$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft File: V09tVmTqm98xXPZMjl5n0mODwgU.mft (raw, json) Hash identifier: afSHbQcvRDU1uj+r/UXdVaU8VZ+1bI9Yf2Eq4j402bk= Subject key identifier: A9:AB:3F:B6:66:D0:06:48:AF:12:F0:EF:C5:61:48:83:5D:1D:12:BE Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 Certificate issuer: /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Certificate serial: 0AD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft Manifest number: 0AD0 Signing time: Thu 24 Apr 2025 19:20:37 +0000 Manifest this update: Thu 24 Apr 2025 19:20:36 +0000 Manifest next update: Thu 01 May 2025 19:20:36 +0000 Files and hashes: 1: V09tVmTqm98xXPZMjl5n0mODwgU.crl (hash: D8ET9picdgdowQoIabHrgks7eEf81E6rsfutrC1cEHE=) 2: 52216250493611EAA0968624C4F9AE02.roa (hash: XjkXLtL5CTFLl3MU4C1ptKiUasRS1cFai/QK6ioOeWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2774 (0xad6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85FC, serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Validity Not Before: Apr 24 19:20:36 2025 GMT Not After : May 1 19:20:36 2025 GMT Subject: CN=680a8f05-83df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3c:d2:cf:75:36:04:87:e6:1f:69:a8:8e:13: bc:75:c2:09:d0:a7:33:e5:d6:1c:bb:95:d6:c9:dc: b1:c7:d8:88:e4:e0:8e:ca:ea:a9:54:94:1b:ab:fd: 4b:c5:1a:1d:5e:25:6b:51:47:4c:a0:d0:a9:00:b0: d5:b9:e3:b4:58:f6:6a:8a:57:de:2a:b8:00:58:ba: d0:8e:8d:15:76:f8:ca:01:3f:bc:4c:d3:cc:46:e7: 05:1f:86:67:aa:23:83:56:06:d2:42:f7:c7:5c:b4: 9b:0e:99:09:bf:88:43:95:17:4c:8b:86:32:7e:e1: c5:6c:5a:6a:65:31:fa:b1:5c:0c:4e:1c:c3:82:50: ab:14:54:93:e6:9c:b0:b4:eb:aa:73:41:57:f1:51: c9:5c:0e:10:e3:67:1b:cf:98:13:f8:17:b1:4c:4a: d6:61:53:c3:4f:36:c3:7f:6d:11:ac:5d:84:4a:f4: 48:16:02:96:32:33:32:be:41:3a:5b:7a:34:52:43: 91:3e:34:0c:f7:50:32:40:8c:d1:53:aa:04:1d:9d: 48:45:20:7d:dc:e8:aa:8f:88:e8:16:f7:f1:63:30: 45:06:f5:3a:98:d2:a1:9f:99:b2:04:5a:e0:de:b0: 20:cd:f9:df:b8:8a:bc:bf:d2:c8:a2:9c:3a:1f:cf: 92:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AB:3F:B6:66:D0:06:48:AF:12:F0:EF:C5:61:48:83:5D:1D:12:BE X509v3 Authority Key Identifier: keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:7a:5b:80:09:b8:21:64:41:ec:f3:cb:26:fa:21:07:88:de: c8:aa:e2:c6:6d:ce:19:f2:d3:5c:8d:c3:6f:b7:89:68:e0:53: af:00:21:ae:14:e7:7d:99:51:96:9e:d0:17:9f:e5:c0:4f:48: 69:8e:84:1c:18:0d:98:9e:09:6f:8f:83:ea:c6:72:98:82:0d: ab:86:be:60:92:17:cd:7b:1e:36:e4:7c:6b:3f:65:29:77:d3: 81:95:a1:c1:09:07:42:58:59:a8:6f:0d:a0:91:51:34:a3:a2: af:b5:aa:b7:f2:f6:5c:9e:0c:3b:e7:e6:f7:86:eb:1a:bc:f3: db:e9:98:63:56:23:be:23:80:11:af:eb:b1:d7:37:6d:49:83: 45:9b:cc:b1:f7:e4:00:c2:a1:40:82:79:e6:8a:eb:8e:8c:c9: f0:0d:71:21:0e:58:75:c2:c8:a0:f4:f4:9a:fd:f5:82:b2:72: a9:86:98:8b:b1:c7:ea:8c:e5:ac:16:9d:88:ba:4b:e0:8c:d5: e8:c8:1d:fa:7f:13:8b:56:f1:b2:8f:1a:d3:7f:9d:39:e8:d3: 83:77:45:0e:92:8e:91:07:b0:07:63:8a:cb:0b:80:0c:75:c7: 86:21:73:79:96:75:bd:53:f7:3a:00:58:d4:39:dc:a5:c0:0f: 96:96:23:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1RkMxMTAvBgNVBAUTKDU3NEY2RDU2NjRFQTlCREYzMTVDRjY0QzhFNUU2N0Qy NjM4M0MyMDUwHhcNMjUwNDI0MTkyMDM2WhcNMjUwNTAxMTkyMDM2WjAYMRYwFAYD VQQDEw02ODBhOGYwNS04M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jzSz3U2BIfmH2mojhO8dcIJ0Kcz5dYcu5XWydyxx9iI5OCOyuqpVJQbq/1L xRodXiVrUUdMoNCpALDVueO0WPZqilfeKrgAWLrQjo0VdvjKAT+8TNPMRucFH4Zn qiODVgbSQvfHXLSbDpkJv4hDlRdMi4YyfuHFbFpqZTH6sVwMThzDglCrFFST5pyw tOuqc0FX8VHJXA4Q42cbz5gT+BexTErWYVPDTzbDf20RrF2ESvRIFgKWMjMyvkE6 W3o0UkORPjQM91AyQIzRU6oEHZ1IRSB93Oiqj4joFvfxYzBFBvU6mNKhn5myBFrg 3rAgzfnfuIq8v9LIopw6H8+SlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmrP7Zm 0AZIrxLw78VhSINdHRK+MB8GA1UdIwQYMBaAFFdPbVZk6pvfMVz2TI5eZ9Jjg8IF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVGQy84ODE2RUZGODQ5 MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05OHhYUFpNamw1bjBtT0R3 Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwOXRWbVRxbTk4eFhQWk1qbDVuMG1PRHdnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVGQy84ODE2RUZGODQ5MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05 OHhYUFpNamw1bjBtT0R3Z1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDeluACbghZEHs88sm+iEHiN7IquLGbc4Z8tNcjcNvt4lo4FOvACGu FOd9mVGWntAXn+XAT0hpjoQcGA2Ynglvj4PqxnKYgg2rhr5gkhfNex425HxrP2Up d9OBlaHBCQdCWFmobw2gkVE0o6Kvtaq38vZcngw75+b3husavPPb6ZhjViO+I4AR r+ux1zdtSYNFm8yx9+QAwqFAgnnmiuuOjMnwDXEhDlh1wsig9PSa/fWCsnKphpiL scfqjOWsFp2IukvgjNXoyB36fxOLVvGyjxrTf5056NODd0UOko6RB7AHY4rLC4AM dceGIXN5lnW9U/c6AFjUOdylwA+WliMD -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:06 2025 by rpki-client