$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft File: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json) Hash identifier: fNcb2dri0Cn88g5eVj5uZepRHku+czCCiF+Wof9/2Rs= Subject key identifier: 4E:9D:3D:1F:EF:B1:34:9E:01:7F:94:C1:76:FD:2D:41:7F:AA:A2:9B Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 Certificate issuer: /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Certificate serial: 04E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft Manifest number: 04D5 Signing time: Thu 24 Apr 2025 23:34:17 +0000 Manifest this update: Thu 24 Apr 2025 23:34:16 +0000 Manifest next update: Thu 01 May 2025 23:34:16 +0000 Files and hashes: 1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: PLy4LmVv2Mtx9DUrkqDEAQ6Y57Pw1oestVUFFqEr0h0=) 2: 387C18C819B811EC841B010DC4F9AE02.roa (hash: SSxUlFmRZnQyfdZc684KEqFg9kqLpMFaUqQd4F+Mxrs=) 3: 7273624619B511EC98D2A883C4F9AE02.roa (hash: 4vfDTErE/YPzBBb/tkZtFZYbjVLXj35WS7FwgFIIRDc=) 4: 7EE93AAC893111EF824EA948C4F9AE02.roa (hash: 0qxVmtS0/Q5718VBgLAhk0g/i2FXx966gyKoh4X0d7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Validity Not Before: Apr 24 23:34:16 2025 GMT Not After : May 1 23:34:16 2025 GMT Subject: CN=680aca79-f1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:4f:c6:e3:15:65:f6:3c:03:2a:6f:2e:23: 68:2e:70:83:a1:13:23:8e:2f:9b:aa:20:fd:86:e4: 68:f7:ec:07:15:86:5a:e7:71:36:76:b3:b8:51:e8: 7f:cd:a2:fa:79:3b:dc:1e:ab:fb:1b:36:10:fe:c4: 95:bc:93:50:e0:a2:fa:57:ea:a4:60:cc:d5:c7:d2: 6d:7d:92:4a:f7:5d:f4:ab:0a:de:79:cd:59:c0:10: 75:5b:5b:43:ba:42:95:85:e1:5f:84:32:6e:6a:ad: ba:0e:be:70:06:51:10:43:cf:a5:75:60:da:c3:22: ee:23:b8:34:16:f6:61:47:37:f0:b3:3d:6e:5b:de: e9:0a:56:e8:ae:09:62:40:c4:2a:93:2f:28:03:0a: 39:d6:ea:18:c1:10:02:63:2c:69:e8:43:af:12:57: df:5a:c3:13:a0:54:64:f2:96:aa:ba:ea:00:21:64: 8e:6b:3b:d3:96:f2:0f:a0:29:e8:59:c2:cd:0a:0d: 1c:86:75:28:27:c1:59:eb:d7:52:75:99:c3:23:bf: be:6d:be:d4:7b:5d:2c:29:ab:71:f2:fc:c3:07:c6: 25:fe:e2:dc:24:ef:21:7c:8b:76:b7:4c:e3:18:fb: 18:4f:86:77:ae:a6:9b:6e:8e:b6:03:34:56:74:e2: eb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9D:3D:1F:EF:B1:34:9E:01:7F:94:C1:76:FD:2D:41:7F:AA:A2:9B X509v3 Authority Key Identifier: keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:49:c5:67:5a:3f:9e:ad:ea:b9:87:e0:d4:8a:be:0b:2d:76: f9:ef:5f:9d:22:12:f8:e5:ae:4b:bc:4b:c2:64:67:5f:a9:83: 8a:0b:b1:8c:00:28:39:55:f6:96:f6:6e:c0:51:68:92:1a:c1: a1:40:11:9b:7f:4d:3d:9d:51:bc:dc:a2:cd:e9:e8:69:1c:6f: 6b:b1:a4:9c:64:2d:5c:ef:7a:e8:e5:af:1d:20:a1:37:6c:19: 8a:0e:d7:d1:23:9f:6c:54:19:82:0a:81:8c:45:2b:5e:1d:de: 88:9a:7c:5b:3b:27:ed:e1:de:ff:d1:a5:b5:f4:df:02:a4:40: 29:51:72:25:33:24:7e:8f:87:b8:99:4e:16:45:6d:95:e4:68: a9:c1:03:88:f5:92:09:ce:dc:d9:b6:60:6b:4a:c8:c8:3b:ed: 30:1c:86:ff:a2:c5:e0:20:52:d1:7e:cc:4d:5c:b3:aa:4c:02: f6:2f:b5:f4:ba:d1:40:78:a9:37:5b:28:99:d1:f2:50:65:c3: 1b:59:60:e5:84:36:d9:f2:d1:f7:44:db:2e:2a:d2:c0:96:7b: a5:d0:ad:40:65:b8:b4:3c:56:e8:69:a0:cc:ad:4f:d2:86:79: d2:39:7c:35:12:1c:d0:62:29:65:56:3b:eb:78:ae:29:01:39: ce:35:7e:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5MzExMTAvBgNVBAUTKEMwMzU0NTBCRDFBMkQ0NEIxNTFFRTM4QzA4OTg4OEE1 QUY0QjgwNTkwHhcNMjUwNDI0MjMzNDE2WhcNMjUwNTAxMjMzNDE2WjAYMRYwFAYD VQQDEw02ODBhY2E3OS1mMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL5PxuMVZfY8AypvLiNoLnCDoRMjji+bqiD9huRo9+wHFYZa53E2drO4Ueh/ zaL6eTvcHqv7GzYQ/sSVvJNQ4KL6V+qkYMzVx9JtfZJK9130qwreec1ZwBB1W1tD ukKVheFfhDJuaq26Dr5wBlEQQ8+ldWDawyLuI7g0FvZhRzfwsz1uW97pClborgli QMQqky8oAwo51uoYwRACYyxp6EOvElffWsMToFRk8paquuoAIWSOazvTlvIPoCno WcLNCg0chnUoJ8FZ69dSdZnDI7++bb7Ue10sKatx8vzDB8Yl/uLcJO8hfIt2t0zj GPsYT4Z3rqabbo62AzRWdOLrLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6dPR/v sTSeAX+UwXb9LUF/qqKbMB8GA1UdIwQYMBaAFMA1RQvRotRLFR7jjAiYiKWvS4BZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDkzMS9EMUQzMkI2RTE5 QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFFc1ZIdU9NQ0ppSXBhOUxn RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEVkZDOUdpMUVzVkh1T01DSmlJcGE5TGdGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDkzMS9EMUQzMkI2RTE5QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFF c1ZIdU9NQ0ppSXBhOUxnRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjScVnWj+ereq5h+DUir4LLXb571+dIhL45a5LvEvCZGdfqYOKC7GM ACg5VfaW9m7AUWiSGsGhQBGbf009nVG83KLN6ehpHG9rsaScZC1c73ro5a8dIKE3 bBmKDtfRI59sVBmCCoGMRSteHd6ImnxbOyft4d7/0aW19N8CpEApUXIlMyR+j4e4 mU4WRW2V5GipwQOI9ZIJztzZtmBrSsjIO+0wHIb/osXgIFLRfsxNXLOqTAL2L7X0 utFAeKk3WyiZ0fJQZcMbWWDlhDbZ8tH3RNsuKtLAlnul0K1AZbi0PFboaaDMrU/S hnnSOXw1EhzQYillVjvreK4pATnONX4H -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:45 2025 by rpki-client