$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: /XnFK9CTkrtgdj9UZ/zftKd55u7ZEu8CXeGYh5YLkzo= Subject key identifier: CB:D1:44:65:0B:30:31:1A:08:E0:30:78:51:FF:12:36:BC:EB:A6:2B Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0B8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0B85 Signing time: Thu 24 Apr 2025 18:56:14 +0000 Manifest this update: Thu 24 Apr 2025 18:56:14 +0000 Manifest next update: Thu 01 May 2025 18:56:14 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: rPewwfCzUOn0MIxFFPD1SRgjeVbLnSgqmJgWZpfPhbA=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: ukt0pxqY8ok4zBKJR2dRuTwyGN5+UeLkjnvL96GEj4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2955 (0xb8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: Apr 24 18:56:14 2025 GMT Not After : May 1 18:56:14 2025 GMT Subject: CN=680a894e-28bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:16:05:3d:2f:1d:83:30:64:9b:f6:f9:82: 6f:40:f6:2e:be:88:ea:d2:e1:4e:68:0b:2c:61:e0: 06:8a:5e:99:52:32:a8:8e:0c:e9:5f:04:a4:28:a9: 5e:b7:80:82:cc:a2:4d:f5:16:f9:fa:47:ed:6d:7c: 18:c6:2f:c4:05:99:f0:c9:24:a3:e9:a7:91:23:e4: 51:c1:88:14:16:2f:6f:3b:9c:cc:b8:83:5f:13:e1: c8:f1:f4:00:53:81:76:d3:f6:61:30:bc:b6:9a:df: 68:2b:13:33:24:ec:de:a9:bb:a5:33:9f:b4:08:db: 49:08:20:66:2d:a2:1c:ff:bb:13:01:d5:77:bb:81: 41:76:bd:a9:bc:99:44:65:32:ca:a3:a2:03:fa:64: 02:a5:7b:f7:06:cd:61:c6:7d:ab:10:cc:ea:31:e5: e9:9f:5c:79:e7:36:ba:40:41:dc:10:47:ba:4d:99: 23:c9:e7:0c:4c:e8:4e:bb:98:0e:9f:e0:a1:23:c2: 2e:92:05:e8:cd:be:b1:9a:bf:9a:64:59:4d:2b:eb: 56:69:65:2f:69:28:d2:6c:5d:f0:b5:c6:c3:3d:dc: e8:35:a1:6b:88:2d:b6:fb:6c:17:ed:6a:ea:11:c1: a3:79:5b:df:b3:bb:d3:c3:b8:f0:55:3c:d0:ed:3f: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D1:44:65:0B:30:31:1A:08:E0:30:78:51:FF:12:36:BC:EB:A6:2B X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c6:d0:5c:a9:2f:56:11:dc:ec:bf:d3:16:b3:d5:85:3f:12: 9c:83:24:38:08:16:77:2e:33:a2:22:e1:ad:44:1b:ca:2a:df: 2e:4e:82:d0:2a:b3:8c:05:67:b7:94:9f:5c:e2:54:b0:60:af: ee:35:6a:3c:a5:ef:bc:30:59:a1:7e:66:bf:cb:96:2c:bd:73: db:db:67:7b:1b:09:0f:c2:a9:6a:f8:3f:8b:10:4e:37:ba:4f: b6:e9:bd:55:cb:ef:3a:a9:d6:39:34:e4:45:b9:a8:50:77:7f: 54:e4:db:1c:a0:a1:b7:76:39:1b:10:15:30:3b:0e:4c:05:df: f0:51:3b:d4:14:16:ec:dc:22:1d:11:87:f6:8f:d0:90:83:61: cc:16:0d:96:f0:7e:16:92:f8:f7:5e:f7:ea:11:0e:ad:d7:4e: 85:33:8b:02:58:3e:31:91:1a:13:4c:13:a7:51:81:a4:39:82: 5e:ca:a5:f1:7b:46:6d:8b:85:b4:a6:a8:64:b1:bb:af:09:57: 20:ad:ea:2e:5a:c0:f3:e3:f6:cf:c9:0a:df:3b:d7:a7:3e:2d: fc:af:f5:bc:7b:02:14:13:1e:54:b1:d8:c6:56:37:81:1a:e1: a7:64:80:93:3a:74:52:8b:f3:b4:22:a1:e5:7d:d3:0b:bb:ea: 85:a4:3e:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUwNDI0MTg1NjE0WhcNMjUwNTAxMTg1NjE0WjAYMRYwFAYD VQQDEw02ODBhODk0ZS0yOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLwWBT0vHYMwZJv2+YJvQPYuvojq0uFOaAssYeAGil6ZUjKojgzpXwSkKKle t4CCzKJN9Rb5+kftbXwYxi/EBZnwySSj6aeRI+RRwYgUFi9vO5zMuINfE+HI8fQA U4F20/ZhMLy2mt9oKxMzJOzeqbulM5+0CNtJCCBmLaIc/7sTAdV3u4FBdr2pvJlE ZTLKo6ID+mQCpXv3Bs1hxn2rEMzqMeXpn1x55za6QEHcEEe6TZkjyecMTOhOu5gO n+ChI8IukgXozb6xmr+aZFlNK+tWaWUvaSjSbF3wtcbDPdzoNaFriC22+2wX7Wrq EcGjeVvfs7vTw7jwVTzQ7T+uEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvRRGUL MDEaCOAweFH/Eja866YrMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaxtBcqS9WEdzsv9MWs9WFPxKcgyQ4CBZ3LjOiIuGtRBvKKt8uToLQ KrOMBWe3lJ9c4lSwYK/uNWo8pe+8MFmhfma/y5YsvXPb22d7GwkPwqlq+D+LEE43 uk+26b1Vy+86qdY5NORFuahQd39U5NscoKG3djkbEBUwOw5MBd/wUTvUFBbs3CId EYf2j9CQg2HMFg2W8H4Wkvj3XvfqEQ6t106FM4sCWD4xkRoTTBOnUYGkOYJeyqXx e0Zti4W0pqhksbuvCVcgreouWsDz4/bPyQrfO9enPi38r/W8ewIUEx5UsdjGVjeB GuGnZICTOnRSi/O0IqHlfdMLu+qFpD60 -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:06 2025 by rpki-client