$ rpki-client -vvf rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft File: W2r-ya7p6tTclkY7oanLJyM9bf8.mft (raw, json) Hash identifier: zKoLLDdeG9QQ8IxIhTytnl4xZslAoJF5hgK4ePKtMNU= Subject key identifier: 91:B1:EB:C0:D6:89:60:E6:87:3D:F4:BD:0D:7A:3E:A4:5D:9D:CE:B1 Authority key identifier: 5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF Certificate issuer: /CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Certificate serial: 3482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft Manifest number: 347D Signing time: Sun 04 May 2025 14:54:48 +0000 Manifest this update: Sun 04 May 2025 14:54:47 +0000 Manifest next update: Sun 11 May 2025 14:54:47 +0000 Files and hashes: 1: W2r-ya7p6tTclkY7oanLJyM9bf8.crl (hash: OSrjLuyBxTkWLg7qsrETz05cXN4uJxx6H2z6F8VJcOo=) 2: 1317969A55B711EBAAFF6E4DC4F9AE02.roa (hash: nOUxkk4420zJ2RFOdGdnQCmw3/LVGxAozFWt1FM8u4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13442 (0x3482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D81D4, serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Validity Not Before: May 4 14:54:47 2025 GMT Not After : May 11 14:54:47 2025 GMT Subject: CN=68177fb7-ff1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:5a:40:db:1c:b9:02:d2:62:be:6a:72:9e: 89:6b:43:e6:22:31:62:f3:f0:8f:f1:b0:2e:c0:09: d4:6c:b4:c8:d7:3c:e9:2c:56:ae:81:cb:a9:e1:f7: 31:e8:e3:8a:1b:8c:28:f6:21:a8:9b:ae:1d:95:b8: 7d:79:f5:3c:23:6c:1b:24:ed:8c:ad:0a:98:2b:e5: c2:32:95:da:95:93:08:2d:f9:f9:7b:fa:42:a2:a9: 38:ce:ed:5a:f3:6b:33:9c:06:db:84:a8:96:d6:f6: 3f:ea:93:db:95:81:a3:f1:1e:42:11:65:d8:21:b8: 52:e8:02:32:ee:1b:af:e8:8a:26:eb:a6:e1:e6:5b: 8a:7f:75:ba:99:3b:0a:23:35:5d:a3:7f:f4:05:58: ac:bb:05:0f:99:2c:b6:3b:1e:3b:27:bb:dc:3f:dd: 64:7e:6d:ff:b2:47:37:2f:5a:06:92:6f:3f:74:c9: 57:5d:95:28:64:bb:41:26:98:d6:b4:86:bb:f5:59: 7a:2c:1c:30:80:7b:9d:ba:35:5a:cd:1d:1c:60:82: ea:23:d3:ba:ee:1c:89:df:2e:d0:4e:fe:37:28:92: 81:fc:f8:eb:1d:e7:81:7a:42:18:86:74:1f:9e:20: b8:7c:57:46:4e:bb:8d:b1:13:c8:46:93:00:29:fb: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B1:EB:C0:D6:89:60:E6:87:3D:F4:BD:0D:7A:3E:A4:5D:9D:CE:B1 X509v3 Authority Key Identifier: keyid:5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4e:72:39:60:ce:4b:93:c7:b7:1f:92:97:d3:1f:35:d6:0b: e8:4c:b6:09:a9:f1:21:9f:83:13:b1:1a:40:4e:8a:1d:38:81: 85:ce:27:23:35:7f:fa:0a:dc:51:e8:62:10:28:02:4b:de:7b: 7c:f8:72:ac:7b:af:1e:93:ee:de:0e:0c:5c:c3:75:1e:99:1a: c2:1a:5a:3f:fa:5e:aa:30:f1:a8:c7:72:15:b2:e7:c3:50:50: 39:e5:02:c1:78:ae:f7:5b:9f:ae:15:db:36:96:b9:47:2b:86: 2c:10:0b:a4:72:f7:e5:8e:01:41:61:d3:53:73:f8:de:b8:89: b1:70:b9:42:a9:a5:bd:b1:59:c4:45:55:a5:9c:ac:86:ee:5a: 28:86:bf:4a:ac:6e:39:d5:d4:bb:3e:9e:eb:8e:74:85:a2:f6: 26:32:bc:42:da:f4:c0:fd:05:04:17:d5:dc:c9:24:a7:86:5c: f4:cd:ce:96:4f:26:0b:b7:ad:fb:38:88:aa:48:28:c2:68:1c: da:61:99:b5:17:1c:42:5e:dc:4e:0e:cb:82:0d:7d:cf:cf:38: 3f:fd:18:4f:8b:71:7b:33:92:73:ee:f5:51:a3:ee:b8:f0:3f: 7f:65:26:88:4a:d8:35:63:4e:84:5b:98:da:ac:84:e8:16:a3: 9c:27:e3:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxRDQxMTAvBgNVBAUTKDVCNkFGRUM5QUVFOUVBRDREQzk2NDYzQkExQTlDQjI3 MjMzRDZERkYwHhcNMjUwNTA0MTQ1NDQ3WhcNMjUwNTExMTQ1NDQ3WjAYMRYwFAYD VQQDEw02ODE3N2ZiNy1mZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoFaQNscuQLSYr5qcp6Ja0PmIjFi8/CP8bAuwAnUbLTI1zzpLFaugcup4fcx 6OOKG4wo9iGom64dlbh9efU8I2wbJO2MrQqYK+XCMpXalZMILfn5e/pCoqk4zu1a 82sznAbbhKiW1vY/6pPblYGj8R5CEWXYIbhS6AIy7huv6Iom66bh5luKf3W6mTsK IzVdo3/0BVisuwUPmSy2Ox47J7vcP91kfm3/skc3L1oGkm8/dMlXXZUoZLtBJpjW tIa79Vl6LBwwgHudujVazR0cYILqI9O67hyJ3y7QTv43KJKB/PjrHeeBekIYhnQf niC4fFdGTruNsRPIRpMAKftHUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGx68DW iWDmhz30vQ16PqRdnc6xMB8GA1UdIwQYMBaAFFtq/smu6erU3JZGO6GpyycjPW3/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODFENC9EQUUzODJBQTFE OUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0VGNsa1k3b2FuTEp5TTli ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cyci15YTdwNnRUY2xrWTdvYW5MSnlNOWJmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODFENC9EQUUzODJBQTFEOUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0 VGNsa1k3b2FuTEp5TTliZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHTnI5YM5Lk8e3H5KX0x811gvoTLYJqfEhn4MTsRpAToodOIGFzicj NX/6CtxR6GIQKAJL3nt8+HKse68ek+7eDgxcw3UemRrCGlo/+l6qMPGox3IVsufD UFA55QLBeK73W5+uFds2lrlHK4YsEAukcvfljgFBYdNTc/jeuImxcLlCqaW9sVnE RVWlnKyG7loohr9KrG451dS7Pp7rjnSFovYmMrxC2vTA/QUEF9XcySSnhlz0zc6W TyYLt637OIiqSCjCaBzaYZm1FxxCXtxODsuCDX3Pzzg//RhPi3F7M5Jz7vVRo+64 8D9/ZSaIStg1Y06EW5jarIToFqOcJ+Or -----END CERTIFICATE-----Generated at Mon May 5 01:54:21 2025 by rpki-client