$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft File: w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json) Hash identifier: +VPmm4lhIErrInsCTJsYfxXOSVYpp2re8Dx+HASodJw= Subject key identifier: 7D:73:A0:35:DD:12:42:B8:7B:E3:02:1B:7E:55:42:B4:07:F9:71:5A Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft Manifest number: 04A7 Signing time: Mon 12 May 2025 23:45:35 +0000 Manifest this update: Mon 12 May 2025 23:45:34 +0000 Manifest next update: Mon 19 May 2025 23:45:34 +0000 Files and hashes: 1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: zF2YOrc+yu2EtHM6K33Ci4224K2XRLUkuFod5dL+VT8=) 2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Validity Not Before: May 12 23:45:34 2025 GMT Not After : May 19 23:45:34 2025 GMT Subject: CN=6822881e-264a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0e:fa:77:0e:67:43:f0:bb:00:67:b6:a3:96: 9e:59:bc:4a:53:02:0e:c7:61:84:11:0e:13:d4:fc: 1c:10:f3:e5:97:55:76:29:54:59:00:e0:a5:22:6c: 70:b5:30:32:67:49:d1:44:ea:bd:d9:9d:7d:bc:a4: 1d:1a:ff:dc:b9:4d:2a:6c:50:be:19:f6:94:1c:88: 6c:75:26:ad:b1:04:4e:8a:fa:f0:d1:60:cf:f9:5e: 3b:e2:4a:16:c6:8f:5b:77:5f:73:59:c3:a3:99:9c: dc:7f:9c:07:5a:50:8f:f0:7a:95:0c:6a:e4:b5:55: 38:a7:10:d1:a5:41:b6:e5:7b:63:fb:af:90:72:7c: 28:e0:a6:1b:2e:2a:b9:39:6d:58:51:6d:4e:cb:0e: 42:bf:b4:2d:c3:70:9e:7f:04:92:31:d2:2e:90:28: a6:bb:b4:19:89:17:0a:a0:54:22:24:80:fc:71:ef: e1:4c:62:e1:2e:35:97:98:ec:8f:91:86:b0:4c:8b: e9:82:a7:1a:13:82:f5:96:de:dc:65:51:a9:89:9a: 6c:71:04:e0:dd:65:8a:e4:15:cb:f8:0c:0d:ae:89: aa:b1:13:ab:55:b5:ad:5a:23:21:c1:10:bb:67:7b: dc:28:52:4f:ac:75:e7:3a:06:b0:a9:6a:2b:14:44: 52:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:73:A0:35:DD:12:42:B8:7B:E3:02:1B:7E:55:42:B4:07:F9:71:5A X509v3 Authority Key Identifier: keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fd:c7:72:6e:83:92:6a:be:71:88:f8:15:0a:2d:82:46:d3: ed:8b:93:b7:c4:ca:e1:e6:b0:6c:c9:bc:a7:fa:48:a1:6b:83: 3b:4e:5b:99:9b:55:d2:6e:15:53:fc:69:ef:7f:f0:8c:e7:93: 65:aa:73:87:c0:7e:24:7c:da:f0:61:0f:0e:5a:26:7e:1b:06: 44:75:d8:55:9d:13:62:ca:ea:0a:35:6c:29:8c:da:6e:cd:16: 64:6a:bd:49:30:78:fc:49:8a:08:76:ae:57:3e:97:b1:e8:9f: 18:6e:21:07:b8:13:de:6a:02:cf:fc:a6:04:f8:80:8e:cc:78: 9b:46:fc:a1:10:6b:18:be:c0:fc:c0:30:5c:b7:83:4e:c9:48: c4:6c:bc:38:26:19:8d:be:e3:11:04:0d:cc:b6:af:d8:a9:2c: 5f:75:76:ff:19:5b:ad:db:28:89:d7:7f:47:77:5b:60:fc:c1: 15:59:9e:49:13:dc:45:9c:98:74:2e:36:a0:84:ec:28:cb:57: 85:ba:bf:c3:79:fc:bd:29:0d:ad:71:40:de:66:3b:85:f2:2c: 4b:12:bf:d8:27:dc:81:53:e0:f0:eb:b1:e2:27:e1:ea:27:a0: 6c:86:2e:9a:4a:6d:ae:a5:97:e6:e6:6e:60:66:30:9e:1e:da: c4:e8:8c:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0EyRUNGODIyNjEz MDBDREZFOTUwHhcNMjUwNTEyMjM0NTM0WhcNMjUwNTE5MjM0NTM0WjAYMRYwFAYD VQQDEw02ODIyODgxZS0yNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3w76dw5nQ/C7AGe2o5aeWbxKUwIOx2GEEQ4T1PwcEPPll1V2KVRZAOClImxw tTAyZ0nRROq92Z19vKQdGv/cuU0qbFC+GfaUHIhsdSatsQROivrw0WDP+V474koW xo9bd19zWcOjmZzcf5wHWlCP8HqVDGrktVU4pxDRpUG25Xtj+6+Qcnwo4KYbLiq5 OW1YUW1Oyw5Cv7Qtw3CefwSSMdIukCimu7QZiRcKoFQiJID8ce/hTGLhLjWXmOyP kYawTIvpgqcaE4L1lt7cZVGpiZpscQTg3WWK5BXL+AwNromqsROrVbWtWiMhwRC7 Z3vcKFJPrHXnOgawqWorFERSXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1zoDXd EkK4e+MCG35VQrQH+XFaMB8GA1UdIwQYMBaAFMOWweUDfTNfc0HKLs+CJhMAzf6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzM4Qy84NzA0OERBQTMx MDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0xOXpRY291ejRJbUV3RE5f cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1YkI1UU45TTE5elFjb3V6NEltRXdETl9wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0x OXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf/cdyboOSar5xiPgVCi2CRtPti5O3xMrh5rBsybyn+kiha4M7TluZ m1XSbhVT/Gnvf/CM55NlqnOHwH4kfNrwYQ8OWiZ+GwZEddhVnRNiyuoKNWwpjNpu zRZkar1JMHj8SYoIdq5XPpex6J8YbiEHuBPeagLP/KYE+ICOzHibRvyhEGsYvsD8 wDBct4NOyUjEbLw4JhmNvuMRBA3Mtq/YqSxfdXb/GVut2yiJ139Hd1tg/MEVWZ5J E9xFnJh0LjaghOwoy1eFur/Defy9KQ2tcUDeZjuF8ixLEr/YJ9yBU+Dw67HiJ+Hq J6Bshi6aSm2upZfm5m5gZjCeHtrE6Iwf -----END CERTIFICATE-----Generated at Wed May 14 03:22:20 2025 by rpki-client