$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: atONV7k8f3QHg1mX8kHHQO2BNe/q/7bn8dzdUbkXtgY= Subject key identifier: F8:2F:F9:54:E9:56:2B:21:AA:10:AB:A8:B7:A8:E9:3E:70:82:56:6D Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: 63 Signing time: Thu 01 May 2025 06:03:43 +0000 Manifest this update: Thu 01 May 2025 06:03:42 +0000 Manifest next update: Thu 08 May 2025 06:03:42 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: s+g6eHwTHMqfzMH4ANgm2IL8GZDHudeAb1HSXvuMaPw=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: 0fdxeAEBe9WDBbNHH1E08sqfA2VEHdavddZ4/AMBK2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 06:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: May 1 06:03:42 2025 GMT Not After : May 8 06:03:42 2025 GMT Subject: CN=68130ebf-232c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:e9:55:64:ac:a2:f6:24:7e:eb:01:65:ec: 4d:b9:8a:5d:69:16:f9:5a:85:20:22:51:e2:4e:81: 14:3c:67:e3:6b:3d:62:cb:59:4a:f1:01:40:bd:75: ab:21:a9:2c:98:bc:28:8a:a8:eb:25:c9:63:5b:fe: f2:d1:11:18:46:f6:83:4d:ee:63:5d:c5:95:6d:e5: e9:80:37:30:c5:7d:f3:78:98:9b:45:2f:94:3c:4a: 41:59:ea:0b:9b:49:38:43:24:6c:c4:b1:e0:69:de: fb:62:ea:f1:1c:6e:ad:56:aa:6d:73:69:2d:ad:0f: a3:ff:89:54:07:b7:1d:49:de:e3:fe:f4:b0:4f:8f: 1f:c5:d9:5b:28:29:ee:07:4e:c7:2a:6e:43:ba:e5: b1:c7:0e:4c:c3:1f:c0:e3:e2:74:8d:38:93:87:b6: 6c:ca:33:08:83:7f:27:03:85:03:29:87:71:06:fb: 2d:be:81:50:b6:85:53:f5:76:77:0f:20:29:f2:65: ed:b0:a1:bf:e3:ce:96:a3:d8:ef:e6:dd:94:8d:9d: 9c:1c:53:2a:d5:41:8b:b1:03:0d:7b:aa:ca:f9:0b: 6b:bd:0a:b3:3d:56:02:1a:d7:59:b5:62:65:09:91: 19:d9:66:cc:75:4f:43:0e:76:92:a9:38:c8:26:6b: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2F:F9:54:E9:56:2B:21:AA:10:AB:A8:B7:A8:E9:3E:70:82:56:6D X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:30:e6:40:c0:8e:a1:1e:3b:40:29:af:ff:f7:8c:43:c1:45: b0:75:c8:9a:b1:c8:13:c0:97:a1:f1:31:42:d9:0a:8e:48:87: 81:7d:8f:10:76:9e:b4:76:40:0b:a8:74:fa:cc:ec:48:e7:da: 0c:e0:1d:5d:c3:f7:27:7e:63:19:2f:7a:e9:12:2d:6b:2a:fd: 29:93:69:94:1a:92:46:95:49:cb:c1:d3:51:52:b2:ca:39:e2: 8a:92:2c:f4:8c:fa:b5:c7:16:84:de:2b:47:16:a2:dd:33:88: b4:fe:76:ad:53:65:9d:5d:da:82:b9:d1:7a:22:50:0f:30:b0: 8e:bf:ca:92:96:b2:52:e1:ed:15:f3:12:50:61:5c:42:c8:d1: bf:98:26:bb:0c:a2:d2:69:f4:eb:be:ca:96:87:24:97:ae:99: 68:e0:ee:99:43:bf:cb:3b:6a:63:14:d3:0d:96:e5:7c:68:63: 10:ac:34:ab:99:fb:93:01:ad:7f:de:e2:61:c8:fe:af:f1:34: 3f:0f:42:ec:29:d9:00:3f:18:da:59:a7:62:ae:8b:ba:0f:08: 0e:dd:d4:0d:e8:ba:39:61:b3:17:d1:2a:04:1a:db:ff:15:40: c2:35:42:13:d6:10:53:35:db:37:d7:51:85:fa:51:ed:52:f3: de:ff:cc:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjdFMjExMC8GA1UEBRMoRjQ0NEI4RERBQzFBMkFFQzlDOThEODk4MTYxQzczNDgy QzJFRDQ4ODAeFw0yNTA1MDEwNjAzNDJaFw0yNTA1MDgwNjAzNDJaMBgxFjAUBgNV BAMTDTY4MTMwZWJmLTIzMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC08elVZKyi9iR+6wFl7E25il1pFvlahSAiUeJOgRQ8Z+NrPWLLWUrxAUC9dash qSyYvCiKqOslyWNb/vLRERhG9oNN7mNdxZVt5emANzDFffN4mJtFL5Q8SkFZ6gub SThDJGzEseBp3vti6vEcbq1Wqm1zaS2tD6P/iVQHtx1J3uP+9LBPjx/F2VsoKe4H TscqbkO65bHHDkzDH8Dj4nSNOJOHtmzKMwiDfycDhQMph3EG+y2+gVC2hVP1dncP ICnyZe2wob/jzpaj2O/m3ZSNnZwcUyrVQYuxAw17qsr5C2u9CrM9VgIa11m1YmUJ kRnZZsx1T0MOdpKpOMgma8CfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+C/5VOlW KyGqEKuot6jpPnCCVm0wHwYDVR0jBBgwFoAU9ES43awaKuycmNiYFhxzSCwu1Igw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyN0UyLzcwMzFBMUVDOTM1 MDExRUZCQUNFMDA0Q0M0RjlBRTAyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOUVTNDNhd2FLdXljbU5pWUZoeHpTQ3d1MUlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy N0UyLzcwMzFBMUVDOTM1MDExRUZCQUNFMDA0Q0M0RjlBRTAyLzlFUzQzYXdhS3V5 Y21OaVlGaHh6U0N3dTFJZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEQw5kDAjqEeO0Apr//3jEPBRbB1yJqxyBPAl6HxMULZCo5Ih4F9jxB2 nrR2QAuodPrM7Ejn2gzgHV3D9yd+YxkveukSLWsq/SmTaZQakkaVScvB01FSsso5 4oqSLPSM+rXHFoTeK0cWot0ziLT+dq1TZZ1d2oK50XoiUA8wsI6/ypKWslLh7RXz ElBhXELI0b+YJrsMotJp9Ou+ypaHJJeumWjg7plDv8s7amMU0w2W5XxoYxCsNKuZ +5MBrX/e4mHI/q/xND8PQuwp2QA/GNpZp2Kui7oPCA7d1A3oujlhsxfRKgQa2/8V QMI1QhPWEFM12zfXUYX6Ue1S897/zAI= -----END CERTIFICATE-----Generated at Thu May 1 19:20:35 2025 by rpki-client