$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: o2b4NOmyjJ1R1Zg2guluERTjCL/JkLNSde44MsfGGs0= Subject key identifier: 78:4C:51:28:95:81:F1:CC:76:70:F8:D4:74:0C:F3:6D:38:FC:9F:45 Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 088C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 0885 Signing time: Thu 24 Apr 2025 20:27:40 +0000 Manifest this update: Thu 24 Apr 2025 20:27:39 +0000 Manifest next update: Thu 01 May 2025 20:27:39 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: RwzmEtLa2L37smArhK4FS2KJBroPDAzVVyFz+gk03TU=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2188 (0x88c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: Apr 24 20:27:39 2025 GMT Not After : May 1 20:27:39 2025 GMT Subject: CN=680a9ebb-842f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:05:f4:c4:1c:e5:97:fd:90:87:6b:75:47: e0:01:28:c0:a8:23:b8:c9:0c:8d:58:20:fc:e7:5e: dd:12:40:78:5c:6a:e4:66:df:38:55:b8:34:6f:af: 5f:c5:f6:d4:17:7c:99:1f:2b:ca:2c:71:62:93:86: 1e:1e:dd:52:ee:00:75:99:a7:9a:56:c7:ed:04:e1: a6:1e:55:61:b8:e8:5f:df:4d:3e:33:af:ff:96:7b: 0a:4c:a0:29:c0:a4:0c:0d:81:d1:d2:2b:69:fb:5b: 96:60:d0:85:bf:a4:0d:db:12:8e:80:93:ba:3d:e5: 67:12:af:69:62:6e:67:b4:14:3f:87:01:9c:14:0d: ce:43:78:12:68:06:98:8f:d5:5f:24:9c:41:95:7a: 1d:78:5c:b9:10:16:e7:63:c4:66:ef:f3:69:cd:01: 91:5e:9b:0a:e4:80:a6:99:f1:ec:6b:2f:67:54:b0: 4c:9a:11:ab:03:60:d8:6f:91:c9:45:82:78:fd:f7: 59:5f:a7:4e:f8:11:62:0e:64:c5:74:93:89:51:6f: 6f:44:39:c4:5c:8f:49:a0:af:ac:4e:e2:69:56:c3: 8f:ca:95:79:c0:5a:64:8c:10:82:df:69:04:64:cc: 54:bd:b0:1c:3b:db:78:61:06:95:8e:f8:61:58:b9: 92:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4C:51:28:95:81:F1:CC:76:70:F8:D4:74:0C:F3:6D:38:FC:9F:45 X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bc:f2:40:1d:d3:0e:55:dd:cd:eb:d5:89:0f:08:26:79:06: aa:9e:62:80:5f:47:17:4c:ff:0a:ba:bf:cd:68:65:0f:06:80: dd:30:b7:32:9e:fd:db:95:27:db:0e:07:41:71:12:93:b6:0e: 62:90:bb:91:c2:09:45:0a:67:f6:ae:3f:3f:43:27:4a:79:f0: a5:d5:45:43:45:48:f5:68:c9:b1:c3:3c:35:9d:29:13:84:21: fd:06:e3:58:82:bd:42:a7:08:e3:82:73:88:5f:9b:e6:66:a5: 81:44:94:cf:ed:44:69:2a:5f:c4:f2:40:01:b3:7c:75:3d:f9: 2e:14:ec:b5:c8:d3:e5:46:df:91:80:07:02:9b:46:99:5a:88: 37:44:09:ea:41:58:5a:5a:42:93:60:91:da:8c:90:a9:70:cd: 84:69:5b:b0:6e:9f:b5:78:8c:f5:b6:53:dc:ce:c0:9d:8e:69: e4:c8:cf:1a:4f:68:8d:fe:0b:c2:6f:e0:9e:60:55:70:14:8f: 7a:8a:17:97:fc:5d:e5:5f:d9:7b:af:c1:ca:73:9e:07:40:39: a9:1f:e1:a7:a7:37:59:4f:ab:24:93:74:0c:59:8d:dc:92:e5: 8c:85:5f:38:0d:19:6d:41:0e:14:43:b9:16:6a:5d:d4:87:a4: 24:b7:51:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUwNDI0MjAyNzM5WhcNMjUwNTAxMjAyNzM5WjAYMRYwFAYD VQQDEw02ODBhOWViYi04NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uUF9MQc5Zf9kIdrdUfgASjAqCO4yQyNWCD8517dEkB4XGrkZt84Vbg0b69f xfbUF3yZHyvKLHFik4YeHt1S7gB1maeaVsftBOGmHlVhuOhf300+M6//lnsKTKAp wKQMDYHR0itp+1uWYNCFv6QN2xKOgJO6PeVnEq9pYm5ntBQ/hwGcFA3OQ3gSaAaY j9VfJJxBlXodeFy5EBbnY8Rm7/NpzQGRXpsK5ICmmfHsay9nVLBMmhGrA2DYb5HJ RYJ4/fdZX6dO+BFiDmTFdJOJUW9vRDnEXI9JoK+sTuJpVsOPypV5wFpkjBCC32kE ZMxUvbAcO9t4YQaVjvhhWLmSNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhMUSiV gfHMdnD41HQM8204/J9FMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBavPJAHdMOVd3N69WJDwgmeQaqnmKAX0cXTP8Kur/NaGUPBoDdMLcy nv3blSfbDgdBcRKTtg5ikLuRwglFCmf2rj8/QydKefCl1UVDRUj1aMmxwzw1nSkT hCH9BuNYgr1CpwjjgnOIX5vmZqWBRJTP7URpKl/E8kABs3x1PfkuFOy1yNPlRt+R gAcCm0aZWog3RAnqQVhaWkKTYJHajJCpcM2EaVuwbp+1eIz1tlPczsCdjmnkyM8a T2iN/gvCb+CeYFVwFI96iheX/F3lX9l7r8HKc54HQDmpH+GnpzdZT6skk3QMWY3c kuWMhV84DRltQQ4UQ7kWal3Uh6Qkt1GR -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:03 2025 by rpki-client