$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json) Hash identifier: BLEgGOI063IAKBJ1XTKKRj+F8qiuGt0Xb5X7r000ES8= Subject key identifier: 93:FB:28:C5:58:AD:04:5B:57:34:F4:20:C2:1A:0A:16:F1:F2:19:67 Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft Manifest number: 01BF Signing time: Fri 25 Apr 2025 02:20:32 +0000 Manifest this update: Fri 25 Apr 2025 02:20:31 +0000 Manifest next update: Fri 02 May 2025 02:20:31 +0000 Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: 4V3MVj7Yq0AeVaiXvj7g0Xr/Hj2ZjI4F93fyVEgqsZw=) 2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: i5f17u0APuwWVrNQJwRvrSbhYIzk4h0SdlZzDluJdHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Validity Not Before: Apr 25 02:20:31 2025 GMT Not After : May 2 02:20:31 2025 GMT Subject: CN=680af170-11e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:b4:e1:7f:73:32:50:83:dd:ef:43:9c:a9: fd:5c:d7:52:71:98:a1:97:71:a6:86:89:65:a8:5d: 59:3e:ab:78:c9:2e:06:a2:3c:cd:11:34:43:7c:8a: b8:90:a9:f4:15:05:a7:87:4a:cc:6b:3a:37:cd:c0: ed:7f:06:9d:8d:65:f0:0c:07:f0:66:6a:79:3c:f7: 96:61:bc:db:cd:c2:fc:fa:e3:10:22:14:23:a4:63: fc:19:38:2e:4d:1f:95:29:53:42:b1:e9:37:c5:11: eb:f6:5d:a3:29:03:7a:f2:a3:ec:8a:ea:0d:6e:8b: 6c:6e:ed:da:61:27:e5:23:30:ab:ff:66:71:49:42: a8:3a:5d:7c:ff:23:fa:31:1b:68:a1:08:3a:4e:7f: 44:93:92:83:6a:a0:63:ea:38:85:51:5f:be:39:49: c3:a2:c3:41:ae:fd:41:68:79:c6:22:36:08:ed:89: 10:be:ef:95:16:19:58:7c:fb:ea:d7:20:57:f9:b4: 9d:68:89:90:62:ee:8c:27:14:bf:3f:eb:ea:6d:29: 27:25:40:e2:e0:3e:7f:97:27:7e:5b:8d:9b:7f:e0: b5:0a:1d:97:8d:cd:29:f5:6d:8f:50:33:75:7e:16: e0:93:73:e5:45:41:46:51:d5:11:74:d1:12:46:58: 28:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FB:28:C5:58:AD:04:5B:57:34:F4:20:C2:1A:0A:16:F1:F2:19:67 X509v3 Authority Key Identifier: keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8e:9d:c5:48:b2:6b:d1:7a:7d:1b:27:f7:fb:8c:76:8b:34: aa:56:49:e6:c1:f7:fe:14:d6:80:49:c7:1f:b3:52:95:a8:34: 47:59:31:35:2e:33:51:c9:33:d7:22:f8:72:c6:e2:3e:a4:80: 07:2f:1e:ce:11:10:77:93:d6:2c:90:e4:a9:56:78:08:77:82: 0d:cf:ff:ab:6d:ad:da:27:d7:ea:44:31:74:70:7f:dc:c3:01: 8d:4b:58:94:5d:e0:d7:70:f6:a0:39:7a:28:2b:54:85:ce:ff: de:17:9f:cd:01:18:19:f0:a6:1b:a2:94:c3:ab:64:25:aa:67: 9d:86:af:dd:44:b3:7a:e1:f1:b2:a2:41:35:89:49:37:90:bf: bd:6e:53:a4:67:65:b1:b2:a7:fb:0c:39:71:64:c7:c3:aa:03: 79:3f:8b:7f:9d:8b:9d:a0:4c:66:10:ee:e9:23:20:c3:7a:19: a9:be:b3:d3:d1:19:8c:ca:70:06:fc:de:eb:4c:97:64:ab:cf: 5b:26:b9:dc:7e:ba:0b:a3:31:e4:e7:35:1b:f6:8b:80:d4:7e: 86:22:16:ba:b3:31:0d:74:d1:45:34:26:1e:cf:a8:48:cd:de: 19:4c:5e:30:ea:c9:9e:23:85:a7:51:f6:d5:40:70:f3:29:36: 23:28:1a:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MDMxMTAvBgNVBAUTKDQ1NkFGNUU1NjY3REUyNDhBOUNGMENFQjkwQzZEMUIz RDNFRDZGQTgwHhcNMjUwNDI1MDIyMDMxWhcNMjUwNTAyMDIyMDMxWjAYMRYwFAYD VQQDEw02ODBhZjE3MC0xMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYO04X9zMlCD3e9DnKn9XNdScZihl3GmhollqF1ZPqt4yS4GojzNETRDfIq4 kKn0FQWnh0rMazo3zcDtfwadjWXwDAfwZmp5PPeWYbzbzcL8+uMQIhQjpGP8GTgu TR+VKVNCsek3xRHr9l2jKQN68qPsiuoNbotsbu3aYSflIzCr/2ZxSUKoOl18/yP6 MRtooQg6Tn9Ek5KDaqBj6jiFUV++OUnDosNBrv1BaHnGIjYI7YkQvu+VFhlYfPvq 1yBX+bSdaImQYu6MJxS/P+vqbSknJUDi4D5/lyd+W42bf+C1Ch2Xjc0p9W2PUDN1 fhbgk3PlRUFGUdURdNESRlgoWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJP7KMVY rQRbVzT0IMIaChbx8hlnMB8GA1UdIwQYMBaAFEVq9eVmfeJIqc8M65DG0bPT7W+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkwMy9EODk4MjY1QThD MUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRraXB6d3pya01iUnM5UHRi NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXcjE1V1o5NGtpcHp3enJrTWJSczlQdGI2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkwMy9EODk4MjY1QThDMUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRr aXB6d3pya01iUnM5UHRiNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOjp3FSLJr0Xp9Gyf3+4x2izSqVknmwff+FNaASccfs1KVqDRHWTE1 LjNRyTPXIvhyxuI+pIAHLx7OERB3k9YskOSpVngId4INz/+rba3aJ9fqRDF0cH/c wwGNS1iUXeDXcPagOXooK1SFzv/eF5/NARgZ8KYbopTDq2Qlqmedhq/dRLN64fGy okE1iUk3kL+9blOkZ2Wxsqf7DDlxZMfDqgN5P4t/nYudoExmEO7pIyDDehmpvrPT 0RmMynAG/N7rTJdkq89bJrncfroLozHk5zUb9ouA1H6GIha6szENdNFFNCYez6hI zd4ZTF4w6smeI4WnUfbVQHDzKTYjKBqV -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:20 2025 by rpki-client