$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft File: scWMB4UVntc2lq-zEtI1z0DzxEE.mft (raw, json) Hash identifier: s4fU3TguVW4cVe+5pB86r5LXs0HZEwD82M7+jAFHU80= Subject key identifier: DA:D1:50:12:8E:82:A2:60:3A:BB:AB:F4:E2:90:5B:D5:0C:BC:1F:99 Authority key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 Certificate issuer: /CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft Manifest number: 0121 Signing time: Thu 15 May 2025 04:06:26 +0000 Manifest this update: Thu 15 May 2025 04:06:26 +0000 Manifest next update: Thu 22 May 2025 04:06:26 +0000 Files and hashes: 1: scWMB4UVntc2lq-zEtI1z0DzxEE.crl (hash: v5E5JRMMOuNGbBsdeiovSV3+hyr318WO25RoIAejvEE=) 2: FA39CA70790E11EE86665E43C4F9AE02.roa (hash: xsuXssQOBAE3nj0lpLNVKszjiNPCs90eXxis5UuNvjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Validity Not Before: May 15 04:06:26 2025 GMT Not After : May 22 04:06:26 2025 GMT Subject: CN=68256842-582a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:51:c8:1e:d1:14:fd:6b:a3:f7:1e:9c:21: b5:93:81:dd:75:00:78:e0:2a:5c:49:a8:a9:b5:ef: 4a:7a:5e:0e:b5:30:8d:47:3d:9a:58:96:b3:c9:9e: e8:75:25:3e:22:75:1e:14:23:c6:eb:ee:6d:e4:1d: 43:d4:6e:cb:e8:2c:b1:40:68:0d:ad:a7:10:f7:8c: b4:25:18:b5:30:72:53:2b:29:70:70:af:32:90:46: 0e:8e:20:90:eb:8a:91:ca:c5:06:02:29:eb:03:2a: 3b:f6:bd:25:56:98:c4:07:a9:60:99:81:52:f3:34: 67:e3:13:2c:7a:a7:23:89:76:56:cd:b8:a2:59:b5: c1:1a:8f:67:44:ab:0c:76:25:52:55:3d:28:52:d7: 2f:bd:11:6b:48:cb:c3:02:43:2b:6b:d4:bd:0f:22: e5:f8:cb:74:b1:93:39:de:f6:4f:2f:b2:bc:57:ef: 3e:2d:fa:9e:c9:e9:0f:e0:d4:30:38:9b:85:0b:9b: 75:a2:02:d1:de:27:9e:91:85:9f:6e:25:af:85:d7: 6a:33:5e:69:cc:55:16:96:7e:22:a6:a5:31:c1:a0: d5:9b:98:ea:ee:fd:eb:69:b4:ba:ab:3d:b3:27:4b: d4:26:2b:10:f8:3b:ea:92:db:eb:ba:04:6d:f8:29: 8e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D1:50:12:8E:82:A2:60:3A:BB:AB:F4:E2:90:5B:D5:0C:BC:1F:99 X509v3 Authority Key Identifier: keyid:B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:85:56:0c:59:9e:6d:19:0f:b1:17:c4:ee:f9:6e:7c:cf:8a: fb:63:f8:75:da:19:07:4c:a9:42:18:ad:a5:7b:41:30:a1:df: a0:0f:d4:ea:38:5d:9b:8b:4c:a1:f6:1d:22:dd:0f:7c:f0:e4: 7a:b0:99:96:9e:2d:eb:cc:00:8f:64:ab:82:19:ad:7e:49:ef: e3:8f:a6:2d:ba:cf:2d:ab:c2:37:16:b0:28:76:b1:8f:b1:2d: 7d:64:7e:87:39:fb:14:50:04:bc:6e:df:8c:99:9a:a4:f7:19: ce:13:c7:a9:95:20:5b:c4:10:49:46:a1:8a:f7:77:64:aa:2e: 77:56:3a:93:85:f3:2c:cd:8e:44:09:4e:2b:af:a1:c4:ab:ff: dc:2c:06:24:3c:36:2d:55:14:f8:ac:13:97:d1:cd:2f:87:8c: 18:cf:15:5b:38:3b:ac:06:5f:98:56:c7:30:cb:f7:03:6c:97: c2:18:4e:f2:81:b0:55:e6:34:67:b2:e2:72:c6:3d:c5:42:d8: c5:3e:31:f9:f6:7d:c2:f8:a1:0e:d6:6a:26:e2:d5:b4:d1:cb: 6b:d6:47:cd:e3:be:ba:e4:aa:fb:77:dd:ce:c6:fb:3f:5f:f6: 91:12:b3:15:b8:88:cf:f3:53:64:9a:18:18:7f:ec:a9:16:bc: 5d:4c:7f:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKEIxQzU4QzA3ODUxNTlFRDczNjk2QUZCMzEyRDIzNUNG NDBGM0M0NDEwHhcNMjUwNTE1MDQwNjI2WhcNMjUwNTIyMDQwNjI2WjAYMRYwFAYD VQQDEw02ODI1Njg0Mi01ODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysdRyB7RFP1ro/cenCG1k4HddQB44CpcSaipte9Kel4OtTCNRz2aWJazyZ7o dSU+InUeFCPG6+5t5B1D1G7L6CyxQGgNracQ94y0JRi1MHJTKylwcK8ykEYOjiCQ 64qRysUGAinrAyo79r0lVpjEB6lgmYFS8zRn4xMseqcjiXZWzbiiWbXBGo9nRKsM diVSVT0oUtcvvRFrSMvDAkMra9S9DyLl+Mt0sZM53vZPL7K8V+8+LfqeyekP4NQw OJuFC5t1ogLR3ieekYWfbiWvhddqM15pzFUWln4ipqUxwaDVm5jq7v3rabS6qz2z J0vUJisQ+DvqktvrugRt+CmOxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrRUBKO gqJgOrur9OKQW9UMvB+ZMB8GA1UdIwQYMBaAFLHFjAeFFZ7XNpavsxLSNc9A88RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC8wMkFBNDk1MDc5 MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50YzJscS16RXRJMXowRHp4 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjV01CNFVWbnRjMmxxLXpFdEkxejBEenhFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC8wMkFBNDk1MDc5MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50 YzJscS16RXRJMXowRHp4RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbhVYMWZ5tGQ+xF8Tu+W58z4r7Y/h12hkHTKlCGK2le0Ewod+gD9Tq OF2bi0yh9h0i3Q988OR6sJmWni3rzACPZKuCGa1+Se/jj6Ytus8tq8I3FrAodrGP sS19ZH6HOfsUUAS8bt+MmZqk9xnOE8eplSBbxBBJRqGK93dkqi53VjqThfMszY5E CU4rr6HEq//cLAYkPDYtVRT4rBOX0c0vh4wYzxVbODusBl+YVscwy/cDbJfCGE7y gbBV5jRnsuJyxj3FQtjFPjH59n3C+KEO1mom4tW00ctr1kfN47665Kr7d93Oxvs/ X/aRErMVuIjP81NkmhgYf+ypFrxdTH/F -----END CERTIFICATE-----Generated at Thu May 15 11:38:14 2025 by rpki-client