$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json) Hash identifier: M1Gx4TZZLEG+PA4F2Tjb8XyL/xPfk9Q19nwleFq/yKo= Subject key identifier: 5C:22:95:21:6B:9B:72:0E:B4:2F:DB:70:64:BC:BB:C8:BD:C3:21:48 Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Certificate serial: 056F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft Manifest number: 0568 Signing time: Mon 12 May 2025 23:53:52 +0000 Manifest this update: Mon 12 May 2025 23:53:51 +0000 Manifest next update: Mon 19 May 2025 23:53:51 +0000 Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: ywiykJrsGj15SMrlFAk62XbqSyQsM6/lFdMwSRX3r3U=) 2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: w5XSagCBbj7wYrqd/6P5FJGCYb7FRwj35SS+I3gJcAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Validity Not Before: May 12 23:53:51 2025 GMT Not After : May 19 23:53:51 2025 GMT Subject: CN=68228a0f-5764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:74:d8:a2:1b:2d:65:0f:1f:7c:8f:7a:c8: 1f:64:0d:e1:b9:4e:ba:c6:98:22:08:93:f2:2b:be: 4a:a1:24:a8:f5:f2:79:f1:37:f6:79:97:c3:fc:0c: ca:d0:8e:54:b8:59:e5:d9:42:68:79:00:12:42:52: 46:26:2a:11:b9:eb:20:c2:a4:a3:4c:b0:51:bb:85: b2:04:bb:88:c1:8a:a7:3b:86:ef:c9:49:6a:6d:a9: ab:72:98:45:9e:5e:c4:36:ce:2a:e0:a2:91:57:0e: ee:ef:6b:67:8b:75:81:09:27:0f:6e:6e:bc:b3:83: 14:37:de:14:50:a8:8f:24:4c:ec:da:5a:f0:50:a1: 68:b5:07:af:17:90:5a:88:cf:9d:4d:a7:cc:ba:02: 7a:dd:67:7c:70:b0:51:15:ab:c5:0f:3d:9f:c6:da: 71:c4:35:c1:2c:77:c0:dc:76:2a:09:8a:68:1e:57: c2:5e:b7:3c:b6:70:67:39:59:d1:b2:06:e8:42:a0: 5c:30:32:42:41:27:9a:d7:c9:04:72:5a:a5:f6:16: dd:78:7d:7c:b2:14:1d:70:8f:81:8c:fc:e8:23:c9: 6f:b7:44:19:6a:4b:be:ce:44:5d:24:2d:30:62:9f: 04:4f:e8:16:39:57:56:06:ec:5a:69:c7:b4:72:7b: 3b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:22:95:21:6B:9B:72:0E:B4:2F:DB:70:64:BC:BB:C8:BD:C3:21:48 X509v3 Authority Key Identifier: keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:70:20:46:13:eb:21:fe:48:23:07:21:cc:ae:66:80:89:44: c1:32:54:f1:8d:58:14:50:74:10:87:77:cf:e0:6f:87:2f:d8: 8a:af:1d:99:d5:0d:d3:64:8b:02:c9:26:3e:62:e5:99:56:10: a1:18:1a:3f:d9:96:d1:70:67:96:a5:e8:59:fe:57:81:7d:7c: 5f:25:ff:2c:18:ec:5c:13:9d:76:cc:22:d2:6f:08:44:f6:b9: 55:c3:9c:dc:43:d7:18:2c:34:c4:40:89:76:96:a0:57:b7:24: 6b:e8:c3:c0:65:81:c6:00:98:23:71:d4:c4:71:7d:0e:e8:37: 1b:2b:fe:b8:e1:17:83:97:3b:4a:77:74:33:29:59:3b:c4:38: a6:0b:4f:54:55:34:db:8e:88:12:42:7b:2b:c6:69:4b:31:3d: de:5c:62:70:55:de:29:e3:09:3c:ee:7e:19:b3:a1:9b:41:b8: 2c:35:e2:67:d8:73:b0:c3:c4:be:1b:59:35:8f:c7:77:cd:40: b4:54:40:f7:fb:72:8c:9a:00:b6:3a:6e:8a:72:6e:b2:30:5d: 80:10:31:b4:a4:d5:88:94:54:6a:67:26:a6:af:ef:54:ab:d5: b0:2e:1e:fe:96:f2:09:dd:3b:47:e4:db:38:e7:ed:6c:43:8d: b0:fa:a9:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy Njc3NzNGQzkwHhcNMjUwNTEyMjM1MzUxWhcNMjUwNTE5MjM1MzUxWjAYMRYwFAYD VQQDEw02ODIyOGEwZi01NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTp02KIbLWUPH3yPesgfZA3huU66xpgiCJPyK75KoSSo9fJ58Tf2eZfD/AzK 0I5UuFnl2UJoeQASQlJGJioRuesgwqSjTLBRu4WyBLuIwYqnO4bvyUlqbamrcphF nl7ENs4q4KKRVw7u72tni3WBCScPbm68s4MUN94UUKiPJEzs2lrwUKFotQevF5Ba iM+dTafMugJ63Wd8cLBRFavFDz2fxtpxxDXBLHfA3HYqCYpoHlfCXrc8tnBnOVnR sgboQqBcMDJCQSea18kEclql9hbdeH18shQdcI+BjPzoI8lvt0QZaku+zkRdJC0w Yp8ET+gWOVdWBuxaace0cns7mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwilSFr m3IOtC/bcGS8u8i9wyFIMB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAycCBGE+sh/kgjByHMrmaAiUTBMlTxjVgUUHQQh3fP4G+HL9iKrx2Z 1Q3TZIsCySY+YuWZVhChGBo/2ZbRcGeWpehZ/leBfXxfJf8sGOxcE512zCLSbwhE 9rlVw5zcQ9cYLDTEQIl2lqBXtyRr6MPAZYHGAJgjcdTEcX0O6DcbK/644ReDlztK d3QzKVk7xDimC09UVTTbjogSQnsrxmlLMT3eXGJwVd4p4wk87n4Zs6GbQbgsNeJn 2HOww8S+G1k1j8d3zUC0VED3+3KMmgC2Om6Kcm6yMF2AEDG0pNWIlFRqZyamr+9U q9WwLh7+lvIJ3TtH5Ns45+1sQ42w+qlT -----END CERTIFICATE-----Generated at Wed May 14 17:37:35 2025 by rpki-client