$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft File: w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json) Hash identifier: vlfUtnURhLP0NzeewYaxYCDhINwqy0UYX0Jls3eLJjA= Subject key identifier: 11:77:55:AD:2A:31:32:6C:4A:2D:18:D2:90:06:AA:75:6E:92:70:B2 Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft Manifest number: 04AF Signing time: Sat 31 May 2025 00:08:34 +0000 Manifest this update: Sat 31 May 2025 00:08:34 +0000 Manifest next update: Sat 07 Jun 2025 00:08:34 +0000 Files and hashes: 1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: i9X4FfWZfSGAbCsWMoVT5UKkmgk/DLIDPHVZU07D/OU=) 2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Validity Not Before: May 31 00:08:34 2025 GMT Not After : Jun 7 00:08:34 2025 GMT Subject: CN=683a4882-a044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:ff:6f:64:d3:31:2b:a5:fc:70:d8:e1:43: 19:84:ee:da:24:97:65:50:0a:bc:ed:f6:6a:ed:4c: 45:1b:d8:6e:e2:e9:fd:75:3e:ed:27:de:d7:3a:6a: b1:96:f0:2a:ed:fd:9f:17:e1:ab:50:28:68:13:22: 59:92:53:03:4d:7f:8d:d5:dc:b9:df:e0:e8:6a:4f: c4:4a:3d:81:9e:64:36:52:78:de:ba:6c:6c:34:11: 86:b5:58:c8:ce:8f:26:4d:d8:fa:80:69:d4:95:4a: 76:58:7f:cc:5c:58:a2:a3:1c:c8:eb:6b:9c:7c:85: 71:70:10:94:1e:1e:eb:03:40:3d:33:9b:95:6c:27: ae:14:46:6e:a4:06:74:8d:82:66:48:83:2e:32:9f: de:09:07:33:5c:3f:83:cd:40:25:06:e4:45:02:93: 90:57:85:ae:88:b2:18:bf:a5:93:7f:7d:7d:09:e4: 5c:3f:be:7b:39:15:cb:a1:5a:a5:6c:7f:0c:da:11: 42:df:9d:ca:09:d8:68:8a:19:fd:f4:47:81:a4:bb: 1b:ba:eb:8f:8a:c1:7c:d8:4d:6f:9a:cc:e5:b7:b4: 8e:f5:1e:2b:91:3c:30:1b:64:5b:bb:10:d7:e6:e3: 2b:29:5e:e2:37:95:5f:e3:78:fd:69:cd:49:5d:d9: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:77:55:AD:2A:31:32:6C:4A:2D:18:D2:90:06:AA:75:6E:92:70:B2 X509v3 Authority Key Identifier: keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:dc:d4:42:3d:45:d9:8f:20:84:c5:fb:7f:2f:5c:e3:37:9b: 2f:74:18:56:45:db:76:44:5c:6a:16:cf:1c:96:ac:6f:df:1c: 2e:55:63:dc:dd:4e:0d:18:77:28:61:38:28:f3:f4:a0:77:e2: 01:d5:13:78:2b:3a:07:34:77:7b:48:c4:f5:bc:f9:5f:ad:5d: 15:ea:ed:7d:5d:27:7d:d7:f4:cb:a1:e5:a8:cf:78:81:2f:da: 97:0f:a3:9c:cd:42:4c:dd:e1:10:72:1b:78:65:c2:e0:d2:24: 46:bf:7a:38:fa:13:55:6a:64:90:29:01:e4:05:21:f7:35:4e: 9a:f2:10:83:4b:0f:e2:d1:32:c8:ca:a5:86:a8:f4:bb:56:a0: ba:c0:6a:d5:3a:99:ae:95:82:98:a2:e8:01:1b:a9:31:ce:96: ad:f3:d3:f1:fb:ba:38:66:06:0c:18:96:36:41:87:b4:e6:30: b3:93:60:83:ca:91:cd:c8:e5:0b:3d:e5:29:18:c7:fe:1b:30: d7:46:54:b7:a5:05:c8:39:3b:9f:74:1f:1e:30:8d:8d:c7:5b: 88:fd:21:9d:c7:40:6f:47:1f:01:8e:fe:ec:b8:c7:12:1c:8d: 0a:ba:9a:61:43:75:b5:17:9d:54:2e:93:da:bc:83:31:48:1d: b6:de:1f:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0EyRUNGODIyNjEz MDBDREZFOTUwHhcNMjUwNTMxMDAwODM0WhcNMjUwNjA3MDAwODM0WjAYMRYwFAYD VQQDEw02ODNhNDg4Mi1hMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vP/b2TTMSul/HDY4UMZhO7aJJdlUAq87fZq7UxFG9hu4un9dT7tJ97XOmqx lvAq7f2fF+GrUChoEyJZklMDTX+N1dy53+Doak/ESj2BnmQ2UnjeumxsNBGGtVjI zo8mTdj6gGnUlUp2WH/MXFiioxzI62ucfIVxcBCUHh7rA0A9M5uVbCeuFEZupAZ0 jYJmSIMuMp/eCQczXD+DzUAlBuRFApOQV4WuiLIYv6WTf319CeRcP757ORXLoVql bH8M2hFC353KCdhoihn99EeBpLsbuuuPisF82E1vmszlt7SO9R4rkTwwG2RbuxDX 5uMrKV7iN5Vf43j9ac1JXdkPuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBF3Va0q MTJsSi0Y0pAGqnVuknCyMB8GA1UdIwQYMBaAFMOWweUDfTNfc0HKLs+CJhMAzf6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzM4Qy84NzA0OERBQTMx MDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0xOXpRY291ejRJbUV3RE5f cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1YkI1UU45TTE5elFjb3V6NEltRXdETl9wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0x OXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv3NRCPUXZjyCExft/L1zjN5svdBhWRdt2RFxqFs8clqxv3xwuVWPc 3U4NGHcoYTgo8/Sgd+IB1RN4KzoHNHd7SMT1vPlfrV0V6u19XSd91/TLoeWoz3iB L9qXD6OczUJM3eEQcht4ZcLg0iRGv3o4+hNVamSQKQHkBSH3NU6a8hCDSw/i0TLI yqWGqPS7VqC6wGrVOpmulYKYougBG6kxzpat89Px+7o4ZgYMGJY2QYe05jCzk2CD ypHNyOULPeUpGMf+GzDXRlS3pQXIOTufdB8eMI2Nx1uI/SGdx0BvRx8Bjv7suMcS HI0KupphQ3W1F51ULpPavIMxSB223h/U -----END CERTIFICATE-----Generated at Sat May 31 17:07:36 2025 by rpki-client