$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: 5oO9rL5jENWTmGWZVs8CAQn6UTFZGK6tFI9uy5ZOP8g= Subject key identifier: 4E:7D:65:66:A8:78:94:35:65:96:80:8D:20:A1:4C:B0:D5:FE:C5:90 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: 8C Signing time: Sat 31 May 2025 06:03:34 +0000 Manifest this update: Sat 31 May 2025 06:03:33 +0000 Manifest next update: Sat 07 Jun 2025 06:03:33 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: piz4MbfKFutlQ0Ifji/LndCO89WgHdA1YHNbKL67hdM=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: May 31 06:03:33 2025 GMT Not After : Jun 7 06:03:33 2025 GMT Subject: CN=683a9bb5-5e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:39:65:23:32:46:d8:9b:8c:79:e3:5f:15: d7:4e:95:fa:66:30:f9:29:13:8a:fe:e8:b5:02:06: 42:c9:79:8e:2b:3a:22:0f:cd:66:a8:11:04:5d:c6: 65:7b:87:7a:14:ee:ba:29:00:1d:6a:07:35:af:f6: 95:ff:4a:d9:c6:0f:75:64:37:e9:32:40:dc:e8:c6: 3a:43:ad:ed:e6:9c:53:ca:cc:0d:70:3a:9d:ac:c0: 6b:67:b7:ec:6b:14:1a:47:26:a8:cc:02:d1:30:97: e1:2f:8a:07:bb:0c:ea:9d:fe:59:4e:e8:84:dc:9d: 1e:a0:cb:7f:93:6e:e1:72:07:e6:3f:60:45:62:b0: 17:b3:79:cf:88:5b:e1:e9:b9:4b:77:3f:2f:65:fe: 3d:37:a1:12:fe:cf:73:81:e5:22:3d:51:9a:00:55: 69:da:36:72:00:c8:87:51:4c:87:9f:f9:83:4e:1f: dd:71:c4:40:f5:92:4a:26:eb:ba:63:3d:3f:cc:21: 7e:c4:69:a0:69:c7:3f:bf:3d:ce:93:49:19:51:40: b4:28:1c:dc:cc:fd:13:52:a7:ff:26:7d:f9:c0:16: af:9e:5c:b8:20:43:78:ce:b1:2c:a6:f6:2b:72:b4: f3:2e:06:2d:41:52:ef:c3:a1:02:4c:25:3a:ac:55: f0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7D:65:66:A8:78:94:35:65:96:80:8D:20:A1:4C:B0:D5:FE:C5:90 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b2:54:60:39:66:c2:c3:4b:57:d4:da:1a:d9:07:d8:b3:71: 03:a2:0c:ac:e8:25:63:dd:bb:db:ae:ac:f5:47:c2:8c:24:6a: 65:05:99:a0:10:d0:dd:14:cc:25:ba:bd:23:45:e5:f7:74:8c: 55:82:3e:f4:af:ce:d0:42:a5:39:71:fb:b4:ac:13:06:50:85: 40:7e:0c:20:5f:2c:2c:95:01:d2:e3:c2:5e:ae:ff:c5:61:37: ca:ff:2e:c2:83:17:c4:aa:b2:90:ae:53:d3:60:69:4c:23:e4: 6d:a8:0b:29:99:a3:c4:ae:ef:1b:ff:e8:6f:9e:d1:62:c9:b7: 98:25:42:43:89:e8:83:06:64:69:3e:66:6a:8d:50:f3:1f:7e: e6:2e:a9:e4:09:08:b8:22:75:6c:9f:36:cf:30:9e:e0:f6:52: f1:cf:fc:ac:2e:a7:32:79:69:d0:b9:4f:f6:ab:97:a3:ae:e7: a2:d5:7c:ee:09:c6:83:65:fc:fe:5f:d5:8a:2c:6f:f2:bf:40: 84:db:fd:48:7a:9d:42:cd:62:66:f2:8a:bc:a7:2d:16:27:87: a5:de:48:1e:2a:49:98:f2:51:20:e9:21:d6:4a:9f:50:71:8c: 6b:65:1c:35:e3:6b:92:71:bd:aa:dc:3c:74:3f:c3:eb:31:c5: 0e:e4:38:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUwNTMxMDYwMzMzWhcNMjUwNjA3MDYwMzMzWjAYMRYwFAYD VQQDEw02ODNhOWJiNS01ZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkU5ZSMyRtibjHnjXxXXTpX6ZjD5KROK/ui1AgZCyXmOKzoiD81mqBEEXcZl e4d6FO66KQAdagc1r/aV/0rZxg91ZDfpMkDc6MY6Q63t5pxTyswNcDqdrMBrZ7fs axQaRyaozALRMJfhL4oHuwzqnf5ZTuiE3J0eoMt/k27hcgfmP2BFYrAXs3nPiFvh 6blLdz8vZf49N6ES/s9zgeUiPVGaAFVp2jZyAMiHUUyHn/mDTh/dccRA9ZJKJuu6 Yz0/zCF+xGmgacc/vz3Ok0kZUUC0KBzczP0TUqf/Jn35wBavnly4IEN4zrEspvYr crTzLgYtQVLvw6ECTCU6rFXwrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE59ZWao eJQ1ZZaAjSChTLDV/sWQMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5slRgOWbCw0tX1Noa2QfYs3EDogys6CVj3bvbrqz1R8KMJGplBZmg ENDdFMwlur0jReX3dIxVgj70r87QQqU5cfu0rBMGUIVAfgwgXywslQHS48Jerv/F YTfK/y7CgxfEqrKQrlPTYGlMI+RtqAspmaPEru8b/+hvntFiybeYJUJDieiDBmRp PmZqjVDzH37mLqnkCQi4InVsnzbPMJ7g9lLxz/ysLqcyeWnQuU/2q5ejruei1Xzu CcaDZfz+X9WKLG/yv0CE2/1Iep1CzWJm8oq8py0WJ4el3kgeKkmY8lEg6SHWSp9Q cYxrZRw142uScb2q3Dx0P8PrMcUO5DhR -----END CERTIFICATE-----Generated at Sat May 31 16:34:03 2025 by rpki-client