$ rpki-client -vvf rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft File: W2r-ya7p6tTclkY7oanLJyM9bf8.mft (raw, json) Hash identifier: lrw21tAQa5IwWEtsdc/A3pjcn6D/vGxF6cDGR9JcK/w= Subject key identifier: A7:2A:A1:AD:61:A1:64:C4:ED:E3:F4:88:08:6E:0B:1C:9E:B9:5C:FE Authority key identifier: 5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF Certificate issuer: /CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Certificate serial: 348F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft Manifest number: 348A Signing time: Fri 30 May 2025 14:59:31 +0000 Manifest this update: Fri 30 May 2025 14:59:31 +0000 Manifest next update: Fri 06 Jun 2025 14:59:31 +0000 Files and hashes: 1: W2r-ya7p6tTclkY7oanLJyM9bf8.crl (hash: RiV99+C9UJX3rbXJppHpyCo671UghhJ4NLRmXC9ScUA=) 2: 1317969A55B711EBAAFF6E4DC4F9AE02.roa (hash: nOUxkk4420zJ2RFOdGdnQCmw3/LVGxAozFWt1FM8u4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13455 (0x348f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D81D4, serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Validity Not Before: May 30 14:59:31 2025 GMT Not After : Jun 6 14:59:31 2025 GMT Subject: CN=6839c7d3-c8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:cb:f4:b6:61:0f:a2:ac:30:73:1a:36:b6: fd:e2:4a:5d:f8:0f:93:fc:69:88:04:87:d2:34:60: c2:9f:97:01:c6:ae:7f:1b:bd:35:ab:25:20:8e:84: 62:bd:69:e5:50:93:2b:b7:d9:b3:c8:32:d9:91:7e: 04:4b:ec:f0:c4:1b:b8:aa:c9:a7:6f:67:78:ea:69: ea:2c:b5:73:d0:f8:0d:30:c4:73:97:21:46:b9:bb: 28:c5:84:41:21:9a:ec:47:ec:13:69:4d:e6:0f:c9: c1:99:54:e2:03:f3:bf:89:9e:c0:ad:c9:7a:52:30: 62:76:16:86:b1:ed:a1:98:da:e5:35:c8:dd:1e:a0: 8a:bd:84:5f:76:6f:ab:99:c9:67:60:f9:84:3c:4d: 8b:c0:bf:31:e5:1a:1a:40:69:20:44:ec:fe:4a:87: ad:c4:0a:e3:88:b1:bc:51:1e:c7:fc:8b:64:d4:30: df:ba:ec:fa:ba:18:c8:3b:5b:40:77:0a:e5:69:65: 0b:ac:2b:bf:2d:96:fe:cf:3a:db:4e:c9:00:96:fd: cb:3f:66:af:d9:ee:80:11:f7:11:91:c3:56:f5:88: 88:4b:94:d3:db:7e:cf:8c:c6:ca:f9:91:90:f2:e1: a4:57:24:27:ef:63:bd:ad:b6:94:f4:ef:20:ed:de: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2A:A1:AD:61:A1:64:C4:ED:E3:F4:88:08:6E:0B:1C:9E:B9:5C:FE X509v3 Authority Key Identifier: keyid:5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:6e:78:ac:ca:b0:07:75:56:9b:27:67:61:d5:65:78:5e:c3: b7:73:ca:aa:13:4c:47:df:dd:e0:d1:e5:1e:ef:40:32:52:e2: 7c:eb:f1:b5:6e:d7:75:5c:e0:d5:53:d6:76:80:be:1f:af:d2: 61:80:58:50:7b:9a:92:6d:42:28:92:2b:15:4c:77:db:b6:67: 1b:95:ac:d9:57:3b:b6:26:cf:52:a1:5c:3c:46:63:9b:09:e6: 1c:9f:fc:9e:dd:3f:cc:e8:f4:b6:91:b2:2a:4a:75:0d:33:52: c3:bb:6d:4c:a7:2c:f2:08:51:7c:97:f2:65:21:21:9b:f1:60: ad:e6:81:7a:b9:5a:24:a8:03:c2:26:a9:9e:74:5e:0c:e1:51: 64:7a:0b:f4:c7:f4:1d:56:09:09:57:d8:67:c5:fe:bc:fa:53: dd:ce:c5:e8:b8:db:6b:63:c9:64:6d:6a:fc:c4:d0:8c:9f:94: f6:46:53:43:35:4c:37:ef:be:70:7b:03:97:4e:20:87:71:52: 93:9c:16:3f:bd:01:71:04:59:3a:9f:3e:d9:98:6f:31:91:9b: dc:ca:fe:c8:42:1a:b4:5f:be:56:50:dc:d7:56:31:b4:51:7b: 2e:35:e3:0f:df:5c:5a:b9:a0:b8:a7:7c:57:42:ff:55:b1:4f: df:8c:d4:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxRDQxMTAvBgNVBAUTKDVCNkFGRUM5QUVFOUVBRDREQzk2NDYzQkExQTlDQjI3 MjMzRDZERkYwHhcNMjUwNTMwMTQ1OTMxWhcNMjUwNjA2MTQ1OTMxWjAYMRYwFAYD VQQDEw02ODM5YzdkMy1jOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqzL9LZhD6KsMHMaNrb94kpd+A+T/GmIBIfSNGDCn5cBxq5/G701qyUgjoRi vWnlUJMrt9mzyDLZkX4ES+zwxBu4qsmnb2d46mnqLLVz0PgNMMRzlyFGubsoxYRB IZrsR+wTaU3mD8nBmVTiA/O/iZ7Arcl6UjBidhaGse2hmNrlNcjdHqCKvYRfdm+r mclnYPmEPE2LwL8x5RoaQGkgROz+SoetxArjiLG8UR7H/Itk1DDfuuz6uhjIO1tA dwrlaWULrCu/LZb+zzrbTskAlv3LP2av2e6AEfcRkcNW9YiIS5TT237PjMbK+ZGQ 8uGkVyQn72O9rbaU9O8g7d7yGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcqoa1h oWTE7eP0iAhuCxyeuVz+MB8GA1UdIwQYMBaAFFtq/smu6erU3JZGO6GpyycjPW3/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODFENC9EQUUzODJBQTFE OUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0VGNsa1k3b2FuTEp5TTli ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cyci15YTdwNnRUY2xrWTdvYW5MSnlNOWJmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODFENC9EQUUzODJBQTFEOUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0 VGNsa1k3b2FuTEp5TTliZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0bnisyrAHdVabJ2dh1WV4XsO3c8qqE0xH393g0eUe70AyUuJ86/G1 btd1XODVU9Z2gL4fr9JhgFhQe5qSbUIokisVTHfbtmcblazZVzu2Js9SoVw8RmOb CeYcn/ye3T/M6PS2kbIqSnUNM1LDu21MpyzyCFF8l/JlISGb8WCt5oF6uVokqAPC JqmedF4M4VFkegv0x/QdVgkJV9hnxf68+lPdzsXouNtrY8lkbWr8xNCMn5T2RlND NUw3775wewOXTiCHcVKTnBY/vQFxBFk6nz7ZmG8xkZvcyv7IQhq0X75WUNzXVjG0 UXsuNeMP31xauaC4p3xXQv9VsU/fjNSF -----END CERTIFICATE-----Generated at Sat May 31 16:27:49 2025 by rpki-client