$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft File: iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json) Hash identifier: zrDsuwVx5yMhmCdKbUmjLvA4k3iMJafTZyDN7rJpNlE= Subject key identifier: 5C:DA:F9:85:83:7C:C3:AF:06:C7:FA:9C:62:5C:D6:2E:43:5B:C4:13 Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Certificate serial: 1113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft Manifest number: 110A Signing time: Fri 16 May 2025 17:31:32 +0000 Manifest this update: Fri 16 May 2025 17:31:32 +0000 Manifest next update: Fri 23 May 2025 17:31:32 +0000 Files and hashes: 1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: 7vc58aRjQLd+pp2NWDgL59WlGW4NGjRaVKlavy1gKJg=) 2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: A18BMNL1z8vEvxNnbAYEfetGV7OdVPlRvhOmRqVb1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4371 (0x1113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Validity Not Before: May 16 17:31:32 2025 GMT Not After : May 23 17:31:32 2025 GMT Subject: CN=68277674-7bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:11:59:e5:e2:fb:c7:ac:be:41:56:c2:8a: 21:9b:a4:2d:aa:ca:e5:d8:87:be:9e:87:7d:0a:db: 4b:2f:3e:15:d1:f1:4a:5e:80:eb:5f:e2:c0:d2:10: 19:42:cf:3a:67:45:8e:cb:4f:d8:61:52:78:ad:1e: 78:4a:ba:48:0f:45:69:a0:86:a1:4f:96:18:a8:1c: 71:83:1c:47:ec:26:fa:a1:99:f5:95:94:ea:aa:aa: 9a:58:11:14:b5:08:a5:71:39:b6:62:73:e4:f3:cc: e9:a6:f5:45:73:dd:eb:6a:e6:d0:cb:c6:ef:29:5f: d6:b8:5c:95:b7:11:d8:67:38:4b:ea:e1:ce:52:29: 47:2d:5d:a0:21:b3:1a:27:e2:70:ec:1a:a6:15:ed: 94:b6:73:d0:5e:4b:e1:bb:04:dd:26:1b:12:76:c9: a9:2c:e5:08:32:ed:a5:3b:72:30:98:2a:d0:4d:81: 5f:05:28:78:14:f5:92:56:52:4e:99:5a:34:ce:98: 73:d5:41:40:a9:64:47:92:2d:30:74:f4:0d:62:2b: 45:68:94:03:8e:85:87:78:b4:33:ef:9b:e7:04:8b: 60:c6:9d:e5:fd:fe:0d:7b:48:eb:2f:83:b7:c0:b0: 27:cf:ef:fa:00:ff:4b:db:d8:a4:d2:64:ce:03:74: ee:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DA:F9:85:83:7C:C3:AF:06:C7:FA:9C:62:5C:D6:2E:43:5B:C4:13 X509v3 Authority Key Identifier: keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c5:33:a2:2a:5d:77:cf:a2:b6:ee:ea:7a:63:36:df:59:13: 9c:9b:cc:5c:ba:a6:24:34:03:d8:7a:b9:62:a3:42:8b:33:7a: 7c:f9:d8:d2:e0:4a:dd:0b:dc:a4:9f:21:36:66:63:f7:9b:f6: 44:14:ad:54:01:eb:1d:61:fc:68:45:60:fd:bf:bb:12:37:f6: 28:81:b6:d3:f2:57:5a:fa:b8:7f:93:76:83:58:26:93:ac:65: 3d:c0:a4:06:6b:42:f3:d2:e5:66:ee:01:b8:d1:62:08:05:4b: d2:be:5a:72:8a:f4:6f:be:41:9b:5b:fd:95:4b:a8:3b:cd:9c: d0:0e:c7:80:f2:e8:dc:7c:a8:86:26:d3:ec:dd:4c:50:63:50: 30:fe:d7:68:fb:7a:ed:4d:e5:ef:fb:1d:67:85:fc:41:0c:91: 91:8d:25:00:3d:f7:6e:f6:f0:66:74:82:0f:84:95:05:06:8b: 96:8c:af:35:13:74:e8:0b:3d:da:1b:91:d3:44:b6:9f:47:ab: 05:ce:92:05:99:87:45:e8:fb:31:1c:ee:20:8b:7b:0c:d3:88: 74:06:ae:f4:d3:dc:93:d0:8d:04:de:a1:cd:51:19:ea:e3:d7: a5:4a:93:78:89:4b:75:73:19:03:ab:07:5c:28:37:cb:7e:09: 13:b8:af:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhDRDM1NTk2REVB OTVGRjU4MzMwHhcNMjUwNTE2MTczMTMyWhcNMjUwNTIzMTczMTMyWjAYMRYwFAYD VQQDEw02ODI3NzY3NC03YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxARWeXi+8esvkFWwoohm6Qtqsrl2Ie+nod9CttLLz4V0fFKXoDrX+LA0hAZ Qs86Z0WOy0/YYVJ4rR54SrpID0VpoIahT5YYqBxxgxxH7Cb6oZn1lZTqqqqaWBEU tQilcTm2YnPk88zppvVFc93raubQy8bvKV/WuFyVtxHYZzhL6uHOUilHLV2gIbMa J+Jw7BqmFe2UtnPQXkvhuwTdJhsSdsmpLOUIMu2lO3IwmCrQTYFfBSh4FPWSVlJO mVo0zphz1UFAqWRHki0wdPQNYitFaJQDjoWHeLQz75vnBItgxp3l/f4Ne0jrL4O3 wLAnz+/6AP9L29ik0mTOA3TuJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFza+YWD fMOvBsf6nGJc1i5DW8QTMB8GA1UdIwQYMBaAFIsmFoa9kuLPa/VIzTVZbeqV/1gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzA3OC82NkM4MzAyQzEz QkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRzOXI5VWpOTlZsdDZwWF9X RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5WVdocjJTNHM5cjlVak5OVmx0NnBYX1dETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzA3OC82NkM4MzAyQzEzQkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRz OXI5VWpOTlZsdDZwWF9XRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApxTOiKl13z6K27up6YzbfWROcm8xcuqYkNAPYerlio0KLM3p8+djS 4ErdC9yknyE2ZmP3m/ZEFK1UAesdYfxoRWD9v7sSN/YogbbT8lda+rh/k3aDWCaT rGU9wKQGa0Lz0uVm7gG40WIIBUvSvlpyivRvvkGbW/2VS6g7zZzQDseA8ujcfKiG JtPs3UxQY1Aw/tdo+3rtTeXv+x1nhfxBDJGRjSUAPfdu9vBmdIIPhJUFBouWjK81 E3ToCz3aG5HTRLafR6sFzpIFmYdF6PsxHO4gi3sM04h0Bq7009yT0I0E3qHNURnq 49elSpN4iUt1cxkDqwdcKDfLfgkTuK+W -----END CERTIFICATE-----Generated at Sat May 17 06:15:19 2025 by rpki-client