$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json) Hash identifier: WsvhzbCHNBv2vT9HWD1hpCmxhDhVgX5zwVEYilqTxcg= Subject key identifier: F7:81:0F:A5:50:31:E9:E5:4E:B7:AE:A9:84:E9:6C:76:B0:03:B7:B0 Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft Manifest number: 36 Signing time: Fri 25 Apr 2025 06:36:53 +0000 Manifest this update: Fri 25 Apr 2025 06:36:53 +0000 Manifest next update: Fri 02 May 2025 06:36:53 +0000 Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: 27CnZk2EkZ04Zrwx2zAsjye9zWbvVzqfyTa4tRppeKc=) 2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: BqSp/Te9KMd8YfouUPeFKU/cx03YQIHgdt5+594sWOw=) 3: A8495504D4D011EFB6100F2DC4F9AE02.roa (hash: Md7FVpdf2MqwxZW9/DFpDf2r/UivUhUhenoGocEe9lg=) 4: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: QHLRTEx6Qgh4+lTDIbuuL3PGb+4V0jC1oeBCPhaLkPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Validity Not Before: Apr 25 06:36:53 2025 GMT Not After : May 2 06:36:53 2025 GMT Subject: CN=680b2d85-b1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:1c:b9:eb:3b:9c:db:58:8f:31:47:6f:da: c2:d2:10:bf:0b:f5:f6:c3:37:b1:7c:0c:ee:4e:d2: 2a:53:c2:24:ec:41:c8:3e:94:55:b5:3e:3a:bd:20: df:9f:d3:8b:3c:67:5e:e4:ec:b0:86:06:e2:08:ef: ed:b9:19:b7:6c:9d:2d:b6:0e:26:1d:df:8f:6e:aa: 3d:b9:c8:42:7e:92:f2:ee:6d:97:86:fb:14:36:bf: 43:c3:c8:f3:17:54:3d:2a:c9:4a:f7:72:fb:75:24: ed:51:b1:47:a7:3d:de:84:cb:64:c4:ae:20:69:de: 0a:30:fb:ed:3b:49:b9:0e:3e:35:2b:3f:e6:84:5c: 64:e6:5b:1f:f7:82:e8:ba:3c:94:55:a5:2d:5b:ad: 30:4b:d9:de:f4:2d:64:7d:df:47:1c:ee:55:31:7d: d6:c0:00:00:6b:a2:80:10:15:9b:fa:d0:33:ad:4d: 19:21:ee:35:80:c0:5c:db:e6:98:b4:2e:ab:c4:ea: 5c:c8:3e:06:4a:5e:14:53:61:8f:89:f9:f2:de:6d: 29:3c:32:fc:48:f9:a7:ad:c2:67:22:1a:3a:49:24: db:f4:8c:5e:3e:66:73:2d:9f:c0:32:20:b0:a5:fb: 22:21:64:fe:39:ee:77:51:50:60:61:99:8e:6c:2d: 85:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:81:0F:A5:50:31:E9:E5:4E:B7:AE:A9:84:E9:6C:76:B0:03:B7:B0 X509v3 Authority Key Identifier: keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:3f:91:41:c2:9f:9e:ae:86:10:ba:c3:ed:bd:48:30:98:4e: c5:52:21:29:96:d0:e2:1e:0a:51:c6:02:aa:6a:9c:78:d8:13: 89:ff:f9:a4:11:d7:58:84:9a:ea:2b:5e:16:89:1f:b3:dc:36: 56:c3:50:32:28:4c:99:5a:b1:80:77:6a:25:b5:a3:23:77:d3: 1f:09:29:8d:17:c8:4c:57:88:69:d6:00:a6:df:06:06:bd:79: ff:61:bd:e0:ec:ad:dd:91:2e:1a:7f:ea:a4:72:5e:00:0f:6f: 56:21:28:88:6d:53:c2:7d:f9:08:c2:92:62:b0:e1:4b:ff:ef: e5:d3:6b:79:5a:61:ad:94:4e:fd:2a:83:19:17:b4:9c:7f:53: 31:73:91:a4:41:3e:ee:8c:54:24:cb:cb:ae:91:4d:b5:de:06: 18:da:3d:1c:30:d7:81:da:8c:08:ea:c1:5d:33:c2:ac:04:b7: 6f:d8:32:65:3e:6a:a5:ec:e6:d0:3d:60:25:d9:2b:ea:05:18: 37:72:3c:a0:a3:35:78:4e:fa:f4:d7:41:bf:6b:96:46:d5:f1: 22:d8:33:55:a5:dd:80:ec:89:38:52:64:3e:39:86:d6:29:80: f2:a7:40:58:f6:e4:e8:2d:2e:08:40:7f:a8:9a:c0:53:73:a8: f4:2a:13:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVFQTExMC8GA1UEBRMoRDYwQzMwQjFBOUY1OUM5NTlBRDQ5NjdGMkY2RDU3MkFD Qjc1Mjk5QzAeFw0yNTA0MjUwNjM2NTNaFw0yNTA1MDIwNjM2NTNaMBgxFjAUBgNV BAMTDTY4MGIyZDg1LWIxZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuSRy56zuc21iPMUdv2sLSEL8L9fbDN7F8DO5O0ipTwiTsQcg+lFW1Pjq9IN+f 04s8Z17k7LCGBuII7+25GbdsnS22DiYd349uqj25yEJ+kvLubZeG+xQ2v0PDyPMX VD0qyUr3cvt1JO1RsUenPd6Ey2TEriBp3gow++07SbkOPjUrP+aEXGTmWx/3gui6 PJRVpS1brTBL2d70LWR930cc7lUxfdbAAABrooAQFZv60DOtTRkh7jWAwFzb5pi0 LqvE6lzIPgZKXhRTYY+J+fLebSk8MvxI+aetwmciGjpJJNv0jF4+ZnMtn8AyILCl +yIhZP457ndRUGBhmY5sLYWTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU94EPpVAx 6eVOt66phOlsdrADt7AwHwYDVR0jBBgwFoAU1gwwsan1nJWa1JZ/L21XKst1KZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUVBL0UzRkNEMTQ0RDRD RjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUta dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWd3d3NhbjFuSldhMUpaX0wyMVhLc3QxS1p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 RUVBL0UzRkNEMTQ0RDRDRjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpX YTFKWl9MMjFYS3N0MUtady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJI/kUHCn56uhhC6w+29SDCYTsVSISmW0OIeClHGAqpqnHjYE4n/+aQR 11iEmuorXhaJH7PcNlbDUDIoTJlasYB3aiW1oyN30x8JKY0XyExXiGnWAKbfBga9 ef9hveDsrd2RLhp/6qRyXgAPb1YhKIhtU8J9+QjCkmKw4Uv/7+XTa3laYa2UTv0q gxkXtJx/UzFzkaRBPu6MVCTLy66RTbXeBhjaPRww14HajAjqwV0zwqwEt2/YMmU+ aqXs5tA9YCXZK+oFGDdyPKCjNXhO+vTXQb9rlkbV8SLYM1Wl3YDsiThSZD45htYp gPKnQFj25OgtLghAf6iawFNzqPQqEws= -----END CERTIFICATE-----Generated at Sat Apr 26 13:39:10 2025 by rpki-client