$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: X8oFqLtUTdVIAbdgQ17xx+VcW3KliA3WLjVwNofG8IM= Subject key identifier: F9:DD:87:E4:C1:C7:D5:A9:49:32:48:86:97:16:19:F8:80:B8:CB:95 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0C39 Signing time: Mon 12 May 2025 18:18:05 +0000 Manifest this update: Mon 12 May 2025 18:18:04 +0000 Manifest next update: Mon 19 May 2025 18:18:04 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: cltCViFZJNk/Cj9dtp2YA2ObO3FAZi8k6QpqKiVIWfE=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: rjjlCBXic9PjXjyPWM+A+lhdUtqC6LPHHyzyg5jp9Pc=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: tUTz8eY+t4ddLMBAcdiLEQQ0A3k/C+6KL0Lp4wdaHaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: May 12 18:18:04 2025 GMT Not After : May 19 18:18:04 2025 GMT Subject: CN=68223b5c-fa9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:f9:6b:13:52:27:0f:2b:13:39:ba:ed:9f: ef:3a:6d:3c:93:c3:da:79:c3:12:ad:b2:d5:d1:0f: 0c:fd:8f:6f:a8:55:5c:69:15:3f:04:74:ac:d1:f9: 9a:8d:ba:ed:db:3a:49:56:ab:b6:39:eb:6e:44:ce: 48:1e:11:06:8b:4d:87:c9:57:ad:c6:cc:6b:0b:d9: 16:e8:6e:d1:54:29:84:d7:31:04:ff:7c:ec:05:20: 70:53:01:74:d1:18:e5:9c:19:b2:c4:82:6c:2d:eb: f6:3e:b7:e8:67:c9:08:57:3c:30:8b:96:81:e6:1a: 78:60:cb:79:b6:9d:71:42:9d:5a:b4:4a:21:35:6b: 9b:96:96:e8:e1:47:7e:7c:a3:7d:0d:94:d8:12:60: 51:cd:03:f2:5e:e2:d5:be:a0:9d:6a:14:f0:34:c1: e9:1d:b5:ef:17:8f:c3:e8:27:26:d8:e2:30:15:32: c2:b3:71:a0:95:15:d6:d2:3a:42:0c:8e:3d:74:5a: 5a:48:a4:2a:f2:37:79:4f:a8:be:ca:6d:ec:74:bf: 27:f7:b6:f3:8d:dd:17:97:9e:e3:eb:21:f2:d9:c3: 81:31:5c:67:29:e1:1a:8a:f2:eb:fe:df:eb:c5:09: 79:13:32:7c:6e:81:76:60:cc:83:f8:59:3c:b5:69: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DD:87:E4:C1:C7:D5:A9:49:32:48:86:97:16:19:F8:80:B8:CB:95 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:37:4a:61:41:06:2c:11:0f:f2:12:6c:c6:1b:74:d2:6f:4d: d4:a0:99:09:60:81:6a:5a:33:e0:9f:1a:41:7a:5d:8d:2a:12: 3d:a5:42:53:4d:8e:0c:02:41:8a:30:71:9f:60:6c:0d:29:f0: b7:2c:f0:0d:9f:f5:84:38:c4:1b:1d:19:58:1d:fc:b8:66:ce: 3a:76:1b:90:63:bf:84:81:45:05:cd:02:7e:05:22:d3:54:87: 5e:e9:de:a8:4c:2a:81:52:88:bf:9c:da:b7:d9:93:61:fa:5a: 3a:76:e2:8a:93:95:f2:8c:56:13:aa:fd:b0:b6:17:88:76:6f: 8f:f7:1c:7f:57:7e:64:b4:09:e8:26:54:b4:86:ce:43:02:5d: 5a:32:c0:85:a4:d2:b7:9d:38:22:af:34:65:3e:7f:ae:c1:cc: 01:3c:e7:df:50:50:0f:08:67:85:13:6a:42:34:b5:12:8b:e8: dd:92:27:67:94:cd:6e:08:1d:59:81:52:99:62:ae:73:a9:2d: d4:0e:c3:c0:81:da:37:a9:db:d8:8d:1d:a5:22:1f:4d:7c:d3: 24:10:45:f3:7b:b2:70:5f:fb:b5:bc:82:19:79:8d:a9:f8:ac: 4f:b2:67:dc:f8:d3:63:dd:6b:95:1d:e0:4d:32:b8:92:79:82: a5:f3:01:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjUwNTEyMTgxODA0WhcNMjUwNTE5MTgxODA0WjAYMRYwFAYD VQQDEw02ODIyM2I1Yy1mYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfn5axNSJw8rEzm67Z/vOm08k8PaecMSrbLV0Q8M/Y9vqFVcaRU/BHSs0fma jbrt2zpJVqu2OetuRM5IHhEGi02HyVetxsxrC9kW6G7RVCmE1zEE/3zsBSBwUwF0 0RjlnBmyxIJsLev2PrfoZ8kIVzwwi5aB5hp4YMt5tp1xQp1atEohNWublpbo4Ud+ fKN9DZTYEmBRzQPyXuLVvqCdahTwNMHpHbXvF4/D6Ccm2OIwFTLCs3GglRXW0jpC DI49dFpaSKQq8jd5T6i+ym3sdL8n97bzjd0Xl57j6yHy2cOBMVxnKeEaivLr/t/r xQl5EzJ8boF2YMyD+Fk8tWkpfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPndh+TB x9WpSTJIhpcWGfiAuMuVMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2N0phQQYsEQ/yEmzGG3TSb03UoJkJYIFqWjPgnxpBel2NKhI9pUJT TY4MAkGKMHGfYGwNKfC3LPANn/WEOMQbHRlYHfy4Zs46dhuQY7+EgUUFzQJ+BSLT VIde6d6oTCqBUoi/nNq32ZNh+lo6duKKk5XyjFYTqv2wtheIdm+P9xx/V35ktAno JlS0hs5DAl1aMsCFpNK3nTgirzRlPn+uwcwBPOffUFAPCGeFE2pCNLUSi+jdkidn lM1uCB1ZgVKZYq5zqS3UDsPAgdo3qdvYjR2lIh9NfNMkEEXze7JwX/u1vIIZeY2p +KxPsmfc+NNj3WuVHeBNMriSeYKl8wEv -----END CERTIFICATE-----Generated at Tue May 13 04:52:01 2025 by rpki-client