$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: yjOZBtbR0sitoY8IYcAAStIZipaR/V+OPqW5Tr4XAhg= Subject key identifier: 6F:B6:FD:82:DE:17:50:28:66:D9:FD:61:0C:CB:84:82:F6:DB:B0:13 Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 349A Signing time: Sat 10 May 2025 15:10:55 +0000 Manifest this update: Sat 10 May 2025 15:10:55 +0000 Manifest next update: Sat 17 May 2025 15:10:55 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: Qfb6oCuFmgZd+HsB9xtHR2r28aw2pWmPuLGHU98pLfk=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: May 10 15:10:55 2025 GMT Not After : May 17 15:10:55 2025 GMT Subject: CN=681f6c7f-2e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:b1:17:8a:27:8a:83:9e:f2:89:ab:dc:70: ab:35:08:9e:75:cf:c8:3e:f9:d6:2c:fd:70:e5:00: 19:8b:fc:e0:7f:2b:2a:a0:d1:16:d5:d6:36:7a:4b: db:2a:54:a7:ba:3d:fd:2d:e1:d6:13:f9:4a:90:bc: 5b:bf:ce:6f:39:19:48:66:df:5d:f1:e9:fa:1b:68: 53:bd:fb:d0:72:94:99:3b:48:47:08:33:52:f8:18: 8d:9c:22:88:d3:b5:78:19:3f:e7:a9:6b:21:94:d6: 06:40:f1:0b:4c:27:48:82:fa:6f:39:e1:25:ab:a4: 8a:29:fb:7d:6b:bb:0b:45:13:4d:6f:85:63:b1:b3: a8:e9:12:ce:c9:53:1b:6d:ae:78:54:c5:22:8e:84: f4:5f:c8:0a:34:f5:99:d1:d8:72:6f:91:99:33:c6: 8d:da:fa:f3:9f:15:dd:cd:49:b1:27:ee:73:f2:7d: 69:0e:08:55:ed:27:0a:78:73:fa:8c:1a:4a:83:7b: f0:de:8e:dd:03:e8:49:f7:32:95:bd:c8:28:d2:14: dc:30:15:05:dd:2d:d5:b0:13:a3:af:04:c3:23:b3: 02:69:7a:66:8b:a0:0c:ee:4a:88:51:51:2e:1f:00: ff:e0:7b:6f:20:cf:8d:50:67:8c:00:cc:39:f9:da: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B6:FD:82:DE:17:50:28:66:D9:FD:61:0C:CB:84:82:F6:DB:B0:13 X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ac:63:a1:c7:27:9a:53:ce:af:3b:7f:f1:ac:87:0b:76:bf: 23:d5:f8:92:a1:5d:34:e7:0b:84:7b:32:27:5e:e5:5b:98:03: ca:2e:77:b3:2c:1e:b9:ac:10:98:86:de:92:00:c4:80:f9:0c: 64:74:41:83:73:ec:c2:5a:46:87:d5:ca:f1:b9:61:63:f5:bb: 9e:f4:b0:f6:90:64:4c:a6:e6:20:ca:81:26:d9:9d:27:47:eb: 47:2e:40:1c:e5:ae:c6:6a:a7:9a:37:8d:bb:e3:9d:e2:52:20: ac:8b:8f:a7:a5:68:ad:a3:51:d9:5c:34:87:fe:10:3b:0f:e6: 66:94:e3:85:ba:4c:6c:33:28:80:b4:08:4a:c4:e9:fb:09:49: 7c:7a:ec:14:13:09:f6:30:11:3b:d9:5a:b6:c0:3a:f2:3b:ac: 39:ad:a5:26:f3:70:93:df:fb:f8:7a:e0:15:39:15:fe:5c:d4: 4f:07:ec:14:57:f9:2a:36:1c:41:fc:a6:67:db:f0:1f:c3:2a: f2:d0:ec:44:f5:d9:e9:f5:8e:c7:8e:f6:3c:2b:0e:2a:ee:14: 3d:83:85:e5:37:5a:dc:17:65:33:2d:03:c6:16:e3:0d:7a:72: d7:6d:f0:df:8a:37:42:88:20:cc:27:35:a1:4b:e2:62:ad:47: 63:da:71:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUwNTEwMTUxMDU1WhcNMjUwNTE3MTUxMDU1WjAYMRYwFAYD VQQDEw02ODFmNmM3Zi0yZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9mxF4onioOe8omr3HCrNQiedc/IPvnWLP1w5QAZi/zgfysqoNEW1dY2ekvb KlSnuj39LeHWE/lKkLxbv85vORlIZt9d8en6G2hTvfvQcpSZO0hHCDNS+BiNnCKI 07V4GT/nqWshlNYGQPELTCdIgvpvOeElq6SKKft9a7sLRRNNb4VjsbOo6RLOyVMb ba54VMUijoT0X8gKNPWZ0dhyb5GZM8aN2vrznxXdzUmxJ+5z8n1pDghV7ScKeHP6 jBpKg3vw3o7dA+hJ9zKVvcgo0hTcMBUF3S3VsBOjrwTDI7MCaXpmi6AM7kqIUVEu HwD/4HtvIM+NUGeMAMw5+dogLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+2/YLe F1AoZtn9YQzLhIL227ATMB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHrGOhxyeaU86vO3/xrIcLdr8j1fiSoV005wuEezInXuVbmAPKLnez LB65rBCYht6SAMSA+QxkdEGDc+zCWkaH1crxuWFj9bue9LD2kGRMpuYgyoEm2Z0n R+tHLkAc5a7GaqeaN427453iUiCsi4+npWito1HZXDSH/hA7D+ZmlOOFukxsMyiA tAhKxOn7CUl8euwUEwn2MBE72Vq2wDryO6w5raUm83CT3/v4euAVORX+XNRPB+wU V/kqNhxB/KZn2/Afwyry0OxE9dnp9Y7HjvY8Kw4q7hQ9g4XlN1rcF2UzLQPGFuMN enLXbfDfijdCiCDMJzWhS+JirUdj2nHq -----END CERTIFICATE-----Generated at Sun May 11 13:47:14 2025 by rpki-client