$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: 8IZKrYPiV5n4nqYr4+FUKBlo60MYcmLBITS2dNUc0RE= Subject key identifier: E0:F0:99:3B:02:61:F1:26:95:0B:3C:5D:90:BD:0B:C7:64:C6:23:68 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 01F0 Signing time: Tue 13 May 2025 01:55:29 +0000 Manifest this update: Tue 13 May 2025 01:55:29 +0000 Manifest next update: Tue 20 May 2025 01:55:29 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: 6HpGSeDlphrvt5fE9QAYFpKbT0kNw6uw62BUbQ9CJc0=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MniMCaT7GS5dM8liFRmMS+V0grGgkVjsR8fvxiwRJoU=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: yFTXv2eFumW58i8EpayoiAuuDpkxivQ9zhERap37PtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: May 13 01:55:29 2025 GMT Not After : May 20 01:55:29 2025 GMT Subject: CN=6822a691-bcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:5d:59:6b:9e:d2:6c:35:26:91:08:3e:42: 2c:02:5b:b6:60:de:60:c7:3b:bb:9e:8f:c6:64:47: 61:9b:45:f9:1f:53:2d:35:bd:34:18:47:78:3d:22: ab:95:41:ab:06:b9:e0:7a:2c:10:52:98:d3:09:dc: 8d:15:81:96:bf:7c:04:09:ad:eb:ac:d5:f4:33:f0: 85:38:03:90:c9:50:14:8c:59:e0:99:3f:b5:14:08: c5:79:33:a2:af:68:f9:ef:22:15:2f:36:94:2d:7c: 3a:88:4a:0b:56:e1:22:60:92:fc:a0:3d:b6:de:4d: 1e:f1:d6:cc:2f:71:86:53:10:a7:5d:45:ac:52:0d: 22:b3:8e:40:a1:bf:a7:87:dd:60:03:b3:a6:61:a2: f0:05:e5:cf:69:0f:53:87:c1:0d:6f:b4:cb:af:5e: 50:c6:dd:85:56:2b:74:a5:12:19:f0:99:65:09:16: 1a:f3:af:7c:d3:40:6a:01:28:05:af:c0:a1:70:81: e0:43:29:4f:74:aa:1c:0d:0f:b9:05:8c:38:c9:79: 02:20:be:40:2a:6b:3d:51:f2:86:e3:e3:1f:0d:92: 73:27:df:98:7f:c9:ec:07:4e:5e:ac:65:6b:82:76: d1:1a:e8:28:f4:0e:11:53:0a:1d:73:ba:58:63:cb: ea:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F0:99:3B:02:61:F1:26:95:0B:3C:5D:90:BD:0B:C7:64:C6:23:68 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3d:56:15:67:59:d7:c8:4a:fe:d4:b4:4a:48:bc:d6:0c:6f: 14:c2:25:31:eb:8d:b0:79:74:b5:31:0b:f4:a2:5c:8c:ae:72: 88:60:c3:bd:bb:b8:f9:39:48:25:00:50:06:37:c5:9a:b6:5e: 11:88:e7:d8:10:02:93:03:e0:f5:63:3e:73:91:af:d9:0d:20: 86:de:38:f6:25:84:ae:ca:23:21:37:5b:88:46:33:9f:91:09: 41:5f:fa:f1:d9:28:b6:25:f5:53:d9:3c:e5:1a:23:e8:ce:92: 47:1a:02:3b:67:3e:c8:3a:b9:2b:0e:ed:19:11:41:b2:09:d4: 9b:a6:b0:ca:45:f6:3c:95:29:e6:cd:3d:42:8f:42:e8:f4:c7: 9c:bb:35:db:2b:19:23:f3:f9:1d:7d:13:65:c0:2d:30:32:c8: 28:99:2c:2a:cb:73:40:8a:25:d1:ae:98:0b:d6:25:75:78:85: 7a:cf:f3:9a:ca:a5:d0:9d:7d:e4:6c:87:7d:47:c6:e6:dc:ae: f9:e1:e9:07:bd:4c:ab:ac:62:80:41:c7:42:d3:54:56:65:f0: 5d:21:d1:b7:95:75:e6:ae:19:4a:aa:f0:50:04:68:cc:05:c0: 05:98:a8:27:54:b2:48:7a:4c:93:42:72:0c:93:0d:99:c5:4e: 3d:7c:cc:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUwNTEzMDE1NTI5WhcNMjUwNTIwMDE1NTI5WjAYMRYwFAYD VQQDEw02ODIyYTY5MS1iY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtixdWWue0mw1JpEIPkIsAlu2YN5gxzu7no/GZEdhm0X5H1MtNb00GEd4PSKr lUGrBrngeiwQUpjTCdyNFYGWv3wECa3rrNX0M/CFOAOQyVAUjFngmT+1FAjFeTOi r2j57yIVLzaULXw6iEoLVuEiYJL8oD223k0e8dbML3GGUxCnXUWsUg0is45Aob+n h91gA7OmYaLwBeXPaQ9Th8ENb7TLr15Qxt2FVit0pRIZ8JllCRYa869800BqASgF r8ChcIHgQylPdKocDQ+5BYw4yXkCIL5AKms9UfKG4+MfDZJzJ9+Yf8nsB05erGVr gnbRGugo9A4RUwodc7pYY8vqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODwmTsC YfEmlQs8XZC9C8dkxiNoMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiPVYVZ1nXyEr+1LRKSLzWDG8UwiUx642weXS1MQv0olyMrnKIYMO9 u7j5OUglAFAGN8Watl4RiOfYEAKTA+D1Yz5zka/ZDSCG3jj2JYSuyiMhN1uIRjOf kQlBX/rx2Si2JfVT2TzlGiPozpJHGgI7Zz7IOrkrDu0ZEUGyCdSbprDKRfY8lSnm zT1Cj0Lo9MecuzXbKxkj8/kdfRNlwC0wMsgomSwqy3NAiiXRrpgL1iV1eIV6z/Oa yqXQnX3kbId9R8bm3K754ekHvUyrrGKAQcdC01RWZfBdIdG3lXXmrhlKqvBQBGjM BcAFmKgnVLJIekyTQnIMkw2ZxU49fMzj -----END CERTIFICATE-----Generated at Thu May 15 00:31:27 2025 by rpki-client