$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: USVXmCuGMDU+j048ycgRx9twjj5cUWkkGYK+9B75Q5M= Subject key identifier: 7E:2D:A0:1A:85:6E:2F:0D:5B:B1:0D:85:EC:02:70:45:10:04:19:CF Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: 7B Signing time: Fri 25 Apr 2025 05:42:01 +0000 Manifest this update: Fri 25 Apr 2025 05:42:00 +0000 Manifest next update: Fri 02 May 2025 05:42:00 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: WvIWGGwMZvSFtzzQ+fvAKbyTgZ32dGNtqZSwh4m+534=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Apr 25 05:42:00 2025 GMT Not After : May 2 05:42:00 2025 GMT Subject: CN=680b20a8-6097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:90:4e:22:bd:54:1d:a6:54:da:db:aa:28: 69:ec:a1:f9:4a:0f:77:f7:f3:f5:be:6d:84:34:a8: 51:6c:e0:8c:c0:fc:8d:38:98:b6:76:e8:ae:96:c1: 41:e5:77:87:2b:fc:43:7e:1a:b7:9d:6d:61:f6:d2: 2c:d8:0a:80:e8:08:ba:eb:d3:9e:0f:16:34:c8:1f: 7f:d9:81:c4:d8:99:0e:7f:c5:39:47:f5:d8:b0:27: 6d:88:ba:be:e9:1a:d4:44:ee:63:9b:7a:73:1f:ec: 94:9f:32:c1:ab:1d:eb:31:fe:89:57:5c:dc:83:ca: 2b:6d:68:9d:0b:56:8f:ef:b7:c4:8f:16:0e:76:6b: 20:40:48:56:0f:7a:4c:ee:35:12:c3:71:2d:5c:cf: ec:f2:ef:fe:36:19:84:ed:50:a1:e3:37:8b:9e:26: 94:53:fa:25:54:35:11:26:df:f0:b2:ce:67:4a:93: db:4c:f3:e1:46:b4:e2:76:2e:02:b2:38:a6:8e:d8: a1:b8:95:30:9a:f8:b0:17:47:d6:df:01:68:2b:be: 84:ef:ab:6d:0e:a7:ef:e1:fd:51:a8:bd:7c:e1:71: fc:f4:e5:cb:c8:a6:e0:85:89:ae:e7:0e:5a:3a:ea: c6:b7:bf:b9:c4:c9:42:09:12:3b:65:5d:69:ef:5e: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2D:A0:1A:85:6E:2F:0D:5B:B1:0D:85:EC:02:70:45:10:04:19:CF X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ec:ad:60:de:a4:4b:4f:81:bf:50:91:2f:3b:cb:3c:ba:68: 59:1e:41:31:71:83:26:a7:0b:b3:0b:6b:ac:58:37:b5:59:6d: 1d:59:83:44:ad:3a:3b:8b:96:85:aa:e3:b9:c7:59:6c:4d:6a: 19:b9:65:3a:49:49:4c:e3:b5:3a:3e:84:a3:3e:1a:4f:26:88: 94:b5:5d:b4:db:18:29:d8:6b:fd:86:cf:ee:1d:2d:d4:fd:3e: a5:e4:0f:1e:96:b0:17:71:c0:da:ff:c7:ab:88:a4:92:e1:5e: 46:ea:45:2c:10:13:e0:42:5e:6f:89:67:63:97:28:69:53:db: 08:15:f4:5f:a2:4e:e4:c3:06:9e:6a:a6:8d:b0:93:54:6e:af: 96:ef:5c:b0:d8:1f:77:5b:92:f3:aa:55:77:b7:60:53:f1:b5: 55:67:ee:14:a5:de:56:42:6e:d3:b4:a1:2d:c0:e5:0f:e4:44: 6f:e1:50:f0:e4:c3:68:e0:3a:c5:7e:85:1e:79:21:f8:4c:f0: 35:2f:07:ec:3d:a9:7f:17:56:94:87:5a:f0:42:c5:95:aa:04: 47:0d:31:6e:46:ba:3d:2f:bf:39:3f:ff:99:ef:58:39:e0:4a: 2f:cf:49:ca:55:5e:3b:f7:0c:ff:d1:ec:52:ca:8d:51:c1:e6: f9:a2:f5:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjJEOTExMC8GA1UEBRMoRkYwNjM0M0NBOTlBNjQxMDAwQzcxMUYzMkQ2OUY1OUMx OUFDRjA0MzAeFw0yNTA0MjUwNTQyMDBaFw0yNTA1MDIwNTQyMDBaMBgxFjAUBgNV BAMTDTY4MGIyMGE4LTYwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwbZBOIr1UHaZU2tuqKGnsoflKD3f38/W+bYQ0qFFs4IzA/I04mLZ26K6WwUHl d4cr/EN+GredbWH20izYCoDoCLrr054PFjTIH3/ZgcTYmQ5/xTlH9diwJ22Iur7p GtRE7mObenMf7JSfMsGrHesx/olXXNyDyittaJ0LVo/vt8SPFg52ayBASFYPekzu NRLDcS1cz+zy7/42GYTtUKHjN4ueJpRT+iVUNREm3/CyzmdKk9tM8+FGtOJ2LgKy OKaO2KG4lTCa+LAXR9bfAWgrvoTvq20Op+/h/VGovXzhcfz05cvIpuCFia7nDlo6 6sa3v7nEyUIJEjtlXWnvXoJDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfi2gGoVu Lw1bsQ2F7AJwRRAEGc8wHwYDVR0jBBgwFoAU/wY0PKmaZBAAxxHzLWn1nBms8EMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMkQ5L0IzMTIwMUUwNjdB QTExRUY4RjQ5OEEyN0M0RjlBRTAyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhF TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3dZMFBLbWFaQkFBeHhIekxXbjFuQm1zOEVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MkQ5L0IzMTIwMUUwNjdBQTExRUY4RjQ5OEEyN0M0RjlBRTAyL193WTBQS21hWkJB QXh4SHpMV24xbkJtczhFTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABPsrWDepEtPgb9QkS87yzy6aFkeQTFxgyanC7MLa6xYN7VZbR1Zg0St OjuLloWq47nHWWxNahm5ZTpJSUzjtTo+hKM+Gk8miJS1XbTbGCnYa/2Gz+4dLdT9 PqXkDx6WsBdxwNr/x6uIpJLhXkbqRSwQE+BCXm+JZ2OXKGlT2wgV9F+iTuTDBp5q po2wk1Rur5bvXLDYH3dbkvOqVXe3YFPxtVVn7hSl3lZCbtO0oS3A5Q/kRG/hUPDk w2jgOsV+hR55IfhM8DUvB+w9qX8XVpSHWvBCxZWqBEcNMW5Guj0vvzk//5nvWDng Si/PScpVXjv3DP/R7FLKjVHB5vmi9Xw= -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:11 2025 by rpki-client