$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json) Hash identifier: JI8WxXeu5iJ4j/65XeL/OJIyuFiRmiEursFayYLDWwU= Subject key identifier: B8:9B:3C:D7:72:DA:9E:72:97:29:D5:FB:AD:49:FB:AA:88:25:A3:4F Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft Manifest number: 1B Signing time: Fri 25 Apr 2025 07:00:25 +0000 Manifest this update: Fri 25 Apr 2025 07:00:24 +0000 Manifest next update: Fri 02 May 2025 07:00:24 +0000 Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: 5aUaLUdgxCDveKfT+rztHHBIXN9kqwMY5D3/5ECK0i0=) 2: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: PQY0mTJA0slWwObUdYpstelwiTL+prFfmuh+/qU35kg=) 3: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: tN7XrcdoarGJoE1RdPj/CCm6dWvl1EGT3dxhZCMygsY=) 4: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: ri7YInMAbSmSsjfWYal4W711k38R/upA65HcOLcK83k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Validity Not Before: Apr 25 07:00:24 2025 GMT Not After : May 2 07:00:24 2025 GMT Subject: CN=680b3308-592d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:3a:b6:30:7f:e3:e0:60:c5:a8:e7:dc:c9: 16:37:e3:3d:69:40:6c:8e:60:c9:a8:ff:ef:de:16: de:3d:f5:4c:85:94:7c:82:14:92:8b:ed:8a:da:70: b6:5f:23:dc:7e:a9:ed:33:14:dd:af:f1:81:9a:e9: 3e:56:48:45:b0:73:3c:17:48:8a:88:6a:5f:74:c4: 4c:7f:a6:47:2d:1c:ac:59:13:80:68:b3:ce:22:26: 45:ff:89:88:31:39:77:18:90:57:c8:f5:98:ef:04: 77:f8:fa:ac:fc:9b:fb:98:c7:1a:25:b2:73:4b:09: 30:d5:f1:01:30:90:89:0b:28:9c:3e:9e:ff:d5:b3: cb:9c:0c:60:6e:4c:8f:e8:f3:24:9a:17:72:9e:e2: da:e9:f3:ee:f7:a6:41:9b:1a:54:af:c5:1c:ef:e6: ac:b4:e7:01:4a:c7:79:93:2c:cf:b1:d5:eb:d9:be: aa:7f:84:14:3a:73:fa:a1:0b:09:d5:32:86:22:4c: 60:c5:76:ad:c0:f2:79:7e:1a:e9:b9:81:30:ce:78: 80:e1:79:64:79:16:34:d9:3a:10:aa:9d:dc:c2:d1: f8:ed:81:04:86:ae:90:59:29:67:08:26:45:b0:2d: 8e:de:bd:0b:e8:51:ce:61:9e:b4:9c:5b:d6:2d:49: 62:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9B:3C:D7:72:DA:9E:72:97:29:D5:FB:AD:49:FB:AA:88:25:A3:4F X509v3 Authority Key Identifier: keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:95:1b:1e:25:25:34:1d:cf:2a:e0:0c:27:f6:19:76:5c:e9: 49:ad:7d:35:9b:ca:5c:13:d9:5d:cf:b4:39:ab:cd:51:d7:6f: 49:76:3f:7f:67:1d:6e:b4:48:2b:95:2a:e5:c0:42:bc:58:df: d3:1b:1c:5c:f8:84:9d:e2:0d:67:7e:a4:05:8f:08:d8:9a:4b: f9:9d:93:d9:25:d3:7d:0d:6c:60:18:66:5d:8c:ef:78:9e:f7: 49:11:e6:54:9b:b4:6d:dc:3a:4d:76:8e:98:1c:3d:2c:1b:17: 0f:62:34:45:c7:d7:39:dd:74:38:b7:ff:c5:1a:d1:af:e0:0d: 07:7c:ce:8c:b0:19:2f:d8:a4:35:49:07:6d:54:09:58:37:0d: c6:72:bd:29:1f:a3:63:2e:a2:99:22:61:e2:b3:42:cb:a9:4b: 01:df:f1:d4:99:eb:83:4d:0a:a4:25:1d:50:a3:03:f9:1c:e8: b4:34:95:f0:0a:e6:2f:2c:ea:a4:2f:fb:dc:e6:e2:b4:85:d8: 78:36:5d:ff:b6:d4:b2:b6:80:e6:8f:5f:b8:1c:48:46:49:41: fe:d8:e5:1f:09:ba:a0:36:94:a8:94:ec:2b:07:51:54:9f:45: 4c:b1:8f:6d:75:d9:41:7f:a1:57:9e:a3:02:4f:94:72:7f:6d: 89:13:9c:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QkE4NDExMC8GA1UEBRMoRjQ5NDk2Rjk1REY5NTg4ODFCRjRCN0U5NzJFNTFCNkYz Q0E1OURGQTAeFw0yNTA0MjUwNzAwMjRaFw0yNTA1MDIwNzAwMjRaMBgxFjAUBgNV BAMTDTY4MGIzMzA4LTU5MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXLzq2MH/j4GDFqOfcyRY34z1pQGyOYMmo/+/eFt499UyFlHyCFJKL7YracLZf I9x+qe0zFN2v8YGa6T5WSEWwczwXSIqIal90xEx/pkctHKxZE4Bos84iJkX/iYgx OXcYkFfI9ZjvBHf4+qz8m/uYxxolsnNLCTDV8QEwkIkLKJw+nv/Vs8ucDGBuTI/o 8ySaF3Ke4trp8+73pkGbGlSvxRzv5qy05wFKx3mTLM+x1evZvqp/hBQ6c/qhCwnV MoYiTGDFdq3A8nl+Gum5gTDOeIDheWR5FjTZOhCqndzC0fjtgQSGrpBZKWcIJkWw LY7evQvoUc5hnrScW9YtSWJZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuJs813La nnKXKdX7rUn7qoglo08wHwYDVR0jBBgwFoAU9JSW+V35WIgb9LfpcuUbbzylnfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCQTg0LzcyQzEwNDVDMDUx RjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0lnYjlMZnBjdVViYnp5bG5m by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUpTVy1WMzVXSWdiOUxmcGN1VWJienlsbmZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC QTg0LzcyQzEwNDVDMDUxRjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0ln YjlMZnBjdVViYnp5bG5mby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2VGx4lJTQdzyrgDCf2GXZc6UmtfTWbylwT2V3PtDmrzVHXb0l2P39n HW60SCuVKuXAQrxY39MbHFz4hJ3iDWd+pAWPCNiaS/mdk9kl030NbGAYZl2M73ie 90kR5lSbtG3cOk12jpgcPSwbFw9iNEXH1znddDi3/8Ua0a/gDQd8zoywGS/YpDVJ B21UCVg3DcZyvSkfo2MuopkiYeKzQsupSwHf8dSZ64NNCqQlHVCjA/kc6LQ0lfAK 5i8s6qQv+9zm4rSF2Hg2Xf+21LK2gOaPX7gcSEZJQf7Y5R8JuqA2lKiU7CsHUVSf RUyxj2112UF/oVeeowJPlHJ/bYkTnLA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:55 2025 by rpki-client