$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft File: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json) Hash identifier: XPv9CIw+sjmgjcqGaQKl9EZOrx7gemt5KV6vyq6nSqg= Subject key identifier: 3F:D7:48:8A:AF:F1:C0:E2:23:E7:D2:05:C7:58:02:EC:29:0B:18:53 Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA Certificate issuer: /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 05:35:50 +0000 Manifest this update: Fri 25 Apr 2025 05:35:49 +0000 Manifest next update: Fri 02 May 2025 05:35:49 +0000 Files and hashes: 1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: dbPOg87ixNZmBfi3AIqc5Ac95qngobvuyXveZSUTPq4=) 2: 1CDD9EF85B9F11EFACE3275CC4F9AE02.roa (hash: v4ejIpdySbBIKimD5EDirkHkD31xywXn/idyAwvPc/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA Validity Not Before: Apr 25 05:35:49 2025 GMT Not After : May 2 05:35:49 2025 GMT Subject: CN=680b1f36-197f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:0b:c4:f5:ee:64:c0:f1:aa:0c:78:fc:96: a6:04:f3:3f:dc:98:92:ef:5b:7e:27:70:04:b5:9a: 0e:0d:13:6e:ca:c0:f8:86:e7:a6:b2:df:3d:31:f0: fe:a2:69:f6:74:f3:cf:ea:23:0a:25:c1:45:52:1f: a0:22:31:75:79:f6:7b:36:3f:5e:bd:d7:fa:80:e1: a7:c8:68:95:23:c6:2a:1c:2b:e8:0c:a2:33:dd:0c: 67:51:4d:5e:39:9a:ae:9f:3e:27:d9:db:37:88:f6: 77:80:59:09:4b:8b:ba:1a:64:49:0a:11:14:e2:07: 98:23:6b:61:e5:df:fd:d0:85:ed:f7:41:9a:54:ff: fd:02:8b:ac:e8:f4:b6:ba:88:ea:45:c9:5f:21:82: 10:bc:53:13:1b:6b:38:5f:49:a7:1e:fe:a1:8a:3d: d2:cd:63:1f:1a:4d:fd:4d:3d:bd:5a:2c:82:6b:e9: 22:f8:c7:ac:17:91:3e:bf:66:c2:ad:ae:c9:90:6e: a8:ae:a8:ad:e7:42:47:38:4f:3d:78:4d:8c:a8:28: f9:ff:ed:25:3a:7b:07:70:58:12:f9:69:45:1b:e1: fa:9e:24:56:b3:93:be:38:cf:42:b1:e9:b6:d0:1b: 6d:46:7e:11:36:bf:6b:ef:05:56:8c:bc:e9:80:27: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D7:48:8A:AF:F1:C0:E2:23:E7:D2:05:C7:58:02:EC:29:0B:18:53 X509v3 Authority Key Identifier: keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b8:b5:0a:5e:53:6f:a8:e8:38:95:79:64:34:39:62:7d:3b: ca:90:c6:56:5e:c8:08:59:99:5f:51:f6:86:ae:64:a7:84:c0: 37:2d:ab:e2:87:ae:a9:bd:8a:69:a1:e3:04:34:14:b1:e7:64: d2:af:ed:cc:65:5b:d0:3a:19:f9:b1:c8:db:56:dc:df:c6:91: 6c:d0:ad:95:f2:02:d4:8c:7a:54:6e:6d:1c:20:1b:1e:3a:89: b1:45:74:8f:e3:ad:9b:02:66:8a:20:bc:55:ae:2e:c8:d5:59: a4:a6:9a:45:e2:9a:35:6f:03:b2:53:2c:8b:54:0c:77:27:53: 79:d6:58:69:e6:ed:5e:7b:28:9b:48:d4:3e:0c:44:64:0a:1c: 93:4e:3a:c2:de:bc:6a:91:f1:03:d3:ee:09:69:9f:d3:fb:9b: 11:e8:4d:31:27:c6:c3:d5:f4:80:c0:d8:13:4d:f4:51:f7:bb: 79:53:e3:8f:47:d3:7e:92:82:76:03:09:a2:49:64:2e:87:7f: c1:7d:fe:fc:1e:4c:ee:5d:e3:82:93:a1:9e:f2:a3:ad:b1:49: eb:fe:0f:e7:65:8e:5b:02:ea:a4:1c:4e:d5:59:5f:c8:9c:a8: 68:cf:50:b1:5e:6a:0a:83:cc:9b:5a:17:2a:09:7b:49:9c:60: 1c:59:92:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzRTIxMTAvBgNVBAUTKEY2QkE2RTYzMEE2QUE5OEQ4MjE1NjgyNjRFMDI3Qjk4 OERGNUM5QkEwHhcNMjUwNDI1MDUzNTQ5WhcNMjUwNTAyMDUzNTQ5WjAYMRYwFAYD VQQDEw02ODBiMWYzNi0xOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xkLxPXuZMDxqgx4/JamBPM/3JiS71t+J3AEtZoODRNuysD4huemst89MfD+ omn2dPPP6iMKJcFFUh+gIjF1efZ7Nj9evdf6gOGnyGiVI8YqHCvoDKIz3QxnUU1e OZqunz4n2ds3iPZ3gFkJS4u6GmRJChEU4geYI2th5d/90IXt90GaVP/9Aous6PS2 uojqRclfIYIQvFMTG2s4X0mnHv6hij3SzWMfGk39TT29WiyCa+ki+MesF5E+v2bC ra7JkG6orqit50JHOE89eE2MqCj5/+0lOnsHcFgS+WlFG+H6niRWs5O+OM9Csem2 0BttRn4RNr9r7wVWjLzpgCd+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/XSIqv 8cDiI+fSBcdYAuwpCxhTMB8GA1UdIwQYMBaAFPa6bmMKaqmNghVoJk4Ce5iN9cm6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNFMi9EQTYyMkU5QTVC OUUxMUVGQkNEQkM1NUJDNEY5QUUwMi85cnB1WXdwcXFZMkNGV2dtVGdKN21JMzF5 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlycHVZd3BxcVkyQ0ZXZ21UZ0o3bUkzMXliby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNFMi9EQTYyMkU5QTVCOUUxMUVGQkNEQkM1NUJDNEY5QUUwMi85cnB1WXdwcXFZ MkNGV2dtVGdKN21JMzF5Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuuLUKXlNvqOg4lXlkNDlifTvKkMZWXsgIWZlfUfaGrmSnhMA3Lavi h66pvYppoeMENBSx52TSr+3MZVvQOhn5scjbVtzfxpFs0K2V8gLUjHpUbm0cIBse OomxRXSP462bAmaKILxVri7I1VmkpppF4po1bwOyUyyLVAx3J1N51lhp5u1eeyib SNQ+DERkChyTTjrC3rxqkfED0+4JaZ/T+5sR6E0xJ8bD1fSAwNgTTfRR97t5U+OP R9N+koJ2AwmiSWQuh3/Bff78HkzuXeOCk6Ge8qOtsUnr/g/nZY5bAuqkHE7VWV/I nKhoz1CxXmoKg8ybWhcqCXtJnGAcWZK5 -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:59 2025 by rpki-client