$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft File: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json) Hash identifier: KEnkcmufNWxoi+gSrKxgd8/Q0XsrN0rH4XHVDMiFn+A= Subject key identifier: 78:76:CA:96:6E:6D:B3:7C:69:4D:6E:C7:C0:25:91:8C:B1:F8:06:D5 Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft Manifest number: 0F Signing time: Fri 25 Apr 2025 07:08:15 +0000 Manifest this update: Fri 25 Apr 2025 07:08:15 +0000 Manifest next update: Fri 02 May 2025 07:08:15 +0000 Files and hashes: 1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: QEm50SEU3yXVJsmvt6KxlmAa3bDZd5RqJmVrDJLBLsQ=) 2: 4BDF403A1A7B11F0A104ED51C4F9AE02.roa (hash: XA24y6Bmnh9zhYcZE0f+nzYkNFXplMfx6oKN/T97TM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Validity Not Before: Apr 25 07:08:15 2025 GMT Not After : May 2 07:08:15 2025 GMT Subject: CN=680b34df-4e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:8b:3d:bd:23:7f:46:2a:0b:27:74:b4:96: bc:9e:3b:e7:61:d8:b1:bc:9b:d7:5b:71:5b:27:df: 5b:98:c9:6d:62:62:5f:9b:09:05:5b:d0:86:4e:ae: ec:1a:3d:40:7c:a2:ad:49:82:75:3c:6e:39:56:da: e7:3d:13:ad:f6:83:ed:4d:80:7d:1a:d3:7c:0d:31: f7:44:86:b2:cd:08:85:e0:f9:ed:b7:ca:e4:97:cc: 5f:43:ae:43:02:5d:18:d4:9c:63:6f:20:bf:1c:56: 99:7f:b7:71:6d:9d:c3:b3:ad:03:0f:3f:45:5f:6a: e4:6a:45:77:39:26:2f:52:a4:c1:b5:32:6e:01:9f: d8:1e:10:7d:8f:f0:31:2a:8a:10:3f:52:8a:4b:b1: 93:e0:57:0c:d5:ac:09:a6:89:65:83:97:93:aa:fa: 33:14:a3:84:3d:87:1b:02:95:3b:c4:fc:fa:64:d4: 4b:42:9c:53:14:96:08:4d:7f:79:9a:85:26:e2:2a: bf:33:d4:ec:79:a4:0e:15:c1:02:ee:4e:4c:18:5a: 04:d0:51:fb:5a:38:ee:74:08:e9:cd:17:61:e8:9f: 2a:70:0c:7a:a1:e8:bf:5f:96:b5:cb:f4:5f:e4:37: 73:3c:0c:67:72:38:6c:48:27:a0:42:7c:98:85:3a: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:76:CA:96:6E:6D:B3:7C:69:4D:6E:C7:C0:25:91:8C:B1:F8:06:D5 X509v3 Authority Key Identifier: keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:88:49:22:c9:c6:fc:a8:fe:16:95:28:d5:d5:e8:d4:a3:4e: f7:76:e4:6b:1c:c1:fe:3a:6b:b0:46:ac:a4:6e:33:fa:42:2e: 74:7a:8b:04:29:e1:47:84:d6:9d:e5:df:c2:c7:27:0a:71:d1: cd:7a:53:d8:3a:db:02:e4:b4:b1:1a:c4:e0:bf:67:63:86:79: dd:a5:10:6c:0e:ea:a2:0e:5e:51:31:1d:c7:de:57:89:07:b6: 2f:71:1f:b6:b8:3b:d0:ba:c5:56:ac:65:a0:6a:f9:39:b7:22: 29:95:d9:b2:7d:eb:0b:ca:1f:71:1c:32:ef:e6:c1:2f:63:bc: 72:9b:03:49:89:c3:3a:4f:85:62:ae:20:f6:d9:76:bb:5b:c5: 8c:cc:99:d3:95:6e:aa:f8:95:3c:ab:ee:6f:01:72:fa:80:50: 46:ec:4b:45:b6:08:03:ac:9c:53:1e:8f:f4:64:af:33:33:03: 3f:2a:c6:ba:13:df:b1:3e:9a:be:d0:c6:9f:7a:60:b6:e7:72: e8:d8:74:15:d8:9c:95:f3:7d:bd:44:e9:15:2c:b9:cd:14:39: 18:bb:e3:33:59:b3:bd:05:b8:65:f2:63:1f:14:5e:df:fe:8d: 72:4c:bd:35:76:9e:fd:37:b6:60:1b:42:f4:2b:bf:02:f6:50: c6:1d:ac:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0FBNTExMC8GA1UEBRMoRjcyNjdFODBCRTgxN0YwNDNEMjhGQjdFNzMwNUY0QzQ4 OEE4MzkxQTAeFw0yNTA0MjUwNzA4MTVaFw0yNTA1MDIwNzA4MTVaMBgxFjAUBgNV BAMTDTY4MGIzNGRmLTRlNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkKYs9vSN/RioLJ3S0lryeO+dh2LG8m9dbcVsn31uYyW1iYl+bCQVb0IZOruwa PUB8oq1JgnU8bjlW2uc9E632g+1NgH0a03wNMfdEhrLNCIXg+e23yuSXzF9DrkMC XRjUnGNvIL8cVpl/t3FtncOzrQMPP0VfauRqRXc5Ji9SpMG1Mm4Bn9geEH2P8DEq ihA/UopLsZPgVwzVrAmmiWWDl5Oq+jMUo4Q9hxsClTvE/Ppk1EtCnFMUlghNf3ma hSbiKr8z1Ox5pA4VwQLuTkwYWgTQUftaOO50COnNF2HonypwDHqh6L9flrXL9F/k N3M8DGdyOGxIJ6BCfJiFOk3BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeHbKlm5t s3xpTW7HwCWRjLH4BtUwHwYDVR0jBBgwFoAU9yZ+gL6BfwQ9KPt+cwX0xIioORow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QUE1L0JBRkIzNTc0MTVC QjExRjBCRkQ1NDg4MUM0RjlBRTAyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09S by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXlaLWdMNkJmd1E5S1B0LWN3WDB4SWlvT1JvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 QUE1L0JBRkIzNTc0MTVCQjExRjBCRkQ1NDg4MUM0RjlBRTAyLzl5Wi1nTDZCZndR OUtQdC1jd1gweElpb09Sby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMuISSLJxvyo/haVKNXV6NSjTvd25Gscwf46a7BGrKRuM/pCLnR6iwQp 4UeE1p3l38LHJwpx0c16U9g62wLktLEaxOC/Z2OGed2lEGwO6qIOXlExHcfeV4kH ti9xH7a4O9C6xVasZaBq+Tm3IimV2bJ96wvKH3EcMu/mwS9jvHKbA0mJwzpPhWKu IPbZdrtbxYzMmdOVbqr4lTyr7m8BcvqAUEbsS0W2CAOsnFMej/RkrzMzAz8qxroT 37E+mr7Qxp96YLbncujYdBXYnJXzfb1E6RUsuc0UORi74zNZs70FuGXyYx8UXt/+ jXJMvTV2nv03tmAbQvQrvwL2UMYdrKc= -----END CERTIFICATE-----Generated at Sat Apr 26 05:00:34 2025 by rpki-client