$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json) Hash identifier: N811qaD8Gwr3U/5XtSL14CuN/2t+c8ID31mgTlE4nKQ= Subject key identifier: DF:40:8F:F0:AC:79:65:F7:FD:1B:27:F6:B6:DC:53:B2:7F:B6:BA:59 Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Certificate serial: 0B82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft Manifest number: 0B74 Signing time: Mon 12 May 2025 18:54:54 +0000 Manifest this update: Mon 12 May 2025 18:54:53 +0000 Manifest next update: Mon 19 May 2025 18:54:53 +0000 Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: qv4xAZBxsElzuvw6nzbnk/6fAxuyeFyJ6ddZq8Ty86Y=) 2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: mo/NLmT3qTw906fWZIYD+HCMnaLWUZhtdPeHn3oqJ6A=) 3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: vucacXYSTLw3pjicQM0MXD2U1//BsbEO3gpX4wVcXB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2946 (0xb82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Validity Not Before: May 12 18:54:53 2025 GMT Not After : May 19 18:54:53 2025 GMT Subject: CN=682243fe-faaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1a:5b:0c:43:ed:b0:1b:52:bc:f7:6e:11:1f: 2c:e5:61:cb:11:97:fe:54:da:19:13:f9:d7:a8:b5: 88:6f:3d:4c:5a:42:5a:e6:53:fa:c3:02:4d:06:04: d4:e1:4a:0a:6c:65:9f:69:47:91:a9:15:70:23:55: 63:11:00:60:52:25:ce:66:73:e6:31:26:26:a7:a3: 23:98:5c:89:e3:87:9b:02:78:b5:0a:3c:6e:f1:2a: fb:27:d9:d7:f8:5e:9d:9c:68:de:c0:dd:d8:75:93: 2c:e5:b2:73:83:d2:ca:27:ff:47:d7:0a:a9:7a:7d: 18:fa:40:c7:68:a2:d9:b4:65:52:b6:69:da:f8:aa: 41:83:f5:a2:c4:b5:46:d1:df:96:64:6f:bb:e8:14: 77:6c:fd:4c:51:e7:38:c2:02:ca:81:24:d6:c2:45: 69:68:ab:92:6e:40:af:c6:57:28:71:44:b2:ee:46: be:d0:ed:42:73:63:5a:10:a2:dc:8d:a2:51:4d:75: b9:ab:e6:0a:4a:f8:9d:bf:f3:65:44:a7:01:41:f8: b2:4c:53:f8:90:90:49:ed:e5:32:b4:91:af:0e:1a: 93:02:7f:a2:e6:3b:bd:db:26:8f:60:1b:4a:de:84: f0:7b:6d:ae:00:b0:96:76:b3:d7:04:cd:6e:49:8d: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:40:8F:F0:AC:79:65:F7:FD:1B:27:F6:B6:DC:53:B2:7F:B6:BA:59 X509v3 Authority Key Identifier: keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:bb:41:ca:35:ac:91:ad:ef:a1:1c:35:87:dd:1b:fa:12:2b: 74:6c:ba:c9:2e:e5:86:7a:34:c6:0c:fa:8f:ff:dd:5d:3e:c1: 9c:b7:76:cc:eb:82:2c:85:55:5b:e6:d9:16:a9:8c:de:33:38: 15:33:3c:99:97:60:d0:59:f0:45:ac:9c:c8:86:e1:32:a3:ad: 88:e0:33:fa:fa:e9:61:bd:5f:61:fe:19:8d:96:dd:1c:38:58: 33:46:41:00:93:3f:10:91:17:7a:f8:d7:b9:6f:c9:a7:cc:6c: a5:af:9b:ce:a3:57:27:b2:fc:e1:a0:aa:e1:41:3c:90:c5:b8: 31:fd:e7:b8:cd:6a:67:65:43:13:20:e2:69:13:a7:a0:b5:1c: e1:d9:31:36:f1:ad:f3:b8:ce:8e:f7:f5:02:1b:95:63:18:36: 82:c7:8f:1c:7e:8c:4f:6b:9e:c1:2d:2a:6d:20:9c:ec:80:e5: 6b:11:3a:12:2c:60:6f:6a:0f:73:e9:94:36:9b:8b:2e:6b:8e: 0c:86:14:d2:67:6e:18:36:42:b2:35:19:92:28:79:26:4a:70: b8:1f:fa:f1:5d:5e:fc:55:b7:e2:fa:3a:94:4e:1d:5c:fc:7b: 6e:ee:f5:94:39:b4:77:8d:b9:e7:3b:29:b1:9d:44:34:5e:ac: 87:6f:1f:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3 RjE5QjREMUYwHhcNMjUwNTEyMTg1NDUzWhcNMjUwNTE5MTg1NDUzWjAYMRYwFAYD VQQDEw02ODIyNDNmZS1mYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RpbDEPtsBtSvPduER8s5WHLEZf+VNoZE/nXqLWIbz1MWkJa5lP6wwJNBgTU 4UoKbGWfaUeRqRVwI1VjEQBgUiXOZnPmMSYmp6MjmFyJ44ebAni1Cjxu8Sr7J9nX +F6dnGjewN3YdZMs5bJzg9LKJ/9H1wqpen0Y+kDHaKLZtGVStmna+KpBg/WixLVG 0d+WZG+76BR3bP1MUec4wgLKgSTWwkVpaKuSbkCvxlcocUSy7ka+0O1Cc2NaEKLc jaJRTXW5q+YKSvidv/NlRKcBQfiyTFP4kJBJ7eUytJGvDhqTAn+i5ju92yaPYBtK 3oTwe22uALCWdrPXBM1uSY3JSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9Aj/Cs eWX3/Rsn9rbcU7J/trpZMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhn NHJCNHJ0dVppUjVfR2JUUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeu0HKNayRre+hHDWH3Rv6Eit0bLrJLuWGejTGDPqP/91dPsGct3bM 64IshVVb5tkWqYzeMzgVMzyZl2DQWfBFrJzIhuEyo62I4DP6+ulhvV9h/hmNlt0c OFgzRkEAkz8QkRd6+Ne5b8mnzGylr5vOo1cnsvzhoKrhQTyQxbgx/ee4zWpnZUMT IOJpE6egtRzh2TE28a3zuM6O9/UCG5VjGDaCx48cfoxPa57BLSptIJzsgOVrEToS LGBvag9z6ZQ2m4sua44MhhTSZ24YNkKyNRmSKHkmSnC4H/rxXV78Vbfi+jqUTh1c /Htu7vWUObR3jbnnOymxnUQ0XqyHbx85 -----END CERTIFICATE-----Generated at Wed May 14 18:24:32 2025 by rpki-client