$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: /QqVgCOWhqQyvOS6t7Au0O1uF0Ued/jQtAgKROGRvsw= Subject key identifier: 38:12:83:83:4E:49:B6:37:24:FA:10:A2:22:E8:A2:19:F2:46:D5:13 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 09A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 0986 Signing time: Fri 30 May 2025 21:01:52 +0000 Manifest this update: Fri 30 May 2025 21:01:51 +0000 Manifest next update: Fri 06 Jun 2025 21:01:51 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: 5BTwpTdYdPxtbSeM/ZTqov8jWp7IWUE5JNXp4UiU8Ik=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2465 (0x9a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: May 30 21:01:51 2025 GMT Not After : Jun 6 21:01:51 2025 GMT Subject: CN=683a1cc0-dcfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e5:75:a2:a2:f1:34:91:80:be:17:dd:87:2a: 8c:4a:c8:7f:07:13:a3:96:cc:a4:80:9c:4d:84:bb: be:10:bc:f6:e6:9c:86:f8:82:38:d4:1d:b3:bf:63: 87:3f:68:60:a1:76:40:b2:bc:5c:0b:c1:6d:b1:d6: 11:d2:b3:46:28:9b:65:88:48:da:98:14:49:bd:b2: 98:6f:e8:54:48:22:6a:e0:18:4d:ba:9d:cb:95:bd: 94:b5:b1:5b:92:e7:1a:8d:9c:44:f7:62:9c:cf:c5: 1b:d7:22:33:01:4c:c1:4e:34:65:18:77:a3:f2:93: ec:fb:d7:e8:7f:61:2a:e0:29:df:d1:58:24:97:8b: 72:73:0b:d9:21:d6:93:df:73:e0:38:56:d4:68:65: 6b:f0:3b:a0:6e:e0:4d:0e:3c:a1:50:d7:d2:02:07: 3b:eb:4b:08:e2:20:0e:19:67:8c:ae:4a:b0:a0:c8: 64:7f:bb:2f:d7:ae:66:0a:33:3b:44:a8:88:d8:4d: 24:aa:43:ae:c1:c1:e1:07:ad:72:46:81:10:f5:1e: 94:ca:f9:23:51:5b:c2:74:93:5f:d8:86:57:7f:2f: 04:2f:07:75:f3:c0:c9:aa:4e:93:30:e1:14:4d:fe: f5:af:ef:f0:dc:11:46:f6:99:4b:79:4e:ca:66:f7: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:12:83:83:4E:49:B6:37:24:FA:10:A2:22:E8:A2:19:F2:46:D5:13 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:16:0b:9a:b5:6c:64:52:b9:a4:af:d8:20:8c:53:e4:e5:33: b9:58:0f:ca:4c:16:e2:4b:ec:6a:b6:ae:ee:59:ab:c4:ba:32: 66:f3:63:7b:9c:30:5b:81:1c:a0:c2:95:e6:6f:78:b6:cd:cc: 47:70:be:56:41:9f:7f:02:14:d9:50:20:e3:b3:70:e8:21:5f: 58:26:cc:44:4b:04:e4:48:52:96:3a:c6:10:cd:1d:f7:10:fe: 3b:a6:02:71:7e:e9:f6:85:36:78:fa:69:5f:95:a3:c1:73:c0: 45:5e:3b:05:5d:3f:6e:d7:21:18:1a:2e:a8:05:e1:ff:43:37: d6:ba:bd:f6:17:dc:79:db:3a:1d:75:ec:8f:09:db:63:e9:5a: 2b:6d:6e:af:bf:85:35:c1:01:8b:93:b3:b3:1e:c5:b0:cc:c3: 01:78:94:80:72:20:4a:fd:8e:ce:93:90:2d:e0:86:10:97:f7: 8e:2d:25:26:8b:54:ac:e5:7f:9e:39:e1:ac:0d:fa:17:a0:d5: c8:53:e7:8e:d9:58:a1:a9:e3:94:68:1e:50:11:94:19:e4:54: 83:37:8c:b5:38:05:49:3d:05:09:73:0d:01:eb:18:37:90:d7: bf:4e:86:8a:a2:14:87:e9:a1:e5:04:3a:b5:03:ec:5c:af:2a: 44:81:89:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUwNTMwMjEwMTUxWhcNMjUwNjA2MjEwMTUxWjAYMRYwFAYD VQQDEw02ODNhMWNjMC1kY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5uV1oqLxNJGAvhfdhyqMSsh/BxOjlsykgJxNhLu+ELz25pyG+II41B2zv2OH P2hgoXZAsrxcC8FtsdYR0rNGKJtliEjamBRJvbKYb+hUSCJq4BhNup3Llb2UtbFb kucajZxE92Kcz8Ub1yIzAUzBTjRlGHej8pPs+9fof2Eq4Cnf0Vgkl4tycwvZIdaT 33PgOFbUaGVr8DugbuBNDjyhUNfSAgc760sI4iAOGWeMrkqwoMhkf7sv165mCjM7 RKiI2E0kqkOuwcHhB61yRoEQ9R6UyvkjUVvCdJNf2IZXfy8ELwd188DJqk6TMOEU Tf71r+/w3BFG9plLeU7KZvcrXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgSg4NO SbY3JPoQoiLoohnyRtUTMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlFguatWxkUrmkr9ggjFPk5TO5WA/KTBbiS+xqtq7uWavEujJm82N7 nDBbgRygwpXmb3i2zcxHcL5WQZ9/AhTZUCDjs3DoIV9YJsxESwTkSFKWOsYQzR33 EP47pgJxfun2hTZ4+mlflaPBc8BFXjsFXT9u1yEYGi6oBeH/QzfWur32F9x52zod deyPCdtj6VorbW6vv4U1wQGLk7OzHsWwzMMBeJSAciBK/Y7Ok5At4IYQl/eOLSUm i1Ss5X+eOeGsDfoXoNXIU+eO2VihqeOUaB5QEZQZ5FSDN4y1OAVJPQUJcw0B6xg3 kNe/ToaKohSH6aHlBDq1A+xcrypEgYn3 -----END CERTIFICATE-----Generated at Sat May 31 17:07:44 2025 by rpki-client