$ rpki-client -vvf rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft File: W2r-ya7p6tTclkY7oanLJyM9bf8.mft (raw, json) Hash identifier: ujHK6aJlIhMrsPRtSX6I7kaNVzm6+2ixgJO5RNWvLeU= Subject key identifier: 52:BF:0F:DC:7C:72:73:3F:53:3A:56:A3:6A:94:AD:27:3C:8C:EF:A3 Authority key identifier: 5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF Certificate issuer: /CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Certificate serial: 347D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft Manifest number: 3478 Signing time: Thu 24 Apr 2025 14:56:25 +0000 Manifest this update: Thu 24 Apr 2025 14:56:25 +0000 Manifest next update: Thu 01 May 2025 14:56:25 +0000 Files and hashes: 1: W2r-ya7p6tTclkY7oanLJyM9bf8.crl (hash: 1HORVoHtTjBtSyro12SjRCNgdZTu85U4lI2I9UJqYgw=) 2: 1317969A55B711EBAAFF6E4DC4F9AE02.roa (hash: nOUxkk4420zJ2RFOdGdnQCmw3/LVGxAozFWt1FM8u4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13437 (0x347d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D81D4, serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Validity Not Before: Apr 24 14:56:25 2025 GMT Not After : May 1 14:56:25 2025 GMT Subject: CN=680a5119-465b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a0:cf:21:18:28:ca:b6:f5:49:f5:85:72:30: ac:29:8c:73:17:f0:a7:a8:4c:a1:0e:63:34:0c:9a: a9:ca:ba:18:4e:07:8e:da:2a:dd:55:24:f4:2d:83: cc:77:18:d5:e4:fb:49:d5:46:2f:34:a0:15:f6:62: c2:6f:49:c4:4b:6d:37:92:8c:34:fa:13:a0:d4:3d: b9:bb:9d:c0:3a:35:87:44:9a:c5:51:de:7c:e7:d3: a2:3e:3d:7f:74:3f:0a:f0:48:cd:83:85:fc:7f:6e: 59:12:24:c6:e8:e1:ae:48:2a:72:52:ed:c2:47:ca: a9:af:5a:fd:49:c4:d8:8a:9e:74:b3:8e:00:2c:2f: e8:ee:76:14:c1:ff:00:48:59:3e:c5:e4:fc:8a:9d: 4d:c9:01:e2:b1:7d:ed:da:37:8f:7d:38:4b:30:c4: b8:9e:64:6e:d3:06:1c:45:e7:79:06:5c:61:07:5b: de:a1:d4:be:3d:6d:33:01:8e:77:82:df:13:c3:55: 38:b0:83:75:10:81:38:25:c8:bf:53:04:ac:b7:24: 0b:79:a7:b0:a3:c8:8a:e1:fe:1b:5d:b6:1d:63:12: fa:29:19:23:f3:52:c7:1a:6d:7b:3a:53:76:05:b3: 34:8f:29:7a:cf:01:9b:9a:9e:0a:a3:49:1a:f9:eb: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BF:0F:DC:7C:72:73:3F:53:3A:56:A3:6A:94:AD:27:3C:8C:EF:A3 X509v3 Authority Key Identifier: keyid:5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:82:7d:e3:42:ff:3e:a5:1f:da:66:fa:21:e8:0f:2d:b0:bf: 32:1b:fb:69:bc:e1:0e:4f:11:a6:2f:68:9c:8d:43:27:4e:bb: 7c:88:45:12:f0:d6:3b:96:85:1b:3f:45:84:2d:fa:0e:3a:ff: 3a:9a:8c:72:ca:a0:ee:12:21:14:84:aa:f5:08:6c:8b:e9:65: 7c:83:5e:9f:e7:52:17:54:fe:c0:89:4b:48:27:b2:cc:37:c0: f1:3d:ce:54:5b:be:08:d9:93:38:62:25:05:1f:a1:46:c4:9a: 12:c2:a6:f0:bf:e1:b4:65:f9:b5:5f:f1:b0:eb:ff:0d:b1:67: 82:8e:4a:4f:15:21:e7:7c:2e:47:09:25:f0:72:e5:8f:83:c6: 1c:f2:11:81:a8:bd:76:2e:1f:42:ca:b9:50:55:a0:12:e9:9f: db:60:12:8b:0e:39:37:ad:54:de:78:ab:69:70:c1:5a:bb:12: 43:71:a3:85:a5:bb:64:83:92:3d:db:1e:15:c8:55:98:94:fa: 40:99:ad:fc:1e:40:ed:41:1e:60:e7:fd:aa:cb:22:c4:e3:7b: 75:44:15:fe:12:db:82:8b:31:07:3f:a1:37:38:d9:9c:15:ac: 0c:b9:8f:0f:af:1a:25:81:77:c3:fd:6b:ca:f0:70:19:a1:05: 3a:a1:66:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxRDQxMTAvBgNVBAUTKDVCNkFGRUM5QUVFOUVBRDREQzk2NDYzQkExQTlDQjI3 MjMzRDZERkYwHhcNMjUwNDI0MTQ1NjI1WhcNMjUwNTAxMTQ1NjI1WjAYMRYwFAYD VQQDEw02ODBhNTExOS00NjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aDPIRgoyrb1SfWFcjCsKYxzF/CnqEyhDmM0DJqpyroYTgeO2irdVST0LYPM dxjV5PtJ1UYvNKAV9mLCb0nES203kow0+hOg1D25u53AOjWHRJrFUd5859OiPj1/ dD8K8EjNg4X8f25ZEiTG6OGuSCpyUu3CR8qpr1r9ScTYip50s44ALC/o7nYUwf8A SFk+xeT8ip1NyQHisX3t2jePfThLMMS4nmRu0wYcRed5BlxhB1veodS+PW0zAY53 gt8Tw1U4sIN1EIE4Jci/UwSstyQLeaewo8iK4f4bXbYdYxL6KRkj81LHGm17OlN2 BbM0jyl6zwGbmp4Ko0ka+evOVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK/D9x8 cnM/UzpWo2qUrSc8jO+jMB8GA1UdIwQYMBaAFFtq/smu6erU3JZGO6GpyycjPW3/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODFENC9EQUUzODJBQTFE OUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0VGNsa1k3b2FuTEp5TTli ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cyci15YTdwNnRUY2xrWTdvYW5MSnlNOWJmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODFENC9EQUUzODJBQTFEOUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0 VGNsa1k3b2FuTEp5TTliZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmgn3jQv8+pR/aZvoh6A8tsL8yG/tpvOEOTxGmL2icjUMnTrt8iEUS 8NY7loUbP0WELfoOOv86moxyyqDuEiEUhKr1CGyL6WV8g16f51IXVP7AiUtIJ7LM N8DxPc5UW74I2ZM4YiUFH6FGxJoSwqbwv+G0Zfm1X/Gw6/8NsWeCjkpPFSHnfC5H CSXwcuWPg8Yc8hGBqL12Lh9CyrlQVaAS6Z/bYBKLDjk3rVTeeKtpcMFauxJDcaOF pbtkg5I92x4VyFWYlPpAma38HkDtQR5g5/2qyyLE43t1RBX+EtuCizEHP6E3ONmc FawMuY8PrxolgXfD/WvK8HAZoQU6oWZ1 -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:16 2025 by rpki-client