$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft File: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json) Hash identifier: qfWWKSnVLsRD6zb+cLEg/EE2zfAzHLuy0TfqDHbgIj0= Subject key identifier: 47:EE:F7:6B:AF:F0:AE:9A:36:32:A4:77:3A:3C:0E:EA:BF:D5:4E:DB Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Certificate serial: 08B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft Manifest number: 08B3 Signing time: Sun 20 Apr 2025 20:15:01 +0000 Manifest this update: Sun 20 Apr 2025 20:15:01 +0000 Manifest next update: Sun 27 Apr 2025 20:15:01 +0000 Files and hashes: 1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: epIUYpDUhXG0f84t1qaMvjLJWuDpvgKTAmxX9bSOma4=) 2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: qTuGE1JcRtd/cW9n5J8BXF2j1PTZne38og2GGYl8DqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Validity Not Before: Apr 20 20:15:01 2025 GMT Not After : Apr 27 20:15:01 2025 GMT Subject: CN=680555c5-a295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:ed:65:8b:0a:c2:1f:05:18:d3:5a:a4:c3: 8d:b7:e0:f0:01:b0:bd:2b:e4:f9:00:9c:f8:3f:7d: c1:c1:b1:96:5b:ab:dd:d1:05:de:12:83:dd:de:ab: f4:8e:04:29:77:14:e0:fc:89:eb:c4:2c:aa:1c:40: 88:d3:bb:78:48:ca:dc:f5:25:d5:87:9c:6b:e0:e5: 6a:4f:33:6f:8e:6e:ca:31:a1:a8:00:27:10:13:e8: a1:b5:0a:43:85:76:15:74:06:4d:2a:80:b6:03:5a: de:22:e6:54:a1:20:1c:69:a6:da:df:73:b3:49:d8: f2:ff:13:51:42:80:e2:86:21:e5:ee:60:e2:8b:0e: 56:7d:5a:f1:2c:f3:28:d2:b7:03:2e:e2:c8:be:4f: 7d:ba:81:f1:1d:be:fd:58:8d:63:f5:ff:c7:58:7a: dd:93:ac:d0:01:8f:cc:bb:44:1b:51:73:b0:ce:66: 27:21:a0:1c:7b:fb:f1:25:e9:ff:c8:cd:7f:36:f8: ce:5b:08:96:b2:7b:92:73:09:3f:af:cf:b8:6b:fc: b1:e1:e7:6f:6f:88:ae:6e:9c:a2:33:68:a2:ea:35: 62:8d:e7:a1:ce:eb:15:34:ae:0d:4e:05:80:68:b9: 85:3b:ea:44:f2:27:be:c0:dd:84:ac:f4:b0:13:86: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EE:F7:6B:AF:F0:AE:9A:36:32:A4:77:3A:3C:0E:EA:BF:D5:4E:DB X509v3 Authority Key Identifier: keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5d:67:1a:79:d8:10:47:7f:9d:91:2f:3c:14:9e:48:d9:07: af:bc:20:ef:72:29:6f:06:54:e8:f1:61:25:0b:4b:c9:8f:dc: 29:79:06:d6:28:40:89:cb:0f:52:54:1e:ca:bc:ae:19:c0:f1: 7d:69:95:81:50:b0:a1:d7:ae:e1:4d:35:f9:60:17:72:0a:30: 6b:98:9b:01:6b:0c:96:1a:61:5a:07:24:58:79:79:2a:ee:5b: c3:17:78:06:3f:84:2d:8c:02:84:49:55:cd:6d:9f:c9:2a:44: 3a:f9:29:43:8e:b6:f0:c1:fd:0b:65:3e:45:10:29:96:02:d0: de:31:42:23:08:5d:db:80:5e:0e:55:24:57:aa:de:e8:1d:ef: 77:c8:be:8e:a0:1e:5b:ad:8c:d0:db:f6:2d:88:72:a4:63:8d: 4c:8a:99:66:c1:77:55:f2:e3:2e:e5:6e:9d:a6:d5:12:04:7d: 6e:fd:82:04:49:f2:16:81:73:95:cb:44:40:c7:c8:87:41:ce: 80:e7:94:57:0b:27:81:a7:1f:ca:2d:fc:08:fc:fc:72:b1:01: 6e:c1:b9:12:fb:d2:41:05:66:04:6d:21:64:35:72:ae:0a:d8: ab:0e:8f:7d:1e:3e:c1:4c:24:49:3d:a0:d9:41:ba:0b:ac:8e: 90:c1:57:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMjkxMTAvBgNVBAUTKDVCRjYyNDM5OTBBOTQ2NEM4NUI3ODIzREI0MjZFMkFC OTY3MjBBM0MwHhcNMjUwNDIwMjAxNTAxWhcNMjUwNDI3MjAxNTAxWjAYMRYwFAYD VQQDEw02ODA1NTVjNS1hMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+ntZYsKwh8FGNNapMONt+DwAbC9K+T5AJz4P33BwbGWW6vd0QXeEoPd3qv0 jgQpdxTg/InrxCyqHECI07t4SMrc9SXVh5xr4OVqTzNvjm7KMaGoACcQE+ihtQpD hXYVdAZNKoC2A1reIuZUoSAcaaba33OzSdjy/xNRQoDihiHl7mDiiw5WfVrxLPMo 0rcDLuLIvk99uoHxHb79WI1j9f/HWHrdk6zQAY/Mu0QbUXOwzmYnIaAce/vxJen/ yM1/NvjOWwiWsnuScwk/r8+4a/yx4edvb4iubpyiM2ii6jVijeehzusVNK4NTgWA aLmFO+pE8ie+wN2ErPSwE4YLZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfu92uv 8K6aNjKkdzo8Duq/1U7bMB8GA1UdIwQYMBaAFFv2JDmQqUZMhbeCPbQm4quWcgo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUyOS9ERDEzRjhGMEIy OUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJreUZ0NEk5dENiaXE1WnlD ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dfWWtPWkNwUmt5RnQ0STl0Q2JpcTVaeUNqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUyOS9ERDEzRjhGMEIyOUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJr eUZ0NEk5dENiaXE1WnlDancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7XWcaedgQR3+dkS88FJ5I2QevvCDvcilvBlTo8WElC0vJj9wpeQbW KECJyw9SVB7KvK4ZwPF9aZWBULCh167hTTX5YBdyCjBrmJsBawyWGmFaByRYeXkq 7lvDF3gGP4QtjAKESVXNbZ/JKkQ6+SlDjrbwwf0LZT5FECmWAtDeMUIjCF3bgF4O VSRXqt7oHe93yL6OoB5brYzQ2/YtiHKkY41MiplmwXdV8uMu5W6dptUSBH1u/YIE SfIWgXOVy0RAx8iHQc6A55RXCyeBpx/KLfwI/PxysQFuwbkS+9JBBWYEbSFkNXKu CtirDo99Hj7BTCRJPaDZQboLrI6QwVet -----END CERTIFICATE-----Generated at Tue Apr 22 03:28:58 2025 by rpki-client