$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json) Hash identifier: gOTd4Gf6srLcvMRVMkm/t9revRZ0xHoHCJjwm8ZSgUI= Subject key identifier: 09:37:71:47:93:A4:8F:97:7C:63:CB:98:2E:18:7E:46:C8:24:AF:8B Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft Manifest number: 0886 Signing time: Fri 02 May 2025 20:46:45 +0000 Manifest this update: Fri 02 May 2025 20:46:45 +0000 Manifest next update: Fri 09 May 2025 20:46:45 +0000 Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: ctf5doVxgKthhdTKuhN3W2QyafIJOoJx+pYu/5E17vg=) 2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: MbzDlkokZBR/aS6/hcoRXo43UcCAHhzz3LI8ih+FSVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: May 2 20:46:45 2025 GMT Not After : May 9 20:46:45 2025 GMT Subject: CN=68152f35-ae71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:a3:55:d0:d7:f1:ec:fd:12:fa:40:43:1b: ba:e0:45:32:f2:9f:95:a9:09:91:34:63:5d:2a:fe: a1:43:b7:52:e7:c8:64:6b:2d:3d:a2:ba:ee:99:46: 3e:9d:85:3e:f3:49:76:2e:ff:6b:9c:19:20:73:b5: 2a:47:6e:01:cc:7f:9d:56:e5:ef:79:35:cf:6d:5e: 36:3e:5a:c1:72:27:23:43:81:d9:40:eb:b0:4b:d5: 2b:bd:7d:76:13:e3:c2:8c:ee:11:1b:b1:7a:ab:cf: 56:70:70:04:70:d3:b9:4e:d2:5a:e7:05:e7:d9:6d: cb:8c:4d:e2:22:41:55:0d:82:44:ae:57:6e:6a:5e: 52:f5:69:be:0e:aa:31:1a:6d:e2:bc:9d:6c:f0:25: 4d:ed:21:6a:09:32:59:87:7a:98:93:25:e9:dc:2a: 5a:a1:53:01:34:e5:91:a9:07:fe:13:c6:79:f6:3f: 96:94:30:e4:f2:da:cd:ec:c1:84:5d:47:9a:0d:4f: 69:54:d0:6f:3e:dd:71:25:c0:8c:43:61:b8:98:59: 2b:ff:c0:5c:38:02:d2:64:f3:32:61:67:e5:a3:4e: 12:78:d5:3b:1f:f2:ff:5c:63:bf:30:db:36:cb:06: 34:60:69:a2:03:1d:89:af:0a:5f:e4:5a:5e:31:8d: 21:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:37:71:47:93:A4:8F:97:7C:63:CB:98:2E:18:7E:46:C8:24:AF:8B X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:29:94:60:ce:e8:8c:c3:44:fd:29:cd:48:fe:81:a3:a5:07: 2a:a2:de:35:1e:8c:4b:a0:ea:c3:9c:9c:f9:46:35:b8:4d:ad: 51:81:f6:8d:6d:e4:3c:27:1d:d0:a3:56:f3:c5:13:6e:17:60: 62:ae:c1:cd:32:4e:f8:ae:9a:a7:7b:17:bf:65:30:7a:88:db: 55:69:be:82:b1:3a:1d:04:cc:fe:80:ce:68:e6:6b:07:40:f2: 45:32:aa:9f:2d:79:cf:b2:93:b3:e5:96:b9:f3:6b:18:72:c8: 7e:50:4b:b6:50:ea:d5:c0:7f:99:53:75:a2:b7:12:6a:20:c1: 01:6c:7b:82:22:ad:fb:3a:76:9b:49:b9:78:46:f5:14:97:b2: 48:bb:9a:3a:85:f4:76:fd:33:7c:3d:65:94:08:98:be:0b:f1: 28:89:d4:f0:b2:4d:3f:b8:78:c6:8f:0e:73:e9:35:b7:b7:12: ca:fc:45:33:cd:60:a7:16:9f:46:3f:f0:7c:77:f9:8c:11:d8: 11:df:5a:f3:7e:70:16:b9:a0:c2:52:7b:19:f1:e5:da:81:ee: a1:37:07:1b:83:45:28:b3:a7:05:9b:7f:d3:06:6f:0f:0f:19: a5:98:6f:ad:3e:9a:18:f2:75:f1:84:e9:7e:1a:1c:f1:81:08: 32:66:c5:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjUwNTAyMjA0NjQ1WhcNMjUwNTA5MjA0NjQ1WjAYMRYwFAYD VQQDEw02ODE1MmYzNS1hZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc+jVdDX8ez9EvpAQxu64EUy8p+VqQmRNGNdKv6hQ7dS58hkay09orrumUY+ nYU+80l2Lv9rnBkgc7UqR24BzH+dVuXveTXPbV42PlrBcicjQ4HZQOuwS9UrvX12 E+PCjO4RG7F6q89WcHAEcNO5TtJa5wXn2W3LjE3iIkFVDYJErldual5S9Wm+Dqox Gm3ivJ1s8CVN7SFqCTJZh3qYkyXp3CpaoVMBNOWRqQf+E8Z59j+WlDDk8trN7MGE XUeaDU9pVNBvPt1xJcCMQ2G4mFkr/8BcOALSZPMyYWflo04SeNU7H/L/XGO/MNs2 ywY0YGmiAx2Jrwpf5FpeMY0hdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAk3cUeT pI+XfGPLmC4YfkbIJK+LMB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011 TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCKZRgzuiMw0T9Kc1I/oGjpQcqot41HoxLoOrDnJz5RjW4Ta1RgfaN beQ8Jx3Qo1bzxRNuF2BirsHNMk74rpqnexe/ZTB6iNtVab6CsTodBMz+gM5o5msH QPJFMqqfLXnPspOz5Za582sYcsh+UEu2UOrVwH+ZU3WitxJqIMEBbHuCIq37Onab Sbl4RvUUl7JIu5o6hfR2/TN8PWWUCJi+C/EoidTwsk0/uHjGjw5z6TW3txLK/EUz zWCnFp9GP/B8d/mMEdgR31rzfnAWuaDCUnsZ8eXage6hNwcbg0Uos6cFm3/TBm8P DxmlmG+tPpoY8nXxhOl+GhzxgQgyZsXY -----END CERTIFICATE-----Generated at Sat May 3 21:01:16 2025 by rpki-client