$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json) Hash identifier: 2Kd0+4nNIf8AdEXtR0aHibehyorw56ktvOcNFYy6hqE= Subject key identifier: 84:E6:74:1D:15:FB:3F:55:11:30:19:F0:AE:37:80:2C:DE:23:B0:76 Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft Manifest number: E5 Signing time: Sun 27 Apr 2025 04:19:31 +0000 Manifest this update: Sun 27 Apr 2025 04:19:31 +0000 Manifest next update: Sun 04 May 2025 04:19:31 +0000 Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: LgC5fKw7TSWJG4YJqbfSM4s7Io/RsUwvaESoxiBOtm4=) 2: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: q9sVPpnGHT0TBWPu4k07DgCGJ80E6prLVfQ+m+J3OXE=) 3: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: EBWBEqR3i5PxLdfH1mN7syf09hARUIbnkSV4IoogUv4=) 4: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: QXK92fzcUKDMjTiStNYvMQ27jRd0fX97PndGvgz1laU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Validity Not Before: Apr 27 04:19:31 2025 GMT Not After : May 4 04:19:31 2025 GMT Subject: CN=680db053-ca54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f5:ba:02:95:56:69:d0:57:91:cf:5c:5d:8d: 25:af:50:96:ca:50:a2:d6:c7:ac:8d:40:09:3f:41: aa:64:7d:c5:66:30:fa:4b:bd:ec:24:91:ae:95:8f: c7:73:c7:0e:fc:d6:5c:ff:2a:20:58:e7:35:2f:10: 54:1c:46:3a:18:f8:cf:ed:1a:3d:03:92:b2:c7:0b: a1:03:18:ff:19:92:b3:7e:e3:3f:d1:45:05:b2:f4: 07:06:5f:93:c0:b8:75:b2:bc:7c:4c:d5:3f:c0:aa: 98:0d:32:f0:4c:17:4e:b9:d3:f7:b2:8d:53:44:9b: d1:47:e4:27:47:f2:15:8c:87:b8:78:30:6f:45:e9: 85:22:75:24:5e:e2:ae:e8:4b:dd:11:b1:1f:34:a1: fe:86:b0:42:a2:0d:e4:2d:5e:3b:b1:d1:01:c6:38: ad:c4:e4:4e:be:99:99:d5:ea:2f:db:a6:86:61:bf: 12:9e:46:64:e2:3c:56:90:fd:61:d6:5a:f4:86:c9: 52:10:9c:32:4d:5d:ee:42:5f:8d:3c:a7:7e:9b:d4: 55:eb:4b:36:ec:97:5d:7a:ff:ec:09:5b:d3:72:99: 4c:d7:d7:52:14:9e:41:a3:35:d1:9a:5b:30:07:ea: 18:d8:e0:f1:0d:d7:56:1b:02:bc:a4:0f:a0:7e:23: 6c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E6:74:1D:15:FB:3F:55:11:30:19:F0:AE:37:80:2C:DE:23:B0:76 X509v3 Authority Key Identifier: keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:0c:31:bc:ee:8a:4f:c6:7d:6a:6f:6d:52:d8:dc:5b:3e:39: 69:f9:cd:88:f2:cf:1b:08:e5:48:93:24:63:c2:5d:a8:4c:d6: 74:0f:09:8d:de:77:b1:7f:cc:75:aa:44:35:ec:3e:58:c1:be: 11:60:04:a3:db:12:11:ac:7a:ef:ec:cc:45:1b:9c:be:1a:bd: 50:69:99:ef:df:e7:cb:98:7a:0d:b6:11:9e:02:ad:0b:93:49: d4:92:2f:f3:0d:55:3e:e2:d8:43:e5:6b:19:8c:e8:81:cc:27: 56:56:10:22:37:98:ae:f5:8d:6a:e1:d5:fa:05:98:f5:02:b9: 45:8f:8c:a3:04:19:b7:ba:c4:0f:11:12:67:7b:a4:f2:fd:63: 13:7b:91:b6:e2:b0:be:51:94:0c:9c:57:80:31:0c:b0:cb:b0: cc:6c:75:ee:79:b4:51:46:48:d3:ed:33:b2:77:a9:a8:7a:a6: 1b:14:02:3a:8f:5d:3e:b8:e1:5e:a8:78:7e:be:78:6f:7e:cc: 79:38:f2:c9:17:9b:b7:1b:84:02:e4:38:5c:33:bc:37:1c:2f: f1:1e:9e:68:79:50:8c:01:c8:a0:bf:a8:fd:f6:c3:4f:fc:11: 48:b1:49:e8:08:23:f1:41:a1:c2:b9:80:ac:77:6f:9b:18:46: 1a:b9:07:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDVCNUNDNDAzMDlBMDdDMDNERjBCNjMwNEZDRDg0MEY5 NTBCRkIwNDEwHhcNMjUwNDI3MDQxOTMxWhcNMjUwNTA0MDQxOTMxWjAYMRYwFAYD VQQDEw02ODBkYjA1My1jYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/W6ApVWadBXkc9cXY0lr1CWylCi1sesjUAJP0GqZH3FZjD6S73sJJGulY/H c8cO/NZc/yogWOc1LxBUHEY6GPjP7Ro9A5KyxwuhAxj/GZKzfuM/0UUFsvQHBl+T wLh1srx8TNU/wKqYDTLwTBdOudP3so1TRJvRR+QnR/IVjIe4eDBvRemFInUkXuKu 6EvdEbEfNKH+hrBCog3kLV47sdEBxjitxOROvpmZ1eov26aGYb8SnkZk4jxWkP1h 1lr0hslSEJwyTV3uQl+NPKd+m9RV60s27Jddev/sCVvTcplM19dSFJ5BozXRmlsw B+oY2ODxDddWGwK8pA+gfiNsPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITmdB0V +z9VETAZ8K43gCzeI7B2MB8GA1UdIwQYMBaAFFtcxAMJoHwD3wtjBPzYQPlQv7BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi82RUI5QzAzRUM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZBUGZDMk1FX05oQS1WQ19z RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi82RUI5QzAzRUM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZB UGZDMk1FX05oQS1WQ19zRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzDDG87opPxn1qb21S2NxbPjlp+c2I8s8bCOVIkyRjwl2oTNZ0DwmN 3nexf8x1qkQ17D5Ywb4RYASj2xIRrHrv7MxFG5y+Gr1QaZnv3+fLmHoNthGeAq0L k0nUki/zDVU+4thD5WsZjOiBzCdWVhAiN5iu9Y1q4dX6BZj1ArlFj4yjBBm3usQP ERJne6Ty/WMTe5G24rC+UZQMnFeAMQywy7DMbHXuebRRRkjT7TOyd6moeqYbFAI6 j10+uOFeqHh+vnhvfsx5OPLJF5u3G4QC5DhcM7w3HC/xHp5oeVCMAcigv6j99sNP /BFIsUnoCCPxQaHCuYCsd2+bGEYauQck -----END CERTIFICATE-----Generated at Sun Apr 27 09:22:15 2025 by rpki-client