$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json) Hash identifier: eu1ikDjzfp8t4gqgufRdMu7b6eEVxhNEzu2PTrr/zsE= Subject key identifier: 0C:E3:4F:D2:D2:7C:8C:DD:9B:98:63:AA:76:9F:B5:33:20:7A:FC:51 Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft Manifest number: 0768 Signing time: Thu 24 Apr 2025 21:20:27 +0000 Manifest this update: Thu 24 Apr 2025 21:20:26 +0000 Manifest next update: Thu 01 May 2025 21:20:26 +0000 Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: Aa20+FquGdU2mJb4MHT3d1BFRUeT4yqENof+fnBrhC8=) 2: A3205106142511EB8FED0427C4F9AE02.roa (hash: VDZMZq0ravcenOYyOeGNgLAMJ2KdcwQBXJSf2fEc5SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Validity Not Before: Apr 24 21:20:26 2025 GMT Not After : May 1 21:20:26 2025 GMT Subject: CN=680aab1b-0c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:22:df:4e:1b:fb:75:97:45:6a:bb:96:2a: 1f:6a:47:1e:64:5e:6d:11:ba:47:3d:9f:34:1c:06: ef:54:1c:55:f8:cd:7d:6c:a5:ac:28:8c:a1:39:6c: db:17:83:f6:01:f3:e5:92:ce:9b:79:09:55:5b:6d: d7:f7:6b:6c:09:da:19:4f:67:93:a2:67:1f:c4:71: f9:19:c2:d2:0b:d5:b2:d0:47:28:56:8d:a2:c8:8b: 3e:37:62:06:11:a9:45:8b:86:50:a4:aa:1c:fa:ac: 8c:34:7d:da:34:97:58:e8:a5:d9:3a:d3:a6:77:75: 64:d1:40:14:38:71:8b:d3:5f:a4:8d:a2:26:95:37: c7:61:fc:2b:d4:fe:93:1c:d8:19:2c:f6:38:d7:9b: c1:e9:0d:45:62:0f:43:8b:9a:9f:ec:7f:10:3d:c9: a2:e5:46:05:7d:ef:d3:62:b8:4b:6a:89:66:a5:33: 33:3a:49:f4:a5:ea:c4:be:b1:fc:94:fb:67:b7:05: 56:8b:ba:a6:32:3a:5b:a0:be:ef:ae:6a:c2:52:3e: 34:88:25:f1:82:a8:ce:8c:40:0e:4d:89:14:a5:1f: 90:a8:94:2c:61:75:3d:78:16:4e:da:77:69:ba:97: 39:e5:7a:07:18:57:0c:1d:7d:07:0d:80:e8:38:d0: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E3:4F:D2:D2:7C:8C:DD:9B:98:63:AA:76:9F:B5:33:20:7A:FC:51 X509v3 Authority Key Identifier: keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:de:56:3e:c3:2c:eb:0b:d0:53:21:8e:de:6b:9f:95:95:54: 7e:f0:cd:66:7d:61:64:c2:17:d1:72:00:31:b1:55:75:cc:a7: c3:7a:b7:79:80:a0:25:f2:f0:cd:66:ab:43:9b:1d:6c:2d:91: 2f:c6:13:8e:72:60:95:8f:67:60:00:92:ec:17:a4:38:cf:06: 9e:62:e8:81:5c:3a:78:ce:e5:49:67:b1:e4:1c:ed:78:10:63: b6:78:6e:55:2f:16:8e:13:64:7e:14:cf:98:ed:02:8c:65:c8: f0:23:c8:21:a7:d2:13:1b:af:b6:14:0a:0a:e1:10:97:99:2d: 33:4f:11:11:2d:3a:fd:e5:a6:09:a6:9c:b9:4e:62:ed:6c:31: 36:02:aa:7c:bb:1b:5e:a8:c4:c8:66:05:51:9b:28:c4:36:6b: 81:41:0e:01:e1:8e:01:80:29:e6:5a:96:e9:fa:d2:c0:fa:d5: cd:37:d5:23:7a:f7:a8:65:62:33:f6:1e:36:1b:66:02:82:3e: d3:4c:35:29:ec:7e:53:81:bb:d8:3b:8c:6c:b5:fb:2f:c2:58: d7:ac:ce:2b:29:dc:ec:58:7e:cd:65:f5:0f:56:e3:72:bd:ba: 6c:8b:0b:ec:ba:fe:23:b3:87:01:f9:ed:94:f0:8d:45:12:48: 69:ad:f5:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz REU1OTFFQ0IwHhcNMjUwNDI0MjEyMDI2WhcNMjUwNTAxMjEyMDI2WjAYMRYwFAYD VQQDEw02ODBhYWIxYi0wYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcUi304b+3WXRWq7liofakceZF5tEbpHPZ80HAbvVBxV+M19bKWsKIyhOWzb F4P2AfPlks6beQlVW23X92tsCdoZT2eTomcfxHH5GcLSC9Wy0EcoVo2iyIs+N2IG EalFi4ZQpKoc+qyMNH3aNJdY6KXZOtOmd3Vk0UAUOHGL01+kjaImlTfHYfwr1P6T HNgZLPY415vB6Q1FYg9Di5qf7H8QPcmi5UYFfe/TYrhLaolmpTMzOkn0perEvrH8 lPtntwVWi7qmMjpboL7vrmrCUj40iCXxgqjOjEAOTYkUpR+QqJQsYXU9eBZO2ndp upc55XoHGFcMHX0HDYDoONC60wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzjT9LS fIzdm5hjqnaftTMgevxRMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0 MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjg0RS9FOTA1RENCMDE0MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhk TjdMQ3NiRjZBYm85NVpIc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM3lY+wyzrC9BTIY7ea5+VlVR+8M1mfWFkwhfRcgAxsVV1zKfDerd5 gKAl8vDNZqtDmx1sLZEvxhOOcmCVj2dgAJLsF6Q4zwaeYuiBXDp4zuVJZ7HkHO14 EGO2eG5VLxaOE2R+FM+Y7QKMZcjwI8ghp9ITG6+2FAoK4RCXmS0zTxERLTr95aYJ ppy5TmLtbDE2Aqp8uxteqMTIZgVRmyjENmuBQQ4B4Y4BgCnmWpbp+tLA+tXNN9Uj eveoZWIz9h42G2YCgj7TTDUp7H5TgbvYO4xstfsvwljXrM4rKdzsWH7NZfUPVuNy vbpsiwvsuv4js4cB+e2U8I1FEkhprfUz -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:23 2025 by rpki-client