$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: gFaP0iCCdlKYFgRLJqbUFsFZ83+QALpUtBLTsi/EFyQ= Subject key identifier: 16:7C:70:78:D7:52:5E:B9:7F:7E:C3:81:12:A5:A7:9F:0A:BD:09:90 Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 10A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 109A Signing time: Fri 30 May 2025 17:30:35 +0000 Manifest this update: Fri 30 May 2025 17:30:34 +0000 Manifest next update: Fri 06 Jun 2025 17:30:34 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: WDqMFg2NIj8/+2Kju4fC+xd6mI1lUnBV7AGDDPCPSYE=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4258 (0x10a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: May 30 17:30:34 2025 GMT Not After : Jun 6 17:30:34 2025 GMT Subject: CN=6839eb3b-340c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:6c:31:a0:0d:38:99:cf:ba:35:15:f4:78: 5d:52:a5:f6:7b:73:c4:c4:16:41:51:53:88:b4:d5: d9:c9:c4:7e:a4:fe:fa:f0:c8:a2:4c:2c:69:45:f3: d6:9b:e0:ed:ff:15:ef:68:3d:17:7d:b9:ee:ed:d7: 72:ec:1d:eb:30:68:9e:b7:70:c9:dc:58:99:ee:6f: 81:7c:e5:35:4a:d0:f5:a3:9e:ba:40:d9:e7:b4:90: 40:15:bf:d0:a8:af:d6:a9:c2:ad:63:66:b6:a5:e6: 52:25:43:fc:de:e6:3b:38:1e:43:c9:95:b7:76:2f: 36:81:7c:7b:7e:2a:ed:b4:d5:00:a6:58:7c:51:b1: 10:74:4f:96:07:b5:53:3c:13:7d:d7:57:f4:7d:ef: 13:af:2e:58:0e:90:2e:21:09:22:05:f1:26:7f:2a: 65:19:38:0f:c6:ae:3c:cc:c8:8e:47:f0:04:f5:42: 4b:86:06:0a:55:8f:63:03:16:93:4a:6a:6c:38:b1: ab:46:b0:7d:ad:ed:f5:18:d0:20:8a:6e:e8:29:98: 6e:db:4d:1d:55:11:f7:c1:ab:f6:f0:80:1c:6b:9e: 17:37:23:81:33:05:51:c4:9c:a4:97:21:fa:39:a3: d2:58:8a:47:2d:f1:39:a5:78:a3:af:de:ec:ab:00: cf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7C:70:78:D7:52:5E:B9:7F:7E:C3:81:12:A5:A7:9F:0A:BD:09:90 X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e9:49:e7:48:72:65:83:20:51:48:7d:0f:5d:3a:1a:d7:d6: 18:af:00:b5:a5:f9:c4:2b:74:c2:3c:1e:0f:89:f6:85:9f:0c: 19:e1:a9:c4:b5:9e:f0:95:c3:7d:f1:cc:9b:3a:3e:ab:8d:8b: 0a:f4:f6:1d:1b:cd:f1:91:9a:4d:0a:14:4d:97:90:dc:27:f0: f7:df:1d:11:43:ef:6b:73:8e:ca:a6:74:88:bb:5d:79:41:a2: f7:99:fa:f8:f1:39:d7:2b:32:77:3d:f1:61:f6:2c:03:be:d5: e0:7e:76:2f:bb:a7:64:31:30:b6:0d:02:47:76:a1:3e:08:d5: c7:c0:3e:ab:92:20:61:68:37:e2:81:e9:aa:f7:15:2d:92:97: 2f:9c:2d:e0:f0:bb:78:9e:5a:da:5d:f7:d9:b8:4f:3f:72:13: 73:92:1d:84:15:60:26:e1:e5:44:6f:99:59:e5:75:61:92:af: 88:b7:17:34:a5:03:69:e4:1c:8c:8a:b1:1d:8e:4c:54:d5:f3: 74:b5:f2:43:37:7e:cc:ef:93:0e:fe:d6:de:1e:c1:e1:10:65: c0:5f:ea:f0:0f:94:aa:25:43:d7:37:8d:0a:1b:e9:2a:a1:cd: b9:f1:8a:9a:30:52:be:f0:29:22:9a:1f:44:21:6b:2c:81:f5: 5d:bb:11:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjUwNTMwMTczMDM0WhcNMjUwNjA2MTczMDM0WjAYMRYwFAYD VQQDEw02ODM5ZWIzYi0zNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1lsMaANOJnPujUV9HhdUqX2e3PExBZBUVOItNXZycR+pP768MiiTCxpRfPW m+Dt/xXvaD0Xfbnu7ddy7B3rMGiet3DJ3FiZ7m+BfOU1StD1o566QNnntJBAFb/Q qK/WqcKtY2a2peZSJUP83uY7OB5DyZW3di82gXx7firttNUAplh8UbEQdE+WB7VT PBN911f0fe8Try5YDpAuIQkiBfEmfyplGTgPxq48zMiOR/AE9UJLhgYKVY9jAxaT SmpsOLGrRrB9re31GNAgim7oKZhu200dVRH3wav28IAca54XNyOBMwVRxJyklyH6 OaPSWIpHLfE5pXijr97sqwDP+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZ8cHjX Ul65f37DgRKlp58KvQmQMB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF6UnnSHJlgyBRSH0PXToa19YYrwC1pfnEK3TCPB4PifaFnwwZ4anE tZ7wlcN98cybOj6rjYsK9PYdG83xkZpNChRNl5DcJ/D33x0RQ+9rc47KpnSIu115 QaL3mfr48TnXKzJ3PfFh9iwDvtXgfnYvu6dkMTC2DQJHdqE+CNXHwD6rkiBhaDfi gemq9xUtkpcvnC3g8Lt4nlraXffZuE8/chNzkh2EFWAm4eVEb5lZ5XVhkq+Itxc0 pQNp5ByMirEdjkxU1fN0tfJDN37M75MO/tbeHsHhEGXAX+rwD5SqJUPXN40KG+kq oc258YqaMFK+8Ckimh9EIWssgfVduxHv -----END CERTIFICATE-----Generated at Sat May 31 17:48:46 2025 by rpki-client