$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json) Hash identifier: 4cq3PpKOUsX5Apuameyf0itP2CZX8d+V/wtF4p/wsZU= Subject key identifier: 8B:1B:AE:A2:A1:87:5C:EA:D5:54:32:E1:37:52:E1:12:D9:FE:C7:74 Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft Manifest number: 0570 Signing time: Fri 30 May 2025 23:32:46 +0000 Manifest this update: Fri 30 May 2025 23:32:45 +0000 Manifest next update: Fri 06 Jun 2025 23:32:45 +0000 Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: /5qBw0FCgtNv+plAZSoFfuTpKiI91vA6fPLF3vTVxvs=) 2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: w5XSagCBbj7wYrqd/6P5FJGCYb7FRwj35SS+I3gJcAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Validity Not Before: May 30 23:32:45 2025 GMT Not After : Jun 6 23:32:45 2025 GMT Subject: CN=683a401d-c8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:9d:54:7a:67:40:33:c6:7b:c3:bd:63:79: a3:a5:b4:ac:a3:3b:a8:44:7e:4d:cd:76:06:fb:f7: 22:7e:7b:a3:4d:cd:97:63:22:fa:04:78:ac:f1:eb: 31:d4:0d:6d:9f:8e:d4:df:e8:c5:2e:27:c1:f4:fa: 85:b5:a8:35:3b:99:83:ab:4a:24:09:49:62:9a:fb: 0f:ff:a6:1f:14:02:20:3c:2b:c7:7e:d7:c5:3b:49: 0c:d8:a4:a5:74:b9:47:76:23:ba:5a:23:b8:cb:66: 54:ff:4b:fd:89:5b:67:b5:46:b4:6f:6e:9a:92:c8: 34:60:32:d6:8b:91:ea:27:a2:9f:35:c1:ed:d5:ca: 08:1d:2c:74:fa:71:fb:66:60:69:d1:a0:3b:10:f9: 2b:71:b3:1b:9f:92:49:10:8f:62:47:4d:43:67:8a: 3c:7d:11:5d:ea:68:98:eb:d5:72:87:45:f3:b5:3c: 21:25:31:ff:0c:a2:87:02:f4:bc:8b:2d:1d:da:b0: 3a:e0:d0:ec:83:9f:0b:0f:9f:66:81:35:09:f2:72: 56:91:e9:39:c6:21:f2:a7:53:04:eb:24:7f:4a:b7: 66:de:70:b2:1e:b1:6b:89:95:d4:f2:11:38:5a:59: cb:6f:df:aa:3d:d3:a6:7d:42:ed:f2:ae:77:bf:4c: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1B:AE:A2:A1:87:5C:EA:D5:54:32:E1:37:52:E1:12:D9:FE:C7:74 X509v3 Authority Key Identifier: keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f8:2b:37:76:c0:ff:d7:a5:7e:82:93:62:08:04:26:b2:78: 9f:9f:e6:2c:2d:53:f3:ef:5c:6e:c9:00:d4:86:d7:4b:f5:c8: fa:54:f0:c8:0a:ad:c0:b4:59:13:83:4a:fb:ff:60:ac:e3:e7: 5a:01:85:5e:64:68:e2:f8:06:c6:79:af:4e:bb:07:c2:3d:50: 00:ac:5f:ee:7b:d6:81:91:63:4a:70:b4:19:a8:56:99:43:66: 4b:fa:19:dd:61:3d:58:65:e8:c7:c4:92:2e:68:97:63:52:c6: eb:42:ae:48:b9:ca:b1:2e:ca:64:61:66:cf:86:81:77:91:90: a4:c2:02:8c:7f:6f:ef:6f:f6:f6:09:5d:1c:4a:87:9e:80:24: 57:de:e0:75:0a:0d:cc:2f:90:34:66:0b:e5:a0:25:1c:2e:01: 7b:69:a4:11:71:c2:01:44:e0:0a:e6:d8:af:2d:88:a0:24:a7: ce:14:70:3b:01:80:3c:b2:a5:e4:42:55:01:1d:e7:49:28:39: 70:08:91:bd:00:7e:ea:fe:40:42:b9:ab:fc:d0:fe:ff:56:b7: c2:9a:9e:d2:8f:86:9c:7b:43:ba:b6:1a:73:16:f0:01:41:40: cf:16:22:84:17:89:18:38:af:6e:5e:bd:ef:1e:7f:81:ac:65: 67:1a:7c:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy Njc3NzNGQzkwHhcNMjUwNTMwMjMzMjQ1WhcNMjUwNjA2MjMzMjQ1WjAYMRYwFAYD VQQDEw02ODNhNDAxZC1jOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0GdVHpnQDPGe8O9Y3mjpbSsozuoRH5NzXYG+/cifnujTc2XYyL6BHis8esx 1A1tn47U3+jFLifB9PqFtag1O5mDq0okCUlimvsP/6YfFAIgPCvHftfFO0kM2KSl dLlHdiO6WiO4y2ZU/0v9iVtntUa0b26aksg0YDLWi5HqJ6KfNcHt1coIHSx0+nH7 ZmBp0aA7EPkrcbMbn5JJEI9iR01DZ4o8fRFd6miY69Vyh0XztTwhJTH/DKKHAvS8 iy0d2rA64NDsg58LD59mgTUJ8nJWkek5xiHyp1ME6yR/Srdm3nCyHrFriZXU8hE4 WlnLb9+qPdOmfULt8q53v0x/qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsbrqKh h1zq1VQy4TdS4RLZ/sd0MB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG+Cs3dsD/16V+gpNiCAQmsnifn+YsLVPz71xuyQDUhtdL9cj6VPDI Cq3AtFkTg0r7/2Cs4+daAYVeZGji+AbGea9OuwfCPVAArF/ue9aBkWNKcLQZqFaZ Q2ZL+hndYT1YZejHxJIuaJdjUsbrQq5IucqxLspkYWbPhoF3kZCkwgKMf2/vb/b2 CV0cSoeegCRX3uB1Cg3ML5A0ZgvloCUcLgF7aaQRccIBROAK5tivLYigJKfOFHA7 AYA8sqXkQlUBHedJKDlwCJG9AH7q/kBCuav80P7/VrfCmp7Sj4ace0O6thpzFvAB QUDPFiKEF4kYOK9uXr3vHn+BrGVnGnwR -----END CERTIFICATE-----Generated at Sat May 31 17:20:34 2025 by rpki-client