$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: pOABDIy149zolVxch5bxp0f7p9ktJ3LlPAUBKrRybvI= Subject key identifier: 2C:A5:45:57:DF:A8:19:9F:FF:9C:F8:AA:79:69:01:39:EE:CF:A8:27 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: 7F Signing time: Sat 03 May 2025 05:59:19 +0000 Manifest this update: Sat 03 May 2025 05:59:18 +0000 Manifest next update: Sat 10 May 2025 05:59:18 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: uqKTiCGDxLXHDDyWONQ2nnXICH2IUMB3aETECH5Jp8Y=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: May 3 05:59:18 2025 GMT Not After : May 10 05:59:18 2025 GMT Subject: CN=6815b0b6-2a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:60:ff:b9:3a:e8:47:39:06:92:02:26:91: 5a:f6:0b:8c:91:21:cb:f7:e1:dc:da:a5:43:79:fc: c5:b2:ca:f3:ee:43:92:59:61:73:68:d5:5a:52:c0: 5c:31:cf:40:38:e5:c3:4a:b2:2f:c1:15:85:d6:1d: 16:2d:3b:18:53:bd:69:6f:fe:d8:2e:2d:3b:d0:13: b6:01:49:52:31:b7:b9:69:81:a1:17:da:a8:26:0c: 32:95:04:4c:78:f0:ad:27:55:04:81:03:a8:b8:dd: fe:73:ad:27:e1:77:a3:0a:d7:be:02:a1:e7:8c:e8: fc:0a:8c:ba:b6:5f:27:07:30:b1:04:c4:ba:1f:2e: ae:91:46:a0:b7:72:fb:ba:e3:b4:06:d3:86:ab:a6: 2b:bd:59:28:32:64:10:13:3a:a8:6f:15:09:12:84: a9:b2:45:47:40:b6:a0:e7:ea:b0:fe:f9:59:89:57: a0:b2:19:0a:3b:3e:2b:e9:b2:da:e1:1f:ff:83:c3: 7c:4a:a7:f1:ee:0d:41:ad:fe:7f:5a:3a:9f:57:c1: 0f:2e:14:29:e2:c9:67:7a:fc:df:ac:b7:45:07:ae: c0:c1:46:76:b4:cc:c9:09:af:59:2d:5f:08:99:b9: 25:95:12:cd:88:f2:60:e0:7d:fa:9a:f7:bc:09:3f: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A5:45:57:DF:A8:19:9F:FF:9C:F8:AA:79:69:01:39:EE:CF:A8:27 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:de:f3:b5:64:83:d0:d9:38:23:d0:c0:51:ed:f7:ea:ed:26: 89:54:da:1e:f9:94:31:48:6e:24:76:58:ce:73:a1:b5:79:6c: d2:1b:aa:d9:aa:7b:dd:80:23:a8:05:2c:74:d7:24:50:b1:bc: d2:92:5a:75:14:e8:bc:f2:bc:b3:06:20:9f:9f:90:72:f5:35: b8:59:15:cd:20:ff:e0:d8:d3:f2:52:bc:70:79:d7:70:50:e0: 9b:96:b2:a8:2d:89:88:9c:27:08:22:ac:b0:47:a2:9a:6a:41: c5:1a:ff:e4:de:c5:79:59:cb:b0:8c:e0:4e:34:29:da:9f:af: dd:bd:56:b2:4b:50:4f:72:99:2a:9a:ab:9c:c2:f7:55:a9:1b: 97:10:65:c3:5f:8a:58:51:eb:79:65:88:9e:93:3d:0f:e3:36: 18:a5:9f:ef:7d:24:ca:08:ed:46:99:9f:bf:5b:a7:1a:82:95: 71:03:f8:de:25:d5:fe:f3:28:b8:ca:70:cd:e6:56:8f:88:c1: 6a:7a:a9:35:cf:c9:a7:c7:b0:2a:3e:a7:a5:d4:d2:6d:16:c0: 25:12:41:7f:5f:53:bf:e9:b8:69:eb:95:03:6b:6c:aa:a2:df: 08:85:a1:a5:31:7f:62:a6:26:43:0c:5e:2c:da:d0:47:6b:b9: 09:cf:3e:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUwNTAzMDU1OTE4WhcNMjUwNTEwMDU1OTE4WjAYMRYwFAYD VQQDEw02ODE1YjBiNi0yYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlA5g/7k66Ec5BpICJpFa9guMkSHL9+Hc2qVDefzFssrz7kOSWWFzaNVaUsBc Mc9AOOXDSrIvwRWF1h0WLTsYU71pb/7YLi070BO2AUlSMbe5aYGhF9qoJgwylQRM ePCtJ1UEgQOouN3+c60n4XejCte+AqHnjOj8Coy6tl8nBzCxBMS6Hy6ukUagt3L7 uuO0BtOGq6YrvVkoMmQQEzqobxUJEoSpskVHQLag5+qw/vlZiVegshkKOz4r6bLa 4R//g8N8Sqfx7g1Brf5/WjqfV8EPLhQp4slnevzfrLdFB67AwUZ2tMzJCa9ZLV8I mbkllRLNiPJg4H36mve8CT/X8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCylRVff qBmf/5z4qnlpATnuz6gnMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw3vO1ZIPQ2Tgj0MBR7ffq7SaJVNoe+ZQxSG4kdljOc6G1eWzSG6rZ qnvdgCOoBSx01yRQsbzSklp1FOi88ryzBiCfn5By9TW4WRXNIP/g2NPyUrxweddw UOCblrKoLYmInCcIIqywR6KaakHFGv/k3sV5WcuwjOBONCnan6/dvVayS1BPcpkq mqucwvdVqRuXEGXDX4pYUet5ZYiekz0P4zYYpZ/vfSTKCO1GmZ+/W6cagpVxA/je JdX+8yi4ynDN5laPiMFqeqk1z8mnx7AqPqel1NJtFsAlEkF/X1O/6bhp65UDa2yq ot8IhaGlMX9ipiZDDF4s2tBHa7kJzz7s -----END CERTIFICATE-----Generated at Mon May 5 02:52:42 2025 by rpki-client