$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft File: pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json) Hash identifier: JCQQQ9RxnNm9Y3HZkFh39I/Gzthd8f+7UYXzlFOC1IE= Subject key identifier: 47:3F:EF:81:85:85:E7:9C:A0:1E:CC:3A:D4:63:C5:D8:05:A1:00:D2 Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft Manifest number: 01EB Signing time: Thu 15 May 2025 02:08:39 +0000 Manifest this update: Thu 15 May 2025 02:08:38 +0000 Manifest next update: Thu 22 May 2025 02:08:38 +0000 Files and hashes: 1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: 9aJ56KWIZy3DR+qZkBQ5yONkiRUpGiLWhw1b7KEYd14=) 2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: AKQfVSoyvedil4fBrswJw8Fk2im5oq9KA2WJlwXE+SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Validity Not Before: May 15 02:08:38 2025 GMT Not After : May 22 02:08:38 2025 GMT Subject: CN=68254ca7-e7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:3c:dc:3c:23:19:1b:8f:27:85:5e:ec:03: 19:96:22:84:cc:bd:4d:f2:66:03:42:96:de:8b:c4: 5f:23:c2:a0:7a:5b:43:2b:bc:41:40:56:d1:37:90: 4f:1d:ce:86:12:c6:1e:06:01:d3:21:cc:f1:36:35: 32:70:75:16:72:a1:87:14:54:aa:fc:c1:45:34:d3: 0d:29:ee:d8:f1:10:9b:4f:8e:61:34:31:e4:d7:14: 28:f1:b5:a5:4a:4a:17:52:8c:09:68:11:2c:36:dd: 61:bc:85:e6:5f:93:36:f4:e1:2b:cd:9c:97:e4:ea: ef:6c:13:7b:db:78:04:d2:b1:32:3c:d2:0d:b5:ba: 40:8b:d8:de:8e:17:d9:94:93:7d:76:bd:26:23:d3: 2d:d5:57:99:3a:0e:2d:fc:c4:a9:17:b9:fd:8b:75: 41:79:03:2e:db:c0:f8:2a:6b:ab:53:c5:55:a7:62: c4:43:d1:42:11:28:ef:78:b0:ff:02:90:69:33:62: 23:70:2b:55:a1:7b:b6:6f:11:75:28:81:9e:b6:e3: dc:22:7b:76:43:a5:02:2f:4e:ba:fa:3d:8c:6b:68: e0:3f:9a:ec:f0:c2:2e:24:69:26:2c:fd:6a:25:5e: 48:97:7b:60:f4:f4:e3:c2:4e:01:14:eb:85:3d:af: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3F:EF:81:85:85:E7:9C:A0:1E:CC:3A:D4:63:C5:D8:05:A1:00:D2 X509v3 Authority Key Identifier: keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:5e:2c:00:07:9d:46:65:68:9a:a7:01:2b:0e:cf:f0:2f:79: bf:c2:c9:d8:a6:a1:76:54:f1:0a:b7:ac:ab:dc:62:c9:f3:dd: 45:64:35:f1:95:40:a3:58:4f:4c:97:72:f1:68:e1:70:36:d7: 70:a4:8b:ad:94:2e:89:b9:0d:6a:89:0f:a4:48:80:4f:9c:70: 40:3d:52:3e:fa:ae:be:09:df:03:c7:36:59:5a:3b:7d:29:ac: 0e:c9:c4:0a:36:85:6c:de:81:e3:af:28:dc:41:a7:1c:b8:f9: 02:82:8a:11:95:e5:66:bd:4b:e1:d7:e6:f4:2b:20:ae:30:1f: 90:86:2b:70:6f:8c:93:47:92:af:6b:c7:c8:02:ed:df:81:85: 8c:74:e4:32:4a:e9:6c:04:df:8a:18:f3:20:80:e1:e5:2d:46: 1c:a6:ed:d9:10:6d:35:37:37:0c:8a:f5:7c:45:22:4d:b5:a0: ab:56:01:b0:a7:d3:01:40:47:1f:9f:18:d1:67:10:4e:d5:10: 6c:a5:47:65:db:21:fe:5c:ec:8e:f7:86:23:a9:fa:19:f8:56: 9f:38:66:db:28:31:e9:c5:a2:da:8b:47:5a:3b:45:fc:ee:7e: 43:88:bf:35:b4:dc:66:e6:3a:f1:33:71:a2:1c:9b:6e:90:a0: c7:44:76:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTQxMTAvBgNVBAUTKEE3MDdFOEVENkM3NEJBRjM2MURENDA3MjcxQzZBMzRE NDQwMjIyQUMwHhcNMjUwNTE1MDIwODM4WhcNMjUwNTIyMDIwODM4WjAYMRYwFAYD VQQDEw02ODI1NGNhNy1lN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomM83DwjGRuPJ4Ve7AMZliKEzL1N8mYDQpbei8RfI8KgeltDK7xBQFbRN5BP Hc6GEsYeBgHTIczxNjUycHUWcqGHFFSq/MFFNNMNKe7Y8RCbT45hNDHk1xQo8bWl SkoXUowJaBEsNt1hvIXmX5M29OErzZyX5OrvbBN723gE0rEyPNINtbpAi9jejhfZ lJN9dr0mI9Mt1VeZOg4t/MSpF7n9i3VBeQMu28D4KmurU8VVp2LEQ9FCESjveLD/ ApBpM2IjcCtVoXu2bxF1KIGetuPcInt2Q6UCL066+j2Ma2jgP5rs8MIuJGkmLP1q JV5Il3tg9PTjwk4BFOuFPa9JvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc/74GF heecoB7MOtRjxdgFoQDSMB8GA1UdIwQYMBaAFKcH6O1sdLrzYd1AcnHGo01EAiKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxNC8xODhDMUMyNjRF MTMxMUVEQjEyRjNDNkZDNEY5QUUwMi9wd2ZvN1d4MHV2TmgzVUJ5Y2NhalRVUUNJ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B3Zm83V3gwdXZOaDNVQnljY2FqVFVRQ0lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxNC8xODhDMUMyNjRFMTMxMUVEQjEyRjNDNkZDNEY5QUUwMi9wd2ZvN1d4MHV2 TmgzVUJ5Y2NhalRVUUNJcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9XiwAB51GZWiapwErDs/wL3m/wsnYpqF2VPEKt6yr3GLJ891FZDXx lUCjWE9Ml3LxaOFwNtdwpIutlC6JuQ1qiQ+kSIBPnHBAPVI++q6+Cd8DxzZZWjt9 KawOycQKNoVs3oHjryjcQaccuPkCgooRleVmvUvh1+b0KyCuMB+Qhitwb4yTR5Kv a8fIAu3fgYWMdOQySulsBN+KGPMggOHlLUYcpu3ZEG01NzcMivV8RSJNtaCrVgGw p9MBQEcfnxjRZxBO1RBspUdl2yH+XOyO94YjqfoZ+FafOGbbKDHpxaLai0daO0X8 7n5DiL81tNxm5jrxM3GiHJtukKDHRHYZ -----END CERTIFICATE-----Generated at Fri May 16 12:14:41 2025 by rpki-client