$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft File: wJ7fW2leBHksNRT0mPS7FEcJbvc.mft (raw, json) Hash identifier: U5I6kQdL2IliQSgkPyT0NfY/pNocWI/mLhjYK0ftrcU= Subject key identifier: A3:B3:D0:53:21:B8:6E:1B:87:AB:80:0D:78:03:13:A0:C8:C7:5E:82 Authority key identifier: C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 Certificate issuer: /CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft Manifest number: E5 Signing time: Fri 09 May 2025 04:28:45 +0000 Manifest this update: Fri 09 May 2025 04:28:44 +0000 Manifest next update: Fri 16 May 2025 04:28:44 +0000 Files and hashes: 1: wJ7fW2leBHksNRT0mPS7FEcJbvc.crl (hash: MI69y6i1t4JBpdE76+TL2aprAt10PLtIK6oDTeZtp4U=) 2: FC0907B8D45711EE93BD8B7CC4F9AE02.roa (hash: 4csKsNHVa4/05cRZpUWAlRIA5HnGFBYyOyZZA1vjUEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B, serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Validity Not Before: May 9 04:28:44 2025 GMT Not After : May 16 04:28:44 2025 GMT Subject: CN=681d847d-905a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:10:c1:a9:57:89:ad:a3:55:3d:5d:90:d3: d4:81:16:1c:ac:18:4a:86:36:a1:e0:15:6f:60:1a: eb:6e:e2:79:b5:df:25:23:44:58:e4:53:5b:af:57: 87:75:ac:73:2e:6f:ed:4b:e0:bb:93:24:fc:11:57: 0a:84:35:e7:41:f1:5e:1b:be:62:56:21:33:d9:7a: 28:6b:71:c1:1f:5b:c7:3e:3f:4c:de:1b:59:dd:7e: 46:ab:31:fb:b9:9d:6a:4c:46:85:70:07:66:e0:9a: f4:0e:3c:90:fc:7c:3b:28:04:10:e2:2c:72:79:d6: 27:92:58:6c:66:c8:6f:72:5f:1e:23:10:3a:1b:87: 11:28:d4:30:62:40:46:31:72:f7:d1:2f:92:65:8c: a8:a9:4e:e5:1e:af:50:37:8f:a1:8c:82:51:0e:ef: 85:f0:16:07:fb:ab:4b:5d:9f:f2:23:c8:93:3d:0d: 2d:f1:59:95:bf:95:c2:c0:27:ec:3d:a3:5d:6f:c2: 5c:69:73:37:7f:2d:34:0a:dd:ce:ee:3a:eb:59:ce: 2d:33:09:31:9b:d2:48:4c:29:21:74:51:2c:74:96: 11:b7:9e:1e:bd:72:25:9c:f3:4e:a6:c3:b8:28:40: 33:48:41:84:ba:00:df:92:40:ae:99:bf:94:97:6c: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B3:D0:53:21:B8:6E:1B:87:AB:80:0D:78:03:13:A0:C8:C7:5E:82 X509v3 Authority Key Identifier: keyid:C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:59:ff:ab:de:cd:10:5a:a4:91:f8:43:78:cc:b2:b7:01:84: 44:10:53:e5:c7:a5:ea:a5:d6:96:7c:9c:5e:bb:23:27:0c:42: e1:d4:13:2e:d9:68:a8:7c:a1:34:8c:04:5b:a2:eb:9d:d7:47: 3b:cd:eb:75:a9:dc:d0:f3:ed:65:02:96:18:fb:e0:17:0c:9f: b8:eb:ce:de:46:cf:df:a2:d6:08:59:11:c6:bd:15:22:1e:11: be:cd:b4:21:5d:f7:fd:1e:be:39:d8:36:6e:da:53:fe:45:dc: 30:2f:c3:2e:d3:e2:c1:0b:ac:c0:8e:a4:87:1b:c3:66:88:10: d9:ee:aa:52:0b:b6:f1:3e:c7:ca:e8:b4:e3:83:39:d1:de:44: 05:e4:53:f0:11:00:5b:db:8d:c5:18:c6:a6:e5:50:22:7b:1b: 32:bf:86:8b:81:eb:d6:93:7e:6d:47:b5:eb:84:43:13:50:76: ea:f1:79:71:81:73:17:c0:de:0b:81:c7:f4:ce:b3:83:09:b9: 34:ef:e5:aa:00:a9:5b:e3:40:3b:e1:67:eb:e5:29:22:1f:2a: 64:94:d6:bc:80:20:26:14:19:2b:ae:19:4b:43:04:2e:08:5a: b1:2b:0e:9a:ea:cf:e6:bb:18:74:40:dd:23:ac:c3:c2:18:a8: 94:7c:07:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCMkIxMTAvBgNVBAUTKEMwOUVERjVCNjk1RTA0NzkyQzM1MTRGNDk4RjRCQjE0 NDcwOTZFRjcwHhcNMjUwNTA5MDQyODQ0WhcNMjUwNTE2MDQyODQ0WjAYMRYwFAYD VQQDEw02ODFkODQ3ZC05MDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0oQwalXia2jVT1dkNPUgRYcrBhKhjah4BVvYBrrbuJ5td8lI0RY5FNbr1eH daxzLm/tS+C7kyT8EVcKhDXnQfFeG75iViEz2Xooa3HBH1vHPj9M3htZ3X5GqzH7 uZ1qTEaFcAdm4Jr0DjyQ/Hw7KAQQ4ixyedYnklhsZshvcl8eIxA6G4cRKNQwYkBG MXL30S+SZYyoqU7lHq9QN4+hjIJRDu+F8BYH+6tLXZ/yI8iTPQ0t8VmVv5XCwCfs PaNdb8JcaXM3fy00Ct3O7jrrWc4tMwkxm9JITCkhdFEsdJYRt54evXIlnPNOpsO4 KEAzSEGEugDfkkCumb+Ul2zV2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOz0FMh uG4bh6uADXgDE6DIx16CMB8GA1UdIwQYMBaAFMCe31tpXgR5LDUU9Jj0uxRHCW73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEIyQi85QjgyMDZENENG OUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJIa3NOUlQwbVBTN0ZFY0pi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dKN2ZXMmxlQkhrc05SVDBtUFM3RkVjSmJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEIyQi85QjgyMDZENENGOUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJI a3NOUlQwbVBTN0ZFY0pidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGWf+r3s0QWqSR+EN4zLK3AYREEFPlx6XqpdaWfJxeuyMnDELh1BMu 2WiofKE0jARbouud10c7zet1qdzQ8+1lApYY++AXDJ+4687eRs/fotYIWRHGvRUi HhG+zbQhXff9Hr452DZu2lP+RdwwL8Mu0+LBC6zAjqSHG8NmiBDZ7qpSC7bxPsfK 6LTjgznR3kQF5FPwEQBb243FGMam5VAiexsyv4aLgevWk35tR7XrhEMTUHbq8Xlx gXMXwN4Lgcf0zrODCbk07+WqAKlb40A74Wfr5SkiHypklNa8gCAmFBkrrhlLQwQu CFqxKw6a6s/muxh0QN0jrMPCGKiUfAe1 -----END CERTIFICATE-----Generated at Sun May 11 01:47:22 2025 by rpki-client