$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft File: wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json) Hash identifier: K4vWW/NwCcWxT0FbI1Q8tLr4VoYlVfhQ56WUccD0GLA= Subject key identifier: 41:20:BD:4D:B5:32:C7:A2:8C:18:42:88:DC:9E:98:0A:2D:46:16:06 Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft Manifest number: 34AE Signing time: Sun 04 May 2025 14:36:46 +0000 Manifest this update: Sun 04 May 2025 14:36:45 +0000 Manifest next update: Sun 11 May 2025 14:36:45 +0000 Files and hashes: 1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: qK+8B7QWOESCQBOkFmfRP5rBwJ/wastlnPGtsYa+63I=) 2: 93215346C57811EA8440684AC4F9AE02.roa (hash: Neo4y3dgUaZAb3jweRA+243JDhV+YXScU7c0GteH4uM=) 3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: LAm5srYmYBa9WShMZPaiIeFdpoZdlrFsrxnvM6yFi7M=) 4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: W9xZ05fzRaVk7lWJKjvq0VcXRDKzdp+VZJErV4rbXxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Validity Not Before: May 4 14:36:45 2025 GMT Not After : May 11 14:36:45 2025 GMT Subject: CN=68177b7e-ce9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:da:c9:4e:c8:d7:79:20:df:f2:e5:5b:8a:24: a7:46:09:99:b9:84:7c:20:4e:fd:d4:5a:f0:73:c4: 1e:73:b5:45:06:e9:3a:73:d7:06:7b:5c:16:a1:2b: 2d:20:ee:9c:28:ef:f8:c1:81:df:38:71:f4:38:3e: 25:19:f9:68:98:63:05:d0:b6:35:9c:6f:9c:37:23: 8b:29:3c:5e:3f:7f:62:ec:c3:78:bf:b8:b1:84:e5: 60:19:7e:a0:ca:6e:68:f2:b9:73:ca:0d:48:92:94: bc:e7:b7:51:6a:99:90:9a:c6:cd:55:cb:25:54:42: 0c:d8:3e:a8:21:95:4e:db:fb:3b:d9:e9:a9:e4:79: f3:4c:26:c3:a5:d1:e0:0a:ec:03:1b:8d:27:3e:a3: 55:7d:7f:d7:41:70:d1:be:06:75:37:12:6b:d1:2c: cb:28:04:ee:a9:1c:d7:49:60:ba:f3:5a:34:ca:1f: 2f:cd:3e:9e:f6:b2:50:b2:bb:a1:3c:37:39:03:76: d5:e3:f0:13:e9:7e:3c:1f:4a:44:71:b4:4a:1b:b1: 39:52:69:bf:7b:aa:2c:be:6f:3f:b9:0b:57:d3:c9: bb:3c:15:a0:a4:84:c1:08:b2:cb:dd:91:19:21:ce: c5:dc:fc:c9:7d:c6:15:9f:e9:b0:5c:1a:71:58:52: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:20:BD:4D:B5:32:C7:A2:8C:18:42:88:DC:9E:98:0A:2D:46:16:06 X509v3 Authority Key Identifier: keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a1:f1:8e:16:fc:44:3d:cf:b3:a5:6f:ae:3b:7a:6d:c6:c9: b0:d1:e9:96:70:e4:44:14:0f:c3:fb:54:dd:cf:d8:ec:67:48: 81:01:49:01:84:d8:2f:3e:54:f9:8c:79:62:80:61:9a:55:51: 27:ae:ec:25:cc:d6:5e:e1:ca:63:b4:e3:36:c3:30:76:92:b5: 3e:0d:f6:48:53:8f:67:1c:52:57:25:0e:b5:9b:54:40:1e:4e: 3d:a4:5a:28:49:6c:83:8f:15:21:00:ae:63:e1:06:e5:b6:71: 6f:ec:2c:c8:e8:06:2b:9e:b6:9a:ff:69:90:d6:07:1b:78:d1: 84:2a:87:b7:cd:41:e4:64:89:e3:fc:28:c5:7a:c2:cb:39:34: 03:5d:49:ad:74:1d:0b:37:29:ed:aa:84:09:39:6c:c8:be:62: cd:0f:70:03:22:e8:79:22:c0:fd:54:60:3e:09:15:f5:15:b2: e8:17:5b:04:eb:2c:34:cc:7b:a8:0a:28:aa:6b:59:af:3b:59: 26:66:76:11:d0:8c:4e:ef:f2:14:6d:8c:1f:fa:4a:a6:12:74: 23:50:d7:49:aa:e5:f6:00:98:d2:69:75:7b:20:fb:23:d4:49: 3c:8d:cf:86:9c:19:34:be:03:99:95:68:1b:05:f5:9d:ea:12: e9:ee:54:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy QTdEODdEOEQwHhcNMjUwNTA0MTQzNjQ1WhcNMjUwNTExMTQzNjQ1WjAYMRYwFAYD VQQDEw02ODE3N2I3ZS1jZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59rJTsjXeSDf8uVbiiSnRgmZuYR8IE791Frwc8Qec7VFBuk6c9cGe1wWoSst IO6cKO/4wYHfOHH0OD4lGflomGMF0LY1nG+cNyOLKTxeP39i7MN4v7ixhOVgGX6g ym5o8rlzyg1IkpS857dRapmQmsbNVcslVEIM2D6oIZVO2/s72emp5HnzTCbDpdHg CuwDG40nPqNVfX/XQXDRvgZ1NxJr0SzLKATuqRzXSWC681o0yh8vzT6e9rJQsruh PDc5A3bV4/AT6X48H0pEcbRKG7E5Umm/e6osvm8/uQtX08m7PBWgpITBCLLL3ZEZ Ic7F3PzJfcYVn+mwXBpxWFIKpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEgvU21 MseijBhCiNyemAotRhYGMB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjU5Qy83MzVEQzRENjFEOEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtm Qk9EdnJWMlNSTUFxZllmWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsofGOFvxEPc+zpW+uO3ptxsmw0emWcOREFA/D+1Tdz9jsZ0iBAUkB hNgvPlT5jHligGGaVVEnruwlzNZe4cpjtOM2wzB2krU+DfZIU49nHFJXJQ61m1RA Hk49pFooSWyDjxUhAK5j4QbltnFv7CzI6AYrnraa/2mQ1gcbeNGEKoe3zUHkZInj /CjFesLLOTQDXUmtdB0LNyntqoQJOWzIvmLND3ADIuh5IsD9VGA+CRX1FbLoF1sE 6yw0zHuoCiiqa1mvO1kmZnYR0IxO7/IUbYwf+kqmEnQjUNdJquX2AJjSaXV7IPsj 1Ek8jc+GnBk0vgOZlWgbBfWd6hLp7lQo -----END CERTIFICATE-----Generated at Mon May 5 03:01:17 2025 by rpki-client