$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft File: Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json) Hash identifier: dPu3efhBpSFaQmemoOORriKADolLwrLSkFV4HjFENo0= Subject key identifier: 8E:B7:E1:87:C5:74:91:DD:49:57:40:15:65:7B:CD:02:B8:AF:41:DD Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 Certificate issuer: /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft Manifest number: 01DE Signing time: Sat 31 May 2025 02:35:23 +0000 Manifest this update: Sat 31 May 2025 02:35:23 +0000 Manifest next update: Sat 07 Jun 2025 02:35:23 +0000 Files and hashes: 1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: 2Q/9mctQnDuGow4/qkvWhCdCESyAf7XsOgcvI8YFtSQ=) 2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: NZi3AS5kSmfmC1ciiMxez1kqC/wPD4BHzNn8bShQs48=) 3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: pq5PnlojK/GAJppMbTHRBS7cpCdExCrMiIQ6oauUaFM=) 4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: 2uW7Q5uLL5pnTePVa3NozZPJ/96p7ZLak+5a94dH9iU=) 5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: bTHUxxssWziIXGGDs3FaNbsdMbd0w+8+gyMv7kRJZqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Validity Not Before: May 31 02:35:23 2025 GMT Not After : Jun 7 02:35:23 2025 GMT Subject: CN=683a6aeb-cf7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:13:99:bc:f7:42:2d:fc:ed:9c:94:a0:41: b4:6b:7f:4b:9e:1a:96:48:96:89:24:c7:93:58:a2: e3:43:e6:95:7b:fc:86:f8:9c:b1:5d:ed:6e:8c:ca: c3:16:62:82:97:66:f3:1e:a7:f6:ee:90:9d:1f:df: e7:19:77:af:a3:ba:4e:76:e8:f9:ab:21:e9:2f:ea: 92:52:d9:44:dc:0a:2f:86:5a:b2:27:67:bb:69:0b: b2:c8:f4:7b:b2:74:5d:89:55:f0:cb:5e:5e:9b:01: 33:c9:18:82:ce:70:f8:73:26:95:4f:12:7e:2c:6e: 2c:d5:66:71:e2:89:53:d5:68:db:25:8a:82:28:fd: d6:27:db:0e:4f:e8:f1:94:9b:94:0c:e4:f0:41:48: 68:e0:67:87:b7:5a:4d:fa:f3:1c:37:5c:09:a6:71: f3:42:a5:a1:1b:fe:38:89:f2:69:a1:56:f3:57:5b: 5e:9b:34:75:1d:dc:9d:bd:69:33:13:fa:92:5d:e9: 35:99:3f:84:33:5c:a7:c8:71:52:2e:0b:fb:38:a6: 96:0f:8b:0e:f8:93:0a:5c:d1:82:13:b6:68:40:27: 17:66:fc:d4:67:b1:1d:09:07:ad:65:5d:1e:40:3d: a3:ca:d7:4b:1f:34:c5:27:4a:73:54:f0:82:75:d7: 90:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B7:E1:87:C5:74:91:DD:49:57:40:15:65:7B:CD:02:B8:AF:41:DD X509v3 Authority Key Identifier: keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:8b:8b:85:c2:27:80:19:53:64:f1:f2:5f:41:48:3f:34:ad: 59:3e:cd:67:92:57:ba:4d:7c:08:73:6e:d6:cc:9a:a2:61:50: 96:21:45:0c:92:5c:f5:c2:d1:61:e8:3f:af:5d:38:9c:5c:14: bb:d9:ae:4e:0a:db:8a:85:4f:e2:29:fb:3d:91:99:40:e8:96: 82:c3:d1:ed:52:3d:c8:a0:a3:bb:81:7d:02:79:ed:12:60:7a: 5e:83:fd:06:18:f3:71:f9:e2:94:4b:c8:8c:35:93:9d:67:5c: 2e:11:be:cf:94:d6:73:b7:6f:68:e1:18:4e:c2:5f:7a:af:c4: 61:ca:98:5e:d1:bd:e7:e0:ca:a0:0a:39:dd:1b:28:5f:c9:38: 79:b2:1a:73:d1:55:ca:ea:be:85:0d:4e:6e:12:87:00:b9:1b: fb:32:2e:52:e6:bc:f2:9c:ba:f7:1f:d1:11:fd:d9:80:f2:c2: 75:11:0e:e2:32:82:bc:d9:24:3f:69:aa:48:cc:35:30:b2:d4: 62:de:60:21:74:71:d2:ae:9c:b9:a0:86:bb:60:92:d6:36:08: 18:32:c2:2c:5e:c7:7d:b2:ea:99:ce:3d:af:81:a3:22:66:c0: 99:12:a1:b9:34:74:0f:b0:8e:39:36:89:90:5b:42:52:07:e9: c4:3a:2e:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDU5RERDMzk2OUI5ODYzQ0ZCNUExNTUyOEFBNEEzOTFB RjIzMzdGNDMwHhcNMjUwNTMxMDIzNTIzWhcNMjUwNjA3MDIzNTIzWjAYMRYwFAYD VQQDEw02ODNhNmFlYi1jZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4wTmbz3Qi387ZyUoEG0a39LnhqWSJaJJMeTWKLjQ+aVe/yG+JyxXe1ujMrD FmKCl2bzHqf27pCdH9/nGXevo7pOduj5qyHpL+qSUtlE3AovhlqyJ2e7aQuyyPR7 snRdiVXwy15emwEzyRiCznD4cyaVTxJ+LG4s1WZx4olT1WjbJYqCKP3WJ9sOT+jx lJuUDOTwQUho4GeHt1pN+vMcN1wJpnHzQqWhG/44ifJpoVbzV1temzR1HdydvWkz E/qSXek1mT+EM1ynyHFSLgv7OKaWD4sO+JMKXNGCE7ZoQCcXZvzUZ7EdCQetZV0e QD2jytdLHzTFJ0pzVPCCddeQDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI634YfF dJHdSVdAFWV7zQK4r0HdMB8GA1UdIwQYMBaAFFndw5abmGPPtaFVKKpKORryM39D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi9GQkRGRkVDMDc2 ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4LTFvVlVvcWtvNUd2SXpm ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkM0RscHVZWTgtMW9WVW9xa281R3ZJemYwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi9GQkRGRkVDMDc2ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4 LTFvVlVvcWtvNUd2SXpmME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHi4uFwieAGVNk8fJfQUg/NK1ZPs1nkle6TXwIc27WzJqiYVCWIUUM klz1wtFh6D+vXTicXBS72a5OCtuKhU/iKfs9kZlA6JaCw9HtUj3IoKO7gX0Cee0S YHpeg/0GGPNx+eKUS8iMNZOdZ1wuEb7PlNZzt29o4RhOwl96r8Rhyphe0b3n4Mqg CjndGyhfyTh5shpz0VXK6r6FDU5uEocAuRv7Mi5S5rzynLr3H9ER/dmA8sJ1EQ7i MoK82SQ/aapIzDUwstRi3mAhdHHSrpy5oIa7YJLWNggYMsIsXsd9suqZzj2vgaMi ZsCZEqG5NHQPsI45NomQW0JSB+nEOi6o -----END CERTIFICATE-----Generated at Sat May 31 16:33:12 2025 by rpki-client