$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: g2xmzVOJbqTdO/+pURXuffvR3OCvpuH7zEFfW5oeWAs= Subject key identifier: D1:FA:23:F2:7D:DC:9E:C8:63:EF:78:7A:C9:10:E7:50:57:0F:01:61 Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 03CA Signing time: Fri 25 Apr 2025 00:28:15 +0000 Manifest this update: Fri 25 Apr 2025 00:28:15 +0000 Manifest next update: Fri 02 May 2025 00:28:15 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: MFRJGZEr8a+vT3LjMH4WMSjJs3qrJaYJojTdMawXCLg=) 2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: Rg7/HWvbLuN8QkYRlBgqkedDJt7Lv8j0nbDNMsIVYIo=) 3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: BndO95FjlN4yoYJHwmdg6jMh7CCU5xFJrJ+5TfJ2qvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: Apr 25 00:28:15 2025 GMT Not After : May 2 00:28:15 2025 GMT Subject: CN=680ad71f-48ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:59:81:fb:db:04:1f:36:80:97:3c:c0:87: 83:1f:71:4c:b8:57:52:0f:69:3d:b5:80:38:58:f0: ed:ef:75:e4:ca:80:68:ae:c2:59:7c:8b:fc:ea:63: b0:02:65:5c:d8:04:93:94:22:c2:96:3a:42:fe:c3: 17:17:2c:fc:ca:62:24:42:41:78:32:a3:47:31:25: 29:80:91:a9:94:24:cd:79:38:e5:5c:8f:e6:98:07: 0f:72:b9:b8:d0:1d:2e:52:a0:f9:ed:94:30:18:ef: b7:7f:31:2b:0b:d9:c4:57:d2:03:5d:b7:a4:be:4d: 04:4d:bd:04:e9:71:76:1d:6b:bd:e6:23:e5:bb:5a: 7b:75:68:71:a7:26:51:3e:85:5e:8d:cf:c8:c2:09: a4:36:f6:c1:c3:18:9b:21:10:4c:88:2d:76:43:bc: 04:13:76:bb:03:c6:57:3a:f6:cc:26:04:90:c9:0a: 50:e9:0f:31:1a:9e:b4:da:56:91:04:b3:f4:79:f8: 27:64:eb:a9:6f:94:b6:00:b8:80:78:5e:f7:51:af: 6d:e1:7e:6d:f1:2f:54:38:cc:95:65:19:d2:e2:0a: 41:43:03:31:91:81:d2:d0:40:56:3c:08:53:13:72: 63:ec:69:f1:94:92:ab:6b:1a:df:06:50:ef:6b:55: d4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FA:23:F2:7D:DC:9E:C8:63:EF:78:7A:C9:10:E7:50:57:0F:01:61 X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:58:97:4b:f3:ac:f4:14:fb:52:40:f0:f4:ba:ac:a9:df:1c: 6b:a1:7e:cf:cd:f9:dc:5f:43:fc:1b:a5:73:d0:58:1a:cf:95: d8:db:f6:df:ea:b3:88:a4:ef:1d:22:bd:21:a9:e3:7b:16:8b: 78:21:f1:13:f7:13:bb:91:0a:c6:f4:c3:98:ff:7b:50:37:e7: 71:ad:0b:ae:7f:23:5f:9a:c2:a3:60:36:b7:a7:37:80:af:81: bc:17:14:52:e7:49:4a:d6:63:8a:86:1e:c0:3f:37:06:a9:6e: de:3b:29:9e:4f:d5:a2:b1:47:3a:b6:8a:d1:4a:22:f3:3b:65: 05:fd:47:f0:a5:e0:f3:2e:28:db:d2:59:be:c7:07:35:b0:49: 69:df:6d:07:45:5c:ed:86:22:f7:94:74:7b:5c:b4:81:f0:33: b7:7c:41:e8:a4:e0:a9:82:00:26:aa:90:cc:c0:50:ac:e0:9a: de:07:a8:38:62:6d:a5:bd:5c:69:26:b1:8f:ba:db:54:31:9d: bf:d4:4f:22:f0:80:d4:5f:dd:e1:ff:27:aa:26:d9:c2:af:3b: 9b:99:76:26:ae:61:68:10:c1:23:aa:66:83:6b:37:6b:46:e5: 77:e1:d7:5d:86:c4:f2:c5:6d:e6:5a:21:2f:fb:6a:19:45:6f: 13:7d:8c:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjUwNDI1MDAyODE1WhcNMjUwNTAyMDAyODE1WjAYMRYwFAYD VQQDEw02ODBhZDcxZi00OGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaJZgfvbBB82gJc8wIeDH3FMuFdSD2k9tYA4WPDt73XkyoBorsJZfIv86mOw AmVc2ASTlCLCljpC/sMXFyz8ymIkQkF4MqNHMSUpgJGplCTNeTjlXI/mmAcPcrm4 0B0uUqD57ZQwGO+3fzErC9nEV9IDXbekvk0ETb0E6XF2HWu95iPlu1p7dWhxpyZR PoVejc/IwgmkNvbBwxibIRBMiC12Q7wEE3a7A8ZXOvbMJgSQyQpQ6Q8xGp602laR BLP0efgnZOupb5S2ALiAeF73Ua9t4X5t8S9UOMyVZRnS4gpBQwMxkYHS0EBWPAhT E3Jj7GnxlJKraxrfBlDva1XUxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH6I/J9 3J7IY+94eskQ51BXDwFhMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZWJdL86z0FPtSQPD0uqyp3xxroX7PzfncX0P8G6Vz0Fgaz5XY2/bf 6rOIpO8dIr0hqeN7Fot4IfET9xO7kQrG9MOY/3tQN+dxrQuufyNfmsKjYDa3pzeA r4G8FxRS50lK1mOKhh7APzcGqW7eOymeT9WisUc6torRSiLzO2UF/UfwpeDzLijb 0lm+xwc1sElp320HRVzthiL3lHR7XLSB8DO3fEHopOCpggAmqpDMwFCs4JreB6g4 Ym2lvVxpJrGPuttUMZ2/1E8i8IDUX93h/yeqJtnCrzubmXYmrmFoEMEjqmaDazdr RuV34dddhsTyxW3mWiEv+2oZRW8TfYzc -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:47 2025 by rpki-client