$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: r097xdOzzPUSNrEN3M16c6CyOEfGXilbLWF+DUvy/Pk= Subject key identifier: B4:E3:D3:BE:61:A5:D7:FD:A2:AF:28:F1:C3:D9:66:9E:54:8F:98:D1 Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: 0112 Signing time: Sun 11 May 2025 03:52:05 +0000 Manifest this update: Sun 11 May 2025 03:52:04 +0000 Manifest next update: Sun 18 May 2025 03:52:04 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: SAiCGa+RfPMnDg953B5dqnDnrNMlOrOMNefotaMaB5o=) 2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: scuWPF8fyZMdaSfCNBdTGSbSe43VNo97CkMVeZgVKFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: May 11 03:52:04 2025 GMT Not After : May 18 03:52:04 2025 GMT Subject: CN=68201ee5-8f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:e2:b0:97:cf:2f:cf:56:7b:3c:43:87:b9: 81:37:c0:61:56:b2:6a:ac:6a:55:61:05:72:1d:d4: 55:b8:64:34:b1:54:d6:21:e5:78:7e:ea:4a:78:3e: d1:b2:7d:fe:e3:94:5a:d2:ba:67:67:c8:5b:f6:c0: f9:a3:fe:99:d0:4a:70:f1:89:ec:0e:dc:3b:af:64: 30:9f:12:93:43:4f:da:2c:6d:27:45:7b:19:f9:38: 2c:30:15:57:f5:51:25:73:fc:d7:ad:3b:82:4e:34: 73:e4:ce:a3:c1:16:81:7a:7e:80:e9:1b:b9:e9:a7: f4:c3:f6:aa:39:1f:28:24:77:81:34:c1:81:39:5a: 7d:12:6e:3a:57:74:dc:1a:c8:79:f4:18:da:08:63: 13:af:ed:a9:a8:20:63:37:d7:4e:f6:8b:79:3a:d9: a3:a4:91:c4:65:5b:42:7b:ee:3b:b1:be:77:e9:dc: ef:e8:0d:d4:44:79:90:b9:1f:da:b5:f9:51:06:ff: d6:59:85:08:38:5b:e5:5f:50:98:48:d4:31:44:ac: 3f:05:3f:f3:7e:8f:99:16:39:d3:95:7f:1e:f0:88: b9:4a:2a:74:c6:d2:9b:d2:41:21:ce:58:3c:ad:32: 1b:a1:47:0d:e0:31:73:07:65:11:56:d4:87:4e:bc: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E3:D3:BE:61:A5:D7:FD:A2:AF:28:F1:C3:D9:66:9E:54:8F:98:D1 X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f3:8d:4f:5e:56:ea:22:70:61:f6:48:b2:b4:d6:e8:56:2c: 78:73:0b:15:3a:29:9b:35:35:b8:88:db:16:3e:18:5d:57:95: 12:76:42:80:34:6a:dc:cc:78:c2:59:cb:c5:9e:e2:0e:b6:00: 1c:f4:05:92:43:27:6b:e5:9a:dd:e0:86:af:62:f0:65:da:65: 18:8d:8f:88:b4:f3:44:18:d7:48:6c:0a:92:f1:84:58:70:4c: a1:aa:78:97:4b:3f:9c:53:84:ca:d4:e4:e0:11:3f:5c:e8:bc: f0:0c:f5:e1:70:27:75:9d:9a:e9:bd:71:af:47:4b:8f:11:46: 0f:b5:9c:1d:f6:70:8e:d7:54:6d:90:c4:3a:29:5f:3b:ef:5f: db:da:cb:1e:f1:33:0b:dd:07:f1:37:ba:a7:8a:d3:85:7d:c5: 1c:6c:07:06:b5:34:98:a1:a5:fc:88:8f:7a:b8:ce:c8:b6:47: 38:f7:14:2b:68:4c:2d:db:bb:59:47:43:25:30:e1:4b:01:7b: 27:93:b2:0c:84:1b:1a:c6:a4:8d:ac:a6:cd:1d:b5:3a:06:5f: 0b:d1:92:6e:f7:57:51:5e:3e:81:ea:49:51:3f:d4:de:7a:67: eb:b0:00:87:7b:cc:9f:7c:64:9c:04:e5:fb:9d:71:f6:e6:c6: dc:c5:1f:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw Q0U0MDREQUIwHhcNMjUwNTExMDM1MjA0WhcNMjUwNTE4MDM1MjA0WjAYMRYwFAYD VQQDEw02ODIwMWVlNS04ZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso7isJfPL89WezxDh7mBN8BhVrJqrGpVYQVyHdRVuGQ0sVTWIeV4fupKeD7R sn3+45Ra0rpnZ8hb9sD5o/6Z0Epw8YnsDtw7r2QwnxKTQ0/aLG0nRXsZ+TgsMBVX 9VElc/zXrTuCTjRz5M6jwRaBen6A6Ru56af0w/aqOR8oJHeBNMGBOVp9Em46V3Tc Gsh59BjaCGMTr+2pqCBjN9dO9ot5OtmjpJHEZVtCe+47sb536dzv6A3URHmQuR/a tflRBv/WWYUIOFvlX1CYSNQxRKw/BT/zfo+ZFjnTlX8e8Ii5Sip0xtKb0kEhzlg8 rTIboUcN4DFzB2URVtSHTrxqhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTj075h pdf9oq8o8cPZZp5Uj5jRMB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U TjRtX3V2cVdOOThNNUFUYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw841PXlbqInBh9kiytNboVix4cwsVOimbNTW4iNsWPhhdV5USdkKA NGrczHjCWcvFnuIOtgAc9AWSQydr5Zrd4IavYvBl2mUYjY+ItPNEGNdIbAqS8YRY cEyhqniXSz+cU4TK1OTgET9c6LzwDPXhcCd1nZrpvXGvR0uPEUYPtZwd9nCO11Rt kMQ6KV8771/b2sse8TML3QfxN7qnitOFfcUcbAcGtTSYoaX8iI96uM7Itkc49xQr aEwt27tZR0MlMOFLAXsnk7IMhBsaxqSNrKbNHbU6Bl8L0ZJu91dRXj6B6klRP9Te emfrsACHe8yffGScBOX7nXH25sbcxR9I -----END CERTIFICATE-----Generated at Sun May 11 14:48:51 2025 by rpki-client