$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: BwL0hZTdFN2+R+DDxtU2UjLr0LCldjAE7pA0MwXl5q4= Subject key identifier: 68:BC:B5:43:50:07:30:8F:04:92:FD:0D:1C:22:A7:12:4F:83:87:58 Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 06C4 Signing time: Sat 10 May 2025 21:43:22 +0000 Manifest this update: Sat 10 May 2025 21:43:22 +0000 Manifest next update: Sat 17 May 2025 21:43:22 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: IxoV28wpfIMeOT+NJY3tPfNGe0zFYZnDLtsZp/il+no=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: PFrV9NPTBknSjdmlAsxffe/x4T1O4oXZWiMBMdvbqVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: May 10 21:43:22 2025 GMT Not After : May 17 21:43:22 2025 GMT Subject: CN=681fc87a-1b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:cd:23:8f:f5:74:af:4a:d8:6a:86:aa:a4: 2f:a3:e7:92:a6:a1:6c:ba:33:1f:e4:79:88:f4:a3: c3:90:b4:8e:0a:59:98:db:ad:0a:a4:68:09:8f:5a: 60:63:30:6e:57:ec:63:10:18:a5:db:05:dd:f4:88: 52:cf:ad:63:c2:53:d1:26:3b:6b:fd:7b:89:81:0a: fe:88:c0:5f:46:d8:cc:c5:05:d8:92:b9:51:2e:7a: 63:3d:e6:7f:c9:a1:ad:cd:54:85:9a:bd:65:62:1b: a3:e3:f6:9f:51:31:bf:53:6d:bb:9a:4d:00:f1:f3: 94:35:a1:3d:99:4e:f4:31:f7:c3:8d:8c:d8:23:a1: cd:ad:5c:73:fb:47:7e:d9:c6:74:ca:a5:09:ae:f5: a1:f7:48:a0:8b:18:49:e0:95:61:08:bd:20:30:f9: 2f:5b:82:98:60:0d:0e:bf:d6:97:ff:dd:2d:a8:6c: ed:98:f8:e7:e5:16:56:7f:53:93:0f:c0:79:ce:ea: 7c:02:e2:7b:c8:31:84:12:4c:b6:ce:7a:aa:72:50: 1e:52:61:88:10:82:5b:5a:e3:3d:b4:00:00:f6:f1: 97:2a:d5:f2:da:e4:39:c1:d2:6f:ad:c6:0f:63:53: 08:71:da:b7:9d:6d:b4:a6:d0:26:61:5a:b2:71:6f: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BC:B5:43:50:07:30:8F:04:92:FD:0D:1C:22:A7:12:4F:83:87:58 X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d2:11:50:e0:39:67:ef:32:01:9d:f7:3c:6a:4e:17:d2:7e: 06:21:ce:a9:f2:29:c9:b7:91:1f:34:98:74:d0:b5:25:de:c8: c6:32:05:b3:57:20:d5:ca:9e:e3:8a:1c:18:0d:7f:b4:d2:ec: ed:1b:6a:cd:df:18:52:2f:ab:66:75:8c:eb:04:d1:b8:6a:8c: ce:71:51:f6:47:91:92:e2:2b:35:aa:9f:78:37:c5:63:a1:14: 44:01:63:d4:fd:01:10:0b:b3:52:7a:e0:5d:38:a3:f1:ae:b2: ff:9b:93:5c:67:f1:19:0e:2b:fd:89:66:3a:16:d1:2f:b1:6f: f7:83:fe:42:fb:b8:ba:f6:07:e5:ee:24:69:cb:80:a9:4f:3a: 5d:51:6e:15:75:25:ed:9b:47:e9:e6:e8:06:45:f0:57:66:29: b8:b9:2c:9c:9a:7f:4a:1e:0a:14:9c:20:ae:74:12:d8:b7:4c: 40:67:d2:4e:db:41:eb:08:f1:84:da:54:b9:3b:7b:0d:45:69: 6d:e5:25:7f:55:50:90:62:e6:d7:07:d3:12:59:b6:30:37:6b: 02:19:73:7c:0b:de:be:5a:44:89:69:54:d7:99:19:eb:bc:69: 0b:e1:11:c1:30:c0:a3:31:5b:3c:38:21:b2:f9:8a:17:f3:02: 8c:b2:66:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjUwNTEwMjE0MzIyWhcNMjUwNTE3MjE0MzIyWjAYMRYwFAYD VQQDEw02ODFmYzg3YS0xYjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2zNI4/1dK9K2GqGqqQvo+eSpqFsujMf5HmI9KPDkLSOClmY260KpGgJj1pg YzBuV+xjEBil2wXd9IhSz61jwlPRJjtr/XuJgQr+iMBfRtjMxQXYkrlRLnpjPeZ/ yaGtzVSFmr1lYhuj4/afUTG/U227mk0A8fOUNaE9mU70MffDjYzYI6HNrVxz+0d+ 2cZ0yqUJrvWh90igixhJ4JVhCL0gMPkvW4KYYA0Ov9aX/90tqGztmPjn5RZWf1OT D8B5zup8AuJ7yDGEEky2znqqclAeUmGIEIJbWuM9tAAA9vGXKtXy2uQ5wdJvrcYP Y1MIcdq3nW20ptAmYVqycW+vHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi8tUNQ BzCPBJL9DRwipxJPg4dYMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+0hFQ4Dln7zIBnfc8ak4X0n4GIc6p8inJt5EfNJh00LUl3sjGMgWz VyDVyp7jihwYDX+00uztG2rN3xhSL6tmdYzrBNG4aozOcVH2R5GS4is1qp94N8Vj oRREAWPU/QEQC7NSeuBdOKPxrrL/m5NcZ/EZDiv9iWY6FtEvsW/3g/5C+7i69gfl 7iRpy4CpTzpdUW4VdSXtm0fp5ugGRfBXZim4uSycmn9KHgoUnCCudBLYt0xAZ9JO 20HrCPGE2lS5O3sNRWlt5SV/VVCQYubXB9MSWbYwN2sCGXN8C96+WkSJaVTXmRnr vGkL4RHBMMCjMVs8OCGy+YoX8wKMsmYd -----END CERTIFICATE-----Generated at Sun May 11 09:10:11 2025 by rpki-client