$ rpki-client -vvf rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft File: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft (raw, json) Hash identifier: yO6FovdNET3bIGKuYnhFFV2mtzn6TPaHBPcItt8qNlg= Subject key identifier: FC:3E:75:5C:CD:DB:66:F4:6A:BE:02:BA:C0:B1:57:E2:C5:6D:8F:67 Authority key identifier: F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94 Certificate issuer: /CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194 Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft Manifest number: 05CE Signing time: Thu 24 Apr 2025 22:50:21 +0000 Manifest this update: Thu 24 Apr 2025 22:50:20 +0000 Manifest next update: Thu 01 May 2025 22:50:20 +0000 Files and hashes: 1: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl (hash: mb6fR5F4yncjm6Tw49Wf4D28QlAvCF4blXNXFG/N8qc=) 2: E8C597A6CAC311EC910B8C20C4F9AE02.roa (hash: ca8WhLHbBa7EcZLiVkbwKc/O4N20Afp/5/zNnD+5YJY=) 3: DB5A14DED46911ECBA5B5F41C4F9AE02.roa (hash: AUr7V0EIgEALueuFSq5XM/MsO85yQ02h1CJnq/h0usU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B734D, serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194 Validity Not Before: Apr 24 22:50:20 2025 GMT Not After : May 1 22:50:20 2025 GMT Subject: CN=680ac02d-c580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:e8:d9:44:19:6a:27:15:6d:b9:0c:ba:59: e7:21:ea:47:86:c2:a9:25:9d:4a:13:f3:96:df:39: 33:10:9d:34:11:22:d7:46:b7:d0:1c:3d:eb:66:ea: 5c:ff:90:53:20:ee:98:2f:21:15:24:35:6e:98:88: 29:64:b5:c5:2c:8f:c1:4e:b8:43:01:a4:45:4c:ee: b6:47:66:38:76:97:8c:8b:68:ea:c5:e1:45:ab:c2: 4e:28:d2:1e:30:8f:f0:f1:ea:e6:20:9b:bd:1a:f1: da:cb:7a:dc:b1:21:d5:e5:6f:48:16:74:43:e4:7a: 7d:2a:16:ee:9a:c3:11:bd:d3:44:41:1e:75:69:af: 9d:10:14:7e:7f:fc:56:88:e2:91:5a:52:95:fc:81: 66:4b:46:4c:48:2f:18:c5:4c:e5:72:04:8f:5b:bb: cc:28:2b:f3:92:ac:62:76:4c:69:d7:00:9e:85:04: 55:6d:a2:65:0c:d2:38:0e:64:4c:44:70:d4:f9:41: fd:94:21:25:c9:99:03:54:ac:65:30:90:6e:80:dc: 9a:d8:9e:27:8c:0e:f3:cc:5f:e9:d3:13:d7:b6:77: 56:01:3d:5c:07:bf:f7:e0:fd:3d:9f:65:c6:92:8c: 6c:03:ab:1b:1b:11:57:5a:be:5d:84:86:5b:d5:c6: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:75:5C:CD:DB:66:F4:6A:BE:02:BA:C0:B1:57:E2:C5:6D:8F:67 X509v3 Authority Key Identifier: keyid:F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:45:33:69:0b:4b:c6:62:a7:f5:9a:f5:0f:4e:0a:d8:9e:81: 14:61:f8:31:e5:c7:72:fc:5d:75:63:6e:28:36:6e:06:d4:27: 40:78:43:e3:1a:51:d8:d4:9b:bf:6e:2e:12:3d:f1:79:8c:39: 92:34:d7:38:49:a1:70:c1:ee:34:e3:d7:a5:6a:ff:64:b6:70: 13:07:66:eb:15:f4:cb:63:e6:c3:ac:2d:d5:f9:ad:bb:b9:30: bf:23:ff:64:af:40:2f:03:91:bf:0b:01:37:5d:9b:bc:a7:d9: 89:bb:0b:56:42:64:1f:6e:b5:0c:c1:89:b6:4a:90:06:3a:45: 4f:08:65:35:d7:71:3e:69:e0:c7:ea:cf:0b:ee:55:6b:f0:80: b9:6a:79:45:06:49:52:87:f5:d8:4f:6d:49:02:e9:57:38:0b: a3:37:98:53:63:bd:03:77:49:b3:23:ad:3c:bc:2a:b2:3d:d2: 53:43:28:51:b4:3f:31:3c:c6:4f:cb:8a:01:71:b0:56:87:ed: f5:08:29:62:9f:f2:7a:f5:66:a4:e2:2f:db:f3:27:f0:85:c4: e6:0e:fd:ef:59:b1:19:a3:d8:74:4f:bb:93:fc:fa:84:e7:24: c6:28:9b:44:45:0b:c6:f4:4b:e6:4d:cb:e7:1b:58:1f:4f:33: ce:a8:05:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczNEQxMTAvBgNVBAUTKEY0QzMzMjQ1OEJFREM4NzhCOTZBMDdFMUUwODFFNUJG NEE5MUExOTQwHhcNMjUwNDI0MjI1MDIwWhcNMjUwNTAxMjI1MDIwWjAYMRYwFAYD VQQDEw02ODBhYzAyZC1jNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Qvo2UQZaicVbbkMulnnIepHhsKpJZ1KE/OW3zkzEJ00ESLXRrfQHD3rZupc /5BTIO6YLyEVJDVumIgpZLXFLI/BTrhDAaRFTO62R2Y4dpeMi2jqxeFFq8JOKNIe MI/w8ermIJu9GvHay3rcsSHV5W9IFnRD5Hp9KhbumsMRvdNEQR51aa+dEBR+f/xW iOKRWlKV/IFmS0ZMSC8YxUzlcgSPW7vMKCvzkqxidkxp1wCehQRVbaJlDNI4DmRM RHDU+UH9lCElyZkDVKxlMJBugNya2J4njA7zzF/p0xPXtndWAT1cB7/34P09n2XG koxsA6sbGxFXWr5dhIZb1cbnKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw+dVzN 22b0ar4CusCxV+LFbY9nMB8GA1UdIwQYMBaAFPTDMkWL7ch4uWoH4eCB5b9KkaGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzM0RC8xMTU4NDMyNkI5 NEYxMUVCOUE2QUVGMzJDNEY5QUUwMi85TU15Ull2dHlIaTVhZ2ZoNElIbHYwcVJv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNTXlSWXZ0eUhpNWFnZmg0SUhsdjBxUm9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzM0RC8xMTU4NDMyNkI5NEYxMUVCOUE2QUVGMzJDNEY5QUUwMi85TU15Ull2dHlI aTVhZ2ZoNElIbHYwcVJvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8RTNpC0vGYqf1mvUPTgrYnoEUYfgx5cdy/F11Y24oNm4G1CdAeEPj GlHY1Ju/bi4SPfF5jDmSNNc4SaFwwe4049elav9ktnATB2brFfTLY+bDrC3V+a27 uTC/I/9kr0AvA5G/CwE3XZu8p9mJuwtWQmQfbrUMwYm2SpAGOkVPCGU113E+aeDH 6s8L7lVr8IC5anlFBklSh/XYT21JAulXOAujN5hTY70Dd0mzI608vCqyPdJTQyhR tD8xPMZPy4oBcbBWh+31CClin/J69Wak4i/b8yfwhcTmDv3vWbEZo9h0T7uT/PqE 5yTGKJtERQvG9EvmTcvnG1gfTzPOqAW3 -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:26 2025 by rpki-client