$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json) Hash identifier: UeDaCQT3Cnk8h2iqkJO4FotkwLEdQfoJ/5kE12MMZQE= Subject key identifier: 4E:54:11:02:82:7C:3E:63:41:17:56:0B:BE:DC:68:E9:E9:DA:37:FD Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft Manifest number: 0311 Signing time: Fri 25 Apr 2025 00:58:34 +0000 Manifest this update: Fri 25 Apr 2025 00:58:33 +0000 Manifest next update: Fri 02 May 2025 00:58:33 +0000 Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: x5GXlC6uAJhITY25D4OXRhEw3ijb4JHkM9O11b4GA7o=) 2: 148BC3E8833B11EEA71E1715C4F9AE02.roa (hash: 1o3ksyli1ZEbtFwVgIIX+J8xMbJMLDqAM0N6HCXHRdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Validity Not Before: Apr 25 00:58:33 2025 GMT Not After : May 2 00:58:33 2025 GMT Subject: CN=680ade39-01fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:fe:c1:be:36:38:26:d0:55:f9:44:7f:e4: 85:e9:b5:2a:21:16:b6:74:65:39:e1:5a:dd:ff:5a: c2:69:ec:11:50:53:c5:d9:f5:23:81:80:10:04:4b: 96:03:e8:b2:25:87:a3:7b:e6:5d:15:84:3e:3a:82: 66:75:9a:0f:01:33:e1:7e:e9:d6:f1:42:c8:d4:33: 08:f9:47:4b:15:74:49:d0:5f:8c:d8:1b:ae:05:ca: 20:03:d3:20:8f:03:3b:b3:3d:ee:ee:66:d4:a9:0f: 52:b4:69:40:18:da:e4:58:a6:e0:55:af:ca:e0:e9: 3d:ee:df:7b:8a:23:f0:cf:6c:23:25:0f:ed:d3:a1: 56:0d:22:15:f5:dd:05:b4:ad:7b:34:b5:4a:77:e6: 44:53:52:07:20:aa:3c:eb:49:31:c9:c5:7c:04:0e: 9b:ea:46:3c:b9:c6:eb:2f:c1:02:b9:11:cb:0b:28: c2:d5:16:4f:6d:57:bb:cc:c7:d9:af:0c:d0:3d:96: 18:68:e1:5a:e2:ae:e2:8a:c7:89:19:a2:87:5d:0d: 61:9f:2e:8e:b1:68:e4:59:bb:be:bb:1d:e9:fd:aa: 28:7e:c1:9f:e8:de:4c:83:02:2d:61:3f:6b:53:cd: 0a:db:63:6e:bf:d6:06:07:8f:db:eb:62:26:59:1a: 2a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:54:11:02:82:7C:3E:63:41:17:56:0B:BE:DC:68:E9:E9:DA:37:FD X509v3 Authority Key Identifier: keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:1e:6b:f8:21:5f:ed:37:fb:b1:2d:10:f2:97:4d:da:63:9e: b8:44:45:fe:2a:75:bc:8b:82:2a:86:84:cd:30:d5:4b:63:54: 19:4b:3f:f0:61:24:48:6c:b7:3d:c9:cf:22:45:7a:b2:9e:05: e8:77:60:0c:55:b0:20:3e:c6:28:7e:40:3d:c2:7b:27:e3:fd: a5:e6:9f:fa:2d:76:1d:1e:d3:1a:41:34:bd:91:75:49:50:89: 02:a3:ba:7b:39:18:f6:6c:96:7b:9c:12:01:65:fc:c1:8d:c5: af:cd:1f:c0:d9:c2:f6:cd:f1:a8:80:c6:6c:56:5c:c1:e5:1a: 8e:19:8f:99:59:1d:08:a7:92:d5:09:5b:06:9b:49:9c:6c:63: 03:d8:e0:a1:a5:b3:4e:1b:d0:d5:05:dc:1c:da:5f:ae:1d:dd: da:1e:6e:f3:d3:34:a3:97:19:b0:55:fc:d2:39:b8:14:85:ab: 6a:5f:95:31:3c:e3:97:88:4d:3b:fb:64:30:fc:78:aa:23:d4: b1:75:5b:bb:d9:f8:cc:bf:52:c6:be:3b:f0:46:cb:7e:e9:d3: 68:35:e4:4a:49:0f:d4:c0:14:df:00:42:d2:7e:14:c2:eb:5c: 85:84:4a:1a:1f:6c:fe:e9:3e:3e:18:c0:d5:36:b6:32:00:cd: 24:78:56:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw NDc0QzkxQzYwHhcNMjUwNDI1MDA1ODMzWhcNMjUwNTAyMDA1ODMzWjAYMRYwFAYD VQQDEw02ODBhZGUzOS0wMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuL+wb42OCbQVflEf+SF6bUqIRa2dGU54Vrd/1rCaewRUFPF2fUjgYAQBEuW A+iyJYeje+ZdFYQ+OoJmdZoPATPhfunW8ULI1DMI+UdLFXRJ0F+M2BuuBcogA9Mg jwM7sz3u7mbUqQ9StGlAGNrkWKbgVa/K4Ok97t97iiPwz2wjJQ/t06FWDSIV9d0F tK17NLVKd+ZEU1IHIKo860kxycV8BA6b6kY8ucbrL8ECuRHLCyjC1RZPbVe7zMfZ rwzQPZYYaOFa4q7iiseJGaKHXQ1hny6OsWjkWbu+ux3p/aoofsGf6N5MgwItYT9r U80K22Nuv9YGB4/b62ImWRoqNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5UEQKC fD5jQRdWC77caOnp2jf9MB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t VHhnWnU2aE0xYklFZE1rY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJHmv4IV/tN/uxLRDyl03aY564REX+KnW8i4IqhoTNMNVLY1QZSz/w YSRIbLc9yc8iRXqyngXod2AMVbAgPsYofkA9wnsn4/2l5p/6LXYdHtMaQTS9kXVJ UIkCo7p7ORj2bJZ7nBIBZfzBjcWvzR/A2cL2zfGogMZsVlzB5RqOGY+ZWR0Ip5LV CVsGm0mcbGMD2OChpbNOG9DVBdwc2l+uHd3aHm7z0zSjlxmwVfzSObgUhatqX5Ux POOXiE07+2Qw/HiqI9SxdVu72fjMv1LGvjvwRst+6dNoNeRKSQ/UwBTfAELSfhTC 61yFhEoaH2z+6T4+GMDVNrYyAM0keFZi -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:48 2025 by rpki-client