$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json) Hash identifier: eJI17CpWEoyMh9vwKpwu4s4F5FQUxkxmTvxFZw/+PKM= Subject key identifier: A4:35:B8:36:49:4C:B8:E8:69:59:84:82:DC:C3:A6:7F:BA:B6:A0:A8 Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft Manifest number: 0192 Signing time: Sun 11 May 2025 02:28:48 +0000 Manifest this update: Sun 11 May 2025 02:28:47 +0000 Manifest next update: Sun 18 May 2025 02:28:47 +0000 Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: jrNzjXfKnhBr1aibfxPyMVj7K3ItCL7AQ4yEpgCxdWI=) 2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: gexTzIiKhgLcrcI1jyC1eZ1O4wMhCdNKof8sdrmuHDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FB6, serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Validity Not Before: May 11 02:28:47 2025 GMT Not After : May 18 02:28:47 2025 GMT Subject: CN=68200b60-35f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fe:a7:cc:36:b1:12:93:e0:9e:7d:e9:ca:cf: 34:7e:c8:02:4c:c4:ae:13:2f:59:4c:00:d0:df:89: 2d:21:5c:6e:d1:1d:06:9e:9f:b0:76:6c:47:d1:2e: dc:89:da:b2:0e:2b:2c:9e:9f:73:21:3e:a1:85:a8: 0b:8b:8f:c1:04:44:6c:0a:c7:ba:8a:08:f1:7a:81: 57:dd:37:62:05:71:16:12:39:57:bb:5d:0d:71:96: bc:a4:d4:c2:03:28:17:f5:d0:dc:28:2d:58:5f:6e: cf:e5:84:3c:18:0b:75:f0:76:51:ee:96:3f:df:f6: 64:37:c2:d5:ab:85:f5:dc:92:dc:8d:70:42:f0:a1: 6d:7a:18:c9:11:87:b8:22:be:80:7a:e8:41:9d:32: 44:37:b6:15:8a:98:4a:1c:c6:2d:61:28:c4:9e:86: bf:9c:73:42:4b:db:77:f5:bb:44:81:7a:98:3c:85: 54:6c:a6:77:4a:6a:d8:08:78:a7:e1:03:82:bc:84: f0:ab:9b:10:8b:d0:11:11:6b:b4:4d:71:fa:75:ad: e0:4b:51:79:5a:3d:ab:62:a8:5a:2d:e1:cc:fb:ce: 0a:cf:7e:e8:07:e3:1f:3c:bc:c4:07:d0:82:3c:3f: 9c:ad:e0:99:5e:79:66:b5:b7:c6:0a:88:49:f4:09: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:35:B8:36:49:4C:B8:E8:69:59:84:82:DC:C3:A6:7F:BA:B6:A0:A8 X509v3 Authority Key Identifier: keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:41:02:1e:60:70:27:1c:47:3a:dd:75:20:82:35:bf:f2:a0: 43:aa:98:91:cc:bc:01:99:bc:c3:89:7a:85:90:c5:9b:a2:c8: d5:fd:7b:5e:94:4f:6c:cb:2e:97:43:64:68:b9:85:48:9c:db: 17:6e:24:b1:c0:1b:56:28:75:cb:e1:54:59:7f:da:ae:65:b9: 0b:75:d4:bb:8e:8e:6d:7f:07:73:95:2d:5d:60:11:d3:64:bb: f5:91:e6:57:dd:e1:29:f3:08:cf:93:31:6c:c2:2b:12:56:d5: 0a:c3:7a:39:06:4d:b0:67:74:91:53:4c:d6:15:fc:a1:9d:e9: 2d:65:81:8f:23:1d:86:f2:15:27:cc:d4:30:52:dc:27:f4:9d: 11:a9:36:d5:e1:e0:f4:83:0e:1f:80:73:5d:ab:d0:0e:f8:8f: a9:01:18:8a:ed:18:f7:62:a8:44:40:93:2d:2a:00:c2:36:26: 80:05:8d:fa:a1:d3:b4:c2:83:8f:63:f6:e1:8d:41:f2:69:a0: f5:5f:e6:6d:45:df:70:5e:7e:bf:41:87:b6:ed:1d:1c:89:fa: b7:3c:86:f1:72:3a:21:97:74:1c:49:a6:31:d2:61:7e:37:1f: 94:0d:a8:af:47:cb:c8:1d:49:fa:af:c9:fd:85:44:53:27:46: 7a:0d:77:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQjYxMTAvBgNVBAUTKDczMEM5MTg4MjlCMzNGQTZDOEU3QzhEMDUyN0IyNkND NTBCOTM1MkQwHhcNMjUwNTExMDIyODQ3WhcNMjUwNTE4MDIyODQ3WjAYMRYwFAYD VQQDEw02ODIwMGI2MC0zNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0v6nzDaxEpPgnn3pys80fsgCTMSuEy9ZTADQ34ktIVxu0R0Gnp+wdmxH0S7c idqyDissnp9zIT6hhagLi4/BBERsCse6igjxeoFX3TdiBXEWEjlXu10NcZa8pNTC AygX9dDcKC1YX27P5YQ8GAt18HZR7pY/3/ZkN8LVq4X13JLcjXBC8KFtehjJEYe4 Ir6AeuhBnTJEN7YViphKHMYtYSjEnoa/nHNCS9t39btEgXqYPIVUbKZ3SmrYCHin 4QOCvITwq5sQi9AREWu0TXH6da3gS1F5Wj2rYqhaLeHM+84Kz37oB+MfPLzEB9CC PD+creCZXnlmtbfGCohJ9AnSuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQ1uDZJ TLjoaVmEgtzDpn+6tqCoMB8GA1UdIwQYMBaAFHMMkYgpsz+myOfI0FJ7JsxQuTUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZCNi9CRTRERjIyMkNE MUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2Ykk1OGpRVW5zbXpGQzVO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3eVJpQ216UDZiSTU4alFVbnNtekZDNU5TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZCNi9CRTRERjIyMkNEMUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2 Ykk1OGpRVW5zbXpGQzVOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6QQIeYHAnHEc63XUggjW/8qBDqpiRzLwBmbzDiXqFkMWbosjV/Xte lE9syy6XQ2RouYVInNsXbiSxwBtWKHXL4VRZf9quZbkLddS7jo5tfwdzlS1dYBHT ZLv1keZX3eEp8wjPkzFswisSVtUKw3o5Bk2wZ3SRU0zWFfyhnektZYGPIx2G8hUn zNQwUtwn9J0RqTbV4eD0gw4fgHNdq9AO+I+pARiK7Rj3YqhEQJMtKgDCNiaABY36 odO0woOPY/bhjUHyaaD1X+ZtRd9wXn6/QYe27R0cifq3PIbxcjohl3QcSaYx0mF+ Nx+UDaivR8vIHUn6r8n9hURTJ0Z6DXf9 -----END CERTIFICATE-----Generated at Sun May 11 19:56:12 2025 by rpki-client