$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft File: W9MkppvSbt2t9RKc0Y93odgFI7Y.mft (raw, json) Hash identifier: SHeYpZeY68+FFrxCqW6OE+WIScwktA9EsMAfNwhdt58= Subject key identifier: E1:F0:32:8C:F9:E8:0A:F1:34:50:BD:64:42:E0:78:3E:C0:43:6D:38 Authority key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6 Certificate issuer: /CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft Manifest number: 71 Signing time: Fri 25 Apr 2025 05:51:23 +0000 Manifest this update: Fri 25 Apr 2025 05:51:23 +0000 Manifest next update: Fri 02 May 2025 05:51:23 +0000 Files and hashes: 1: W9MkppvSbt2t9RKc0Y93odgFI7Y.crl (hash: GIdyeweaCzfdUm1JF+h8hIgZ8ewwScaZlMoqSIHOIS0=) 2: 09FB57587C7411EFB8CF8A27C4F9AE02.roa (hash: Ff+p+1djhae9xDw2WzvBRUC27EEOylWqO6y0fj0fAnI=) 3: 0A918056D24C11EFB8B5C95EC4F9AE02.roa (hash: dReX35F9Xgv2vYdWUkskW43wT5+d/4LX4ncKLKYKkSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0380, serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6 Validity Not Before: Apr 25 05:51:23 2025 GMT Not After : May 2 05:51:23 2025 GMT Subject: CN=680b22db-8d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:27:b2:bd:23:47:c4:e9:5a:e3:6d:78:df: b7:f8:c4:71:da:3e:27:7d:a4:2f:cd:86:03:82:c7: 14:56:5d:07:bc:6c:fb:21:7e:73:29:61:c4:0c:a2: 64:23:e4:bd:e0:84:24:50:f8:8f:dd:0b:1f:a9:12: 56:4f:59:fc:bb:24:a7:2e:08:04:5a:19:23:96:52: c3:42:4a:84:b0:80:b2:c4:c5:2b:b6:7e:5c:13:b5: 09:62:0b:ca:46:53:28:bf:32:4f:3b:22:22:77:f4: 6d:fb:57:e1:6c:18:47:37:62:a4:18:88:44:3a:38: 4b:91:dc:74:21:0b:b2:a1:b5:76:1b:a3:22:0f:07: c3:f1:f5:f3:0d:ee:a8:9c:31:81:80:8f:eb:e2:20: 03:ba:3d:be:bf:32:1a:e6:b4:b6:bf:12:38:85:6c: 36:c5:86:cd:21:99:50:49:47:d6:b6:c7:a7:ee:1e: 0d:f8:a9:ab:d0:b6:54:b8:41:cb:66:51:15:12:3e: 46:19:18:7f:5f:5e:4f:6e:07:df:cc:c9:17:db:0d: 1c:ea:7a:57:fc:65:16:ac:ad:6a:37:fd:bc:bf:3e: 98:cb:b2:01:27:7b:1b:78:b2:98:c0:cc:00:fc:43: 3d:d3:3a:59:9d:94:d4:43:e9:28:a8:8d:5c:32:31: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:32:8C:F9:E8:0A:F1:34:50:BD:64:42:E0:78:3E:C0:43:6D:38 X509v3 Authority Key Identifier: keyid:5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3f:eb:21:dd:15:ac:41:f7:df:17:f4:d5:4c:48:de:e7:5f: 9f:08:0d:0a:30:53:52:6d:72:fe:f4:2e:5a:81:2e:d2:0f:c2: 99:8e:4c:69:07:13:75:4b:03:6c:33:32:49:a3:b0:c3:a7:70: d2:21:30:e7:e4:b4:be:c2:07:48:c6:a9:36:4b:77:45:a1:77: 54:6f:c1:cb:d2:b5:ca:e4:20:03:3a:f8:4d:94:58:3f:fb:c8: d7:4a:4a:af:03:c9:b6:57:78:a0:cf:51:1e:a9:d0:f9:84:b3: ef:8e:5e:f1:ee:c1:8f:5c:94:51:23:10:6c:2e:8a:a6:b0:9c: bf:76:45:c1:01:d1:fd:1e:c9:5e:3a:64:d7:f6:e9:06:46:13: 8d:8a:d5:df:0a:8c:02:58:49:94:7c:f7:8f:bc:a9:0e:90:fc: 24:88:56:0b:b1:ec:15:89:89:2f:3e:4b:9a:a1:37:6c:20:3f: ca:1e:4f:00:31:b1:64:fb:11:2d:1e:3f:4e:cb:d3:cd:34:90: 86:d7:ab:a0:00:70:c1:e1:e9:c5:78:88:5b:5a:0a:a5:54:f9: 61:96:f7:9b:69:4f:aa:17:05:86:29:a5:7c:87:b4:8d:0f:b6: a0:40:b9:88:06:35:2c:a6:3e:3f:d7:a5:29:fc:87:63:6b:aa: 24:72:12:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MDM4MDExMC8GA1UEBRMoNUJEMzI0QTY5QkQyNkVEREFERjUxMjlDRDE4Rjc3QTFE ODA1MjNCNjAeFw0yNTA0MjUwNTUxMjNaFw0yNTA1MDIwNTUxMjNaMBgxFjAUBgNV BAMTDTY4MGIyMmRiLThkNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkDyeyvSNHxOla421437f4xHHaPid9pC/NhgOCxxRWXQe8bPshfnMpYcQMomQj 5L3ghCRQ+I/dCx+pElZPWfy7JKcuCARaGSOWUsNCSoSwgLLExSu2flwTtQliC8pG Uyi/Mk87IiJ39G37V+FsGEc3YqQYiEQ6OEuR3HQhC7KhtXYboyIPB8Px9fMN7qic MYGAj+viIAO6Pb6/MhrmtLa/EjiFbDbFhs0hmVBJR9a2x6fuHg34qavQtlS4Qctm URUSPkYZGH9fXk9uB9/MyRfbDRzqelf8ZRasrWo3/by/PpjLsgEnext4spjAzAD8 Qz3TOlmdlNRD6SiojVwyMUUnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4fAyjPno CvE0UL1kQuB4PsBDbTgwHwYDVR0jBBgwFoAUW9MkppvSbt2t9RKc0Y93odgFI7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwMzgwLzc3MjI0RTk0N0JD QjExRUZBMjQ4OTIxMUM0RjlBRTAyL1c5TWtwcHZTYnQydDlSS2MwWTkzb2RnRkk3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVzlNa3BwdlNidDJ0OVJLYzBZOTNvZGdGSTdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw MzgwLzc3MjI0RTk0N0JDQjExRUZBMjQ4OTIxMUM0RjlBRTAyL1c5TWtwcHZTYnQy dDlSS2MwWTkzb2RnRkk3WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIw/6yHdFaxB998X9NVMSN7nX58IDQowU1Jtcv70LlqBLtIPwpmOTGkH E3VLA2wzMkmjsMOncNIhMOfktL7CB0jGqTZLd0Whd1RvwcvStcrkIAM6+E2UWD/7 yNdKSq8DybZXeKDPUR6p0PmEs++OXvHuwY9clFEjEGwuiqawnL92RcEB0f0eyV46 ZNf26QZGE42K1d8KjAJYSZR894+8qQ6Q/CSIVgux7BWJiS8+S5qhN2wgP8oeTwAx sWT7ES0eP07L0800kIbXq6AAcMHh6cV4iFtaCqVU+WGW95tpT6oXBYYppXyHtI0P tqBAuYgGNSymPj/XpSn8h2NrqiRyEnA= -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:34 2025 by rpki-client