$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft File: mWsZb8o8chhx7p4UE5Mri1DtCas.mft (raw, json) Hash identifier: NjhJdCHXDDvR2goAEIP3ZgzQoXaGhVCBtphMiPF6Yzk= Subject key identifier: 0D:FF:61:06:58:E4:6F:26:1D:9C:83:91:2F:4B:A7:94:50:5C:5B:32 Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB Certificate issuer: /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft Manifest number: 9C Signing time: Fri 25 Apr 2025 05:15:57 +0000 Manifest this update: Fri 25 Apr 2025 05:15:57 +0000 Manifest next update: Fri 02 May 2025 05:15:57 +0000 Files and hashes: 1: mWsZb8o8chhx7p4UE5Mri1DtCas.crl (hash: TjRyC9S8px8FPFF3JCLqQyjicJ/HAMTGyBs50eXkZPg=) 2: 934F8250338A11EFB9C7A738C4F9AE02.roa (hash: 5xe8CAklHEvfHNnz1/f5nBginvtCFLJVR3UsgZ34D1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91164D3, serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB Validity Not Before: Apr 25 05:15:57 2025 GMT Not After : May 2 05:15:57 2025 GMT Subject: CN=680b1a8d-db4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a0:60:d4:56:8a:a6:71:c8:43:6b:92:9e:70: 99:84:5c:6f:8f:fb:3e:fa:73:8d:d9:12:9f:6e:2e: cf:41:e4:c5:81:62:b6:61:28:f2:85:6e:05:65:fe: 60:46:34:58:4d:9c:62:73:2c:be:6b:c0:a9:96:2d: 18:d9:e4:48:14:8b:f3:c2:37:51:9b:8a:7e:83:3e: f8:0d:51:b2:11:56:da:7a:d8:b0:cf:97:63:a9:47: f6:78:3b:f6:9a:5d:e0:a3:ce:60:fa:e1:94:3a:8a: 01:31:a8:00:f4:bd:9f:70:45:01:b4:30:37:c9:a0: 0a:1d:b9:09:ca:e3:ad:09:68:c6:f5:05:17:e3:cd: b5:99:64:1b:88:5f:11:df:85:89:a8:fc:c0:69:e6: 0b:70:ef:39:74:fd:40:da:41:35:a9:dc:8f:98:fc: e6:59:28:bd:c0:c1:09:b1:77:c2:7a:35:5d:70:c4: d3:c9:1b:be:86:d3:70:f5:d9:53:e5:80:7f:d7:5b: bf:fe:fd:a8:70:b1:08:88:6b:99:40:ba:af:18:49: 3b:29:6a:2f:3f:a0:7e:ce:d4:e0:41:2a:17:86:9a: 99:77:a4:af:c2:10:64:65:58:df:7b:4e:26:35:43: e6:85:b2:82:f1:61:27:af:f9:6f:87:f4:d4:fe:0d: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FF:61:06:58:E4:6F:26:1D:9C:83:91:2F:4B:A7:94:50:5C:5B:32 X509v3 Authority Key Identifier: keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:04:c7:80:b6:9f:f3:7e:77:62:3f:1f:58:d2:ce:69:1a:2c: 64:44:31:c9:cb:fc:99:66:61:8f:b8:a8:d4:15:7a:4e:d6:a0: ce:d6:5a:f0:3c:27:25:f3:1d:55:12:c2:35:c6:f5:20:05:3d: 7a:a2:90:2d:db:1f:f2:79:6f:59:09:30:a7:a0:7f:54:45:7c: a3:a6:dc:b6:5d:15:4c:b9:5f:02:dd:cf:5a:5e:dd:de:cf:73: bc:7f:be:77:d4:f4:ca:61:7f:08:0e:e9:53:20:44:9d:7b:f5: a4:14:ee:36:f1:51:3d:ef:d4:51:e0:cc:89:58:11:42:12:46: 48:57:f0:4f:b2:be:f1:85:a2:65:69:cc:5b:26:d4:2c:13:e8: 2d:32:40:52:ad:03:1c:72:8d:6b:0f:a8:e2:d4:b9:10:c6:cb: e6:25:5f:73:34:df:25:9d:f3:fa:33:cd:86:3a:6f:32:8b:1b: 05:1b:fb:bd:ac:97:f3:e1:d2:32:fd:20:2d:8b:36:30:31:24: d1:7a:c9:2d:20:86:1d:84:5e:13:15:bc:8f:cb:17:b2:b9:e1: eb:99:9d:49:1b:6a:9b:2e:5d:81:68:a2:b2:1f:0d:ed:ac:25: d5:c8:2d:8e:21:c6:5b:ae:bf:5e:b1:a9:1f:68:5a:40:72:3c: e7:8b:3f:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0RDMxMTAvBgNVBAUTKDk5NkIxOTZGQ0EzQzcyMTg3MUVFOUUxNDEzOTMyQjhC NTBFRDA5QUIwHhcNMjUwNDI1MDUxNTU3WhcNMjUwNTAyMDUxNTU3WjAYMRYwFAYD VQQDEw02ODBiMWE4ZC1kYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKBg1FaKpnHIQ2uSnnCZhFxvj/s++nON2RKfbi7PQeTFgWK2YSjyhW4FZf5g RjRYTZxicyy+a8Cpli0Y2eRIFIvzwjdRm4p+gz74DVGyEVbaetiwz5djqUf2eDv2 ml3go85g+uGUOooBMagA9L2fcEUBtDA3yaAKHbkJyuOtCWjG9QUX4821mWQbiF8R 34WJqPzAaeYLcO85dP1A2kE1qdyPmPzmWSi9wMEJsXfCejVdcMTTyRu+htNw9dlT 5YB/11u//v2ocLEIiGuZQLqvGEk7KWovP6B+ztTgQSoXhpqZd6SvwhBkZVjfe04m NUPmhbKC8WEnr/lvh/TU/g2VewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3/YQZY 5G8mHZyDkS9Lp5RQXFsyMB8GA1UdIwQYMBaAFJlrGW/KPHIYce6eFBOTK4tQ7Qmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjREMy8xNTUwNDhFQTMz ODkxMUVGOTlGRDFDMjdDNEY5QUUwMi9tV3NaYjhvOGNoaHg3cDRVRTVNcmkxRHRD YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Xc1piOG84Y2hoeDdwNFVFNU1yaTFEdENhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjREMy8xNTUwNDhFQTMzODkxMUVGOTlGRDFDMjdDNEY5QUUwMi9tV3NaYjhvOGNo aHg3cDRVRTVNcmkxRHRDYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqBMeAtp/zfndiPx9Y0s5pGixkRDHJy/yZZmGPuKjUFXpO1qDO1lrw PCcl8x1VEsI1xvUgBT16opAt2x/yeW9ZCTCnoH9URXyjpty2XRVMuV8C3c9aXt3e z3O8f7531PTKYX8IDulTIESde/WkFO428VE979RR4MyJWBFCEkZIV/BPsr7xhaJl acxbJtQsE+gtMkBSrQMcco1rD6ji1LkQxsvmJV9zNN8lnfP6M82GOm8yixsFG/u9 rJfz4dIy/SAtizYwMSTResktIIYdhF4TFbyPyxeyueHrmZ1JG2qbLl2BaKKyHw3t rCXVyC2OIcZbrr9esakfaFpAcjzniz+m -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:55 2025 by rpki-client