$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: NgPsZJU7mdzcDHMX/FN2apAmDkO4mbFDuTQFWGoNJB4= Subject key identifier: B4:1E:12:88:D8:51:F3:91:64:FE:B2:FE:2F:09:4F:DD:45:4D:AB:6B Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 01C9 Signing time: Fri 25 Apr 2025 02:04:16 +0000 Manifest this update: Fri 25 Apr 2025 02:04:15 +0000 Manifest next update: Fri 02 May 2025 02:04:15 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: q4y9E3ROqLmQrweLJP9bAXsS0XNtkSLFmY4EF+8obXc=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Apr 25 02:04:15 2025 GMT Not After : May 2 02:04:15 2025 GMT Subject: CN=680aeda0-f762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:1c:59:36:ed:50:a4:f3:3a:ea:a6:cf:81: 2e:6f:d3:fa:05:0d:ae:f7:9c:5c:68:f1:91:94:fe: fb:f5:c2:0c:43:79:f6:cd:d2:aa:eb:14:bf:be:e4: 68:b1:1d:30:3b:e3:f2:33:9a:a8:7e:a4:5c:18:63: 66:8f:5f:77:c2:f1:e0:c2:d7:b7:09:bd:e6:72:b2: 36:39:cf:0d:b1:70:75:4c:68:f1:3d:8d:74:70:b6: 29:7f:88:b4:c6:da:12:01:df:42:c0:51:85:31:a4: 77:a3:45:81:33:30:74:fe:d6:a1:49:ae:75:8f:9e: 9b:e4:bb:ae:19:70:4c:be:39:19:9a:d2:84:c9:76: 9d:5d:6c:5f:5a:50:c9:04:8e:2b:d1:86:bb:78:fb: 73:8d:cd:c2:b0:ba:84:26:2d:4a:d1:1e:49:78:fd: 3c:88:3a:af:33:41:23:28:9f:cc:9f:36:92:77:4e: bd:2a:cd:9b:25:ae:ec:65:71:5c:49:b1:45:b2:2e: 01:94:2f:c6:15:2b:67:48:8d:04:00:f3:3e:95:03: 21:c6:26:78:eb:1d:44:05:26:d3:5c:fd:9a:7a:11: 9f:dc:83:fb:49:f4:60:80:8c:bc:35:3e:b0:a7:57: a7:04:ce:b3:63:7c:bd:c9:b9:6a:07:59:66:d9:fc: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1E:12:88:D8:51:F3:91:64:FE:B2:FE:2F:09:4F:DD:45:4D:AB:6B X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:c5:ac:42:3e:aa:7f:7b:73:02:e4:f2:9a:15:80:7f:3d:cf: a2:4d:2e:a0:0b:8e:b9:b4:6d:0d:7c:67:60:6a:0d:a5:c7:1f: 9c:a6:14:c2:9c:f5:6c:d0:58:31:8a:3f:1d:1b:c1:59:ae:aa: ac:53:25:7f:10:2e:42:cc:85:8a:5c:79:11:dd:22:10:19:e4: 3b:55:f3:2a:07:e2:49:38:ec:18:7d:14:03:a7:d0:61:d8:33: 14:de:39:5a:63:36:12:8b:ee:7e:ab:c5:52:bd:21:fb:5a:4f: 74:47:a5:8f:a4:ee:eb:c0:3a:60:3c:e3:a8:59:7f:5e:e9:90: 0b:d9:eb:40:43:54:49:27:6a:fc:22:5e:09:02:31:f0:35:ee: 5f:9e:cd:a2:d9:50:89:df:7c:57:cb:6d:3c:34:90:57:aa:04: 30:92:e7:47:fa:ac:89:98:d1:6c:d3:24:3f:fe:35:73:5f:2d: 41:03:9d:df:3a:52:d9:08:6f:c1:03:04:b5:42:e0:46:ff:5e: 7c:6f:36:f1:d8:64:45:2a:0d:67:51:fc:54:ea:a5:20:e8:54: c5:68:c2:af:cd:8b:8a:14:42:4a:6b:12:6a:b3:3b:fd:91:5f: 7d:5e:fa:92:6c:cb:cf:3d:32:ac:92:e1:f1:fd:fe:14:a3:6f: fe:7f:e4:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUwNDI1MDIwNDE1WhcNMjUwNTAyMDIwNDE1WjAYMRYwFAYD VQQDEw02ODBhZWRhMC1mNzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGMcWTbtUKTzOuqmz4Eub9P6BQ2u95xcaPGRlP779cIMQ3n2zdKq6xS/vuRo sR0wO+PyM5qofqRcGGNmj193wvHgwte3Cb3mcrI2Oc8NsXB1TGjxPY10cLYpf4i0 xtoSAd9CwFGFMaR3o0WBMzB0/tahSa51j56b5LuuGXBMvjkZmtKEyXadXWxfWlDJ BI4r0Ya7ePtzjc3CsLqEJi1K0R5JeP08iDqvM0EjKJ/MnzaSd069Ks2bJa7sZXFc SbFFsi4BlC/GFStnSI0EAPM+lQMhxiZ46x1EBSbTXP2aehGf3IP7SfRggIy8NT6w p1enBM6zY3y9yblqB1lm2fweZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQeEojY UfORZP6y/i8JT91FTatrMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyxaxCPqp/e3MC5PKaFYB/Pc+iTS6gC465tG0NfGdgag2lxx+cphTC nPVs0Fgxij8dG8FZrqqsUyV/EC5CzIWKXHkR3SIQGeQ7VfMqB+JJOOwYfRQDp9Bh 2DMU3jlaYzYSi+5+q8VSvSH7Wk90R6WPpO7rwDpgPOOoWX9e6ZAL2etAQ1RJJ2r8 Il4JAjHwNe5fns2i2VCJ33xXy208NJBXqgQwkudH+qyJmNFs0yQ//jVzXy1BA53f OlLZCG/BAwS1QuBG/158bzbx2GRFKg1nUfxU6qUg6FTFaMKvzYuKFEJKaxJqszv9 kV99XvqSbMvPPTKskuHx/f4Uo2/+f+Sf -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:14 2025 by rpki-client