$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json) Hash identifier: oU6LjNWhfs84xrTr+s9zBvqYsy7HVbdCQllqGMLlmoI= Subject key identifier: A8:4A:90:0B:EC:E6:44:04:B4:E9:AD:31:FF:CA:9D:5C:0F:85:AC:8F Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft Manifest number: 23 Signing time: Tue 13 May 2025 07:03:52 +0000 Manifest this update: Tue 13 May 2025 07:03:51 +0000 Manifest next update: Tue 20 May 2025 07:03:51 +0000 Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: IDq5E0SDoIS2gd4/n1+6rBRfu0reURyfenf6yOOMMmM=) 2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: pyDccoxQQCInnCAtVt40DDMgxlsFoS9iakn/+FoSyug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Validity Not Before: May 13 07:03:51 2025 GMT Not After : May 20 07:03:51 2025 GMT Subject: CN=6822eed8-beae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:3c:91:53:66:f3:ad:7d:e0:11:bf:b9:70: 1d:72:dc:b6:87:ca:8e:af:b2:bf:ff:e3:20:7b:0a: 74:09:41:b3:45:4b:ed:92:1e:58:d0:d4:2d:d9:ec: c8:b6:33:c5:ac:22:9d:e5:28:a8:4d:cc:d4:3a:e6: 0f:6c:20:8b:3b:01:ca:5a:be:d8:51:a9:3a:3b:c0: e1:33:83:e7:b3:41:7f:d7:5a:3b:c3:af:b9:3a:52: d2:fb:ca:a3:cf:83:2a:72:e2:b9:73:52:af:01:54: 04:62:8e:4d:ae:be:3d:b8:4d:45:4c:0d:3c:c4:c0: 96:ea:f8:eb:c1:40:03:3c:b7:d4:2e:90:25:93:d0: 49:f5:05:88:df:7f:47:3f:cf:2f:af:40:8a:46:b8: a0:8d:21:18:df:27:b8:60:d2:cc:e4:db:fc:40:06: f3:01:4e:48:59:a8:5b:da:15:43:b9:8b:e0:f4:c1: 60:74:59:d3:a4:fd:d1:20:48:8d:5b:ba:93:d4:f7: 5f:f3:af:26:59:81:78:5b:a0:ae:c8:86:01:7d:7c: 3d:ac:36:3d:e3:63:d8:6e:ed:28:1f:8b:f1:a5:5b: 0f:02:11:59:62:9d:74:0f:6b:e2:38:bb:0f:77:64: d0:5f:2d:bb:a3:64:f6:21:87:48:e9:14:ea:f5:fd: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4A:90:0B:EC:E6:44:04:B4:E9:AD:31:FF:CA:9D:5C:0F:85:AC:8F X509v3 Authority Key Identifier: keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f8:43:99:11:50:9f:00:7f:cb:ae:c3:ae:58:30:54:c3:02: b4:45:f7:ce:b4:57:2a:22:0d:b9:e5:8f:72:eb:7a:c4:00:aa: 28:9c:db:76:21:a4:51:02:ab:d4:1f:ab:4e:c3:23:40:f1:55: 74:3f:a7:15:e5:96:f0:a1:72:f9:68:2b:9d:d7:6e:54:ef:85: ff:af:2d:fd:8b:0a:b1:b2:45:40:01:5c:6b:55:b1:e4:e5:ff: 7c:76:53:f6:09:14:46:37:5d:27:e5:6a:25:68:37:37:83:4a: 77:26:20:2d:65:0f:49:74:6b:9c:57:9a:e0:79:d9:1e:f6:cb: 9b:71:60:5a:4e:23:6c:0f:b3:7a:0e:67:d2:07:07:bd:47:50: 6f:22:55:34:90:76:37:2c:40:77:b0:c8:01:23:95:69:09:65: 9c:eb:0a:43:83:db:8d:16:a3:14:f3:82:b5:00:2f:64:6b:02: d6:6d:69:65:b6:c8:d8:fb:60:f0:f2:4c:e8:e0:76:3c:10:ec: 8c:ce:41:f0:57:bb:ed:09:ed:9b:10:ff:89:f5:21:dd:fb:81: c4:9b:dd:72:b6:4a:e4:f6:11:a8:d7:02:9d:09:b6:6f:a8:38: 41:f9:76:0c:51:d8:b5:6b:97:30:27:f3:40:19:6a:84:2d:68: fa:76:9d:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoQzFFRTY5QUE2QUExQUNCQTMyRTE2NzY0REE4MUJGN0E0 MTY4QTYwRDAeFw0yNTA1MTMwNzAzNTFaFw0yNTA1MjAwNzAzNTFaMBgxFjAUBgNV BAMTDTY4MjJlZWQ4LWJlYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF5jyRU2bzrX3gEb+5cB1y3LaHyo6vsr//4yB7CnQJQbNFS+2SHljQ1C3Z7Mi2 M8WsIp3lKKhNzNQ65g9sIIs7AcpavthRqTo7wOEzg+ezQX/XWjvDr7k6UtL7yqPP gypy4rlzUq8BVARijk2uvj24TUVMDTzEwJbq+OvBQAM8t9QukCWT0En1BYjff0c/ zy+vQIpGuKCNIRjfJ7hg0szk2/xABvMBTkhZqFvaFUO5i+D0wWB0WdOk/dEgSI1b upPU91/zryZZgXhboK7IhgF9fD2sNj3jY9hu7Sgfi/GlWw8CEVlinXQPa+I4uw93 ZNBfLbujZPYhh0jpFOr1/QeZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqEqQC+zm RAS06a0x/8qdXA+FrI8wHwYDVR0jBBgwFoAUwe5pqmqhrLoy4Wdk2oG/ekFopg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzc1QTkyMjMwRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3Bn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2U1cHFtcWhyTG95NFdkazJvR19la0ZvcGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzc1QTkyMjMwRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxv eTRXZGsyb0dfZWtGb3BnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJH4Q5kRUJ8Af8uuw65YMFTDArRF9860VyoiDbnlj3LresQAqiic23Yh pFECq9Qfq07DI0DxVXQ/pxXllvChcvloK53XblTvhf+vLf2LCrGyRUABXGtVseTl /3x2U/YJFEY3XSflaiVoNzeDSncmIC1lD0l0a5xXmuB52R72y5txYFpOI2wPs3oO Z9IHB71HUG8iVTSQdjcsQHewyAEjlWkJZZzrCkOD240WoxTzgrUAL2RrAtZtaWW2 yNj7YPDyTOjgdjwQ7IzOQfBXu+0J7ZsQ/4n1Id37gcSb3XK2SuT2EajXAp0Jtm+o OEH5dgxR2LVrlzAn80AZaoQtaPp2nYs= -----END CERTIFICATE-----Generated at Tue May 13 13:39:40 2025 by rpki-client