedjDkxDkPw xm+THh1ynWXKmbqpNiW3tw4V9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4OiWZ5 G0883PtS0uWygNWtQmgHMB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK Z19VeXBNMjdMTThac0dKUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtayPj5426Ic/Gp5hUnVKc/jlqFvcRxB8XGwaGoFJsJYzhFAjzYVwO 99RNwabyirSWLpSGNELiMFYYryPUC9E7Fbb3m6g/lGnMtxGM62+SBWmzDaCDUOEf C6Earv+nL0U5/GdJW4xieMN/RY1O0ekeFI3HOiGLCRqsD884/J57SRZB1LtII0SG 3+RLSJ+9x+VAnBDPla4SDwCU37lEZOFJxBZKwvRZQwSfjRtxNxCAMM/IB9CfBySG HypUvZdKgt0QKe4vXs6x5hHC2uxLEBd9Nn79Tdf/ABN6w4dsQIFf/BtZc4h+MU7P jaByJh+mh8YCU1X4Ffms/Bseh8betjQB -----END CERTIFICATE-----Generated at Tue May 13 15:27:21 2025 by rpki-client