$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft File: 91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json) Hash identifier: Ug7hNLjkwEI2Y/0sEgVBNwqMyCaWpMc43plauWgE520= Subject key identifier: 8D:37:E9:B5:AA:FC:4F:13:73:B5:F7:F2:D3:A6:1B:5D:0D:66:9E:91 Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft Manifest number: 02A1 Signing time: Thu 01 May 2025 01:08:06 +0000 Manifest this update: Thu 01 May 2025 01:08:06 +0000 Manifest next update: Thu 08 May 2025 01:08:06 +0000 Files and hashes: 1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: K9DIJsRiYUSuQnYQGoHXc+SydD7WP0+bp+KhYterNhw=) 2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: 4DnB0bL3NG78Ric1Q/fKLIMkj23xQICVd02+1wJapuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F59, serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0 Validity Not Before: May 1 01:08:06 2025 GMT Not After : May 8 01:08:06 2025 GMT Subject: CN=6812c976-824e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:fb:2a:94:81:f3:92:cf:2d:b5:d7:4e:a9: 08:32:c9:87:10:45:c9:1d:1d:9d:59:fb:dc:dc:9c: ee:41:a3:52:c0:9a:b5:b5:08:1f:5a:8a:55:37:e1: ff:a8:bf:ca:5d:e7:cf:96:a1:f3:7a:06:fd:76:2d: 5e:30:d5:63:b8:b6:7e:67:51:5b:8d:ed:1d:6c:ab: e9:df:ea:89:2e:d9:ba:e5:a1:6b:bf:56:91:73:ba: e9:61:01:43:ee:ca:50:27:79:70:60:ff:5b:b4:dd: f0:05:ab:7a:fb:9c:32:f0:44:c5:8e:a9:91:3b:df: ee:c3:c3:c9:8f:2f:4a:24:5a:c2:9f:11:7d:43:19: 85:fd:fc:94:85:a7:76:a7:78:77:b6:e2:88:d4:c1: 18:3c:25:99:63:71:76:22:78:95:71:cd:31:c9:ed: 23:1b:e8:1f:20:18:b0:4a:f5:c8:4e:d5:71:43:c7: 31:65:4b:32:d9:34:fa:05:0e:a9:9a:2e:ec:a8:e9: f7:8c:be:7a:94:c7:e7:7d:6b:42:9c:24:78:4b:77: b6:4d:a5:bf:4f:d2:c5:f9:5f:4e:26:7b:cb:45:45: e5:e1:c0:55:b5:9e:16:ba:e9:40:8d:a2:62:fe:b1: 49:9a:36:da:bd:53:46:94:0e:3f:bd:9b:ae:e6:e9: c5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:E9:B5:AA:FC:4F:13:73:B5:F7:F2:D3:A6:1B:5D:0D:66:9E:91 X509v3 Authority Key Identifier: keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d0:ff:6e:08:24:99:f0:98:b2:a5:9d:c5:1c:cf:03:35:65: 1f:e8:9d:5a:59:97:b5:b7:bc:9c:6c:44:6b:6f:1c:bf:bc:c3: 8d:0e:9c:d6:f2:aa:29:7d:ef:07:7a:cb:57:4c:57:ce:aa:87: 9f:1d:02:e9:14:e6:84:e2:37:49:19:a9:48:31:9f:23:6a:ed: c9:59:6c:35:a2:70:7c:57:74:20:e5:00:b8:5e:da:28:ca:6b: a0:f8:75:03:37:55:f6:fd:c6:a4:31:39:95:1b:32:6b:8e:88: 60:a5:12:24:ba:46:9a:da:b1:53:62:7a:58:a4:e8:42:88:ed: 62:04:f9:a8:60:75:5e:fc:24:78:82:73:4d:7b:42:81:39:88: 72:ec:1a:68:fb:ae:36:68:c1:c7:02:87:18:7b:03:a6:e2:61: ed:32:ac:11:ef:59:03:54:11:5d:ff:aa:a3:28:54:b3:14:e4: 15:7b:90:49:aa:94:39:ca:8c:12:21:a1:07:cb:82:74:a0:76: d7:42:81:14:1c:22:aa:6f:a5:8f:44:72:19:d1:f5:5c:98:d8: 9f:36:ce:0a:a3:18:86:73:44:e7:f9:9e:5c:3c:b5:15:e7:48: 60:56:3c:84:70:e6:ad:a7:e8:e6:64:4b:c6:41:da:ef:77:b2: 62:ea:8c:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZGNTkxMTAvBgNVBAUTKEY3NTVDMUUxMEZDNEFFNjg5MkQyNEFDQjg3ODJEN0U1 QzAwNDE4QjAwHhcNMjUwNTAxMDEwODA2WhcNMjUwNTA4MDEwODA2WjAYMRYwFAYD VQQDEw02ODEyYzk3Ni04MjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy837KpSB85LPLbXXTqkIMsmHEEXJHR2dWfvc3JzuQaNSwJq1tQgfWopVN+H/ qL/KXefPlqHzegb9di1eMNVjuLZ+Z1Fbje0dbKvp3+qJLtm65aFrv1aRc7rpYQFD 7spQJ3lwYP9btN3wBat6+5wy8ETFjqmRO9/uw8PJjy9KJFrCnxF9QxmF/fyUhad2 p3h3tuKI1MEYPCWZY3F2IniVcc0xye0jG+gfIBiwSvXITtVxQ8cxZUsy2TT6BQ6p mi7sqOn3jL56lMfnfWtCnCR4S3e2TaW/T9LF+V9OJnvLRUXl4cBVtZ4WuulAjaJi /rFJmjbavVNGlA4/vZuu5unFMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI036bWq /E8Tc7X38tOmG10NZp6RMB8GA1UdIwQYMBaAFPdVweEPxK5oktJKy4eC1+XABBiw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkY1OS81NzcyQUZCRUY4 NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJtaVMwa3JMaDRMWDVjQUVH TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxWEI0UV9Fcm1pUzBrckxoNExYNWNBRUdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkY1OS81NzcyQUZCRUY4NEYxMUVDQTI5MjM5NTJDNEY5QUUwMi85MVhCNFFfRXJt aVMwa3JMaDRMWDVjQUVHTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR0P9uCCSZ8JiypZ3FHM8DNWUf6J1aWZe1t7ycbERrbxy/vMONDpzW 8qopfe8HestXTFfOqoefHQLpFOaE4jdJGalIMZ8jau3JWWw1onB8V3Qg5QC4Xtoo ymug+HUDN1X2/cakMTmVGzJrjohgpRIkukaa2rFTYnpYpOhCiO1iBPmoYHVe/CR4 gnNNe0KBOYhy7Bpo+642aMHHAocYewOm4mHtMqwR71kDVBFd/6qjKFSzFOQVe5BJ qpQ5yowSIaEHy4J0oHbXQoEUHCKqb6WPRHIZ0fVcmNifNs4KoxiGc0Tn+Z5cPLUV 50hgVjyEcOatp+jmZEvGQdrvd7Ji6oyr -----END CERTIFICATE-----Generated at Sat May 3 00:07:13 2025 by rpki-client