$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json) Hash identifier: 7OQe6P0ZqwJbpVfG3JAY94ybYue10sjHBYleZRK/nGs= Subject key identifier: 68:E8:B5:D0:A2:89:58:D8:DF:CC:41:AB:BD:C1:7A:5F:EA:D5:97:F4 Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 0893 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft Manifest number: 088C Signing time: Wed 14 May 2025 20:42:19 +0000 Manifest this update: Wed 14 May 2025 20:42:19 +0000 Manifest next update: Wed 21 May 2025 20:42:19 +0000 Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: Af/vLYNO7ne8gYNd96KGHDtvpjaXrTmvwQyhSbkmEB4=) 2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: MbzDlkokZBR/aS6/hcoRXo43UcCAHhzz3LI8ih+FSVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2195 (0x893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: May 14 20:42:19 2025 GMT Not After : May 21 20:42:19 2025 GMT Subject: CN=6825002b-ebef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:fd:ef:e0:ee:7b:9b:b9:a5:21:92:b3:86: 2c:96:c7:65:53:f1:7a:43:eb:7d:b5:64:6a:9d:7b: 27:6e:59:b5:5d:ab:42:6f:6d:e7:1a:19:fb:95:86: d0:5d:cf:d7:20:51:c6:4d:d8:7b:bd:0b:b8:89:98: cd:00:15:3c:c2:cb:e8:90:9a:71:97:d8:78:09:e4: 4f:dd:28:6d:49:b6:b4:7e:84:c3:a8:dc:91:41:f2: 74:71:0e:5e:fa:c0:af:a7:54:13:27:ab:af:eb:45: 06:00:44:49:66:26:77:29:50:e8:25:85:a7:2d:69: 72:97:28:d7:6c:ac:25:bb:1e:f4:60:2b:5b:b9:57: 56:f9:26:c3:e0:bd:38:a5:ab:61:8f:6f:86:9e:0d: a7:fe:6f:c5:85:30:56:0f:69:c4:38:85:62:ee:32: 8f:59:6c:6c:05:02:95:74:fb:01:35:5e:3b:8e:76: 5c:a2:3f:5f:c1:17:2c:9c:6d:cc:61:ac:8b:8a:48: 50:1c:07:8b:b6:e9:56:97:27:33:41:07:e2:71:2b: 5a:61:47:f1:13:a4:15:dc:2b:40:6b:8f:4b:39:f4: 34:11:1a:cd:a8:86:6e:69:a9:4b:dc:c6:fa:56:14: 69:03:b2:6d:3a:67:e1:49:5b:65:c3:dd:b3:ee:d2: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E8:B5:D0:A2:89:58:D8:DF:CC:41:AB:BD:C1:7A:5F:EA:D5:97:F4 X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f0:a1:6f:6a:2b:68:e2:e7:54:0d:3f:14:e3:c2:bb:a8:32: a1:8f:2e:9e:b0:f7:4d:df:33:28:d0:61:e9:cf:0d:b1:b5:8d: b3:0b:90:d2:b1:b4:98:c3:12:0d:0a:a2:ee:d5:af:bf:b9:f5: 7e:86:71:15:e3:29:10:37:58:95:aa:c8:71:3f:e5:27:c3:84: 89:01:02:a2:b5:04:0a:a2:41:1d:18:ff:15:3c:98:f6:d1:9c: 53:b8:09:70:51:49:ab:36:f7:1f:9c:44:ce:83:3c:a0:d3:7f: 75:31:80:5f:7f:ef:7c:a9:66:1e:be:e0:1c:88:ab:ad:7d:fc: ef:2e:68:17:55:9f:4c:7e:a2:21:6c:59:1c:4e:ba:7b:ed:66: c3:d5:24:cb:5f:cb:01:33:fb:61:22:c3:e2:83:5b:9f:cf:35: 29:e7:99:f1:3c:53:21:39:fb:1b:57:25:6d:77:fa:62:e8:be: 07:c0:7a:da:ee:75:10:fa:f1:21:fc:e5:bc:a6:2e:66:a9:57: f4:b0:4d:d2:10:6f:0e:d2:87:ae:75:ea:80:66:6f:8e:bc:62: f5:d1:00:08:f2:e6:23:49:1b:15:18:47:72:c5:90:83:a4:17: 2d:9f:51:6a:8f:ee:d5:11:eb:b4:d6:5d:ae:d5:71:43:e6:82: dd:dd:6c:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjUwNTE0MjA0MjE5WhcNMjUwNTIxMjA0MjE5WjAYMRYwFAYD VQQDEw02ODI1MDAyYi1lYmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG397+Due5u5pSGSs4YslsdlU/F6Q+t9tWRqnXsnblm1XatCb23nGhn7lYbQ Xc/XIFHGTdh7vQu4iZjNABU8wsvokJpxl9h4CeRP3ShtSba0foTDqNyRQfJ0cQ5e +sCvp1QTJ6uv60UGAERJZiZ3KVDoJYWnLWlylyjXbKwlux70YCtbuVdW+SbD4L04 pathj2+Gng2n/m/FhTBWD2nEOIVi7jKPWWxsBQKVdPsBNV47jnZcoj9fwRcsnG3M YayLikhQHAeLtulWlyczQQficStaYUfxE6QV3CtAa49LOfQ0ERrNqIZuaalL3Mb6 VhRpA7JtOmfhSVtlw92z7tKllwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjotdCi iVjY38xBq73Bel/q1Zf0MB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011 TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP8KFvaito4udUDT8U48K7qDKhjy6esPdN3zMo0GHpzw2xtY2zC5DS sbSYwxINCqLu1a+/ufV+hnEV4ykQN1iVqshxP+Unw4SJAQKitQQKokEdGP8VPJj2 0ZxTuAlwUUmrNvcfnETOgzyg0391MYBff+98qWYevuAciKutffzvLmgXVZ9MfqIh bFkcTrp77WbD1STLX8sBM/thIsPig1ufzzUp55nxPFMhOfsbVyVtd/pi6L4HwHra 7nUQ+vEh/OW8pi5mqVf0sE3SEG8O0oeudeqAZm+OvGL10QAI8uYjSRsVGEdyxZCD pBctn1Fqj+7VEeu01l2u1XFD5oLd3Wxg -----END CERTIFICATE-----Generated at Fri May 16 13:50:37 2025 by rpki-client