$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json) Hash identifier: zeJ1c2H0MbWxLZCVj21o0Q9KtOyhel21z58Ihz5agfU= Subject key identifier: 49:FD:39:4F:5F:F5:1F:4A:B9:63:A3:EF:30:F9:1B:7A:E5:90:0D:14 Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft Manifest number: 024F Signing time: Fri 25 Apr 2025 01:36:31 +0000 Manifest this update: Fri 25 Apr 2025 01:36:30 +0000 Manifest next update: Fri 02 May 2025 01:36:30 +0000 Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: DhNF4uF5pxp+0cQv7RRZEEEwkXisLUybiR3fYiy8mAs=) 2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TZ/n2fdCp6It0G4ugsLwMjkFuDgasyyKStMAe77+R34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Validity Not Before: Apr 25 01:36:30 2025 GMT Not After : May 2 01:36:30 2025 GMT Subject: CN=680ae71f-6f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:ad:7e:2c:85:00:7d:30:09:07:52:ed:8b: 1e:68:de:21:60:5a:a3:a5:82:45:cb:0c:62:b7:cf: c6:de:63:b2:43:57:9d:1f:f8:86:98:84:59:e4:8a: 04:19:e5:55:5d:ad:c1:97:45:4c:e9:7d:f7:a2:c4: 7e:12:73:ef:bf:84:8e:79:c4:4d:48:9c:50:17:dc: 08:68:8c:38:b7:3b:34:cb:04:52:34:d8:21:a2:a4: 80:4a:34:7a:ea:86:71:98:5d:1e:ac:1a:e4:89:8a: 19:fe:73:5f:a1:8e:c4:52:a9:88:d2:18:f9:89:98: f8:0c:b2:60:14:20:d5:8a:49:29:6c:41:3b:a5:c0: d0:0a:5b:b4:86:a1:f6:82:5f:34:b1:19:fd:64:44: 61:23:00:88:92:bf:a4:95:59:81:d6:9a:06:c0:c4: ac:12:76:91:df:a6:73:62:fd:ad:22:ef:58:c6:d6: 09:88:f2:a6:ce:33:cb:c0:59:ba:40:92:65:c8:c3: dd:2b:d2:b9:e5:fe:6c:9f:2d:cf:fb:c2:28:63:0b: fe:c2:1b:aa:6b:ba:d7:db:87:3a:5f:13:cc:34:3e: 3b:47:40:e7:30:9a:49:ee:49:94:e5:75:84:63:87: 5b:3c:63:38:63:72:29:4e:e6:bd:19:b3:23:ce:09: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FD:39:4F:5F:F5:1F:4A:B9:63:A3:EF:30:F9:1B:7A:E5:90:0D:14 X509v3 Authority Key Identifier: keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:bf:c7:ee:7a:3e:c3:f5:cf:9e:1d:32:6a:00:21:6e:51:d2: 53:dd:df:f0:eb:6d:c9:68:21:9e:6f:96:ba:f4:0a:f5:ff:c5: 0a:74:19:59:af:fb:e5:84:2a:13:c5:e5:6c:67:2d:35:90:78: 05:3a:aa:06:1d:b8:6a:d9:98:9d:5a:b1:b0:07:1c:cb:c1:9b: da:64:a8:bf:b6:02:62:24:9e:dc:fa:70:3c:34:8d:96:a6:2e: 4a:3d:93:1f:11:5d:60:6e:d9:1f:89:d1:5b:c2:0b:a3:25:06: a0:13:61:33:89:94:38:49:d7:e6:ee:79:8a:df:40:6d:bb:b4: db:a3:6d:f7:75:f6:9c:36:1d:e0:ec:37:45:19:98:13:27:c7: 49:4a:ac:00:58:a0:75:75:eb:f7:50:72:72:ce:21:bb:ce:65: fa:08:ea:2b:6f:f5:cf:0a:39:46:9d:9f:09:11:db:fa:b6:dd: e4:45:6e:f4:38:16:30:e5:fc:11:c6:a8:47:f8:12:27:ba:42: 42:28:01:4e:ae:88:30:4e:58:cc:6a:01:23:4e:aa:49:3c:bf: d6:a3:0c:d3:8e:54:ad:bc:08:e9:e4:28:a9:26:1b:5d:af:12: 9e:cb:8e:c3:8f:ce:8f:f5:20:17:94:66:ae:cd:71:f5:d8:0c: 9d:24:aa:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy QkEzN0NEQTcwHhcNMjUwNDI1MDEzNjMwWhcNMjUwNTAyMDEzNjMwWjAYMRYwFAYD VQQDEw02ODBhZTcxZi02ZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYitfiyFAH0wCQdS7YseaN4hYFqjpYJFywxit8/G3mOyQ1edH/iGmIRZ5IoE GeVVXa3Bl0VM6X33osR+EnPvv4SOecRNSJxQF9wIaIw4tzs0ywRSNNghoqSASjR6 6oZxmF0erBrkiYoZ/nNfoY7EUqmI0hj5iZj4DLJgFCDVikkpbEE7pcDQClu0hqH2 gl80sRn9ZERhIwCIkr+klVmB1poGwMSsEnaR36ZzYv2tIu9YxtYJiPKmzjPLwFm6 QJJlyMPdK9K55f5sny3P+8IoYwv+whuqa7rX24c6XxPMND47R0DnMJpJ7kmU5XWE Y4dbPGM4Y3IpTua9GbMjzgnnowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEn9OU9f 9R9KuWOj7zD5G3rlkA0UMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2 QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5 VlJubG9seGswYTBybzN6YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvv8fuej7D9c+eHTJqACFuUdJT3d/w623JaCGeb5a69Ar1/8UKdBlZ r/vlhCoTxeVsZy01kHgFOqoGHbhq2ZidWrGwBxzLwZvaZKi/tgJiJJ7c+nA8NI2W pi5KPZMfEV1gbtkfidFbwgujJQagE2EziZQ4Sdfm7nmK30Btu7Tbo233dfacNh3g 7DdFGZgTJ8dJSqwAWKB1dev3UHJyziG7zmX6COorb/XPCjlGnZ8JEdv6tt3kRW70 OBYw5fwRxqhH+BInukJCKAFOrogwTljMagEjTqpJPL/WowzTjlStvAjp5CipJhtd rxKey47Dj86P9SAXlGauzXH12AydJKrc -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:23 2025 by rpki-client