$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: q2pp017tBOgz4m/80sNLT9/S7D2D4VsJku51B1kzg7w= Subject key identifier: 75:DB:27:C0:7B:BA:FF:1F:75:89:72:FD:39:A9:DC:AB:55:13:AE:8B Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 0921 Signing time: Fri 30 May 2025 21:02:17 +0000 Manifest this update: Fri 30 May 2025 21:02:16 +0000 Manifest next update: Fri 06 Jun 2025 21:02:16 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: WUbMlMTwgVH4RwkePa/KIUMWuf1dhmfA7yO9jC6b9rY=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: jfGEyrs8irz34ZW5qDRzJ5sduiRp3kjnfVg2NZqBN9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: May 30 21:02:16 2025 GMT Not After : Jun 6 21:02:16 2025 GMT Subject: CN=683a1cd8-4eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:cd:53:1d:44:fc:29:2c:32:08:21:4e:c7:31: 1d:53:3e:cc:23:f2:b4:70:fc:53:4e:80:d9:c2:fe: bc:fa:34:3e:1c:fe:76:6d:41:46:49:b5:d3:41:31: e6:cb:28:3c:8e:48:b3:01:9d:01:60:4e:c8:68:37: 4c:15:60:dd:a7:1f:03:44:a3:9c:19:36:ae:61:31: 96:c7:7e:1e:ef:d2:5c:de:85:24:1a:3d:a5:37:40: 82:1b:a6:fb:94:fd:5e:9d:cb:75:ea:17:8e:68:cb: 2c:b8:a4:f4:ae:fc:9d:9e:a2:fd:67:e4:54:10:de: 97:c4:e9:69:c4:a6:5d:cf:69:6f:a4:9b:72:9e:a7: 19:fc:c6:33:f4:20:00:7c:39:07:e4:d8:22:3e:f3: 03:3c:73:b3:cc:06:8b:42:0c:e0:8a:b4:2e:56:4c: ce:7b:6c:7f:d2:8e:5e:89:d2:db:1a:dd:cf:7e:be: 89:1d:f6:6a:4a:2f:07:ac:88:25:4d:aa:32:22:3c: 58:b7:50:1c:78:23:1c:b8:c2:7a:56:6e:48:9f:35: 06:0c:0a:c1:ea:2d:df:7b:6c:40:60:24:67:c1:d4: 19:05:d3:ba:a6:89:95:34:75:d5:a3:3e:50:85:61: 19:e1:ce:56:31:54:d6:71:6c:b0:97:72:c7:7d:79: b0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DB:27:C0:7B:BA:FF:1F:75:89:72:FD:39:A9:DC:AB:55:13:AE:8B X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:fc:dc:15:e8:06:a4:af:c9:02:3d:01:05:5f:ba:64:3c:ad: 2c:9e:03:8d:74:9b:88:1f:3b:e8:87:db:0b:a2:2b:64:6f:c7: 3e:e7:c7:c4:95:7e:5b:f6:96:29:74:61:fa:e9:21:29:55:ba: 5f:de:0c:16:49:68:57:ef:fd:59:8a:7d:08:37:a5:c8:08:0f: 90:1d:64:46:71:04:0b:75:58:48:35:f5:4d:d4:b3:87:62:df: ed:35:8e:b4:93:6d:9b:2f:f4:69:1c:38:5d:ef:f9:87:61:ed: e7:0d:fd:ae:72:43:87:a3:79:05:f9:96:29:b2:70:4e:c3:ac: e8:3a:9d:ba:2c:08:18:61:77:98:64:5c:43:4f:b6:c2:61:a4: 18:98:1a:a5:f9:9b:eb:00:69:93:de:75:68:4b:d8:a8:10:63: 6e:8a:4d:4a:fe:6a:90:5b:36:3a:52:8e:81:0f:4b:cc:93:c5: 7e:05:45:e2:dc:dc:c5:6d:06:b4:c8:c5:be:da:5d:b8:14:2c: 5a:ea:0e:69:a9:1e:e1:4d:9a:a4:20:2e:e7:63:21:c6:e9:a7: a2:b2:30:c6:39:08:0a:df:69:05:4c:e0:07:1a:b3:2b:58:52: 19:44:9c:28:9e:be:fa:52:ee:e8:32:3b:84:d6:62:cf:c1:2b: a3:5c:35:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjUwNTMwMjEwMjE2WhcNMjUwNjA2MjEwMjE2WjAYMRYwFAYD VQQDEw02ODNhMWNkOC00ZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+M1THUT8KSwyCCFOxzEdUz7MI/K0cPxTToDZwv68+jQ+HP52bUFGSbXTQTHm yyg8jkizAZ0BYE7IaDdMFWDdpx8DRKOcGTauYTGWx34e79Jc3oUkGj2lN0CCG6b7 lP1enct16heOaMssuKT0rvydnqL9Z+RUEN6XxOlpxKZdz2lvpJtynqcZ/MYz9CAA fDkH5NgiPvMDPHOzzAaLQgzgirQuVkzOe2x/0o5eidLbGt3Pfr6JHfZqSi8HrIgl TaoyIjxYt1AceCMcuMJ6Vm5InzUGDArB6i3fe2xAYCRnwdQZBdO6pomVNHXVoz5Q hWEZ4c5WMVTWcWywl3LHfXmw2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXbJ8B7 uv8fdYly/Tmp3KtVE66LMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV/NwV6Aakr8kCPQEFX7pkPK0sngONdJuIHzvoh9sLoitkb8c+58fE lX5b9pYpdGH66SEpVbpf3gwWSWhX7/1Zin0IN6XICA+QHWRGcQQLdVhINfVN1LOH Yt/tNY60k22bL/RpHDhd7/mHYe3nDf2uckOHo3kF+ZYpsnBOw6zoOp26LAgYYXeY ZFxDT7bCYaQYmBql+ZvrAGmT3nVoS9ioEGNuik1K/mqQWzY6Uo6BD0vMk8V+BUXi 3NzFbQa0yMW+2l24FCxa6g5pqR7hTZqkIC7nYyHG6aeisjDGOQgK32kFTOAHGrMr WFIZRJwonr76Uu7oMjuE1mLPwSujXDUd -----END CERTIFICATE-----Generated at Sat May 31 16:30:38 2025 by rpki-client