$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json) Hash identifier: J6CT/E5OzhOjoX0l36SMmgg+I7DUey7CpjDw1MrYwss= Subject key identifier: 63:3B:42:90:27:AB:4A:F6:56:DC:ED:60:B7:F2:A7:D0:EE:31:BA:A7 Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Certificate serial: 073F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft Manifest number: 0853 Signing time: Thu 24 Apr 2025 21:30:51 +0000 Manifest this update: Thu 24 Apr 2025 21:30:51 +0000 Manifest next update: Thu 01 May 2025 21:30:51 +0000 Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: rUK1oLUh6KUpDUUsqWreXDlRkKreyxFou+sCcYVDbuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1855 (0x73f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Validity Not Before: Apr 24 21:30:51 2025 GMT Not After : May 1 21:30:51 2025 GMT Subject: CN=680aad8b-ccdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:73:d9:fe:d2:e2:54:75:18:5b:33:38:8c: 0e:81:21:a5:66:2e:fa:f7:50:09:41:e2:bf:3e:f1: 86:6c:83:0a:6e:4f:73:e3:2b:b7:46:9f:6c:fe:2a: f8:e4:e8:b5:7e:0f:9e:9c:10:a3:56:97:c9:3c:22: 1e:fa:82:ac:23:4e:b5:ef:83:0b:84:61:cb:84:36: 90:38:8c:8c:7a:15:9f:51:77:0a:94:3b:f3:12:a4: d0:e6:5e:b4:93:18:98:8d:58:04:1a:d6:c8:aa:70: 69:81:65:52:a8:50:1b:29:a0:24:f2:1a:51:10:09: e9:2c:d9:c8:28:81:26:77:35:1d:ab:29:47:b1:92: ac:dc:82:45:c2:f9:d7:9a:9b:95:c0:00:e9:67:ed: e1:db:87:41:0c:5d:5c:44:56:bc:3d:b5:6e:6a:39: b9:99:7c:11:5d:af:4f:32:fa:af:7c:21:9a:2a:45: 07:a2:c8:3a:a0:b8:91:4f:95:ba:14:cb:77:c9:f7: 3d:79:c5:7e:7d:c2:1e:59:46:5e:43:a5:f8:58:d2: 31:24:92:c8:60:e7:a6:ce:7e:89:25:0c:dc:b5:39: da:ee:3a:27:d3:d6:de:88:b6:68:17:88:f9:b3:06: 88:ac:b1:e6:b0:33:08:b1:e0:e1:bd:33:82:81:37: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3B:42:90:27:AB:4A:F6:56:DC:ED:60:B7:F2:A7:D0:EE:31:BA:A7 X509v3 Authority Key Identifier: keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5b:3a:18:97:55:c2:8a:fc:79:ca:8a:5b:52:0c:4f:3a:4a: 37:42:c8:97:c1:46:7d:f0:57:84:3e:84:0e:4e:fa:fc:b8:10: b5:ec:27:98:10:58:8f:7c:bc:77:77:97:0c:9e:5f:e5:19:dc: 0a:22:1a:81:8c:81:b2:f8:2a:19:0e:d7:75:4d:a3:3e:97:7b: 8e:a5:f5:4e:bf:64:6c:aa:b9:98:9b:24:d9:d3:97:9b:f4:db: a1:7e:c3:55:a4:a9:34:36:e7:ea:93:ab:ed:60:31:02:47:3b: ba:b9:0d:53:5b:eb:10:2d:ab:1b:4c:8d:82:0a:74:98:f8:10: 1f:f6:5b:83:3e:08:7d:ec:96:58:53:2c:9b:dc:04:55:ce:46: db:de:d7:01:e5:f1:7d:de:af:2c:e9:fb:20:a0:67:67:b2:a5: 61:b1:f9:e8:8f:21:9e:4e:ce:c8:dd:da:79:fc:5c:53:29:e4: d9:23:08:4f:6c:95:17:33:77:70:3b:f8:bb:83:9f:c0:43:bf: 2a:04:63:93:ca:ad:bc:25:08:3e:8b:8b:dd:2f:6e:30:2b:25: ba:6d:ee:59:a7:63:5e:0b:03:40:71:cd:e0:da:83:7f:c1:18: 9b:25:fe:a5:57:1e:ce:9e:2a:3a:b5:97:26:2f:20:05:4e:b6: 3e:69:94:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5QUIxMTAvBgNVBAUTKEY1NDRCOUMyQjFCREVBMUMzQjM3NDM0OEI4RDE1RTM2 N0U2QTBGNDIwHhcNMjUwNDI0MjEzMDUxWhcNMjUwNTAxMjEzMDUxWjAYMRYwFAYD VQQDEw02ODBhYWQ4Yi1jY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+9z2f7S4lR1GFszOIwOgSGlZi7691AJQeK/PvGGbIMKbk9z4yu3Rp9s/ir4 5Oi1fg+enBCjVpfJPCIe+oKsI06174MLhGHLhDaQOIyMehWfUXcKlDvzEqTQ5l60 kxiYjVgEGtbIqnBpgWVSqFAbKaAk8hpREAnpLNnIKIEmdzUdqylHsZKs3IJFwvnX mpuVwADpZ+3h24dBDF1cRFa8PbVuajm5mXwRXa9PMvqvfCGaKkUHosg6oLiRT5W6 FMt3yfc9ecV+fcIeWUZeQ6X4WNIxJJLIYOemzn6JJQzctTna7jon09beiLZoF4j5 swaIrLHmsDMIseDhvTOCgTfVRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGM7QpAn q0r2VtztYLfyp9DuMbqnMB8GA1UdIwQYMBaAFPVEucKxveocOzdDSLjRXjZ+ag9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1 NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZodzdOME5JdU5GZU5uNXFE MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVUzV3ckc5Nmh3N04wTkl1TkZlTm41cUQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZo dzdOME5JdU5GZU5uNXFEMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaWzoYl1XCivx5yopbUgxPOko3QsiXwUZ98FeEPoQOTvr8uBC17CeY EFiPfLx3d5cMnl/lGdwKIhqBjIGy+CoZDtd1TaM+l3uOpfVOv2RsqrmYmyTZ05eb 9NuhfsNVpKk0Nufqk6vtYDECRzu6uQ1TW+sQLasbTI2CCnSY+BAf9luDPgh97JZY Uyyb3ARVzkbb3tcB5fF93q8s6fsgoGdnsqVhsfnojyGeTs7I3dp5/FxTKeTZIwhP bJUXM3dwO/i7g5/AQ78qBGOTyq28JQg+i4vdL24wKyW6be5Zp2NeCwNAcc3g2oN/ wRibJf6lVx7Onio6tZcmLyAFTrY+aZQa -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:28 2025 by rpki-client