$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: nukMEQnqnAYWkEE+NtEbJeG0uLpc+fIPngG1xUA6w+0= Subject key identifier: 5F:00:D7:06:B8:D5:2B:C7:37:34:4F:24:3E:93:5A:A3:D9:7A:30:B0 Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 0891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 088A Signing time: Sun 04 May 2025 20:20:54 +0000 Manifest this update: Sun 04 May 2025 20:20:53 +0000 Manifest next update: Sun 11 May 2025 20:20:53 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: wS188hWaRsu3OuToK+DqOhRBRQ43eWkrzouegejvMFE=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: May 4 20:20:53 2025 GMT Not After : May 11 20:20:53 2025 GMT Subject: CN=6817cc25-2cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:3f:97:2e:4d:2c:ce:cf:64:e5:a5:17:aa: 25:45:4c:26:bf:a1:41:f4:60:6a:1d:8e:1a:23:a9: ff:6b:2e:f0:94:ca:32:67:5f:5a:1a:2e:3e:cd:d2: 7c:93:d8:f4:74:ea:b6:32:63:28:40:b1:75:f3:4d: cc:91:0d:4f:e3:22:59:ed:c0:ee:b6:7b:85:01:31: 5a:08:e8:93:ff:f7:b5:7b:ba:64:a4:b0:07:0e:64: f3:a0:a4:f4:7f:ac:d1:b0:6b:bd:2b:a5:b3:12:f6: c9:b7:90:cd:6f:ca:ad:ac:ce:06:73:61:3e:35:d6: 69:1b:bf:eb:91:bc:7f:8c:dc:5a:05:4b:a4:1f:a5: c0:ec:60:cf:1c:66:80:90:a6:2a:54:c8:b6:1d:08: 6f:3a:31:a9:73:02:04:24:ee:e4:0d:33:3d:10:67: 85:4b:8f:74:01:e0:f5:8b:e3:a6:de:b8:95:7c:1c: c1:86:7c:4d:c9:07:c6:0f:16:29:6f:5e:95:7c:29: c9:e5:67:93:02:ed:36:33:5d:39:80:48:20:ad:d4: ec:ba:22:46:bd:d2:5f:e5:16:b6:d1:92:23:a9:ba: 77:9b:0c:af:1e:79:8d:0f:53:c3:02:99:2c:7e:8f: 6f:a9:f5:48:c5:01:a4:5d:68:52:22:e8:27:d9:6f: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:00:D7:06:B8:D5:2B:C7:37:34:4F:24:3E:93:5A:A3:D9:7A:30:B0 X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8b:51:d8:08:82:c0:92:cd:e0:41:04:17:69:db:d3:dd:4e: 53:2c:34:f3:7e:d1:9b:2d:2d:60:e3:64:c8:e4:ba:8b:a4:92: 9a:03:10:01:c0:23:1a:98:c2:c5:ec:aa:b7:65:1a:4a:bc:e9: 49:63:d0:db:5b:71:12:2e:21:b7:f3:d1:d3:29:e8:ce:7d:25: 7c:30:73:0d:4b:54:7f:37:3a:01:79:54:22:3f:68:72:bf:51: 0f:1d:98:b6:3b:57:39:df:a1:8a:10:ec:da:bf:81:c4:dd:dc: df:9b:f1:a4:c2:66:5a:f3:90:22:41:d3:23:4d:0c:ce:66:04: 9f:dd:ca:89:97:26:17:e6:63:cc:de:f0:45:ae:c7:09:02:8c: 6d:0a:c7:56:fb:f8:78:e0:d4:bd:56:3c:95:77:87:7d:21:05: eb:93:a4:14:09:b4:9c:24:1d:9e:a9:40:00:d0:41:1b:6a:45: 96:f0:31:35:b1:1b:56:30:21:ba:a5:bd:41:90:d4:e8:06:7c: af:5a:92:c4:38:2f:cc:45:b0:b5:11:54:1c:23:01:38:57:4d: c7:04:b2:e0:fa:14:4d:cd:77:db:26:bb:47:16:33:24:46:1f: 02:27:1e:79:49:c8:4b:a3:99:e5:53:41:ac:1b:85:50:e3:41: cd:1b:8d:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUwNTA0MjAyMDUzWhcNMjUwNTExMjAyMDUzWjAYMRYwFAYD VQQDEw02ODE3Y2MyNS0yY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6o/ly5NLM7PZOWlF6olRUwmv6FB9GBqHY4aI6n/ay7wlMoyZ19aGi4+zdJ8 k9j0dOq2MmMoQLF1803MkQ1P4yJZ7cDutnuFATFaCOiT//e1e7pkpLAHDmTzoKT0 f6zRsGu9K6WzEvbJt5DNb8qtrM4Gc2E+NdZpG7/rkbx/jNxaBUukH6XA7GDPHGaA kKYqVMi2HQhvOjGpcwIEJO7kDTM9EGeFS490AeD1i+Om3riVfBzBhnxNyQfGDxYp b16VfCnJ5WeTAu02M105gEggrdTsuiJGvdJf5Ra20ZIjqbp3mwyvHnmND1PDApks fo9vqfVIxQGkXWhSIugn2W8D5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8A1wa4 1SvHNzRPJD6TWqPZejCwMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCei1HYCILAks3gQQQXadvT3U5TLDTzftGbLS1g42TI5LqLpJKaAxAB wCMamMLF7Kq3ZRpKvOlJY9DbW3ESLiG389HTKejOfSV8MHMNS1R/NzoBeVQiP2hy v1EPHZi2O1c536GKEOzav4HE3dzfm/GkwmZa85AiQdMjTQzOZgSf3cqJlyYX5mPM 3vBFrscJAoxtCsdW+/h44NS9VjyVd4d9IQXrk6QUCbScJB2eqUAA0EEbakWW8DE1 sRtWMCG6pb1BkNToBnyvWpLEOC/MRbC1EVQcIwE4V03HBLLg+hRNzXfbJrtHFjMk Rh8CJx55SchLo5nlU0GsG4VQ40HNG426 -----END CERTIFICATE-----Generated at Mon May 5 02:25:44 2025 by rpki-client