$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json) Hash identifier: KIISnnFb4EHpqlLfOEcDEwDS8wSrYXO8q6m6bgQ+qE8= Subject key identifier: B5:AE:E2:5F:9D:54:46:21:D9:09:63:28:5A:90:9C:53:CC:A1:09:25 Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft Manifest number: 0C09 Signing time: Thu 24 Apr 2025 18:38:45 +0000 Manifest this update: Thu 24 Apr 2025 18:38:44 +0000 Manifest next update: Thu 01 May 2025 18:38:44 +0000 Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: W5pih930D/aQQTnl2VJ8lM5/Aq6J+sLWhPpirY3h/9I=) 2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: Apr 24 18:38:44 2025 GMT Not After : May 1 18:38:44 2025 GMT Subject: CN=680a8535-bb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:39:85:ec:c1:a1:58:51:c3:b9:d9:b1:6f: 94:33:d2:15:a7:9f:64:17:3f:04:7e:3f:b7:c3:d2: 9f:91:2f:ca:82:32:0a:7a:97:2b:0b:66:9a:e9:a7: c3:98:9f:c8:e0:c6:1c:4e:a8:db:24:c3:44:b3:f4: f8:3a:10:0a:52:68:2c:2e:e8:1b:a6:08:27:16:9d: cd:37:85:42:9c:98:01:d5:d6:ca:35:41:8a:5a:48: 05:4b:d7:26:73:c9:cb:c8:0d:e1:49:7c:18:2d:32: 59:69:ba:b4:5f:9b:3c:7e:82:12:e8:f5:85:a7:1c: 8d:c7:27:62:ee:bc:87:f2:08:b9:b0:ba:b6:b6:64: 13:fc:a2:5d:c9:bf:fc:df:6d:41:7e:57:1d:7e:6f: 7e:34:b2:dd:d4:aa:bd:fc:ca:57:de:ce:23:41:11: 7f:29:ab:7d:38:cc:97:6e:90:c8:86:42:c7:5a:3c: 39:fb:66:94:9c:5b:74:4f:dd:0a:d2:83:25:9c:8d: 34:42:c2:36:a6:7a:4a:20:41:f4:44:69:0f:0a:f9: e2:51:07:fc:78:26:dc:5e:de:1b:94:de:99:5a:a4: a3:70:20:0a:fd:df:ad:d3:c3:dd:ad:a1:82:8b:3a: 2a:fd:1a:d6:dd:87:05:11:9c:43:be:55:6f:19:d4: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AE:E2:5F:9D:54:46:21:D9:09:63:28:5A:90:9C:53:CC:A1:09:25 X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f2:83:bd:18:50:7a:a2:cb:8f:33:b2:03:0a:76:8a:67:9f: 12:eb:e1:b3:d3:bd:2d:5b:49:59:db:00:fe:50:63:38:53:d8: 05:0b:dd:6d:e6:05:40:c1:81:c3:a5:9d:2e:f3:63:43:30:2a: a1:5a:a5:fc:9b:c1:21:1a:a6:7d:c3:7f:af:5e:ba:f2:92:c5: 18:a4:00:9c:b3:2d:7f:71:31:e7:22:74:e1:11:3b:fc:c0:63: 85:14:8d:a4:ca:a0:3f:60:13:89:04:a0:0a:13:83:ce:ce:9f: 6b:6a:1f:cb:bc:fe:db:42:8f:b9:c1:1a:f1:42:5b:38:d2:55: 13:cc:2f:97:3e:b1:5e:46:32:45:c4:ce:41:33:a7:d1:7e:26: 35:5c:04:2a:41:a8:1f:05:03:8b:ec:40:c7:01:b1:3c:1c:ac: 2b:d2:b7:cf:2e:f9:d3:4a:41:ab:84:69:2c:b5:9b:76:eb:77: eb:5d:83:70:a9:e6:75:ad:0a:14:f5:51:28:a1:1b:f4:00:00: 50:46:bc:8d:13:53:4d:86:34:f0:6f:dd:79:d7:48:f7:9a:61: e8:83:fb:3e:f0:e1:a0:68:d2:23:ae:3a:50:79:a7:ca:b3:e4: b9:30:b4:78:46:ec:69:0f:32:ae:4f:d8:db:55:fb:06:37:77: 07:c9:33:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjUwNDI0MTgzODQ0WhcNMjUwNTAxMTgzODQ0WjAYMRYwFAYD VQQDEw02ODBhODUzNS1iYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6Y5hezBoVhRw7nZsW+UM9IVp59kFz8Efj+3w9KfkS/KgjIKepcrC2aa6afD mJ/I4MYcTqjbJMNEs/T4OhAKUmgsLugbpggnFp3NN4VCnJgB1dbKNUGKWkgFS9cm c8nLyA3hSXwYLTJZabq0X5s8foIS6PWFpxyNxydi7ryH8gi5sLq2tmQT/KJdyb/8 321Bflcdfm9+NLLd1Kq9/MpX3s4jQRF/Kat9OMyXbpDIhkLHWjw5+2aUnFt0T90K 0oMlnI00QsI2pnpKIEH0RGkPCvniUQf8eCbcXt4blN6ZWqSjcCAK/d+t08PdraGC izoq/RrW3YcFEZxDvlVvGdRv+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWu4l+d VEYh2QljKFqQnFPMoQklMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJCRi80NEVDNTEwNjEwMzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhq cUFYNzVZWWU0M3Z3bWNQX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX8oO9GFB6osuPM7IDCnaKZ58S6+Gz070tW0lZ2wD+UGM4U9gFC91t 5gVAwYHDpZ0u82NDMCqhWqX8m8EhGqZ9w3+vXrryksUYpACcsy1/cTHnInThETv8 wGOFFI2kyqA/YBOJBKAKE4POzp9rah/LvP7bQo+5wRrxQls40lUTzC+XPrFeRjJF xM5BM6fRfiY1XAQqQagfBQOL7EDHAbE8HKwr0rfPLvnTSkGrhGkstZt263frXYNw qeZ1rQoU9VEooRv0AABQRryNE1NNhjTwb91510j3mmHog/s+8OGgaNIjrjpQeafK s+S5MLR4RuxpDzKuT9jbVfsGN3cHyTMG -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:27 2025 by rpki-client