$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json) Hash identifier: BJB/VMHUF95lLaT9ZrWYH/7O+MyV8BIzi/7JCb3uv38= Subject key identifier: 7D:4F:05:41:E9:84:A6:A9:E9:2D:0A:7D:CE:18:30:C3:AA:59:4F:C2 Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft Manifest number: 0195 Signing time: Sat 17 May 2025 03:06:25 +0000 Manifest this update: Sat 17 May 2025 03:06:25 +0000 Manifest next update: Sat 24 May 2025 03:06:25 +0000 Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: s/tM08H7n2FcrFQSSKr1bidJ/TEEHF1TukaK5hugUQY=) 2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: HHXQFb70LXf16l4S8JzNbd5w8LQr3pgR5z+FBqxSlps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Validity Not Before: May 17 03:06:25 2025 GMT Not After : May 24 03:06:25 2025 GMT Subject: CN=6827fd31-3944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:d6:ae:29:45:65:70:e3:42:80:a5:36:0e: 4b:38:77:c2:c5:d3:85:55:0a:37:a4:3e:92:84:28: b7:a7:22:42:60:f4:c1:92:d3:92:a6:4a:48:43:95: 6c:23:39:f1:b0:7b:2e:e2:a1:1c:b4:42:0d:2e:0e: 50:a9:85:89:a5:d8:ef:32:57:0e:4a:92:81:13:b3: 9a:b8:e4:78:e3:d1:9f:ec:bd:98:a9:ab:f9:fa:d2: 46:19:05:ca:96:88:0a:23:c1:87:52:08:80:9f:92: 7a:ae:d6:1b:45:c5:70:82:fb:8e:91:e7:43:d7:22: 86:07:8f:74:11:8e:a7:fe:d0:bc:7f:a2:ee:0d:d1: 6e:cb:5d:4b:ed:04:a7:f1:e0:5c:de:28:c0:d0:22: d5:31:c9:bb:f6:a7:d5:e0:6f:f8:80:77:67:a6:37: 0c:1f:ae:c6:2c:99:45:01:18:7d:43:08:42:c9:db: 22:c1:80:4f:2b:03:77:4f:d6:00:de:49:96:4e:5e: ac:e8:f4:56:34:0a:91:6c:60:74:07:18:6e:fe:0f: f5:f2:70:34:9c:cf:d9:ce:11:46:07:5a:eb:df:60: a5:63:4c:3f:d7:e5:b4:e4:ec:1f:02:3c:75:1e:50: 43:43:3a:ec:dc:cd:e8:e4:c2:73:04:5e:b9:fd:88: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4F:05:41:E9:84:A6:A9:E9:2D:0A:7D:CE:18:30:C3:AA:59:4F:C2 X509v3 Authority Key Identifier: keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:03:bb:89:54:fd:1b:e5:a0:5b:d6:73:de:b8:7c:8d:20:94: 7e:32:8a:78:61:b0:01:04:90:3a:a5:75:f7:13:24:03:11:55: 34:83:ea:42:10:a4:89:f7:3d:5c:3f:fc:c3:c4:44:71:15:ff: 84:a9:d4:10:51:68:48:8b:09:e5:30:b6:b3:42:60:d3:9d:43: 03:ac:e2:20:68:c2:88:80:9f:ce:18:fd:81:d5:35:a3:1b:a4: e3:a4:df:02:55:41:03:bb:cf:06:2d:82:94:39:3d:cb:51:fa: 94:b7:39:af:8d:68:80:2f:e5:08:ea:bf:b9:cc:fd:4b:58:07: ed:08:fa:4c:eb:0a:8f:91:e7:da:da:3c:78:1b:a1:64:cb:44: a2:1f:0e:34:08:24:82:f9:1b:26:ef:6b:53:09:72:11:b3:d6: de:92:d4:b4:94:17:24:c4:44:37:53:2f:11:2b:bf:bc:b0:6f: 10:0b:19:6f:1d:60:e9:b6:03:42:e2:a3:a3:51:69:78:1c:62: 74:ac:fb:fd:47:9b:b6:b8:6f:33:15:15:4f:43:1e:72:a3:77: b5:61:38:a0:21:d2:31:94:78:b0:f2:ff:e6:e3:36:b1:55:08: 2a:e0:9d:52:3f:23:83:2a:26:3f:27:47:75:cc:a9:0f:31:74: 0f:5d:6b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF QUVBNDQ1MUYwHhcNMjUwNTE3MDMwNjI1WhcNMjUwNTI0MDMwNjI1WjAYMRYwFAYD VQQDEw02ODI3ZmQzMS0zOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3/WrilFZXDjQoClNg5LOHfCxdOFVQo3pD6ShCi3pyJCYPTBktOSpkpIQ5Vs IznxsHsu4qEctEINLg5QqYWJpdjvMlcOSpKBE7OauOR449Gf7L2Yqav5+tJGGQXK logKI8GHUgiAn5J6rtYbRcVwgvuOkedD1yKGB490EY6n/tC8f6LuDdFuy11L7QSn 8eBc3ijA0CLVMcm79qfV4G/4gHdnpjcMH67GLJlFARh9QwhCydsiwYBPKwN3T9YA 3kmWTl6s6PRWNAqRbGB0Bxhu/g/18nA0nM/ZzhFGB1rr32ClY0w/1+W05OwfAjx1 HlBDQzrs3M3o5MJzBF65/Yj20QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1PBUHp hKap6S0Kfc4YMMOqWU/CMB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3 NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs bGN5ZWwySEEteTNxNmtSUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClA7uJVP0b5aBb1nPeuHyNIJR+Mop4YbABBJA6pXX3EyQDEVU0g+pC EKSJ9z1cP/zDxERxFf+EqdQQUWhIiwnlMLazQmDTnUMDrOIgaMKIgJ/OGP2B1TWj G6TjpN8CVUEDu88GLYKUOT3LUfqUtzmvjWiAL+UI6r+5zP1LWAftCPpM6wqPkefa 2jx4G6Fky0SiHw40CCSC+Rsm72tTCXIRs9bektS0lBckxEQ3Uy8RK7+8sG8QCxlv HWDptgNC4qOjUWl4HGJ0rPv9R5u2uG8zFRVPQx5yo3e1YTigIdIxlHiw8v/m4zax VQgq4J1SPyODKiY/J0d1zKkPMXQPXWvN -----END CERTIFICATE-----Generated at Sun May 18 03:13:15 2025 by rpki-client