$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft File: AWWp3MArwOh2h-4GcFwObJkt6TI.mft (raw, json) Hash identifier: 2qRGaXWRFwSdA/lassKNDPO+ng5XThuJh/0q3Iul/7M= Subject key identifier: 32:50:70:C2:98:F7:35:0F:EC:E9:EE:5D:5E:4A:17:61:9E:6D:6A:77 Authority key identifier: 01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32 Certificate issuer: /CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft Manifest number: 0682 Signing time: Fri 30 May 2025 22:29:22 +0000 Manifest this update: Fri 30 May 2025 22:29:22 +0000 Manifest next update: Fri 06 Jun 2025 22:29:22 +0000 Files and hashes: 1: AWWp3MArwOh2h-4GcFwObJkt6TI.crl (hash: mv+MU8sJrTN/W6gU32RSL9t0opPOKrwj8jVIJQO9CzM=) 2: 206DDC4A77AF11EB8E972C66C4F9AE02.roa (hash: zqG4bc06KvBhxn6QFTh7x4mtk1td0qh6Ee0/kRUb20s=) 3: FC1594CE340F11F0B7C1091CC4F9AE02.roa (hash: c3OMadnDiyEPhIKJxMyXVrI66nq2d9T1QFct5alIulU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD544, serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932 Validity Not Before: May 30 22:29:22 2025 GMT Not After : Jun 6 22:29:22 2025 GMT Subject: CN=683a3142-2880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:0f:d7:de:9a:b7:f6:62:b7:ef:9c:55:17: 43:f0:c4:a6:45:71:df:36:b2:2d:1a:f2:72:6b:b6: 15:11:1a:4c:00:3f:83:ec:37:6a:d2:1e:c3:97:14: 27:7d:3f:ed:bd:72:98:40:60:92:96:6b:9d:cd:79: 45:59:a6:21:1c:86:5b:b0:d9:4c:11:b6:c6:86:b4: b2:4a:ed:ee:a7:c4:9c:bb:88:96:fe:00:0b:bc:cf: 59:37:c3:ac:f6:b5:5c:b3:bb:01:64:50:4d:aa:e2: c9:85:a8:e5:02:d8:58:00:60:8b:b6:b9:17:31:ae: 0e:ff:f0:a5:93:f3:cd:39:69:d3:83:d8:12:0b:5d: 7e:ea:be:f6:ab:bd:f0:4b:be:fa:e1:31:ea:43:33: a6:c6:bc:c2:eb:c7:22:a1:bd:05:a8:f1:1e:38:1a: e3:b8:eb:07:0c:bf:f5:58:78:6f:5e:61:ed:af:cb: 9e:23:09:2f:0b:6b:46:7c:1a:c4:b5:23:29:6b:aa: 8b:6d:6b:c4:9f:53:0a:e7:a0:12:c1:1e:c6:c5:65: ec:51:48:c1:7e:82:94:57:0b:94:af:cb:64:4d:fb: ce:76:63:1e:66:24:7e:63:64:fe:f8:68:4b:8c:04: ff:d1:7a:23:12:1d:ce:10:73:e7:72:58:e6:7c:8d: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:50:70:C2:98:F7:35:0F:EC:E9:EE:5D:5E:4A:17:61:9E:6D:6A:77 X509v3 Authority Key Identifier: keyid:01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1c:65:c4:5d:14:7d:d2:b5:46:ba:b4:58:6b:89:72:c1:a9: 34:c8:c5:54:9d:ef:79:0f:1d:ae:72:e2:9c:ef:f2:c3:56:04: