$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft File: p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json) Hash identifier: uY2wZes5Wm1LURejWJSZ1lBK8bdYRKm74hMD0HyC71s= Subject key identifier: BA:56:2D:55:6B:7C:4D:92:2E:C0:45:AE:B0:AC:7F:EA:CB:6B:F6:29 Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Certificate serial: 19EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft Manifest number: 19DC Signing time: Fri 30 May 2025 16:34:06 +0000 Manifest this update: Fri 30 May 2025 16:34:05 +0000 Manifest next update: Fri 06 Jun 2025 16:34:05 +0000 Files and hashes: 1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: t71PTZa/U0ngxbL3oub5hZGo4lv+jgsF07C6hFoCg5U=) 2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: Pn8qccQRQVn2V5b6lFX/FWa2+EXb/L20S5gebLb7vvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6636 (0x19ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Validity Not Before: May 30 16:34:05 2025 GMT Not After : Jun 6 16:34:05 2025 GMT Subject: CN=6839ddfd-5744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:9e:ee:71:2c:13:85:f7:fa:8c:d2:a4:e2: cf:77:df:3c:32:04:51:ce:61:0b:85:d6:c6:32:4d: b9:4c:14:7f:b0:a3:b7:78:34:7a:55:3d:ae:e0:37: 6d:11:ec:8d:48:30:30:8d:62:b3:04:ca:b9:49:ba: b5:bd:a1:99:ad:7d:04:17:85:1a:5d:0c:64:2c:93: 25:df:ed:11:23:1e:9f:be:74:3a:ad:ff:86:f2:1c: 7b:e9:92:e4:f9:3f:e8:08:77:ab:65:e4:f2:47:74: a8:52:d3:e6:ab:80:91:4f:48:a6:91:ae:46:37:ab: 16:80:91:68:e4:ca:b1:85:7d:f7:3f:32:de:ab:76: 3b:c3:fd:3c:4b:aa:45:01:c5:e5:15:84:30:67:7e: 02:1b:6d:7b:e0:6a:3a:6f:58:f9:0e:34:49:e6:d5: 3a:12:54:ad:fa:b4:43:73:72:d1:ed:0a:bd:7c:c5: a2:f3:67:78:a8:70:8f:82:a7:9a:b4:1a:ed:42:7d: 85:f7:7c:98:59:25:7b:42:85:bc:68:64:19:9d:32: 59:e7:22:74:da:8d:0b:ef:93:33:3c:13:b6:10:eb: 8d:c6:75:72:be:4e:5d:c7:29:30:50:11:6d:a3:d0: 61:88:78:6d:a4:03:3a:17:7d:a2:59:ad:0f:5e:c5: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:56:2D:55:6B:7C:4D:92:2E:C0:45:AE:B0:AC:7F:EA:CB:6B:F6:29 X509v3 Authority Key Identifier: keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e1:80:10:b7:ae:4c:cc:27:d4:57:d8:11:d5:1a:20:2e:dc: 5d:40:59:80:b8:85:7a:60:dd:8e:5c:44:83:c8:99:b3:4c:77: ec:a2:1b:0d:89:e7:6d:92:09:95:ca:5f:44:2e:22:b0:41:68: f0:37:13:7a:ba:da:06:39:17:85:c5:0c:fe:93:70:a8:b3:5b: 49:a1:ba:86:31:d3:76:4e:ef:f1:29:bd:a6:9b:f2:96:fa:40: e8:3b:31:75:c4:73:d6:e9:13:31:40:75:80:02:12:d4:5a:17: 29:64:c3:0c:06:0f:df:b4:cb:5d:e1:54:7a:53:ab:af:7d:5e: 7c:a4:82:c5:20:6d:67:7f:fd:f5:bc:d4:e5:72:48:76:05:23: 98:bb:9a:82:08:28:3d:25:6e:0a:29:8b:0d:20:60:be:12:14: 56:c4:a0:be:24:aa:74:e4:ad:6c:bd:8b:70:22:d9:0b:1e:79: 6c:7f:24:a1:04:d1:16:ea:e9:df:43:fe:4b:64:66:22:03:f0: e9:5a:33:52:24:0b:3e:0b:b6:b7:96:23:17:9c:f7:12:a8:60: 1f:54:2b:ec:7c:fe:ad:b3:50:9d:ec:4b:af:38:7a:aa:e3:e1: 13:9a:e9:71:c2:9b:d7:e8:f6:b2:8a:43:7a:e7:d2:c2:11:69: 09:b0:ba:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhGQTI2MjcxODlF NTQyRjRERUYwHhcNMjUwNTMwMTYzNDA1WhcNMjUwNjA2MTYzNDA1WjAYMRYwFAYD VQQDEw02ODM5ZGRmZC01NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cme7nEsE4X3+ozSpOLPd988MgRRzmELhdbGMk25TBR/sKO3eDR6VT2u4Ddt EeyNSDAwjWKzBMq5Sbq1vaGZrX0EF4UaXQxkLJMl3+0RIx6fvnQ6rf+G8hx76ZLk +T/oCHerZeTyR3SoUtPmq4CRT0imka5GN6sWgJFo5MqxhX33PzLeq3Y7w/08S6pF AcXlFYQwZ34CG2174Go6b1j5DjRJ5tU6ElSt+rRDc3LR7Qq9fMWi82d4qHCPgqea tBrtQn2F93yYWSV7QoW8aGQZnTJZ5yJ02o0L75MzPBO2EOuNxnVyvk5dxykwUBFt o9BhiHhtpAM6F32iWa0PXsUDLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpWLVVr fE2SLsBFrrCsf+rLa/YpMB8GA1UdIwQYMBaAFKfsIlhoL2+un4Q4+iYnGJ5UL03v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTkyQS80NTc5N0M1QzVB NEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2NmZoRGo2SmljWW5sUXZU ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Atd2lXR2d2YjY2ZmhEajZKaWNZbmxRdlRlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTkyQS80NTc5N0M1QzVBNEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2 NmZoRGo2SmljWW5sUXZUZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO4YAQt65MzCfUV9gR1RogLtxdQFmAuIV6YN2OXESDyJmzTHfsohsN iedtkgmVyl9ELiKwQWjwNxN6utoGOReFxQz+k3Cos1tJobqGMdN2Tu/xKb2mm/KW +kDoOzF1xHPW6RMxQHWAAhLUWhcpZMMMBg/ftMtd4VR6U6uvfV58pILFIG1nf/31 vNTlckh2BSOYu5qCCCg9JW4KKYsNIGC+EhRWxKC+JKp05K1svYtwItkLHnlsfySh BNEW6unfQ/5LZGYiA/DpWjNSJAs+C7a3liMXnPcSqGAfVCvsfP6ts1Cd7EuvOHqq 4+ETmulxwpvX6PayikN659LCEWkJsLqg -----END CERTIFICATE-----Generated at Sat May 31 15:14:38 2025 by rpki-client