$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json) Hash identifier: QYERpcOfIDmGyMm3j6K7QgKFtbhbKL3c8p181gUz2Pg= Subject key identifier: D1:60:02:CE:F2:94:D7:C5:4A:01:7E:15:D5:AC:0A:75:F6:33:C3:3C Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft Manifest number: 018A Signing time: Fri 25 Apr 2025 02:45:32 +0000 Manifest this update: Fri 25 Apr 2025 02:45:31 +0000 Manifest next update: Fri 02 May 2025 02:45:31 +0000 Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: nAdqVuELWHeEbJRKrzbdcKgnHQJMEm+mvCwPZnzZxQg=) 2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: gexTzIiKhgLcrcI1jyC1eZ1O4wMhCdNKof8sdrmuHDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FB6, serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Validity Not Before: Apr 25 02:45:31 2025 GMT Not After : May 2 02:45:31 2025 GMT Subject: CN=680af74b-928d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:3d:42:98:37:78:13:95:73:cf:01:2a:f3: 00:a9:9c:6a:83:ff:69:95:af:07:3d:69:68:9f:e9: fd:66:1d:48:8b:03:6c:6c:61:c8:99:61:43:8b:71: 4e:29:57:f3:6a:62:d3:8d:34:3c:ef:39:a2:ba:d3: 93:e7:ed:bd:19:b5:5d:43:8a:74:16:d0:d5:86:35: b5:39:2f:3b:92:92:25:fc:15:81:79:4a:76:a8:dd: a0:92:3c:0c:69:c1:c1:c6:30:19:4a:af:87:4c:0b: 65:bc:40:5f:55:82:b4:d1:90:9a:63:51:c8:5d:72: c7:fb:5e:18:81:74:56:79:fb:a6:a0:d0:b5:75:67: 04:e5:fa:de:93:3c:b0:48:30:c6:a1:51:4a:b1:75: 31:35:f2:32:6a:7e:8e:fe:c9:e5:38:cd:d8:c9:aa: dc:12:29:55:ef:62:46:5f:a5:0e:d9:8d:fa:15:0f: 5a:6b:59:45:8c:ec:89:d1:35:cc:ca:bb:d9:8e:a8: 8b:e8:9c:86:cd:b0:c8:e5:8b:aa:e8:1c:4c:ba:d3: c0:fd:54:ed:de:cc:ec:c2:8e:a8:c3:91:46:f8:b1: 58:21:fe:18:c0:5c:91:15:80:79:e8:17:32:f5:56: ef:e2:be:72:83:69:78:b1:64:16:01:2d:4e:b4:fc: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:60:02:CE:F2:94:D7:C5:4A:01:7E:15:D5:AC:0A:75:F6:33:C3:3C X509v3 Authority Key Identifier: keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:c4:0f:59:d9:43:fa:e5:4d:08:00:70:aa:75:ff:ea:ae:64: 48:a4:9e:4a:f4:f5:b1:3d:39:bd:f7:64:97:1c:84:54:e7:8a: 5e:c8:1c:0d:d6:d8:fd:53:13:eb:15:b4:9a:d8:11:c1:70:c8: 59:f3:2b:7c:1f:c4:98:65:d5:53:62:d8:d6:56:b0:ea:0c:d8: 9a:d2:03:c7:e2:4b:07:82:3a:04:76:9b:f4:38:70:73:3b:ff: 42:55:da:ef:63:e5:83:62:68:8d:02:98:a7:22:8c:17:d7:2a: 45:18:1c:d5:77:c7:f7:30:f5:57:2d:f2:86:95:75:e8:a0:5d: 0d:f7:05:c6:3a:08:b7:19:b8:b5:9d:3e:3e:da:87:f1:1c:9c: 28:71:6a:d5:67:72:c2:60:65:cf:71:62:d7:f8:16:5e:9a:0c: 0d:d7:a2:65:36:2a:2f:b3:cd:c5:8a:7b:fa:ad:ea:f6:7a:8b: a4:0f:d3:04:3d:9a:b8:bf:ff:84:d4:56:51:8a:a6:40:44:a9: ef:cd:7c:9a:de:05:9d:44:59:7b:3e:0d:18:de:8f:ee:7d:8d: f6:d8:a2:b2:9c:25:e8:f7:29:af:a7:ed:ee:01:e0:3c:a2:ca: 91:a0:ab:5f:d6:9d:93:02:5f:81:5f:b2:59:c9:08:80:43:8e: a0:f2:1e:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQjYxMTAvBgNVBAUTKDczMEM5MTg4MjlCMzNGQTZDOEU3QzhEMDUyN0IyNkND NTBCOTM1MkQwHhcNMjUwNDI1MDI0NTMxWhcNMjUwNTAyMDI0NTMxWjAYMRYwFAYD VQQDEw02ODBhZjc0Yi05MjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MI9Qpg3eBOVc88BKvMAqZxqg/9pla8HPWlon+n9Zh1IiwNsbGHImWFDi3FO KVfzamLTjTQ87zmiutOT5+29GbVdQ4p0FtDVhjW1OS87kpIl/BWBeUp2qN2gkjwM acHBxjAZSq+HTAtlvEBfVYK00ZCaY1HIXXLH+14YgXRWefumoNC1dWcE5frekzyw SDDGoVFKsXUxNfIyan6O/snlOM3YyarcEilV72JGX6UO2Y36FQ9aa1lFjOyJ0TXM yrvZjqiL6JyGzbDI5Yuq6BxMutPA/VTt3szswo6ow5FG+LFYIf4YwFyRFYB56Bcy 9Vbv4r5yg2l4sWQWAS1OtPzC8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFgAs7y lNfFSgF+FdWsCnX2M8M8MB8GA1UdIwQYMBaAFHMMkYgpsz+myOfI0FJ7JsxQuTUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZCNi9CRTRERjIyMkNE MUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2Ykk1OGpRVW5zbXpGQzVO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3eVJpQ216UDZiSTU4alFVbnNtekZDNU5TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZCNi9CRTRERjIyMkNEMUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2 Ykk1OGpRVW5zbXpGQzVOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQxA9Z2UP65U0IAHCqdf/qrmRIpJ5K9PWxPTm992SXHIRU54peyBwN 1tj9UxPrFbSa2BHBcMhZ8yt8H8SYZdVTYtjWVrDqDNia0gPH4ksHgjoEdpv0OHBz O/9CVdrvY+WDYmiNApinIowX1ypFGBzVd8f3MPVXLfKGlXXooF0N9wXGOgi3Gbi1 nT4+2ofxHJwocWrVZ3LCYGXPcWLX+BZemgwN16JlNiovs83Finv6rer2eoukD9ME PZq4v/+E1FZRiqZARKnvzXya3gWdRFl7Pg0Y3o/ufY322KKynCXo9ymvp+3uAeA8 osqRoKtf1p2TAl+BX7JZyQiAQ46g8h6R -----END CERTIFICATE-----Generated at Sat Apr 26 15:17:55 2025 by rpki-client