$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: ialO6p46Q0CtaPpM7w0a0GLwsx/+CRBm22BNn5tVR3s= Subject key identifier: 91:99:AF:C6:9D:E7:48:00:08:61:CA:FC:C9:B7:92:4E:BA:FC:FB:76 Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 015D Signing time: Fri 25 Apr 2025 03:09:34 +0000 Manifest this update: Fri 25 Apr 2025 03:09:33 +0000 Manifest next update: Fri 02 May 2025 03:09:33 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: 6PFUeguWr89mWYwEZvuwCmj/B3PxY2l77E00cU56+kk=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /g02epL+NyCJaEeLF1U/HHteqWgxtq7I5NLpXCZSdQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Apr 25 03:09:33 2025 GMT Not After : May 2 03:09:33 2025 GMT Subject: CN=680afcee-eb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:20:22:15:a0:b6:78:74:a2:7a:34:6d:fb: ae:b4:35:b5:2c:59:6c:f2:00:13:bc:04:f6:48:9d: e4:12:14:f9:0c:ea:4f:25:f1:ef:ac:c7:0e:b9:50: f2:32:c9:5a:c6:33:e9:97:dc:13:db:a0:05:00:3c: e1:82:82:b6:a3:3d:28:5d:3b:44:66:d2:fb:b7:dc: f6:32:55:ab:2a:f3:ef:00:b9:ef:54:e0:fa:94:ce: ee:e2:62:56:23:f9:63:6c:3c:d4:63:65:4a:b7:f5: 29:e1:f0:68:c5:4f:cf:8f:1a:d9:bf:ef:da:6c:3f: 07:b2:2e:42:df:01:91:e8:35:2c:e5:0b:e9:bf:b2: 3b:72:12:42:13:8d:1a:2e:8f:ae:75:8e:b0:38:48: 93:94:f1:4a:b5:66:9e:75:62:f9:21:39:98:38:84: e1:f2:2e:a2:cc:70:5f:03:f3:88:11:68:38:24:be: 12:ba:69:d7:ef:25:54:89:26:01:06:bc:53:b5:1a: 2b:9b:98:4e:50:3a:5a:8a:87:90:47:d1:50:24:3a: d9:f0:9f:db:81:63:43:e3:c1:45:f9:2a:d5:a5:df: 5a:8b:dd:bf:cc:fb:ab:f4:4a:26:9a:c6:b6:6e:d2: 11:55:54:31:d3:1f:eb:3e:7d:d9:f1:1f:1f:26:dd: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:99:AF:C6:9D:E7:48:00:08:61:CA:FC:C9:B7:92:4E:BA:FC:FB:76 X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:9d:c4:6c:5b:4a:a4:72:4e:1d:37:50:73:77:36:b5:11:a5: 3c:49:75:5a:6e:ef:7f:ac:aa:57:fe:2d:34:84:9c:06:45:fc: f6:d2:ac:4c:a5:7e:6d:df:fd:27:23:9e:94:39:42:96:61:32: 84:4e:af:4c:9c:b3:f5:62:71:ec:bf:67:17:49:c4:ad:0d:3b: 76:b6:3b:05:40:13:ba:03:d3:74:d0:92:aa:f8:d8:5e:f0:25: 1e:85:d6:00:e1:a5:bd:c0:64:ab:c4:32:f6:fe:60:87:a7:cb: bc:77:f4:51:5c:2a:56:4a:b5:ff:06:a5:52:5b:32:4c:1a:27: d7:b7:ab:8b:06:72:a1:71:58:f9:e5:bd:03:16:8b:49:5e:3d: 1d:99:cc:6a:52:53:b8:7a:b5:4f:27:1a:23:ba:45:5b:d8:ef: 9e:5c:12:45:17:5b:56:26:68:f5:f6:9d:b7:3e:33:94:de:af: c4:0a:8d:91:c2:3b:f5:b5:99:8d:da:03:7c:54:a5:e9:57:b8: 6c:54:be:22:0f:cf:65:9c:54:7f:76:68:99:9f:36:a0:07:9d: ef:d7:61:94:d2:97:f4:dc:0d:7e:0f:60:89:dc:31:ac:da:a2: fc:8e:4b:1c:2e:b8:0c:cd:32:61:79:f8:6f:a1:50:0f:f5:6e: 9a:78:c9:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUwNDI1MDMwOTMzWhcNMjUwNTAyMDMwOTMzWjAYMRYwFAYD VQQDEw02ODBhZmNlZS1lYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgwgIhWgtnh0ono0bfuutDW1LFls8gATvAT2SJ3kEhT5DOpPJfHvrMcOuVDy MslaxjPpl9wT26AFADzhgoK2oz0oXTtEZtL7t9z2MlWrKvPvALnvVOD6lM7u4mJW I/ljbDzUY2VKt/Up4fBoxU/PjxrZv+/abD8Hsi5C3wGR6DUs5Qvpv7I7chJCE40a Lo+udY6wOEiTlPFKtWaedWL5ITmYOITh8i6izHBfA/OIEWg4JL4SumnX7yVUiSYB BrxTtRorm5hOUDpaioeQR9FQJDrZ8J/bgWND48FF+SrVpd9ai92/zPur9Eommsa2 btIRVVQx0x/rPn3Z8R8fJt0BuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGZr8ad 50gACGHK/Mm3kk66/Pt2MB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFncRsW0qkck4dN1Bzdza1EaU8SXVabu9/rKpX/i00hJwGRfz20qxM pX5t3/0nI56UOUKWYTKETq9MnLP1YnHsv2cXScStDTt2tjsFQBO6A9N00JKq+Nhe 8CUehdYA4aW9wGSrxDL2/mCHp8u8d/RRXCpWSrX/BqVSWzJMGifXt6uLBnKhcVj5 5b0DFotJXj0dmcxqUlO4erVPJxojukVb2O+eXBJFF1tWJmj19p23PjOU3q/ECo2R wjv1tZmN2gN8VKXpV7hsVL4iD89lnFR/dmiZnzagB53v12GU0pf03A1+D2CJ3DGs 2qL8jkscLrgMzTJhefhvoVAP9W6aeMmC -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:26 2025 by rpki-client