$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: 1tMu66O0f2TqQEn92FhqlAL/R1Kw5eUN82cQhXQRwW8= Subject key identifier: 6D:11:7C:A7:EF:C7:FD:91:F7:FD:B0:21:55:CA:C3:47:F8:5B:59:C0 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 098E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 0973 Signing time: Thu 24 Apr 2025 20:04:16 +0000 Manifest this update: Thu 24 Apr 2025 20:04:15 +0000 Manifest next update: Thu 01 May 2025 20:04:15 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: Ll9GeS9EHmyhAbB/R1xdwE+hxfjjzzcDAmj4OhfEKlQ=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2446 (0x98e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Apr 24 20:04:15 2025 GMT Not After : May 1 20:04:15 2025 GMT Subject: CN=680a9940-9276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6b:b0:6a:92:e2:1b:9d:8f:2b:9a:b9:27:55: 5c:a1:b3:c3:2d:d4:a1:b8:29:9a:07:ed:30:60:4c: fe:10:c8:07:8b:ee:6c:1a:91:e3:63:19:07:b8:ef: 00:e9:64:f9:49:5a:4e:34:bc:63:8e:48:0a:01:9a: 13:df:63:f3:ce:83:0f:72:d2:32:95:00:7b:25:cb: 05:6e:fd:19:95:81:e4:6b:92:70:84:2d:3e:bd:34: 21:36:0c:f0:fc:e1:2e:14:c8:49:7d:d1:cb:9e:cb: d8:86:fd:27:27:88:8e:66:60:55:a7:9e:e9:26:6c: cf:8e:50:6f:86:b8:39:66:54:6a:18:30:35:9e:93: d5:99:5f:71:d1:69:7f:53:32:27:3a:02:79:5c:b2: 61:d7:d7:0a:8d:9d:77:5b:6a:e3:3c:33:88:91:b6: 16:98:1d:b3:51:3e:ef:34:c1:5d:69:cd:26:8a:ba: 36:5c:d0:dd:be:17:5e:0a:ea:6d:40:5f:40:3f:6a: 36:c3:29:95:05:94:8f:cc:59:37:87:66:04:30:65: 09:7b:28:b0:4f:23:e1:e2:58:9c:9f:10:88:3d:db: 63:10:93:a1:21:1c:fe:f1:28:e3:bf:69:09:55:03: 07:dd:97:89:89:1c:56:13:20:c7:71:f9:95:df:60: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:11:7C:A7:EF:C7:FD:91:F7:FD:B0:21:55:CA:C3:47:F8:5B:59:C0 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d9:e9:ea:f1:6c:e7:06:f1:13:00:ce:35:0d:c6:5c:03:ad: fa:73:63:81:ed:c2:5e:f8:b1:b0:73:9f:9f:81:c8:e2:b6:22: 21:97:22:0e:9a:89:06:69:5e:e6:f1:94:7f:df:1e:12:14:58: 35:26:46:3d:ba:e8:01:a7:63:f0:98:da:e0:0f:93:ce:a2:2c: d3:d2:3b:13:98:2b:51:95:a1:3b:a8:06:26:08:27:6b:48:af: 0f:ee:a9:9a:1a:47:3b:d6:00:24:57:33:07:d3:9d:7e:df:42: 72:13:5e:83:8f:f8:44:e6:dd:db:6c:1f:f2:0f:a0:99:3c:7e: 84:3c:bf:27:35:c1:a5:e0:1c:ac:eb:1e:7f:03:9b:22:12:5b: 99:29:6a:3d:7b:5b:80:07:93:e0:81:3e:3c:fe:b5:27:2d:be: a9:4c:ce:cc:07:95:28:40:6e:fb:5c:67:3a:5e:d6:07:4b:c7: 8f:0a:df:3d:97:69:e0:0a:71:f1:ba:c8:56:79:5c:de:30:57: e5:ef:f6:b7:22:56:7f:00:a0:fb:3f:a3:db:8b:a0:a9:bf:79: 25:b4:00:1c:aa:1d:e6:63:4b:56:64:1e:f0:41:a4:51:d1:44: e8:dd:a4:67:0a:e8:cd:5b:2f:2b:1f:d5:bf:15:be:69:4c:f7: 8d:02:f8:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUwNDI0MjAwNDE1WhcNMjUwNTAxMjAwNDE1WjAYMRYwFAYD VQQDEw02ODBhOTk0MC05Mjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2uwapLiG52PK5q5J1VcobPDLdShuCmaB+0wYEz+EMgHi+5sGpHjYxkHuO8A 6WT5SVpONLxjjkgKAZoT32PzzoMPctIylQB7JcsFbv0ZlYHka5JwhC0+vTQhNgzw /OEuFMhJfdHLnsvYhv0nJ4iOZmBVp57pJmzPjlBvhrg5ZlRqGDA1npPVmV9x0Wl/ UzInOgJ5XLJh19cKjZ13W2rjPDOIkbYWmB2zUT7vNMFdac0miro2XNDdvhdeCupt QF9AP2o2wymVBZSPzFk3h2YEMGUJeyiwTyPh4licnxCIPdtjEJOhIRz+8Sjjv2kJ VQMH3ZeJiRxWEyDHcfmV32CgLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0RfKfv x/2R9/2wIVXKw0f4W1nAMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE2enq8WznBvETAM41DcZcA636c2OB7cJe+LGwc5+fgcjitiIhlyIO mokGaV7m8ZR/3x4SFFg1JkY9uugBp2PwmNrgD5POoizT0jsTmCtRlaE7qAYmCCdr SK8P7qmaGkc71gAkVzMH051+30JyE16Dj/hE5t3bbB/yD6CZPH6EPL8nNcGl4Bys 6x5/A5siEluZKWo9e1uAB5PggT48/rUnLb6pTM7MB5UoQG77XGc6XtYHS8ePCt89 l2ngCnHxushWeVzeMFfl7/a3IlZ/AKD7P6Pbi6Cpv3kltAAcqh3mY0tWZB7wQaRR 0UTo3aRnCujNWy8rH9W/Fb5pTPeNAvhe -----END CERTIFICATE-----Generated at Sat Apr 26 05:21:39 2025 by rpki-client