$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft File: p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json) Hash identifier: gAlLZRa/lZWlyX7RHB+2IdQz8nLGWcDyCy7DzO+9H74= Subject key identifier: 11:2B:7A:BB:41:65:4D:1C:0E:6A:7E:A3:9C:81:3C:D5:94:6D:4D:F8 Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Certificate serial: 19E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft Manifest number: 19D2 Signing time: Sat 10 May 2025 16:18:45 +0000 Manifest this update: Sat 10 May 2025 16:18:45 +0000 Manifest next update: Sat 17 May 2025 16:18:45 +0000 Files and hashes: 1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: 70UxoyYcENhK238XUxb1qh9dZSdCJnd0uHDTiRqKFyo=) 2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: Pn8qccQRQVn2V5b6lFX/FWa2+EXb/L20S5gebLb7vvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6626 (0x19e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Validity Not Before: May 10 16:18:45 2025 GMT Not After : May 17 16:18:45 2025 GMT Subject: CN=681f7c65-6668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:f9:ca:e2:3f:aa:18:0d:4a:be:91:55:ff: 90:64:aa:e7:e0:c0:5b:0f:f1:41:f2:55:60:dd:da: e6:af:5e:3e:9f:39:7b:29:ad:dd:7c:e3:80:38:a5: e7:24:13:14:d7:83:55:63:a4:cf:a8:57:6d:25:ea: 00:93:4c:ac:5a:92:0e:08:55:3c:2c:92:6b:69:d7: dd:6c:d5:15:b6:af:4d:83:3d:d5:97:e8:77:05:5c: fe:9b:dc:1a:3e:9c:af:4f:77:75:73:ba:65:ee:2d: f5:9d:c7:6c:43:ae:a8:72:7f:55:59:b9:ea:0f:98: 87:76:6a:dd:6b:89:46:aa:20:6a:0e:df:fb:2a:05: 4a:bb:43:5d:cb:ad:91:93:24:5c:8a:9c:5b:9a:cd: 17:b3:84:86:3f:8c:8f:07:12:03:91:30:fd:59:08: 6d:06:f2:3c:4b:63:f1:a7:93:58:02:c4:ae:7c:07: f0:d7:cb:b4:9d:62:96:91:06:93:6d:7e:8a:cc:30: f4:b0:7c:f5:e0:2d:37:16:97:a5:1f:b3:68:e3:73: ac:6a:ce:e1:88:35:b4:90:ef:18:e0:4a:93:d8:b3: 5c:5e:e4:f7:87:9a:15:9c:5c:b8:70:51:c5:35:47: 6a:0a:c2:31:03:7f:a4:dc:f9:8f:57:7f:e6:95:02: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2B:7A:BB:41:65:4D:1C:0E:6A:7E:A3:9C:81:3C:D5:94:6D:4D:F8 X509v3 Authority Key Identifier: keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:5e:16:ed:36:6d:35:5b:31:95:52:2d:f5:1c:34:c2:fb:17: b6:06:77:b3:8d:80:63:e3:1c:5b:41:43:ce:f2:db:16:58:48: 42:91:c4:29:b3:31:58:01:e4:82:3a:85:62:ec:f1:8d:de:e7: 70:02:0d:56:e7:a8:4f:ec:c3:ce:7c:21:56:e8:f9:1f:0c:85: 29:79:5d:2b:e2:1f:9e:a7:67:79:be:05:4d:f2:06:32:c5:dc: 71:07:7c:3b:2e:ff:72:79:57:50:a6:91:3d:4f:b0:61:df:0e: 09:87:b8:c6:ae:f7:61:52:51:cb:34:e4:59:52:49:80:bd:8f: 1b:a6:eb:13:a9:a3:77:d7:97:d3:71:97:be:fb:99:65:6d:ce: 81:12:a7:97:1a:6f:34:20:54:04:09:db:77:1a:64:49:96:7d: f9:56:9e:9c:b8:43:24:b4:01:c9:68:a2:ab:c3:f3:5d:23:f1: 42:3c:1e:b7:54:10:d1:7e:89:79:51:bd:8e:77:23:04:3a:30: c5:52:69:48:98:ec:5b:8a:58:83:1b:5d:55:78:98:d9:97:fc: 73:9e:e6:5a:32:e7:4e:5d:c9:56:b6:02:76:92:65:53:10:47: 55:be:af:c2:92:5e:fe:43:50:9a:1b:07:50:68:51:11:9e:b7: c5:4c:4f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhGQTI2MjcxODlF NTQyRjRERUYwHhcNMjUwNTEwMTYxODQ1WhcNMjUwNTE3MTYxODQ1WjAYMRYwFAYD VQQDEw02ODFmN2M2NS02NjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySD5yuI/qhgNSr6RVf+QZKrn4MBbD/FB8lVg3drmr14+nzl7Ka3dfOOAOKXn JBMU14NVY6TPqFdtJeoAk0ysWpIOCFU8LJJradfdbNUVtq9Ngz3Vl+h3BVz+m9wa PpyvT3d1c7pl7i31ncdsQ66ocn9VWbnqD5iHdmrda4lGqiBqDt/7KgVKu0Ndy62R kyRcipxbms0Xs4SGP4yPBxIDkTD9WQhtBvI8S2Pxp5NYAsSufAfw18u0nWKWkQaT bX6KzDD0sHz14C03FpelH7No43Osas7hiDW0kO8Y4EqT2LNcXuT3h5oVnFy4cFHF NUdqCsIxA3+k3PmPV3/mlQKqWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBErertB ZU0cDmp+o5yBPNWUbU34MB8GA1UdIwQYMBaAFKfsIlhoL2+un4Q4+iYnGJ5UL03v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTkyQS80NTc5N0M1QzVB NEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2NmZoRGo2SmljWW5sUXZU ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Atd2lXR2d2YjY2ZmhEajZKaWNZbmxRdlRlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTkyQS80NTc5N0M1QzVBNEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2 NmZoRGo2SmljWW5sUXZUZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkXhbtNm01WzGVUi31HDTC+xe2BnezjYBj4xxbQUPO8tsWWEhCkcQp szFYAeSCOoVi7PGN3udwAg1W56hP7MPOfCFW6PkfDIUpeV0r4h+ep2d5vgVN8gYy xdxxB3w7Lv9yeVdQppE9T7Bh3w4Jh7jGrvdhUlHLNORZUkmAvY8bpusTqaN315fT cZe++5llbc6BEqeXGm80IFQECdt3GmRJln35Vp6cuEMktAHJaKKrw/NdI/FCPB63 VBDRfol5Ub2OdyMEOjDFUmlImOxbiliDG11VeJjZl/xznuZaMudOXclWtgJ2kmVT EEdVvq/Ckl7+Q1CaGwdQaFERnrfFTE+I -----END CERTIFICATE-----Generated at Sun May 11 10:38:29 2025 by rpki-client