$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json) Hash identifier: JcDug5Ub9enBrFzTFzGAPfZJwUB7BfOw0CgiSTywvZM= Subject key identifier: E5:D6:BE:7E:88:58:49:35:B1:62:14:20:9E:4A:6F:25:46:83:A0:30 Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft Manifest number: 0260 Signing time: Sat 31 May 2025 01:58:15 +0000 Manifest this update: Sat 31 May 2025 01:58:15 +0000 Manifest next update: Sat 07 Jun 2025 01:58:15 +0000 Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: TQS5k98MRggLLfQyrmkCsHCGufe6Q+r9l+WOHRfVKyo=) 2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TZ/n2fdCp6It0G4ugsLwMjkFuDgasyyKStMAe77+R34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Validity Not Before: May 31 01:58:15 2025 GMT Not After : Jun 7 01:58:15 2025 GMT Subject: CN=683a6237-d5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:32:48:49:ea:6a:a7:3c:fd:e8:f5:47:20: 74:37:cd:f2:de:6e:c5:01:47:7d:ef:97:ce:a9:95: 51:b4:5c:3f:32:ea:0b:87:fb:8d:03:47:27:92:c1: 78:a7:3c:7a:7f:f8:77:da:15:2d:a6:d7:f4:77:2b: 97:0c:0b:e7:93:cd:3b:3b:39:60:15:7c:3c:ba:d6: 5c:50:0d:21:a0:5e:78:06:39:8e:c8:37:a5:29:44: 08:d1:01:66:28:cd:23:1f:39:ca:06:a6:60:9d:90: 22:f8:9c:88:09:e9:ce:96:41:fd:a6:9e:a1:1c:4d: b4:ae:38:3f:db:84:37:ee:97:e4:b8:07:d7:f2:d4: e6:cd:eb:4f:fd:68:ad:95:2f:30:52:bb:a1:be:62: cb:de:67:2b:82:71:59:12:48:10:75:cd:68:ed:11: a1:8f:8a:a6:e4:59:98:1e:06:74:19:32:fe:fa:db: a6:74:06:97:eb:cd:57:fd:7d:e0:ec:76:57:29:4e: 44:6b:92:d1:f1:66:a4:84:7a:e4:36:69:b5:94:3c: 4c:25:09:a9:05:e5:9e:f1:5e:7c:65:7a:4c:48:ba: 5f:a2:6a:85:7e:4d:27:7a:96:5a:27:9c:b0:ae:31: c2:49:20:57:21:f0:4a:9c:f5:f3:5e:e3:1c:5e:ac: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D6:BE:7E:88:58:49:35:B1:62:14:20:9E:4A:6F:25:46:83:A0:30 X509v3 Authority Key Identifier: keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ab:53:7b:e2:d2:55:a1:16:86:4b:8c:5e:51:d3:32:5d:d5: dc:ba:cf:4d:8e:24:ee:54:58:c5:bf:d6:bc:52:17:df:d6:29: cf:b7:ea:55:0a:0e:b9:f2:ae:2b:59:76:96:5c:40:70:cb:49: 4c:4e:fe:b3:db:ee:50:63:67:db:7f:04:31:dd:fb:6a:f3:9b: 9b:06:aa:ef:6b:19:51:21:40:8b:2e:86:3d:45:f8:31:eb:dc: 64:5b:34:4c:b5:60:88:c8:b2:01:4d:c9:f6:cb:fe:fa:0d:d7: 0f:11:54:4d:cc:59:f8:4b:73:91:da:1e:58:b3:dd:a3:b5:33: ee:66:52:2a:36:56:fb:dd:01:3e:78:84:b1:9f:d1:c5:0d:f6: 86:f8:13:ed:f0:65:8d:58:57:5f:ae:ce:ea:25:43:fa:a1:fb: 54:a1:68:00:d3:f1:9b:91:b1:ed:d4:0d:a8:63:c9:42:bf:24: e7:62:a7:66:df:87:67:7a:53:fb:f6:65:4f:6d:b1:02:d3:18: 93:ac:29:81:56:43:46:3c:be:56:45:44:fa:a8:4e:67:91:00: cf:e1:3d:77:61:75:c0:e4:20:7f:1f:dc:9e:be:69:7f:9d:73: b1:9d:a4:42:c1:c0:2c:f4:d1:29:1e:03:d7:dd:56:51:b9:44: 99:e5:ae:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy QkEzN0NEQTcwHhcNMjUwNTMxMDE1ODE1WhcNMjUwNjA3MDE1ODE1WjAYMRYwFAYD VQQDEw02ODNhNjIzNy1kNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoIySEnqaqc8/ej1RyB0N83y3m7FAUd975fOqZVRtFw/MuoLh/uNA0cnksF4 pzx6f/h32hUtptf0dyuXDAvnk807OzlgFXw8utZcUA0hoF54BjmOyDelKUQI0QFm KM0jHznKBqZgnZAi+JyICenOlkH9pp6hHE20rjg/24Q37pfkuAfX8tTmzetP/Wit lS8wUruhvmLL3mcrgnFZEkgQdc1o7RGhj4qm5FmYHgZ0GTL++tumdAaX681X/X3g 7HZXKU5Ea5LR8WakhHrkNmm1lDxMJQmpBeWe8V58ZXpMSLpfomqFfk0nepZaJ5yw rjHCSSBXIfBKnPXzXuMcXqyUHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXWvn6I WEk1sWIUIJ5KbyVGg6AwMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2 QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5 VlJubG9seGswYTBybzN6YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAq1N74tJVoRaGS4xeUdMyXdXcus9NjiTuVFjFv9a8Uhff1inPt+pV Cg658q4rWXaWXEBwy0lMTv6z2+5QY2fbfwQx3ftq85ubBqrvaxlRIUCLLoY9Rfgx 69xkWzRMtWCIyLIBTcn2y/76DdcPEVRNzFn4S3OR2h5Ys92jtTPuZlIqNlb73QE+ eISxn9HFDfaG+BPt8GWNWFdfrs7qJUP6oftUoWgA0/GbkbHt1A2oY8lCvyTnYqdm 34dnelP79mVPbbEC0xiTrCmBVkNGPL5WRUT6qE5nkQDP4T13YXXA5CB/H9yevml/ nXOxnaRCwcAs9NEpHgPX3VZRuUSZ5a49 -----END CERTIFICATE-----Generated at Sat May 31 16:45:49 2025 by rpki-client