$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft File: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json) Hash identifier: 8ssrvaTWEgGv9wI1IDRRCN8r+a1KHJlTgdHOMgp3b9c= Subject key identifier: C2:63:FF:BB:8B:5C:03:F2:19:DA:F1:AD:77:58:BA:DC:CD:68:46:39 Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 Certificate issuer: /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft Manifest number: 04DD Signing time: Sat 10 May 2025 23:21:34 +0000 Manifest this update: Sat 10 May 2025 23:21:33 +0000 Manifest next update: Sat 17 May 2025 23:21:33 +0000 Files and hashes: 1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: rt1LK5hpFjmhTTdvavJ+dj0XGU5Xs65PDUOoI0h6xy8=) 2: 387C18C819B811EC841B010DC4F9AE02.roa (hash: SSxUlFmRZnQyfdZc684KEqFg9kqLpMFaUqQd4F+Mxrs=) 3: 7273624619B511EC98D2A883C4F9AE02.roa (hash: 4vfDTErE/YPzBBb/tkZtFZYbjVLXj35WS7FwgFIIRDc=) 4: 7EE93AAC893111EF824EA948C4F9AE02.roa (hash: 0qxVmtS0/Q5718VBgLAhk0g/i2FXx966gyKoh4X0d7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Validity Not Before: May 10 23:21:33 2025 GMT Not After : May 17 23:21:33 2025 GMT Subject: CN=681fdf7d-0627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:27:31:fb:6f:76:37:e2:30:4b:72:0e:8b:a9: 3c:90:23:80:21:c2:74:41:74:a9:d1:17:db:7a:81: 52:28:92:7b:c2:6c:9d:7e:27:0c:8f:ac:aa:42:81: 05:1e:8d:a5:c7:0d:39:bf:60:6b:ee:62:63:68:42: 16:9c:9e:4a:13:d7:35:7c:24:d4:c5:c8:c9:6a:e9: 93:a7:d6:13:e8:24:a5:d3:e6:eb:4d:8b:b8:d6:12: 1b:c0:84:11:84:9c:77:14:47:c8:49:7b:70:c4:a7: e3:c7:77:4b:d9:a9:41:f6:60:65:c7:05:92:d4:14: 06:55:dd:62:8a:5a:a0:8d:1a:7e:10:91:a9:d5:ad: 21:d3:a5:a0:1e:7f:79:3a:40:6d:59:25:f9:0c:dd: ce:66:f1:c8:57:54:31:16:f2:5e:a8:9a:b0:c4:57: be:c7:a4:92:28:ae:a0:3d:b7:8e:1b:92:0d:54:b7: c9:1d:20:d7:c0:e6:e2:bf:bc:1b:9f:f6:cc:a6:c4: ee:8b:d0:c6:20:07:7d:9b:ea:75:21:3d:1e:3c:f7: 45:fb:37:b3:36:ed:16:58:bb:7e:9a:f5:6d:ca:53: 4e:e9:71:d4:82:49:63:7a:12:51:74:bb:b9:af:bd: e3:b7:9c:43:ed:c6:4e:ed:35:52:ab:31:0a:e5:f8: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:63:FF:BB:8B:5C:03:F2:19:DA:F1:AD:77:58:BA:DC:CD:68:46:39 X509v3 Authority Key Identifier: keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:11:12:0b:24:11:01:ba:92:6d:31:e7:b3:c8:18:70:bb:4f: 60:03:3b:e1:12:5f:18:18:dc:9f:13:de:45:fb:92:fa:f6:17: d4:ac:3d:0f:42:27:76:57:0e:36:04:35:15:02:7d:66:1d:f4: d4:3e:62:2d:f6:63:e7:29:a7:dd:47:0a:56:45:62:df:dc:a8: b8:ce:9d:bb:8a:28:91:4e:a5:5b:b5:8b:66:03:98:15:84:86: 87:73:30:cb:f6:28:42:e3:e2:08:b8:ca:ca:67:1c:2c:38:16: f6:4c:d0:85:33:79:71:e0:f7:8b:84:18:3c:14:a3:55:7b:3d: 37:f1:eb:04:b8:48:5e:9f:64:df:85:51:a3:86:bf:ee:68:1d: b0:c8:74:69:21:ec:c7:93:c6:fd:08:41:3c:b5:f0:43:47:f9: 6a:85:31:bc:8f:d9:c7:76:59:b5:62:d9:c5:5f:6c:fc:84:89: 4d:65:3e:aa:42:90:20:c5:50:8a:6e:15:f8:3a:1e:53:1d:5d: 93:56:be:e2:5a:4f:54:cd:72:be:0a:8f:ba:28:4b:ee:2f:18: 8a:26:85:ee:1c:8c:3f:ca:1e:c1:3f:65:f3:84:f8:6a:9a:55: e4:56:98:73:97:a9:ef:c4:08:81:6e:78:cf:5a:ec:07:1f:c7: 6c:8c:ad:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5MzExMTAvBgNVBAUTKEMwMzU0NTBCRDFBMkQ0NEIxNTFFRTM4QzA4OTg4OEE1 QUY0QjgwNTkwHhcNMjUwNTEwMjMyMTMzWhcNMjUwNTE3MjMyMTMzWjAYMRYwFAYD VQQDEw02ODFmZGY3ZC0wNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzicx+292N+IwS3IOi6k8kCOAIcJ0QXSp0RfbeoFSKJJ7wmydficMj6yqQoEF Ho2lxw05v2Br7mJjaEIWnJ5KE9c1fCTUxcjJaumTp9YT6CSl0+brTYu41hIbwIQR hJx3FEfISXtwxKfjx3dL2alB9mBlxwWS1BQGVd1iilqgjRp+EJGp1a0h06WgHn95 OkBtWSX5DN3OZvHIV1QxFvJeqJqwxFe+x6SSKK6gPbeOG5INVLfJHSDXwObiv7wb n/bMpsTui9DGIAd9m+p1IT0ePPdF+zezNu0WWLt+mvVtylNO6XHUgkljehJRdLu5 r73jt5xD7cZO7TVSqzEK5fhKswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJj/7uL XAPyGdrxrXdYutzNaEY5MB8GA1UdIwQYMBaAFMA1RQvRotRLFR7jjAiYiKWvS4BZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDkzMS9EMUQzMkI2RTE5 QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFFc1ZIdU9NQ0ppSXBhOUxn RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEVkZDOUdpMUVzVkh1T01DSmlJcGE5TGdGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDkzMS9EMUQzMkI2RTE5QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFF c1ZIdU9NQ0ppSXBhOUxnRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ERILJBEBupJtMeezyBhwu09gAzvhEl8YGNyfE95F+5L69hfUrD0P Qid2Vw42BDUVAn1mHfTUPmIt9mPnKafdRwpWRWLf3Ki4zp27iiiRTqVbtYtmA5gV hIaHczDL9ihC4+IIuMrKZxwsOBb2TNCFM3lx4PeLhBg8FKNVez038esEuEhen2Tf hVGjhr/uaB2wyHRpIezHk8b9CEE8tfBDR/lqhTG8j9nHdlm1YtnFX2z8hIlNZT6q QpAgxVCKbhX4Oh5THV2TVr7iWk9UzXK+Co+6KEvuLxiKJoXuHIw/yh7BP2XzhPhq mlXkVphzl6nvxAiBbnjPWuwHH8dsjK0S -----END CERTIFICATE-----Generated at Mon May 12 15:45:36 2025 by rpki-client