$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft File: Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft (raw, json) Hash identifier: ++DND7bk1b25oDNZDqJsXK3jNz61NDi71Qc/cWdUB0w= Subject key identifier: EF:6A:98:9B:52:68:F8:50:40:FE:A2:0F:BD:D7:4F:96:97:F3:91:C2 Authority key identifier: 5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6 Certificate issuer: /CN=A91A3859/serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6 Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft Manifest number: 0785 Signing time: Thu 24 Apr 2025 21:11:55 +0000 Manifest this update: Thu 24 Apr 2025 21:11:54 +0000 Manifest next update: Thu 01 May 2025 21:11:54 +0000 Files and hashes: 1: Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl (hash: xMXQqTn35RTdinGst2Aa6wG7jsp2u3F3dyKqDARkwlo=) 2: EEC2740A08A811EBB9370955C4F9AE02.roa (hash: 9uP3caieQ9R/E3ygi+poq9n2v4lqPTCGWeJ156owEWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3859, serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6 Validity Not Before: Apr 24 21:11:54 2025 GMT Not After : May 1 21:11:54 2025 GMT Subject: CN=680aa91a-fc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:65:5a:87:b0:eb:0e:b8:0c:f9:26:6e:06:fb: 96:fb:bc:63:1b:e5:c6:c2:e7:35:cc:e3:4a:26:13: e9:42:3c:54:90:42:aa:38:88:22:ed:4d:b8:14:b0: 8c:30:63:93:00:6f:6f:fe:ec:89:63:a6:04:c2:56: bb:5c:b3:1e:84:44:9a:08:b9:8d:f6:49:15:80:e5: c7:2c:ec:ff:46:e3:ad:72:9a:f2:6e:92:55:77:6b: e8:50:0c:55:23:82:fa:37:98:47:8c:33:4e:04:36: 3f:09:d9:c5:c0:6f:ce:49:b6:c3:23:8b:37:9d:04: ec:40:c0:17:3c:09:6a:41:5c:d6:f8:32:f2:36:da: 7f:8a:2c:b2:4b:15:a4:68:bb:83:24:13:d2:2e:3a: 74:8f:ed:7e:06:94:e6:0f:ae:82:a9:30:58:66:97: 22:6b:2c:a8:a8:e1:a6:9f:0f:4a:11:24:38:91:0b: d5:98:ef:2a:47:10:88:2a:57:b9:d1:9f:51:3e:fa: cb:d7:fb:ec:56:40:48:e1:fd:1a:f9:15:cd:1d:6d: 98:36:8a:5f:6e:01:9d:23:0f:c1:3f:13:0d:63:9d: 25:82:42:d5:8e:e5:44:e4:ca:bb:44:a8:d2:2a:7e: ed:03:25:a9:8b:ff:8f:0a:18:90:57:6f:44:8b:60: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6A:98:9B:52:68:F8:50:40:FE:A2:0F:BD:D7:4F:96:97:F3:91:C2 X509v3 Authority Key Identifier: keyid:5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:69:dd:5e:c5:d2:9d:78:87:41:c3:ed:c3:82:db:64:4e:97: a2:64:0c:36:80:e9:bd:4e:c6:89:9c:c5:4b:93:d8:48:d2:e3: 06:ca:69:c8:03:c6:26:78:1a:98:6f:5c:f2:59:6e:2b:28:51: a9:c0:5b:de:4f:56:aa:7b:c3:9f:81:9d:14:d3:00:bb:e2:c5: 41:13:80:26:54:5e:0d:13:2f:17:27:77:52:b9:71:64:fb:0a: b3:fe:b2:41:74:5a:54:8e:ba:51:1d:52:18:80:dc:4e:36:c0: 17:59:03:1a:8c:99:fd:6e:0d:e6:89:fb:f0:5b:42:89:d6:f0: 50:1f:8a:34:db:22:2f:2f:07:b8:09:ad:d2:98:88:6c:9c:7d: cd:57:c6:ad:0d:91:8f:02:cc:99:61:53:9f:d6:ec:bd:a9:ce: d5:5e:77:1f:bd:e1:b9:c6:cb:8e:05:07:01:06:da:00:2e:00: d5:f3:38:c1:64:3b:52:30:aa:ae:a6:d2:77:1e:93:71:1a:19: de:93:3e:e1:22:26:3b:df:3d:24:ec:7f:da:f8:79:2f:9b:eb: 67:ac:3f:4f:e4:3f:5a:24:b9:fe:01:4e:55:69:b2:1e:3e:1b: 73:00:fe:58:5f:b7:83:7f:52:9a:bb:8d:c9:48:94:84:87:bb: a7:21:52:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4NTkxMTAvBgNVBAUTKDVCMEVBMDk0NTExOUU1M0U5RkI4MjBEOTIyMTAzNTc0 NDFFNEFDRDYwHhcNMjUwNDI0MjExMTU0WhcNMjUwNTAxMjExMTU0WjAYMRYwFAYD VQQDEw02ODBhYTkxYS1mYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GVah7DrDrgM+SZuBvuW+7xjG+XGwuc1zONKJhPpQjxUkEKqOIgi7U24FLCM MGOTAG9v/uyJY6YEwla7XLMehESaCLmN9kkVgOXHLOz/RuOtcprybpJVd2voUAxV I4L6N5hHjDNOBDY/CdnFwG/OSbbDI4s3nQTsQMAXPAlqQVzW+DLyNtp/iiyySxWk aLuDJBPSLjp0j+1+BpTmD66CqTBYZpciayyoqOGmnw9KESQ4kQvVmO8qRxCIKle5 0Z9RPvrL1/vsVkBI4f0a+RXNHW2YNopfbgGdIw/BPxMNY50lgkLVjuVE5Mq7RKjS Kn7tAyWpi/+PChiQV29Ei2DayQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9qmJtS aPhQQP6iD73XT5aX85HCMB8GA1UdIwQYMBaAFFsOoJRRGeU+n7gg2SIQNXRB5KzW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzg1OS9FRTdFMEMwNDA4 QTYxMUVCODdFMjlBMzlDNEY5QUUwMi9XdzZnbEZFWjVUNmZ1Q0RaSWhBMWRFSGty TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d3NmdsRkVaNVQ2ZnVDRFpJaEExZEVIa3JOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzg1OS9FRTdFMEMwNDA4QTYxMUVCODdFMjlBMzlDNEY5QUUwMi9XdzZnbEZFWjVU NmZ1Q0RaSWhBMWRFSGtyTlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsad1exdKdeIdBw+3DgttkTpeiZAw2gOm9TsaJnMVLk9hI0uMGymnI A8YmeBqYb1zyWW4rKFGpwFveT1aqe8OfgZ0U0wC74sVBE4AmVF4NEy8XJ3dSuXFk +wqz/rJBdFpUjrpRHVIYgNxONsAXWQMajJn9bg3mifvwW0KJ1vBQH4o02yIvLwe4 Ca3SmIhsnH3NV8atDZGPAsyZYVOf1uy9qc7VXncfveG5xsuOBQcBBtoALgDV8zjB ZDtSMKquptJ3HpNxGhnekz7hIiY73z0k7H/a+Hkvm+tnrD9P5D9aJLn+AU5VabIe PhtzAP5YX7eDf1Kau43JSJSEh7unIVKp -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:48 2025 by rpki-client