$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: a256m97CeqlWr0ZeV8Ad3EW8uqyxZOv8mWpx2bkm/HU= Subject key identifier: 3A:FF:29:08:4E:1A:20:07:B4:12:92:46:8C:F9:0B:96:2C:54:5D:3A Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 3482 Signing time: Thu 24 Apr 2025 15:17:22 +0000 Manifest this update: Thu 24 Apr 2025 15:17:22 +0000 Manifest next update: Thu 01 May 2025 15:17:22 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: UmqxY9g0GTsOzoXm0D9pQnuW15tBPB9EiXasaZG0DeQ=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Apr 24 15:17:22 2025 GMT Not After : May 1 15:17:22 2025 GMT Subject: CN=680a5602-c653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:65:da:b7:4a:78:ec:ab:06:fc:87:71:78: 1f:59:77:de:2f:08:1e:20:b4:8d:34:e9:fa:a9:52: 4c:ec:27:c7:cd:e4:b2:c5:b2:d9:20:97:44:41:05: 89:8d:1f:fc:d6:d8:4a:e7:5b:37:10:f1:c8:8c:5c: 1a:d0:ff:c2:eb:9e:ab:b0:26:61:9e:eb:07:31:0a: 14:d0:65:17:6d:50:81:bf:f3:fd:b7:0d:f3:1d:07: e7:a2:e8:d3:74:64:86:0e:84:be:ee:8a:89:66:4d: 87:35:4c:78:60:ec:71:0b:ab:51:38:27:fb:33:7c: af:67:f3:2d:c3:30:0a:b3:f6:ee:36:e7:fe:ec:b9: a9:d3:8c:c4:0c:27:a7:ff:f4:51:d4:fc:a1:cf:7f: 93:e8:56:c0:95:13:e9:0a:87:eb:55:66:e8:8b:0e: 23:34:de:31:89:5b:ef:b2:41:89:c8:51:49:20:89: 94:64:29:7d:82:78:09:00:61:ba:75:4a:57:8c:fc: 69:71:96:cc:03:06:aa:b2:2a:38:81:48:99:9a:be: 47:ae:db:42:83:60:96:e3:ab:72:2c:e9:75:f6:b8: a5:64:dd:66:b8:ca:27:69:a1:b8:07:64:c8:73:9a: 92:0e:3a:d2:14:9b:1e:95:87:83:76:19:3e:fb:4a: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FF:29:08:4E:1A:20:07:B4:12:92:46:8C:F9:0B:96:2C:54:5D:3A X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fb:34:db:8d:ad:85:65:81:bc:ca:5e:19:14:75:59:21:e8: 17:33:e3:d4:56:30:8b:1f:8f:5f:62:f4:ad:d7:f4:85:50:69: 96:8b:b8:ac:ec:a0:18:f5:b2:85:c6:93:3b:b8:b2:13:9b:db: 03:9b:a0:e5:07:a6:e7:91:15:2f:3f:48:80:50:cc:ee:81:30: 69:19:9b:17:20:29:ce:cc:99:20:53:c5:ed:1c:00:15:2b:ba: 83:a0:3f:81:64:3b:eb:ed:a4:e3:68:1f:17:37:59:2e:33:29: fd:b2:20:a2:78:db:8d:63:13:0e:c9:07:03:40:49:ef:b8:35: 0b:c9:2e:4d:8e:9f:7f:68:7e:26:a3:68:b4:79:7f:95:ea:af: bf:14:25:2e:9a:c1:d7:d8:90:0c:61:8e:87:98:39:97:1a:35: 3e:91:55:fb:eb:1d:87:31:b8:3d:9b:35:9a:9d:55:5e:8e:f4: 8b:c7:a7:22:cf:d1:7a:a8:e5:77:d7:56:15:50:e2:72:0a:a3: cc:39:f3:6f:08:6c:b8:6a:95:17:5f:40:fe:1b:8d:87:ea:7c: 76:02:eb:b6:10:ea:99:ca:04:10:55:d4:05:78:d5:2a:ec:57: 42:7d:c2:37:3a:c5:3e:57:bd:85:5a:87:e1:84:68:99:db:47: ae:00:9d:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjUwNDI0MTUxNzIyWhcNMjUwNTAxMTUxNzIyWjAYMRYwFAYD VQQDEw02ODBhNTYwMi1jNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTdl2rdKeOyrBvyHcXgfWXfeLwgeILSNNOn6qVJM7CfHzeSyxbLZIJdEQQWJ jR/81thK51s3EPHIjFwa0P/C656rsCZhnusHMQoU0GUXbVCBv/P9tw3zHQfnoujT dGSGDoS+7oqJZk2HNUx4YOxxC6tROCf7M3yvZ/MtwzAKs/buNuf+7Lmp04zEDCen //RR1Pyhz3+T6FbAlRPpCofrVWboiw4jNN4xiVvvskGJyFFJIImUZCl9gngJAGG6 dUpXjPxpcZbMAwaqsio4gUiZmr5HrttCg2CW46tyLOl19rilZN1muMonaaG4B2TI c5qSDjrSFJselYeDdhk++0qZhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDr/KQhO GiAHtBKSRoz5C5YsVF06MB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM+zTbja2FZYG8yl4ZFHVZIegXM+PUVjCLH49fYvSt1/SFUGmWi7is 7KAY9bKFxpM7uLITm9sDm6DlB6bnkRUvP0iAUMzugTBpGZsXICnOzJkgU8XtHAAV K7qDoD+BZDvr7aTjaB8XN1kuMyn9siCieNuNYxMOyQcDQEnvuDULyS5Njp9/aH4m o2i0eX+V6q+/FCUumsHX2JAMYY6HmDmXGjU+kVX76x2HMbg9mzWanVVejvSLx6ci z9F6qOV311YVUOJyCqPMOfNvCGy4apUXX0D+G42H6nx2Auu2EOqZygQQVdQFeNUq 7FdCfcI3OsU+V72FWofhhGiZ20euAJ0D -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:07 2025 by rpki-client