$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: wYObfmJFKZKebU3PR9toy/4Jgrt1YSpRbQ8BZJKQW5U= Subject key identifier: 19:9D:C2:42:EC:B9:DF:FB:D5:2B:D5:2F:18:95:01:8A:5B:09:3A:2B Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 046E Signing time: Thu 15 May 2025 00:08:55 +0000 Manifest this update: Thu 15 May 2025 00:08:55 +0000 Manifest next update: Thu 22 May 2025 00:08:55 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: hv8C6Zfk6hpt02QG83Gn+pZxLm4p99+yuQcYOe68uoI=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: TOciMmg+YXh13dYfOrB14chWnhLKZ+JRHOQLiS8Jf5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: May 15 00:08:55 2025 GMT Not After : May 22 00:08:55 2025 GMT Subject: CN=68253097-f557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:5e:ae:b8:d2:dc:51:65:03:30:57:f5:83: 83:26:c8:47:8a:c0:ff:0a:af:88:25:82:a9:e4:b8: c4:f6:ac:bc:48:51:f7:5d:32:35:0d:7b:91:b4:cb: 17:d2:6d:03:58:80:63:24:54:9c:bd:bc:e3:04:dd: 46:3f:8d:34:e6:0a:1e:91:d6:3a:06:7c:b2:ac:69: 02:33:87:bb:30:fc:93:4d:cc:df:56:82:ec:f6:48: 27:f4:4b:06:c0:69:47:0c:df:14:2b:54:57:80:ab: fd:28:48:87:2f:e6:eb:14:e8:29:7c:9a:16:28:23: 75:85:59:e9:53:0a:c4:9b:cb:8d:1b:54:72:00:5b: f1:cc:3c:dd:d3:06:5d:cd:dc:c0:a9:4f:f5:7e:c8: 21:9d:e1:98:5c:44:fa:0d:5a:22:ae:67:78:c1:7c: 5b:a7:32:77:30:a9:ea:63:eb:da:0c:25:f6:45:1d: 4c:ac:43:0a:b8:16:8e:db:f7:41:e1:e3:7f:b0:95: e5:a3:b4:90:c7:fb:57:d5:97:9c:6a:93:ae:62:1b: 14:b8:19:ee:2a:e6:f2:e2:ca:64:d6:77:cc:46:be: db:d1:ba:a3:e4:79:7e:12:8a:3b:c1:02:62:81:01: bd:45:5d:1e:83:2d:9f:7e:b0:73:56:84:3f:d2:d5: 29:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:C2:42:EC:B9:DF:FB:D5:2B:D5:2F:18:95:01:8A:5B:09:3A:2B X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:71:ba:dd:51:e9:ff:fc:ce:31:f8:c5:27:3c:9f:03:60: e3:81:35:94:e5:0c:42:40:00:01:8f:e4:e5:bc:b8:6c:a5:3d: 41:af:dc:ae:a4:fd:39:4a:b1:01:33:e0:53:ee:40:78:6a:6a: 6d:04:26:82:e4:82:7e:df:5b:a5:23:bb:c4:4f:e3:b5:c4:ed: e1:90:b6:41:1f:ae:ac:f5:53:50:12:f0:65:3f:fc:25:d2:bf: af:ad:e4:e3:1e:7c:3e:2c:71:85:70:f4:b7:da:d2:c9:64:3d: 5c:cc:8b:36:3e:bc:71:a3:99:4f:f6:8d:67:3b:41:d0:f6:ef: f2:d4:3a:38:a2:2a:64:bb:e3:c7:8c:e5:bc:6e:cb:b7:80:fc: d3:4c:59:6a:c5:37:59:de:67:a8:46:b1:6a:ad:23:e9:9e:0a: 62:0e:72:45:36:66:f4:43:54:ec:73:a6:c7:79:b9:18:9f:2a: 5a:2a:66:05:be:df:07:62:e0:48:3b:18:fe:ca:82:24:bf:76: cb:44:e5:21:64:56:74:e2:c3:0b:eb:de:49:a6:c6:f7:aa:0f: 17:95:77:76:3b:91:1b:54:a1:2e:c7:d9:90:2c:f8:33:c0:c8: 0c:fc:f6:f9:74:47:47:74:b5:b6:3f:e7:c9:cb:6f:a8:6e:0f: a5:6a:5c:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjUwNTE1MDAwODU1WhcNMjUwNTIyMDAwODU1WjAYMRYwFAYD VQQDEw02ODI1MzA5Ny1mNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuterrjS3FFlAzBX9YODJshHisD/Cq+IJYKp5LjE9qy8SFH3XTI1DXuRtMsX 0m0DWIBjJFScvbzjBN1GP4005goekdY6BnyyrGkCM4e7MPyTTczfVoLs9kgn9EsG wGlHDN8UK1RXgKv9KEiHL+brFOgpfJoWKCN1hVnpUwrEm8uNG1RyAFvxzDzd0wZd zdzAqU/1fsghneGYXET6DVoirmd4wXxbpzJ3MKnqY+vaDCX2RR1MrEMKuBaO2/dB 4eN/sJXlo7SQx/tX1ZecapOuYhsUuBnuKuby4spk1nfMRr7b0bqj5Hl+Eoo7wQJi gQG9RV0egy2ffrBzVoQ/0tUpAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmdwkLs ud/71SvVLxiVAYpbCTorMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjP3G63VHp//zOMfjFJzyfA2DjgTWU5QxCQAABj+TlvLhspT1Br9yu pP05SrEBM+BT7kB4amptBCaC5IJ+31ulI7vET+O1xO3hkLZBH66s9VNQEvBlP/wl 0r+vreTjHnw+LHGFcPS32tLJZD1czIs2Prxxo5lP9o1nO0HQ9u/y1Do4oipku+PH jOW8bsu3gPzTTFlqxTdZ3meoRrFqrSPpngpiDnJFNmb0Q1Tsc6bHebkYnypaKmYF vt8HYuBIOxj+yoIkv3bLROUhZFZ04sML695Jpsb3qg8XlXd2O5EbVKEux9mQLPgz wMgM/Pb5dEdHdLW2P+fJy2+obg+lalxn -----END CERTIFICATE-----Generated at Thu May 15 03:54:25 2025 by rpki-client