$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json) Hash identifier: 1+mn1J8qSpPf2D40SPydQ1tvn6cRSxVc/qV3NKy33LQ= Subject key identifier: 32:20:39:A8:87:B4:21:EE:91:BC:D7:C8:A6:7A:A9:2B:59:47:1C:36 Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft Manifest number: 91 Signing time: Fri 25 Apr 2025 05:26:33 +0000 Manifest this update: Fri 25 Apr 2025 05:26:32 +0000 Manifest next update: Fri 02 May 2025 05:26:32 +0000 Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: ekxBfmIRyDQ0hg8h6io54JrilmnN6roADHK0EAe7psU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Validity Not Before: Apr 25 05:26:32 2025 GMT Not After : May 2 05:26:32 2025 GMT Subject: CN=680b1d08-ec22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:8c:84:c8:2a:ac:37:7d:5a:22:39:87:7c: 11:9f:be:db:36:c1:64:f4:62:15:68:6e:d8:ac:36: 3c:75:89:da:8b:9a:de:f9:3f:be:9e:1d:ea:70:d9: 4d:dd:b5:b6:b5:15:07:59:d3:0f:6e:ef:fb:00:9e: f9:3e:20:38:9d:43:7a:98:54:d1:68:72:17:ab:70: 9d:bd:ae:ad:18:23:6f:9d:3c:54:44:a4:b1:ba:2d: 1c:bf:b5:0b:5c:3c:6b:cc:94:99:7a:d9:18:c3:b0: 0c:7d:66:81:bc:44:aa:6b:0d:f3:2d:73:2f:eb:55: 44:fb:25:32:cf:b9:08:c0:5c:7a:ac:59:76:ad:15: 35:98:f0:86:98:2b:a7:21:66:c4:5c:7f:73:bf:2a: 4e:84:54:e4:c1:09:5e:7a:5b:9e:e6:13:11:05:60: ea:e9:16:b9:62:de:04:bb:47:91:9b:e2:02:23:7f: aa:f7:e6:b5:b4:2d:58:fa:14:f3:0a:6c:0b:17:58: a3:69:5a:70:c3:24:ce:e9:82:39:ed:4f:6e:fe:04: 46:b7:56:7d:6b:fe:a4:66:39:98:bf:f5:16:63:6d: 28:36:3f:70:a3:6b:12:2e:eb:c5:5d:c0:37:a2:51: 1f:e3:ef:6e:60:2c:31:be:df:a1:e1:98:96:f0:ae: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:20:39:A8:87:B4:21:EE:91:BC:D7:C8:A6:7A:A9:2B:59:47:1C:36 X509v3 Authority Key Identifier: keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3c:51:62:98:db:af:66:2d:0d:ee:ef:09:13:f3:37:e5:1d: ab:ee:9d:d5:d1:fd:2d:11:25:9b:bb:7d:3d:4b:77:7e:62:65: 30:fb:2f:06:75:3f:b6:1e:dc:d7:98:ef:ea:37:c3:71:07:65: a3:30:27:40:73:6d:6f:b7:c6:9f:6e:8e:28:43:a7:89:ce:5b: d9:90:38:d2:a0:8e:07:57:74:25:c5:76:f5:1d:93:f2:c6:25: 23:cf:35:62:e2:0f:17:42:09:1d:57:bb:55:15:01:d1:83:14: bb:5b:0e:c7:71:84:db:80:c0:ae:a3:b0:d8:34:06:bd:99:53: 20:df:10:29:e2:68:b6:00:c5:10:7f:44:7b:27:1b:4f:17:06: e1:cb:a9:0a:9f:34:2c:7c:9d:bf:48:80:c6:a6:9a:13:89:bf: 76:68:d2:e5:bf:11:89:73:79:22:7d:e1:e0:a6:ff:96:cf:9a: ad:99:14:af:d2:a3:7f:20:64:84:d3:d8:8e:7b:79:5c:da:0b: 85:b6:1b:21:ea:77:62:8f:37:c7:c6:e3:bd:4d:33:e2:a0:5c: 96:4b:8a:e3:93:de:65:88:90:ff:cf:31:8a:d2:05:8a:28:d3: 9f:d9:6f:c5:66:65:cd:9c:6d:73:a8:84:d9:e6:fc:9a:f9:b0: c4:cd:f9:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDRGRDExRTJDQ0NENTE0MTk1MzBBQzA0QTE0MjU4RjEx QTg1NzdFQUQwHhcNMjUwNDI1MDUyNjMyWhcNMjUwNTAyMDUyNjMyWjAYMRYwFAYD VQQDEw02ODBiMWQwOC1lYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmyMhMgqrDd9WiI5h3wRn77bNsFk9GIVaG7YrDY8dYnai5re+T++nh3qcNlN 3bW2tRUHWdMPbu/7AJ75PiA4nUN6mFTRaHIXq3Cdva6tGCNvnTxURKSxui0cv7UL XDxrzJSZetkYw7AMfWaBvESqaw3zLXMv61VE+yUyz7kIwFx6rFl2rRU1mPCGmCun IWbEXH9zvypOhFTkwQleelue5hMRBWDq6Ra5Yt4Eu0eRm+ICI3+q9+a1tC1Y+hTz CmwLF1ijaVpwwyTO6YI57U9u/gRGt1Z9a/6kZjmYv/UWY20oNj9wo2sSLuvFXcA3 olEf4+9uYCwxvt+h4ZiW8K5JDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIgOaiH tCHukbzXyKZ6qStZRxw2MB8GA1UdIwQYMBaAFE/RHizM1RQZUwrAShQljxGoV36t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wOTg1MEI4MjQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZCbFRDc0JLRkNXUEVhaFhm cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5RWVMTXpWRkJsVENzQktGQ1dQRWFoWGZxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wOTg1MEI4MjQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZC bFRDc0JLRkNXUEVhaFhmcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrPFFimNuvZi0N7u8JE/M35R2r7p3V0f0tESWbu309S3d+YmUw+y8G dT+2HtzXmO/qN8NxB2WjMCdAc21vt8afbo4oQ6eJzlvZkDjSoI4HV3QlxXb1HZPy xiUjzzVi4g8XQgkdV7tVFQHRgxS7Ww7HcYTbgMCuo7DYNAa9mVMg3xAp4mi2AMUQ f0R7JxtPFwbhy6kKnzQsfJ2/SIDGppoTib92aNLlvxGJc3kifeHgpv+Wz5qtmRSv 0qN/IGSE09iOe3lc2guFthsh6ndijzfHxuO9TTPioFyWS4rjk95liJD/zzGK0gWK KNOf2W/FZmXNnG1zqITZ5vya+bDEzfkf -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:42 2025 by rpki-client