$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: 0OV6Zuup1Fv5Lz9d716BKlJX3YRbRrNK4Rs4q7lnQvY= Subject key identifier: C1:71:04:E2:3A:CE:14:22:0F:9E:4C:DD:D8:2D:53:98:E8:6C:A9:DA Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 0329 Signing time: Fri 25 Apr 2025 00:52:47 +0000 Manifest this update: Fri 25 Apr 2025 00:52:47 +0000 Manifest next update: Fri 02 May 2025 00:52:47 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: xPT6xD0O/MeRm9QgbB1i8n8JrbHuM6kP0ZLa5mz+R8E=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: 3J77t/X4d8FbFqMziCtfhDxfCbOMGAItxZzB2H4f4P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: Apr 25 00:52:47 2025 GMT Not After : May 2 00:52:47 2025 GMT Subject: CN=680adcdf-eb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:ec:81:f7:41:5c:28:4f:b1:71:43:c1:01: 11:49:6a:f8:0c:cf:45:90:51:46:c3:cc:0c:e8:75: 27:f2:53:f2:4d:11:28:cd:d6:50:dc:01:cb:f8:29: 93:39:26:09:5c:c9:51:fe:d3:b6:66:8b:07:89:cb: 83:e1:dd:a6:bf:96:f7:b2:2c:cd:af:a8:14:4b:c4: 1a:e1:33:ae:eb:d7:aa:8a:d6:b7:a1:7d:c5:6c:5b: a5:12:95:d9:69:46:08:6c:4a:69:f4:97:97:7e:6a: 1f:5c:a2:27:4b:81:cf:1c:eb:06:78:03:d2:e6:fa: 9f:09:b2:d2:35:45:ab:3b:b6:51:d3:f4:d7:09:b2: 49:f3:82:ad:28:27:e7:e2:0b:3b:a6:b5:a9:7c:68: e4:7e:b9:68:25:87:3d:aa:6d:40:57:e6:b7:70:2b: f8:b7:a6:c2:2b:92:2d:45:66:56:e1:ed:a3:df:29: 6d:ac:77:af:fc:19:40:40:43:c2:87:fc:f2:4a:96: 72:14:64:d6:09:41:5a:bc:53:07:2e:36:d7:b2:0d: 5e:65:e0:2a:fb:d3:e3:5c:97:5f:b4:fb:48:2b:6c: 71:52:a7:13:8f:df:8e:86:66:3d:03:00:60:80:dd: 6f:b1:51:ee:09:b1:69:73:63:b1:d9:c5:08:83:5c: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:71:04:E2:3A:CE:14:22:0F:9E:4C:DD:D8:2D:53:98:E8:6C:A9:DA X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:be:bb:5c:5d:97:5c:3e:ab:f3:35:a4:c1:0b:6e:ac:ce:f4: 78:a6:e1:f5:4d:95:0b:74:96:57:0a:7e:19:9c:84:98:13:40: 64:79:7a:da:29:a0:a8:04:b4:c3:af:b7:cd:4a:fc:df:d4:31: 5d:fa:61:80:3f:19:06:cf:b4:6c:34:c0:0e:ad:82:9c:db:aa: 2f:3f:70:d2:3f:b2:b4:a5:50:e6:06:2a:cc:62:ac:10:11:ab: 6b:d2:3c:aa:7a:a6:e8:72:6e:c9:f9:78:76:f6:15:b8:da:12: 67:47:40:06:1f:52:da:86:42:7d:74:d2:ec:8d:47:7b:d8:ea: fa:11:23:d6:d0:61:29:94:1f:97:58:28:ef:4c:21:30:72:db: 5a:d9:12:a7:e7:ca:7b:1f:bb:91:72:0c:7d:ec:32:d9:0b:71: cf:49:42:f4:03:20:a6:be:1a:8c:f2:83:97:96:bb:32:0f:c1: 30:cf:70:79:01:ed:1f:b2:3a:64:37:e2:58:fb:f3:6a:25:4e: 5d:e2:ac:ed:aa:af:7e:3f:62:18:83:dc:8b:98:94:e1:46:c9: f7:3c:75:89:f0:2e:57:43:49:85:80:82:de:53:08:5f:63:df: 2c:8c:07:ad:f4:44:a0:74:45:ba:56:cf:a6:56:95:0e:35:2e: 1c:a7:c1:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjUwNDI1MDA1MjQ3WhcNMjUwNTAyMDA1MjQ3WjAYMRYwFAYD VQQDEw02ODBhZGNkZi1lYjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmrsgfdBXChPsXFDwQERSWr4DM9FkFFGw8wM6HUn8lPyTREozdZQ3AHL+CmT OSYJXMlR/tO2ZosHicuD4d2mv5b3sizNr6gUS8Qa4TOu69eqita3oX3FbFulEpXZ aUYIbEpp9JeXfmofXKInS4HPHOsGeAPS5vqfCbLSNUWrO7ZR0/TXCbJJ84KtKCfn 4gs7prWpfGjkfrloJYc9qm1AV+a3cCv4t6bCK5ItRWZW4e2j3yltrHev/BlAQEPC h/zySpZyFGTWCUFavFMHLjbXsg1eZeAq+9PjXJdftPtIK2xxUqcTj9+OhmY9AwBg gN1vsVHuCbFpc2Ox2cUIg1xMkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFxBOI6 zhQiD55M3dgtU5jobKnaMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpvrtcXZdcPqvzNaTBC26szvR4puH1TZULdJZXCn4ZnISYE0BkeXra KaCoBLTDr7fNSvzf1DFd+mGAPxkGz7RsNMAOrYKc26ovP3DSP7K0pVDmBirMYqwQ Eatr0jyqeqbocm7J+Xh29hW42hJnR0AGH1LahkJ9dNLsjUd72Or6ESPW0GEplB+X WCjvTCEwctta2RKn58p7H7uRcgx97DLZC3HPSUL0AyCmvhqM8oOXlrsyD8Ewz3B5 Ae0fsjpkN+JY+/NqJU5d4qztqq9+P2IYg9yLmJThRsn3PHWJ8C5XQ0mFgILeUwhf Y98sjAet9ESgdEW6Vs+mVpUONS4cp8GL -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:22 2025 by rpki-client