$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: +XEIsKkk332esBZRTF3l6CVtAUooz9/WVIdtqOrOu+s= Subject key identifier: C9:C1:B9:23:49:D1:20:0F:DB:EB:32:EE:62:C2:BB:D2:E1:E9:37:D1 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0C54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0C4A Signing time: Fri 30 May 2025 18:36:10 +0000 Manifest this update: Fri 30 May 2025 18:36:09 +0000 Manifest next update: Fri 06 Jun 2025 18:36:09 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: +f0wV0oQDpA9J0t0hThQsA0sKKvvoKG+hMtaLJC4l4U=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2GXsJ3lmpDTCyJ0+6RHbUPHuhr06/ng834HAohqlZ5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: May 30 18:36:09 2025 GMT Not After : Jun 6 18:36:09 2025 GMT Subject: CN=6839fa9a-f439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:18:ff:e4:26:a5:d7:01:a1:3a:56:a1:e2:ab: 2b:08:60:88:9b:bd:cc:1d:27:f8:4b:02:3c:d6:a5: 00:fe:47:45:44:43:eb:cd:1b:87:90:36:de:eb:79: 8c:86:2d:e0:c9:49:c0:bd:0a:58:c0:3c:91:35:f3: cf:fa:b8:52:91:a8:bc:4d:da:7d:cc:f1:01:03:9f: f7:6d:5c:61:57:8c:b0:ca:1f:4b:d6:44:38:43:5d: cb:96:63:29:50:cd:18:fb:93:6e:4e:13:ed:cf:1e: d8:72:1e:94:c5:4d:1d:45:fb:55:c7:e5:98:d5:49: 41:4d:d5:ac:1e:40:37:01:c8:f0:68:9a:24:90:55: 82:87:58:a2:0f:c5:26:d1:5c:f3:9d:b4:1a:d5:5f: 28:a8:6c:d2:76:b9:fe:d7:ab:b1:5e:63:44:13:b9: 10:e6:33:8b:6b:23:25:d8:9f:a8:ef:f3:a6:b5:ff: 5e:d3:69:7f:31:75:22:71:28:36:27:9b:a5:3a:5c: fb:f1:8d:c0:6b:98:e6:08:9c:4c:15:d2:16:81:b9: 48:43:2d:73:23:03:98:c6:3f:7e:c8:9a:31:1e:8f: df:4a:a9:f1:ab:1e:83:12:66:6a:e9:de:2e:02:a6: 67:24:83:5a:91:ee:84:a2:9b:5c:38:02:84:29:0c: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C1:B9:23:49:D1:20:0F:DB:EB:32:EE:62:C2:BB:D2:E1:E9:37:D1 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fc:0c:6a:0c:d9:0a:db:01:af:71:66:6d:8e:1c:cd:a3:81: 2d:8c:89:45:c5:a0:0b:a2:8a:2b:3c:c9:5b:3b:36:70:68:99: 09:1b:aa:01:c6:66:05:ee:4f:80:a7:02:68:b5:5a:40:93:9e: ec:09:d6:fa:6b:5d:a6:4d:04:63:11:c8:27:09:7f:a4:a6:63: fe:24:db:7a:ac:3b:08:11:9d:dc:4c:a6:b4:66:b5:3e:45:21: 1d:48:c7:10:50:ad:8d:b7:ba:07:64:62:d2:21:c9:63:9b:3b: 1a:70:2f:fa:0a:23:74:5a:9d:be:c2:d7:d6:83:32:7d:a9:4e: 98:7c:86:0c:63:61:2f:2b:0b:ce:e4:da:53:2a:5b:a1:cf:c5: 5f:d5:fc:e6:a2:5f:df:8d:0f:9d:84:9f:50:9b:bb:36:c4:62: 03:c7:cc:4f:79:63:03:2f:19:cf:8f:a2:f5:1d:13:18:07:36: fd:f7:c8:ce:2d:5f:73:1f:be:cd:c2:45:af:a5:e5:f9:63:a7: f1:65:e9:88:3a:a1:2a:aa:45:63:66:2e:20:f3:da:42:36:16: 35:6b:e4:8c:63:8c:6c:e1:8d:03:25:12:48:3a:ff:4c:0c:57: 00:9a:3c:82:f2:41:fa:fd:a2:0f:52:bf:0a:e7:48:74:4b:d6: dd:45:fa:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjUwNTMwMTgzNjA5WhcNMjUwNjA2MTgzNjA5WjAYMRYwFAYD VQQDEw02ODM5ZmE5YS1mNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xj/5Cal1wGhOlah4qsrCGCIm73MHSf4SwI81qUA/kdFREPrzRuHkDbe63mM hi3gyUnAvQpYwDyRNfPP+rhSkai8Tdp9zPEBA5/3bVxhV4ywyh9L1kQ4Q13LlmMp UM0Y+5NuThPtzx7Ych6UxU0dRftVx+WY1UlBTdWsHkA3AcjwaJokkFWCh1iiD8Um 0VzznbQa1V8oqGzSdrn+16uxXmNEE7kQ5jOLayMl2J+o7/Omtf9e02l/MXUicSg2 J5ulOlz78Y3Aa5jmCJxMFdIWgblIQy1zIwOYxj9+yJoxHo/fSqnxqx6DEmZq6d4u AqZnJINake6EoptcOAKEKQzZ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnBuSNJ 0SAP2+sy7mLCu9Lh6TfRMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI/AxqDNkK2wGvcWZtjhzNo4EtjIlFxaALooorPMlbOzZwaJkJG6oB xmYF7k+ApwJotVpAk57sCdb6a12mTQRjEcgnCX+kpmP+JNt6rDsIEZ3cTKa0ZrU+ RSEdSMcQUK2Nt7oHZGLSIcljmzsacC/6CiN0Wp2+wtfWgzJ9qU6YfIYMY2EvKwvO 5NpTKluhz8Vf1fzmol/fjQ+dhJ9Qm7s2xGIDx8xPeWMDLxnPj6L1HRMYBzb998jO LV9zH77NwkWvpeX5Y6fxZemIOqEqqkVjZi4g89pCNhY1a+SMY4xs4Y0DJRJIOv9M DFcAmjyC8kH6/aIPUr8K50h0S9bdRfon -----END CERTIFICATE-----Generated at Sat May 31 17:39:22 2025 by rpki-client