$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: Qr9FF23YSP4pFkwvEDKOLvQjfm8scWOQgCPLmYhX7Ds= Subject key identifier: D0:47:BD:80:04:90:1B:8B:22:B2:16:4F:6D:83:CE:BF:EC:C3:7C:1F Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 097C Signing time: Mon 12 May 2025 20:00:31 +0000 Manifest this update: Mon 12 May 2025 20:00:30 +0000 Manifest next update: Mon 19 May 2025 20:00:30 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: M2itA0fl044zhQrVdauGwyqhsDykrihv3lFRe6tN00k=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: May 12 20:00:30 2025 GMT Not After : May 19 20:00:30 2025 GMT Subject: CN=6822535f-b6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a4:c6:01:e5:b5:75:91:d8:ad:cb:65:a6:ac: 4c:52:94:17:88:2c:6b:9d:ae:d2:db:0d:d9:40:92: 31:0d:bd:00:29:21:25:e9:ab:02:a1:7e:78:ce:9c: 74:6f:43:db:14:68:07:9d:05:89:7b:3c:9f:18:ed: 5b:22:43:52:f4:b1:57:15:b8:ef:ab:16:68:78:ea: 3c:44:52:ea:5d:ca:f2:05:9e:45:78:41:36:56:9f: 6f:4d:e9:f4:11:b3:7c:d5:fa:bd:3f:eb:58:c8:af: 6b:ca:7b:ae:7f:6b:c5:af:79:5d:15:2a:3a:f3:a0: 22:a5:37:95:07:9e:55:86:e3:ea:9e:4b:98:c7:b9: e9:19:86:e4:7d:d8:58:56:e2:03:e3:ae:81:8b:70: 87:10:89:ea:a5:83:fe:76:4e:f0:44:0b:37:8a:2a: 46:17:bb:ba:1d:ee:ee:5a:00:d3:66:b3:d1:67:f4: 49:69:88:a5:4f:d1:4c:14:f4:d3:f5:46:ae:18:d8: 90:cc:87:98:76:99:10:09:31:9a:e6:dd:a6:80:bd: d1:aa:41:82:c2:62:7c:d3:6c:a0:86:c1:d8:3d:6e: 4c:a4:9c:fc:0e:92:28:ca:e7:3c:32:d4:62:9e:9a: 18:cc:6a:ca:76:58:cd:49:ce:72:4d:80:6a:7e:71: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:47:BD:80:04:90:1B:8B:22:B2:16:4F:6D:83:CE:BF:EC:C3:7C:1F X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:06:68:f1:68:03:44:13:ea:20:5f:6a:73:7b:c2:fa:cc:46: 31:25:a2:28:e1:9b:ce:d3:59:f8:74:4a:cb:d6:51:56:2b:c1: 81:7c:33:aa:47:a8:30:2a:ba:1d:70:c0:c9:d0:59:aa:5b:88: 37:af:db:cd:18:d8:f4:93:7a:53:f3:80:4a:6c:fd:d0:81:db: 11:e5:51:fa:b3:b6:54:f3:12:1e:c4:84:14:7c:72:93:ea:3f: 94:3c:f1:99:a3:90:da:aa:5a:5e:f6:0e:be:d2:cc:9f:6c:50: 11:f3:61:9a:cb:b7:87:5e:a7:39:96:64:f5:bb:17:94:84:f9: 55:1e:61:87:0f:9d:00:e9:46:77:1f:18:f3:8e:a9:22:16:88: 54:ba:75:38:d1:b5:7e:a0:c6:d6:a3:7b:2b:85:75:d7:93:41: 0b:ae:99:5c:9f:45:1f:23:3d:6c:d6:7d:c8:50:d7:8c:7f:73: 3d:20:4d:b8:de:ce:3b:96:b9:69:26:4a:62:e1:d5:10:02:b9: 27:0e:61:b7:46:12:43:3c:14:48:b2:65:71:98:9b:6c:98:9e: f6:f7:32:0e:42:da:e7:2f:3e:15:97:df:fb:70:7e:6e:be:96: b1:01:80:94:4e:4a:08:b2:29:ce:71:1e:50:23:ac:06:26:70: 08:44:87:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUwNTEyMjAwMDMwWhcNMjUwNTE5MjAwMDMwWjAYMRYwFAYD VQQDEw02ODIyNTM1Zi1iNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+6TGAeW1dZHYrctlpqxMUpQXiCxrna7S2w3ZQJIxDb0AKSEl6asCoX54zpx0 b0PbFGgHnQWJezyfGO1bIkNS9LFXFbjvqxZoeOo8RFLqXcryBZ5FeEE2Vp9vTen0 EbN81fq9P+tYyK9rynuuf2vFr3ldFSo686AipTeVB55VhuPqnkuYx7npGYbkfdhY VuID466Bi3CHEInqpYP+dk7wRAs3iipGF7u6He7uWgDTZrPRZ/RJaYilT9FMFPTT 9UauGNiQzIeYdpkQCTGa5t2mgL3RqkGCwmJ802yghsHYPW5MpJz8DpIoyuc8MtRi npoYzGrKdljNSc5yTYBqfnEvFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBHvYAE kBuLIrIWT22Dzr/sw3wfMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTBmjxaANEE+ogX2pze8L6zEYxJaIo4ZvO01n4dErL1lFWK8GBfDOq R6gwKrodcMDJ0FmqW4g3r9vNGNj0k3pT84BKbP3QgdsR5VH6s7ZU8xIexIQUfHKT 6j+UPPGZo5Daqlpe9g6+0syfbFAR82Gay7eHXqc5lmT1uxeUhPlVHmGHD50A6UZ3 HxjzjqkiFohUunU40bV+oMbWo3srhXXXk0ELrplcn0UfIz1s1n3IUNeMf3M9IE24 3s47lrlpJkpi4dUQArknDmG3RhJDPBRIsmVxmJtsmJ729zIOQtrnLz4Vl9/7cH5u vpaxAYCUTkoIsinOcR5QI6wGJnAIRIeA -----END CERTIFICATE-----Generated at Tue May 13 09:13:15 2025 by rpki-client