$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: x5Ah9YYSIdb0osTI3ig8BvQE0+mw2jtRaAfnNtsP84c= Subject key identifier: A6:50:80:9B:85:8D:AD:C4:63:44:67:77:22:73:B6:17:CD:78:FD:B6 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 01E7 Signing time: Fri 25 Apr 2025 01:55:12 +0000 Manifest this update: Fri 25 Apr 2025 01:55:12 +0000 Manifest next update: Fri 02 May 2025 01:55:12 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: t71hUybCrNRq+BgskDO0KMU4/vYP7W1JsGiBJlZ1XCk=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MniMCaT7GS5dM8liFRmMS+V0grGgkVjsR8fvxiwRJoU=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: yFTXv2eFumW58i8EpayoiAuuDpkxivQ9zhERap37PtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Apr 25 01:55:12 2025 GMT Not After : May 2 01:55:12 2025 GMT Subject: CN=680aeb80-ecd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:23:84:01:a5:98:de:09:e1:c1:16:ee:15: c0:51:12:da:5d:9c:01:4e:36:b7:ef:b5:84:94:3f: 3b:f4:76:44:40:37:8a:2b:3a:43:e0:ac:0c:9f:02: e1:a5:07:61:6f:ee:6c:1d:61:4e:aa:ca:b7:22:bf: 7a:eb:c8:e4:18:5d:be:a7:a5:b7:3e:4e:7c:57:a3: 74:a6:5b:82:32:41:8a:f1:8c:c1:84:90:fc:49:ec: e7:eb:32:7d:c6:2a:83:d9:8f:3b:a5:c5:99:f2:34: ec:99:c2:79:f7:80:3d:2c:a0:82:9d:fa:47:ff:25: 5b:0c:e3:ff:f9:49:4a:45:d7:52:2c:58:45:83:53: 80:72:54:c2:b5:30:80:17:c4:0f:b2:86:df:98:59: 66:c6:e2:89:9e:40:66:89:ba:74:23:ae:a7:ba:15: 4a:59:d5:08:29:74:96:b9:db:87:aa:55:e6:45:15: ee:88:cf:45:43:b9:3f:2a:d0:b8:5c:f0:7c:98:ba: 16:73:83:8c:7d:d7:f3:95:52:e2:77:dc:23:90:88: 74:4d:95:99:2f:81:29:29:8a:1e:7e:d3:7f:df:e5: de:36:83:03:3d:43:70:a7:3c:08:05:e8:eb:0b:28: 61:b2:10:d7:0f:3c:1d:98:bd:5a:7c:22:7b:59:44: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:50:80:9B:85:8D:AD:C4:63:44:67:77:22:73:B6:17:CD:78:FD:B6 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:90:1e:06:5a:4e:49:3c:f1:35:9f:e8:da:47:81:df:cf:d5: 1b:72:d1:28:1c:c8:89:03:71:05:11:54:08:00:29:f7:3d:d5: 16:9d:1a:79:f8:d6:79:77:1e:88:f0:8d:e2:a7:94:92:a6:27: 86:03:91:6d:56:89:dd:9b:63:bd:44:8b:02:08:19:4e:c9:70: 93:37:98:50:f6:c2:96:07:a8:a4:aa:03:01:43:5a:90:83:e6: e4:10:a3:ae:1b:f9:40:af:c0:36:d8:2f:ed:71:14:21:d7:c1: 00:69:aa:2b:b2:4c:36:77:64:48:3f:4b:f4:1f:11:97:01:d6: d9:fd:1c:2b:fc:c5:17:78:71:37:62:a3:3d:38:90:b3:ca:2c: f7:23:50:69:9b:bb:73:0e:bd:b2:0f:75:9a:99:fb:da:4d:af: 41:e5:5f:28:8a:57:35:5b:b4:83:95:c9:7a:e7:6f:81:c5:e4: 4a:b2:55:ca:53:84:e4:33:ba:df:a0:c5:79:7a:8d:22:27:20: a0:74:69:cf:44:0a:85:05:80:f8:86:cc:d4:92:e7:b8:56:1b: 85:43:42:ac:e2:44:12:5b:bf:96:a9:e8:11:06:8a:96:f8:c0: b0:d1:5c:a0:1b:ae:76:62:de:51:1a:fe:89:15:55:f4:5a:23: 7f:bd:7d:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUwNDI1MDE1NTEyWhcNMjUwNTAyMDE1NTEyWjAYMRYwFAYD VQQDEw02ODBhZWI4MC1lY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JgjhAGlmN4J4cEW7hXAURLaXZwBTja377WElD879HZEQDeKKzpD4KwMnwLh pQdhb+5sHWFOqsq3Ir9668jkGF2+p6W3Pk58V6N0pluCMkGK8YzBhJD8Sezn6zJ9 xiqD2Y87pcWZ8jTsmcJ594A9LKCCnfpH/yVbDOP/+UlKRddSLFhFg1OAclTCtTCA F8QPsobfmFlmxuKJnkBmibp0I66nuhVKWdUIKXSWuduHqlXmRRXuiM9FQ7k/KtC4 XPB8mLoWc4OMfdfzlVLid9wjkIh0TZWZL4EpKYoeftN/3+XeNoMDPUNwpzwIBejr CyhhshDXDzwdmL1afCJ7WUT7/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZQgJuF ja3EY0RndyJzthfNeP22MB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBkB4GWk5JPPE1n+jaR4Hfz9UbctEoHMiJA3EFEVQIACn3PdUWnRp5 +NZ5dx6I8I3ip5SSpieGA5FtVondm2O9RIsCCBlOyXCTN5hQ9sKWB6ikqgMBQ1qQ g+bkEKOuG/lAr8A22C/tcRQh18EAaaorskw2d2RIP0v0HxGXAdbZ/Rwr/MUXeHE3 YqM9OJCzyiz3I1Bpm7tzDr2yD3WamfvaTa9B5V8oilc1W7SDlcl652+BxeRKslXK U4TkM7rfoMV5eo0iJyCgdGnPRAqFBYD4hszUkue4VhuFQ0Ks4kQSW7+WqegRBoqW +MCw0VygG652Yt5RGv6JFVX0WiN/vX36 -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:04 2025 by rpki-client