$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft File: cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json) Hash identifier: Hf6dXFdIzaURa0PPDSogVeK6eKLtbBNrdNELbQE4eSA= Subject key identifier: 2F:70:2F:0A:A0:76:6B:8C:45:B0:4E:CB:8A:8D:F9:85:56:8A:8F:69 Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft Manifest number: DC Signing time: Thu 15 May 2025 04:51:50 +0000 Manifest this update: Thu 15 May 2025 04:51:50 +0000 Manifest next update: Thu 22 May 2025 04:51:50 +0000 Files and hashes: 1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: b6pOLQ4TCKBl4+kU0G8eAvrauKCpMK56NZADIwzCiCk=) 2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: Fb0vXPsGENJ9HpaLetk+Rjo+o9pYvcloVY8N7cgyCIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Validity Not Before: May 15 04:51:50 2025 GMT Not After : May 22 04:51:50 2025 GMT Subject: CN=682572e6-75c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:31:49:bc:f3:65:ff:bb:74:2e:9a:62:d4: 0b:55:1b:d0:13:48:3b:fd:b9:35:aa:91:59:d5:2a: 66:e9:bf:b3:91:5d:6c:d4:9a:a5:a6:62:49:f3:7b: 06:06:8c:30:c2:43:ef:16:25:9a:8c:e2:58:cd:c2: bc:15:b3:46:86:52:98:fa:50:b3:c8:08:8a:eb:d6: 5c:9c:f0:13:f0:44:1d:b4:10:72:ad:f9:7b:47:24: d8:33:e1:64:67:bc:74:14:d5:ad:44:f2:cd:06:53: 2f:7b:4c:7f:fe:ff:43:5d:46:0f:80:2a:57:cd:67: 9d:7a:e9:cf:90:61:9e:93:c0:19:a1:1d:b8:1c:5f: cc:f0:f0:6c:f9:52:11:24:e6:7e:be:5a:8d:c1:1c: a9:2d:69:82:82:86:93:9b:c9:b3:6b:9f:d0:97:e2: b0:ca:3c:2a:41:9c:ee:bb:cb:ce:50:89:7c:fd:9f: 1f:50:dc:5d:c7:f5:82:48:26:29:f9:a7:d8:09:0a: 8c:ee:7f:e8:c3:04:56:10:66:bf:2c:f3:c1:a2:2c: dc:f8:d1:7d:75:fd:e9:6e:b1:c0:3f:3b:22:35:87: c4:44:44:d8:26:88:df:87:a5:9e:5f:e7:11:26:d4: 29:ae:dd:a7:2e:bb:76:62:b6:fd:a9:27:92:43:85: 77:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:70:2F:0A:A0:76:6B:8C:45:B0:4E:CB:8A:8D:F9:85:56:8A:8F:69 X509v3 Authority Key Identifier: keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b2:a7:85:bb:3e:8b:7a:e7:45:db:4e:2b:81:bc:56:2e:83: e1:d1:c5:a5:26:e7:bf:45:e1:44:df:1c:21:b6:d6:5f:3e:00: 49:bd:6c:4a:d7:01:a9:c4:4f:2f:ca:21:41:2e:43:eb:e1:c8: 92:68:57:58:b0:bc:80:1e:73:1a:ce:96:58:71:51:a5:91:61: e6:b5:5a:03:f8:4e:28:af:9e:a5:49:61:83:d5:c4:00:a7:38: e4:4d:0a:40:08:6a:6c:a3:37:91:80:28:d2:0f:99:ab:1a:7a: b5:f9:4a:17:ca:1a:99:c3:55:11:8d:14:19:f9:51:0f:a4:c3: 10:cf:74:f5:03:8b:20:32:3b:07:3a:28:b4:bc:a3:b7:f7:51: 72:5e:0e:a7:41:6c:b2:2f:1d:d6:dd:33:a4:89:93:f2:25:94: 59:f2:a4:71:51:bf:2f:58:64:18:21:cb:5f:8a:cf:72:e7:4b: 7a:8e:29:77:fd:d6:3b:f7:7a:2e:3e:4f:0e:04:ce:a1:66:44: 3b:03:3e:4c:66:c0:d4:c8:cf:e2:2f:a3:cf:25:5a:25:0f:d7: a5:51:92:89:c1:96:0b:ce:42:2a:f3:d6:65:03:82:39:76:f6: 74:3a:71:d9:1a:55:6d:69:aa:32:6c:9b:ab:67:f0:e2:6f:c3: 0b:d6:ee:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1QUMxMTAvBgNVBAUTKDczMDYxQkE5MDQwMTgxRUMwQUVCNEQ4RjZFMDAzRjgz OEZDOUM0OEYwHhcNMjUwNTE1MDQ1MTUwWhcNMjUwNTIyMDQ1MTUwWjAYMRYwFAYD VQQDEw02ODI1NzJlNi03NWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvExSbzzZf+7dC6aYtQLVRvQE0g7/bk1qpFZ1Spm6b+zkV1s1JqlpmJJ83sG BowwwkPvFiWajOJYzcK8FbNGhlKY+lCzyAiK69ZcnPAT8EQdtBByrfl7RyTYM+Fk Z7x0FNWtRPLNBlMve0x//v9DXUYPgCpXzWedeunPkGGek8AZoR24HF/M8PBs+VIR JOZ+vlqNwRypLWmCgoaTm8mza5/Ql+KwyjwqQZzuu8vOUIl8/Z8fUNxdx/WCSCYp +afYCQqM7n/owwRWEGa/LPPBoizc+NF9df3pbrHAPzsiNYfERETYJojfh6WeX+cR JtQprt2nLrt2Yrb9qSeSQ4V36wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9wLwqg dmuMRbBOy4qN+YVWio9pMB8GA1UdIwQYMBaAFHMGG6kEAYHsCutNj24AP4OPycSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9ENEYzREI5RUUx RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdld0s2MDJQYmdBX2c0X0p4 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3WWJxUVFCZ2V3SzYwMlBiZ0FfZzRfSnhJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVBQy9ENEYzREI5RUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdl d0s2MDJQYmdBX2c0X0p4STgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGsqeFuz6LeudF204rgbxWLoPh0cWlJue/ReFE3xwhttZfPgBJvWxK 1wGpxE8vyiFBLkPr4ciSaFdYsLyAHnMazpZYcVGlkWHmtVoD+E4or56lSWGD1cQA pzjkTQpACGpsozeRgCjSD5mrGnq1+UoXyhqZw1URjRQZ+VEPpMMQz3T1A4sgMjsH Oii0vKO391FyXg6nQWyyLx3W3TOkiZPyJZRZ8qRxUb8vWGQYIctfis9y50t6jil3 /dY793ouPk8OBM6hZkQ7Az5MZsDUyM/iL6PPJVolD9elUZKJwZYLzkIq89ZlA4I5 dvZ0OnHZGlVtaaoybJurZ/Dib8ML1u6w -----END CERTIFICATE-----Generated at Fri May 16 06:31:35 2025 by rpki-client