$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: qa8xjSi1WbG7/8CbRDogDKfiMmI9c0l/qvko7P16RWs= Subject key identifier: 1C:14:69:AA:B2:E2:F0:56:4F:8F:3C:74:52:4F:7E:7E:12:DB:89:95 Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 0F29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 0F0F Signing time: Wed 14 May 2025 17:46:55 +0000 Manifest this update: Wed 14 May 2025 17:46:54 +0000 Manifest next update: Wed 21 May 2025 17:46:54 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: +lB83VeP26jpk9I+NAwjFD0BU+KTJNBDh/ZZvmyg4MY=) 2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: gca4NiRXS/2ZRRaXGWLGL59Wf1jvZfKpV78dD1T70Vg=) 3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: P21sWTdEvS+OR+eBWq38z1ZuadpIkizBtR94Vsv/HGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3881 (0xf29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: May 14 17:46:54 2025 GMT Not After : May 21 17:46:54 2025 GMT Subject: CN=6824d70f-54e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:dc:d8:27:62:a2:4a:f8:a1:87:54:fa:d1: 6f:6e:af:03:bf:00:15:6d:66:f7:48:fc:8f:99:87: b0:98:40:3c:23:f5:0b:69:87:35:fc:31:45:89:42: 88:09:88:ea:7b:58:19:cf:1d:1c:86:47:ef:17:8d: 9d:bc:ab:61:ff:4f:bd:1b:90:73:bc:a3:ae:48:bd: 4f:a5:55:cd:ad:1f:47:41:16:8d:8a:ed:cc:83:eb: f4:54:71:25:55:45:c1:a1:a3:79:08:9f:ff:07:1b: c5:2b:f3:ba:9f:19:15:f5:c2:89:3c:fc:27:04:22: 6f:9d:cf:43:86:62:45:44:9f:ae:ad:70:68:16:60: 4c:37:8b:9a:3f:4a:c6:65:39:26:be:b1:14:ec:d5: f2:cf:7f:65:3b:a7:26:b8:c7:fd:d8:e2:65:89:5e: 3e:76:22:68:9f:dc:bc:a7:21:16:c8:af:f7:a4:93: 0b:6e:d3:f0:ae:af:41:a8:3b:83:ab:7f:92:53:fe: f8:39:c5:0b:54:d4:d2:90:3e:dd:af:40:27:69:c9: f2:2f:dd:4d:f6:16:5b:3e:a9:5e:0c:44:da:1d:a4: 65:84:37:bb:69:b1:0d:59:fa:c3:8c:8a:35:e6:d7: e4:a2:61:cd:66:78:82:e5:cd:65:d9:3b:b6:44:ed: 33:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:69:AA:B2:E2:F0:56:4F:8F:3C:74:52:4F:7E:7E:12:DB:89:95 X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:1e:21:2f:ac:2d:07:98:ed:fe:87:83:89:6d:12:dc:44:9e: d0:26:1b:c2:ff:47:32:12:f8:e2:b9:33:bf:64:a1:2c:ee:6e: f0:2b:63:6b:74:c1:31:b9:12:29:f4:21:f4:10:37:11:9b:6f: 6e:ac:fa:b2:37:31:7d:f1:f3:2d:d1:fb:df:f0:5d:71:e0:e6: d1:c9:e0:30:98:8e:5f:10:df:70:ad:08:4f:bb:1f:aa:29:29: b6:5c:53:12:9e:bb:ea:81:bd:df:c3:cd:67:e8:fa:81:14:1b: cb:6b:fc:51:51:2b:52:71:ec:e4:6e:92:5e:4e:1e:97:68:7b: 6b:ce:f7:f9:7f:f3:21:37:d1:7b:d3:9a:47:ad:2e:0a:23:c2: 7f:cb:64:47:3f:48:be:83:10:e3:30:60:c0:3a:ab:c5:1b:ff: 69:2d:ac:b5:c4:b5:59:ad:c4:c7:2c:28:72:d2:5d:96:86:e0: 65:b9:b7:10:c7:87:00:e8:f8:0f:be:a7:ef:7c:09:a8:f3:23: 6a:32:ad:8c:dc:d7:e0:26:5b:f7:9e:7d:54:d8:8c:ad:21:3c: 29:75:81:32:04:7a:05:77:43:df:20:be:c4:59:49:c4:7f:68: d5:fc:3a:83:63:6e:2f:79:f3:3c:14:bd:89:70:ac:55:f4:57: 4d:1b:e7:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjUwNTE0MTc0NjU0WhcNMjUwNTIxMTc0NjU0WjAYMRYwFAYD VQQDEw02ODI0ZDcwZi01NGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HPc2Cdiokr4oYdU+tFvbq8DvwAVbWb3SPyPmYewmEA8I/ULaYc1/DFFiUKI CYjqe1gZzx0chkfvF42dvKth/0+9G5BzvKOuSL1PpVXNrR9HQRaNiu3Mg+v0VHEl VUXBoaN5CJ//BxvFK/O6nxkV9cKJPPwnBCJvnc9DhmJFRJ+urXBoFmBMN4uaP0rG ZTkmvrEU7NXyz39lO6cmuMf92OJliV4+diJon9y8pyEWyK/3pJMLbtPwrq9BqDuD q3+SU/74OcULVNTSkD7dr0AnacnyL91N9hZbPqleDETaHaRlhDe7abENWfrDjIo1 5tfkomHNZniC5c1l2Tu2RO0zlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwUaaqy 4vBWT488dFJPfn4S24mVMB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPHiEvrC0HmO3+h4OJbRLcRJ7QJhvC/0cyEvjiuTO/ZKEs7m7wK2Nr dMExuRIp9CH0EDcRm29urPqyNzF98fMt0fvf8F1x4ObRyeAwmI5fEN9wrQhPux+q KSm2XFMSnrvqgb3fw81n6PqBFBvLa/xRUStScezkbpJeTh6XaHtrzvf5f/MhN9F7 05pHrS4KI8J/y2RHP0i+gxDjMGDAOqvFG/9pLay1xLVZrcTHLChy0l2WhuBlubcQ x4cA6PgPvqfvfAmo8yNqMq2M3NfgJlv3nn1U2IytITwpdYEyBHoFd0PfIL7EWUnE f2jV/DqDY24vefM8FL2JcKxV9FdNG+f0 -----END CERTIFICATE-----Generated at Thu May 15 13:25:20 2025 by rpki-client