$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json) Hash identifier: siwKopsk8TkhT6gTYQEW893U6GgR/uKj1/shLXauLlI= Subject key identifier: 22:31:65:54:5F:EB:39:BD:E4:E9:86:EE:65:92:34:11:3E:CB:E2:1B Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1F12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft Manifest number: 1EED Signing time: Sat 10 May 2025 15:58:31 +0000 Manifest this update: Sat 10 May 2025 15:58:30 +0000 Manifest next update: Sat 17 May 2025 15:58:30 +0000 Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: ohKaRB/Nih4KNtDQoj4ad5qSHByNa74sDGkgxvrKO5k=) 2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c=) 3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 1vTwS6NmMwWfh2eOEtEYiCFnJVIHS5ywk/KgkT3QCd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7954 (0x1f12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: May 10 15:58:30 2025 GMT Not After : May 17 15:58:30 2025 GMT Subject: CN=681f77a7-ca2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:53:1c:21:7f:85:4a:7d:27:81:13:de:8f: 7c:78:64:d5:b5:9c:a1:f6:4a:6a:ae:f8:e2:df:fa: 56:d2:d5:31:e2:b3:ab:e8:9e:ff:1a:25:5e:bd:a2: 26:95:f7:fc:73:ba:f0:5a:f5:a7:c6:c3:cb:5a:6e: 4c:82:c8:5a:b7:cb:65:b2:3c:b6:c2:37:59:f8:e8: cb:66:c2:7f:81:d7:ff:cd:86:b8:f8:c0:42:5a:08: 11:c4:ff:e9:0d:eb:90:00:4c:14:87:1c:39:ff:4c: f4:82:e5:60:69:b7:24:fe:aa:22:b8:bb:8e:a0:ee: 08:16:ab:e1:c6:7c:d3:88:32:13:c7:df:46:a7:51: 11:4e:48:d2:8b:bd:5c:60:4f:27:ce:e9:a8:76:b2: 07:3a:ad:35:70:e7:5a:3e:a4:45:1e:fc:03:02:63: db:c7:e1:5c:10:8e:fc:e5:59:91:3b:bc:d2:5b:c2: c7:10:58:17:ee:80:41:ca:94:e4:1c:24:f7:c1:e5: 1c:f4:e0:81:b0:e7:85:ed:4a:20:0d:0e:fe:83:6b: 29:bc:be:86:7b:a1:4a:c5:a7:e5:a4:8c:81:ae:38: 9a:bd:d3:1b:79:50:54:af:b3:d6:4f:11:b1:36:a5: 1a:14:9d:e5:ca:9f:b6:e0:2b:1e:dd:87:69:6c:db: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:31:65:54:5F:EB:39:BD:E4:E9:86:EE:65:92:34:11:3E:CB:E2:1B X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e7:a2:77:cb:b3:0b:ea:4f:b8:57:78:ef:67:f5:a8:43:34: 2b:f6:f2:a9:c2:5a:4a:ce:f5:76:ee:7e:d0:f6:62:9f:34:9e: 68:3f:dc:6b:33:5f:93:ac:78:e7:94:ef:eb:af:f9:2d:c8:92: d8:ff:83:f6:87:cf:47:51:1e:e5:78:64:ca:d2:f0:04:3c:46: 76:50:99:de:c6:a9:28:77:30:2e:36:c0:c5:51:ef:e2:ab:21: 01:c1:50:62:70:9f:a8:42:fb:fd:1c:5b:a2:93:43:91:4f:a1: 5a:ae:bc:08:7f:ae:52:57:b7:c3:ec:d3:50:83:8b:aa:95:b3: 2e:e1:67:cc:10:21:28:fd:f0:d8:5a:74:05:41:fe:90:ca:5f: 69:23:7f:20:86:8f:11:bb:0c:7e:0c:ef:38:45:6f:f5:60:80: 4f:5e:d3:fe:37:3d:4c:c9:e0:4f:25:9c:e0:35:c1:75:aa:e2: a0:fe:0c:5a:14:80:ed:27:ee:a9:02:bc:a6:5f:ac:70:74:c6: 67:00:f7:2b:07:bc:db:2e:a0:68:6a:c4:5d:d2:4e:8a:b4:aa: 44:ec:78:bc:89:8f:69:9a:59:82:9a:70:7b:cb:00:f4:2a:d1: 6c:31:10:76:25:ae:50:c9:fa:49:f4:53:90:69:cc:b1:85:96: 6f:1c:f2:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjUwNTEwMTU1ODMwWhcNMjUwNTE3MTU1ODMwWjAYMRYwFAYD VQQDEw02ODFmNzdhNy1jYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGVTHCF/hUp9J4ET3o98eGTVtZyh9kpqrvji3/pW0tUx4rOr6J7/GiVevaIm lff8c7rwWvWnxsPLWm5Mgshat8tlsjy2wjdZ+OjLZsJ/gdf/zYa4+MBCWggRxP/p DeuQAEwUhxw5/0z0guVgabck/qoiuLuOoO4IFqvhxnzTiDITx99Gp1ERTkjSi71c YE8nzumodrIHOq01cOdaPqRFHvwDAmPbx+FcEI785VmRO7zSW8LHEFgX7oBBypTk HCT3weUc9OCBsOeF7UogDQ7+g2spvL6Ge6FKxaflpIyBrjiavdMbeVBUr7PWTxGx NqUaFJ3lyp+24Cse3YdpbNsP9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIxZVRf 6zm95OmG7mWSNBE+y+IbMB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzFFQS85QUYzRUQyODVFRUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpk QXJfQmJRdEpMYVBhcmdnUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr56J3y7ML6k+4V3jvZ/WoQzQr9vKpwlpKzvV27n7Q9mKfNJ5oP9xr M1+TrHjnlO/rr/ktyJLY/4P2h89HUR7leGTK0vAEPEZ2UJnexqkodzAuNsDFUe/i qyEBwVBicJ+oQvv9HFuik0ORT6FarrwIf65SV7fD7NNQg4uqlbMu4WfMECEo/fDY WnQFQf6Qyl9pI38gho8Ruwx+DO84RW/1YIBPXtP+Nz1MyeBPJZzgNcF1quKg/gxa FIDtJ+6pArymX6xwdMZnAPcrB7zbLqBoasRd0k6KtKpE7Hi8iY9pmlmCmnB7ywD0 KtFsMRB2Ja5QyfpJ9FOQacyxhZZvHPLT -----END CERTIFICATE-----Generated at Mon May 12 07:17:08 2025 by rpki-client