$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json) Hash identifier: IfKoAhmx8nOfgbkYqA0eQbEQjFkJjf0CekAnDzGb/es= Subject key identifier: A9:C4:1F:24:F3:60:54:F1:DF:23:E9:84:52:8C:2D:9E:87:AC:FA:BC Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft Manifest number: 2D Signing time: Sat 31 May 2025 07:18:50 +0000 Manifest this update: Sat 31 May 2025 07:18:49 +0000 Manifest next update: Sat 07 Jun 2025 07:18:49 +0000 Files and hashes: 1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: mYWoPQCn8RR8E3MgM0COmGdmYe2ZkpE1AoTZ/oswRYo=) 2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Validity Not Before: May 31 07:18:49 2025 GMT Not After : Jun 7 07:18:49 2025 GMT Subject: CN=683aad59-19eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:84:94:bc:d6:79:40:af:d5:b3:bc:f3:88: 85:41:5a:c4:41:b0:96:48:26:e1:9a:4e:f7:f6:c3: dd:33:92:21:e7:64:59:64:f5:62:40:d1:c2:d5:22: 6d:97:14:de:91:77:1a:d1:cd:45:76:cd:b8:d0:d0: e4:81:bd:bc:83:92:d7:4e:41:39:9c:6a:bf:de:15: 19:27:82:9c:a2:d6:63:96:05:78:ec:70:0d:ab:c5: d9:f9:a5:a2:f3:88:90:71:1e:29:2e:7d:e0:57:0a: 93:00:91:f1:bd:fa:f5:82:21:45:39:6e:d1:58:71: c8:4f:13:06:cf:54:52:c7:f3:d4:f0:6e:c5:70:fc: 8c:d0:6e:9a:ef:cc:9b:c2:4a:38:33:cc:79:de:28: be:a6:2e:70:c4:d6:48:c9:c8:4f:c7:d8:cf:20:94: 80:23:11:3c:cc:c3:f7:9a:c0:64:fb:9d:b7:3b:00: a5:db:ad:e9:d2:f5:a4:be:e8:ac:f5:2d:70:43:d6: 0b:59:1e:a8:5a:46:36:ad:13:19:e6:68:af:ee:25: 77:a0:d1:9c:b7:83:c4:8c:7b:4f:f7:b4:f1:2b:e0: 5a:9a:df:40:43:a0:59:54:e2:5f:98:0f:d5:45:b6: 61:5a:18:05:f6:7a:6a:92:1b:d4:18:52:53:81:c1: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C4:1F:24:F3:60:54:F1:DF:23:E9:84:52:8C:2D:9E:87:AC:FA:BC X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c0:05:57:f8:65:bf:19:94:67:fe:04:37:4d:cd:af:84:f3: 8a:ab:21:c1:78:61:0f:1a:9d:4e:6a:32:f5:87:8d:28:d2:f4: 06:15:53:66:bc:17:af:4b:13:2f:54:3d:d5:02:d3:5a:b0:23: 96:f7:73:05:a7:26:d4:e0:b4:20:40:49:72:2e:78:74:b6:9e: 3a:0c:54:f1:3c:8f:53:cf:c6:cc:3c:65:95:a8:8e:ab:b6:e8: b1:af:bb:dc:cc:06:c2:98:c3:21:93:cb:78:46:fc:18:7d:18: 2b:06:ea:f7:9e:6d:00:78:75:6b:7d:f5:2d:67:1f:bf:a9:52: 52:78:3a:28:6d:6d:fc:d3:5f:52:cf:fe:04:1a:48:af:21:f6: 62:c9:a9:1d:56:49:c7:f0:bd:14:eb:20:4d:26:27:36:d6:78: d3:65:45:f7:59:8c:33:c7:83:52:aa:45:9e:90:53:e7:7b:f5: 06:3b:14:dd:d1:54:1b:d8:91:f5:9c:a9:8d:a7:b2:34:a5:13: 14:1e:48:7f:a8:cf:69:0b:65:21:f8:e8:50:a4:60:a0:79:a1: b2:13:c6:7c:62:f2:72:09:43:9a:ff:ea:87:1e:2b:8c:af:ba: b2:9b:b4:38:e1:b9:21:f5:43:6b:38:e7:08:15:33:1f:96:e8: 6a:c8:2d:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTRDRDExMC8GA1UEBRMoRTE2M0YwRkU1NEYxNzlBRjRDNkMwOTcwOThGRUZCRTJE NDM4NUIxOTAeFw0yNTA1MzEwNzE4NDlaFw0yNTA2MDcwNzE4NDlaMBgxFjAUBgNV BAMTDTY4M2FhZDU5LTE5ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2j4SUvNZ5QK/Vs7zziIVBWsRBsJZIJuGaTvf2w90zkiHnZFlk9WJA0cLVIm2X FN6RdxrRzUV2zbjQ0OSBvbyDktdOQTmcar/eFRkngpyi1mOWBXjscA2rxdn5paLz iJBxHikufeBXCpMAkfG9+vWCIUU5btFYcchPEwbPVFLH89TwbsVw/IzQbprvzJvC SjgzzHneKL6mLnDE1kjJyE/H2M8glIAjETzMw/eawGT7nbc7AKXbrenS9aS+6Kz1 LXBD1gtZHqhaRjatExnmaK/uJXeg0Zy3g8SMe0/3tPEr4Fqa30BDoFlU4l+YD9VF tmFaGAX2emqSG9QYUlOBwVS1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqcQfJPNg VPHfI+mEUowtnoes+rwwHwYDVR0jBBgwFoAU4WPw/lTxea9MbAlwmP774tQ4Wxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NENEL0QyRTJDQTdDRkQ4 NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdQd19sVHhlYTlNYkFsd21QNzc0dFE0V3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NENEL0QyRTJDQTdDRkQ4NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5 TWJBbHdtUDc3NHRRNFd4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABfABVf4Zb8ZlGf+BDdNza+E84qrIcF4YQ8anU5qMvWHjSjS9AYVU2a8 F69LEy9UPdUC01qwI5b3cwWnJtTgtCBASXIueHS2njoMVPE8j1PPxsw8ZZWojqu2 6LGvu9zMBsKYwyGTy3hG/Bh9GCsG6veebQB4dWt99S1nH7+pUlJ4OihtbfzTX1LP /gQaSK8h9mLJqR1WScfwvRTrIE0mJzbWeNNlRfdZjDPHg1KqRZ6QU+d79QY7FN3R VBvYkfWcqY2nsjSlExQeSH+oz2kLZSH46FCkYKB5obITxnxi8nIJQ5r/6oceK4yv urKbtDjhuSH1Q2s45wgVMx+W6GrILaI= -----END CERTIFICATE-----Generated at Sat May 31 17:00:26 2025 by rpki-client