$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: tqSWrKjnCM1cNdvthKSARuGE/yxpxzzaBONZZFOrIQc= Subject key identifier: 32:CB:C3:B3:AA:42:F6:4C:FB:B6:34:34:14:87:00:BD:4E:7E:B1:DF Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 17D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 17C9 Signing time: Thu 24 Apr 2025 16:35:20 +0000 Manifest this update: Thu 24 Apr 2025 16:35:20 +0000 Manifest next update: Thu 01 May 2025 16:35:20 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: V+rAPBkoFdJ+O/Fl6iLsay9kLUJ1qduf7Op65l+jWp0=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: W65Bof4UuRWkpC1J6y/jnu+98zllARlm3OPaWe3smHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6096 (0x17d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Apr 24 16:35:20 2025 GMT Not After : May 1 16:35:20 2025 GMT Subject: CN=680a6848-15e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:23:ff:8c:64:d7:58:ec:59:bf:5f:02:b5:19: 2d:18:94:4e:ed:8d:eb:2f:85:ea:9d:e0:4c:19:51: fd:4b:d4:6d:b1:7b:ad:3e:c3:8c:eb:e4:1f:be:5d: 0c:e2:20:3b:d1:a4:3d:13:01:81:2d:da:ca:c7:0c: e0:00:98:01:8d:f6:65:51:d8:0c:2c:a8:3e:ca:32: 9b:fb:08:51:7a:50:32:2b:9e:2c:5f:e7:dd:8e:24: 90:67:c3:77:2b:36:94:62:a7:1b:99:1d:fd:81:ca: ba:6d:5b:6d:01:3d:42:c2:2d:0d:5f:1e:db:8f:fc: fc:d4:cd:d2:1a:57:27:24:63:48:4c:12:62:ba:0e: 8e:55:0c:46:05:13:43:b6:c5:40:1a:3d:48:94:9f: a0:0a:c5:a1:2a:90:a7:53:58:1e:de:30:27:39:a3: c3:96:28:3a:7f:b5:68:f4:2d:54:9c:0e:8d:83:32: f3:be:de:38:fe:17:86:61:70:fe:e4:e7:54:35:f3: 17:09:5c:8a:f5:3d:46:6e:94:d7:53:a7:d8:04:ea: bd:0d:74:ed:64:6c:5c:09:2a:db:27:b4:d4:16:54: 8e:27:00:d1:6c:97:b0:62:bb:0e:1e:5e:02:6b:91: 63:c6:cb:40:56:e2:3c:93:7e:60:92:d4:2a:09:0f: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:C3:B3:AA:42:F6:4C:FB:B6:34:34:14:87:00:BD:4E:7E:B1:DF X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:44:d9:28:c9:54:62:d1:34:41:dd:7e:0b:e0:fc:90:20:cc: cf:0a:10:f5:c6:d9:00:97:e3:76:7d:50:d4:f0:1f:1f:b5:54: 9c:76:a7:79:c5:29:3f:74:7b:00:2d:0f:67:ac:6a:67:d8:12: 2e:28:51:c7:a9:30:f1:6d:2c:ad:a9:85:ec:2c:b5:b0:5f:21: 3c:c9:92:18:d8:6c:c7:ac:36:14:94:1d:19:0f:68:ed:31:14: 6c:15:98:63:ab:92:a5:cb:88:f9:40:26:84:5e:42:c7:7f:6b: ce:75:8f:53:7c:a6:f3:a0:ba:79:18:60:5b:f1:03:c5:85:8e: 75:39:d6:b7:1d:06:61:fb:45:d1:5f:4a:d7:dd:71:f8:68:25: 79:27:d0:58:62:fe:3f:2a:83:ef:4d:96:3d:e2:f1:22:4c:61: 61:65:1d:84:67:e4:7f:d0:01:43:30:e0:2f:21:74:ba:23:40: 79:65:35:b4:62:88:74:62:4b:15:0f:b6:bb:e8:f1:5e:66:84: ec:50:a5:27:ec:c1:e4:55:c7:c3:04:84:39:c3:bd:8c:2c:8e: cf:fb:9f:40:52:b5:f5:69:4e:4c:7e:98:57:76:f6:79:e3:9f: cb:f7:f7:09:5a:4c:98:9a:df:f6:fe:ab:37:b7:b4:11:41:91: 90:e2:0f:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUwNDI0MTYzNTIwWhcNMjUwNTAxMTYzNTIwWjAYMRYwFAYD VQQDEw02ODBhNjg0OC0xNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yP/jGTXWOxZv18CtRktGJRO7Y3rL4XqneBMGVH9S9RtsXutPsOM6+Qfvl0M 4iA70aQ9EwGBLdrKxwzgAJgBjfZlUdgMLKg+yjKb+whRelAyK54sX+fdjiSQZ8N3 KzaUYqcbmR39gcq6bVttAT1Cwi0NXx7bj/z81M3SGlcnJGNITBJiug6OVQxGBRND tsVAGj1IlJ+gCsWhKpCnU1ge3jAnOaPDlig6f7Vo9C1UnA6NgzLzvt44/heGYXD+ 5OdUNfMXCVyK9T1GbpTXU6fYBOq9DXTtZGxcCSrbJ7TUFlSOJwDRbJewYrsOHl4C a5FjxstAVuI8k35gktQqCQ/vQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLLw7Oq QvZM+7Y0NBSHAL1OfrHfMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjRNkoyVRi0TRB3X4L4PyQIMzPChD1xtkAl+N2fVDU8B8ftVScdqd5 xSk/dHsALQ9nrGpn2BIuKFHHqTDxbSytqYXsLLWwXyE8yZIY2GzHrDYUlB0ZD2jt MRRsFZhjq5Kly4j5QCaEXkLHf2vOdY9TfKbzoLp5GGBb8QPFhY51Oda3HQZh+0XR X0rX3XH4aCV5J9BYYv4/KoPvTZY94vEiTGFhZR2EZ+R/0AFDMOAvIXS6I0B5ZTW0 Yoh0YksVD7a76PFeZoTsUKUn7MHkVcfDBIQ5w72MLI7P+59AUrX1aU5MfphXdvZ5 45/L9/cJWkyYmt/2/qs3t7QRQZGQ4g+B -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:21 2025 by rpki-client