ba:49:03:79:ee:71:bb:93:cb:ed:b2:48:34:2d:74:28:e6:9b: b9:a2:8e:1a:8f:41:04:d1:55:28:9b:76:25:94:31:e1:09:2e: 9e:6a:34:d4:45:5d:52:36:2c:3b:3f:72:25:78:48:ea:4c:6f: df:ed:6a:65:ad:75:d0:ff:f2:39:cb:e8:fc:55:e2:2c:87:51: a5:44:07:f8:c8:5f:02:21:fb:91:57:1c:8b:90:79:0f:d2:c6: 4c:50:a5:1c:f2:e6:a5:cd:3b:8e:18:d9:c4:37:96:6d:fd:9e: 17:83:2b:82:41:ee:a3:96:b5:d1:d9:44:a1:da:df:6e:1b:59: c1:25:0f:f7:5a:59:0e:ad:79:72:2d:d0:17:89:3a:11:c8:57: 02:a2:1a:af:f4:84:36:6a:1b:79:85:6a:a8:da:07:96:c7:1d: ee:11:ff:c3:2b:c9:c3:ba:18:d4:5e:f9:67:9f:33:a6:11:05: 87:5b:f2:23:d4:ad:dd:52:ba:ed:eb:dc:f5:a3:3c:1d:04:89: a6:c6:91:b1:d3:01:5f:33:99:5c:9c:72:5d:03:07:e0:52:cb: 32:f1:a2:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ1NDQxMTAvBgNVBAUTKDAxNjVBOURDQzAyQkMwRTg3Njg3RUUwNjcwNUMwRTZD OTkyREU5MzIwHhcNMjUwNTMwMjIyOTIyWhcNMjUwNjA2MjIyOTIyWjAYMRYwFAYD VQQDEw02ODNhMzE0Mi0yODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2IP196at/Zit++cVRdD8MSmRXHfNrItGvJya7YVERpMAD+D7Ddq0h7DlxQn fT/tvXKYQGCSlmudzXlFWaYhHIZbsNlMEbbGhrSySu3up8Scu4iW/gALvM9ZN8Os 9rVcs7sBZFBNquLJhajlAthYAGCLtrkXMa4O//Clk/PNOWnTg9gSC11+6r72q73w S7764THqQzOmxrzC68ciob0FqPEeOBrjuOsHDL/1WHhvXmHtr8ueIwkvC2tGfBrE tSMpa6qLbWvEn1MK56ASwR7GxWXsUUjBfoKUVwuUr8tkTfvOdmMeZiR+Y2T++GhL jAT/0XojEh3OEHPncljmfI2uPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJQcMKY 9zUP7OnuXV5KF2GebWp3MB8GA1UdIwQYMBaAFAFlqdzAK8DodofuBnBcDmyZLeky MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDU0NC80NTlDODlFNDc1 RjIxMUVCQTNFRDM2NDdDNEY5QUUwMi9BV1dwM01BcndPaDJoLTRHY0Z3T2JKa3Q2 VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXV3AzTUFyd09oMmgtNEdjRndPYkprdDZUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDU0NC80NTlDODlFNDc1RjIxMUVCQTNFRDM2NDdDNEY5QUUwMi9BV1dwM01BcndP aDJoLTRHY0Z3T2JKa3Q2VEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaHGXEXRR90rVGurRYa4lywak0yMVUne95Dx2ucuKc7/LDVgS6SQN5 7nG7k8vtskg0LXQo5pu5oo4aj0EE0VUom3YllDHhCS6eajTURV1SNiw7P3IleEjq TG/f7WplrXXQ//I5y+j8VeIsh1GlRAf4yF8CIfuRVxyLkHkP0sZMUKUc8ualzTuO GNnEN5Zt/Z4XgyuCQe6jlrXR2USh2t9uG1nBJQ/3WlkOrXlyLdAXiToRyFcCohqv 9IQ2aht5hWqo2geWxx3uEf/DK8nDuhjUXvlnnzOmEQWHW/Ij1K3dUrrt69z1ozwd BImmxpGx0wFfM5lcnHJdAwfgUssy8aKm -----END CERTIFICATE-----Generated at Sat May 31 17:07:38 2025 by rpki-client