$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json) Hash identifier: yLb+ILv/4Q/QeBz7Z0HtemniCj3eDVrmShas8B5ZrPI= Subject key identifier: 66:3F:B7:60:10:79:20:04:A6:15:DB:27:26:00:CA:EC:26:8A:55:94 Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0ADE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft Manifest number: 0AD0 Signing time: Thu 24 Apr 2025 19:20:22 +0000 Manifest this update: Thu 24 Apr 2025 19:20:22 +0000 Manifest next update: Thu 01 May 2025 19:20:22 +0000 Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: z2/cTOi1gE6h9LrZJP6HcvvsCTkhfMK+MZOUCa5UoIU=) 2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=) 3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2782 (0xade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: Apr 24 19:20:22 2025 GMT Not After : May 1 19:20:22 2025 GMT Subject: CN=680a8ef6-b854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:be:03:d2:d7:27:34:4f:26:71:2d:bb:3d: d6:b8:50:57:9f:b8:fb:3d:db:05:02:06:0e:b8:4e: e4:62:1d:48:e3:66:10:3b:7a:00:c4:f6:49:73:df: 42:c6:b9:00:77:b6:e1:21:7c:08:db:1d:52:6a:b4: f2:10:52:5b:7d:11:91:a0:55:af:07:20:8e:37:4d: 87:15:6c:75:33:ee:49:6e:9c:c3:1b:33:06:5b:58: f4:15:04:08:f9:f8:e4:10:9f:ad:a1:c5:9f:f4:35: e9:29:c1:7a:ad:8f:1d:82:30:5e:c1:32:e4:70:3b: 70:bc:f3:65:33:57:76:8c:69:58:e4:fc:d4:9f:c4: 78:26:c2:eb:25:46:df:ab:36:6f:18:fd:4d:88:2d: 41:f2:0b:13:8e:97:86:90:00:9a:93:14:0e:65:ff: f9:cd:46:85:0a:be:6f:63:45:16:2b:ed:ee:25:0f: 77:4a:3c:9c:7f:05:37:11:e5:3f:61:6c:f5:b8:a4: b2:74:57:c7:c6:e0:4f:35:9d:84:f7:3b:92:96:4d: 0b:4c:bb:f1:82:d9:dc:b3:70:a6:d3:1e:2d:42:99: 24:37:92:71:da:da:78:9a:1c:16:a2:b7:66:35:3c: 37:ac:ee:c0:2c:52:f3:1c:39:f1:bc:d6:e0:06:ab: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3F:B7:60:10:79:20:04:A6:15:DB:27:26:00:CA:EC:26:8A:55:94 X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c1:72:40:6f:4a:c6:c3:b3:6e:65:69:83:d7:1e:8a:e0:2a: e2:3b:74:3c:6f:1b:9b:11:68:fc:18:ac:e8:c1:1a:45:7f:77: 28:7f:69:cd:52:c1:26:61:74:23:7a:5f:a9:24:22:16:49:92: 38:5b:3a:5e:54:f5:40:f1:8c:41:2c:5f:f1:73:b6:32:a5:f6: d0:fa:02:a3:e3:19:8a:be:44:8e:5f:8b:a9:25:2a:94:50:cc: 74:9e:97:1a:b1:66:ea:3b:78:4d:e9:16:3b:1f:34:4e:44:50: 20:bb:c4:62:8f:10:77:c4:f9:2e:e5:58:9e:12:61:e0:ae:c8: 00:c2:3f:cc:29:12:22:b8:6a:be:40:1b:0d:13:d6:c5:07:67: 7f:66:a9:d7:7c:e8:09:4b:90:b8:5b:64:ad:b3:4c:85:e4:a9: 36:9a:a7:f6:c2:5d:80:09:25:a3:8b:85:a6:df:16:25:51:30: 1e:ae:23:1c:03:46:ce:61:a4:36:87:f0:e8:ba:ba:f0:37:ff: 07:3d:99:f1:5e:b3:6f:67:7d:84:eb:48:86:e4:82:ed:4e:e8: 9b:5b:c4:48:8f:26:23:6b:b6:99:7b:95:b7:d5:31:12:aa:08: dc:9e:33:42:6f:95:1e:7b:e7:e0:61:8f:37:7f:77:78:b0:a8: af:d5:08:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjUwNDI0MTkyMDIyWhcNMjUwNTAxMTkyMDIyWjAYMRYwFAYD VQQDEw02ODBhOGVmNi1iODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzq+A9LXJzRPJnEtuz3WuFBXn7j7PdsFAgYOuE7kYh1I42YQO3oAxPZJc99C xrkAd7bhIXwI2x1SarTyEFJbfRGRoFWvByCON02HFWx1M+5JbpzDGzMGW1j0FQQI +fjkEJ+tocWf9DXpKcF6rY8dgjBewTLkcDtwvPNlM1d2jGlY5PzUn8R4JsLrJUbf qzZvGP1NiC1B8gsTjpeGkACakxQOZf/5zUaFCr5vY0UWK+3uJQ93SjycfwU3EeU/ YWz1uKSydFfHxuBPNZ2E9zuSlk0LTLvxgtncs3Cm0x4tQpkkN5Jx2tp4mhwWordm NTw3rO7ALFLzHDnxvNbgBqvBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGY/t2AQ eSAEphXbJyYAyuwmilWUMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT djZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOwXJAb0rGw7NuZWmD1x6K4CriO3Q8bxubEWj8GKzowRpFf3cof2nN UsEmYXQjel+pJCIWSZI4WzpeVPVA8YxBLF/xc7YypfbQ+gKj4xmKvkSOX4upJSqU UMx0npcasWbqO3hN6RY7HzRORFAgu8RijxB3xPku5VieEmHgrsgAwj/MKRIiuGq+ QBsNE9bFB2d/ZqnXfOgJS5C4W2Sts0yF5Kk2mqf2wl2ACSWji4Wm3xYlUTAeriMc A0bOYaQ2h/DourrwN/8HPZnxXrNvZ32E60iG5ILtTuibW8RIjyYja7aZe5W31TES qgjcnjNCb5Uee+fgYY83f3d4sKiv1QgI -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:42 2025 by rpki-client