$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: pN/hDgt64SucI9X6WXZwWQkmTldSCNiU1KKjQQlK310= Subject key identifier: A8:A2:50:8E:D0:42:93:27:BD:C4:73:E9:E9:E9:01:1F:A2:9E:B4:6A Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: ED Signing time: Tue 13 May 2025 04:13:14 +0000 Manifest this update: Tue 13 May 2025 04:13:14 +0000 Manifest next update: Tue 20 May 2025 04:13:14 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: h5fDdHZMqFzwYjTZpi/v07wwHoe5GSAihzit+4nsmc4=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: VHJTWsm4wzJziIer/htU6hv3gqL/KMd1K2nOD3+RJsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: May 13 04:13:14 2025 GMT Not After : May 20 04:13:14 2025 GMT Subject: CN=6822c6da-9f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:46:d1:90:53:32:13:f1:52:bf:ea:f9:5f: 1e:4a:7e:fd:50:be:6a:b9:60:da:b3:d6:6b:4c:81: 0a:8d:c8:f4:7a:68:3f:f8:50:64:9e:50:fa:dc:2f: 65:3b:93:6f:a6:48:2a:46:54:fe:e8:d3:d3:f7:e3: 02:29:16:a0:62:ec:8a:96:6f:1b:65:e0:82:ae:3b: 19:8b:ec:b6:4f:45:c5:3e:11:ee:a0:6a:d6:7f:1f: be:52:01:e3:0e:34:14:7a:b9:55:a9:20:ab:8b:4a: ae:f9:70:c3:75:bb:01:44:5e:a6:ac:57:50:6a:94: 4e:a0:67:ee:c5:d9:01:b9:94:17:a6:e6:0f:25:a2: 3c:ef:54:b9:61:21:97:42:8a:6f:e9:fa:6b:fe:98: 96:d4:ef:fa:e3:85:44:6d:01:e2:25:50:4f:63:f5: d2:5a:7c:de:5c:e4:6b:c7:6d:40:62:90:84:52:50: 63:e7:cc:be:c2:62:eb:9b:9a:d2:ec:41:68:58:f7: 93:88:38:8d:1a:4c:2c:49:bd:e9:f5:ab:7d:8c:d1: e1:a3:79:c2:b7:79:05:cd:37:76:4b:ff:4b:8d:75: e5:24:a2:04:31:68:db:e0:1a:c4:f0:59:63:d5:e6: 29:2b:d8:fc:79:96:de:46:cc:e7:50:07:36:c2:4e: 4a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A2:50:8E:D0:42:93:27:BD:C4:73:E9:E9:E9:01:1F:A2:9E:B4:6A X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ab:f0:6e:1e:66:f1:08:30:68:55:b9:07:1d:49:bb:28:9c: 3e:e0:87:dd:a0:dd:74:4a:a4:8d:94:9b:b4:6c:37:7f:57:7e: b0:59:28:ca:ca:3f:97:1a:0d:0a:4e:2d:c7:bd:2e:0a:d7:47: bd:bf:b8:03:f4:93:8b:ca:b0:ba:a0:fd:30:1b:7b:74:1d:7e: 45:20:bd:59:94:f2:9a:4a:5b:b4:52:fc:af:61:a3:fa:2c:45: 5f:b0:ea:1a:88:29:d4:2b:11:73:c7:a1:c5:11:53:ca:d9:9a: cd:8a:b0:0e:62:d6:01:a8:32:3d:31:36:ae:a3:9a:f0:61:3e: ae:e1:3d:b8:23:92:38:42:55:e0:fb:7b:d8:0c:a6:ff:82:92: 99:a5:30:d2:3b:ce:3c:bb:92:91:56:18:45:f9:b5:11:5c:58: 24:a4:7b:90:14:a8:62:72:9e:59:e0:ad:75:80:8c:01:ef:17: 4f:26:9e:15:4d:29:4c:7f:bc:80:a8:ea:39:56:6b:ee:75:43: f1:3b:61:48:a8:d5:a2:03:4c:66:d2:53:a8:ea:90:3a:6b:7c: 38:af:5b:37:3f:32:ae:c8:bd:98:9b:ba:14:8a:cb:38:8b:df: 2f:e2:4f:3b:d5:02:57:71:7e:1b:aa:5c:31:d1:25:40:e8:8e: 0e:1d:a8:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjUwNTEzMDQxMzE0WhcNMjUwNTIwMDQxMzE0WjAYMRYwFAYD VQQDEw02ODIyYzZkYS05ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYlG0ZBTMhPxUr/q+V8eSn79UL5quWDas9ZrTIEKjcj0emg/+FBknlD63C9l O5NvpkgqRlT+6NPT9+MCKRagYuyKlm8bZeCCrjsZi+y2T0XFPhHuoGrWfx++UgHj DjQUerlVqSCri0qu+XDDdbsBRF6mrFdQapROoGfuxdkBuZQXpuYPJaI871S5YSGX Qopv6fpr/piW1O/644VEbQHiJVBPY/XSWnzeXORrx21AYpCEUlBj58y+wmLrm5rS 7EFoWPeTiDiNGkwsSb3p9at9jNHho3nCt3kFzTd2S/9LjXXlJKIEMWjb4BrE8Flj 1eYpK9j8eZbeRsznUAc2wk5KaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiiUI7Q QpMnvcRz6enpAR+inrRqMB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYq/BuHmbxCDBoVbkHHUm7KJw+4IfdoN10SqSNlJu0bDd/V36wWSjK yj+XGg0KTi3HvS4K10e9v7gD9JOLyrC6oP0wG3t0HX5FIL1ZlPKaSlu0UvyvYaP6 LEVfsOoaiCnUKxFzx6HFEVPK2ZrNirAOYtYBqDI9MTauo5rwYT6u4T24I5I4QlXg +3vYDKb/gpKZpTDSO848u5KRVhhF+bURXFgkpHuQFKhicp5Z4K11gIwB7xdPJp4V TSlMf7yAqOo5VmvudUPxO2FIqNWiA0xm0lOo6pA6a3w4r1s3PzKuyL2Ym7oUiss4 i98v4k871QJXcX4bqlwx0SVA6I4OHajq -----END CERTIFICATE-----Generated at Wed May 14 01:26:10 2025 by rpki-client