$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft File: V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json) Hash identifier: FSEbBxRcmAp74mPSueUrPJ27N7WQWQsEwWsKv8MPJjE= Subject key identifier: 8D:26:FE:6F:76:5E:66:21:81:F9:70:38:D2:EB:E1:D3:3F:98:F6:8D Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft Manifest number: 0886 Signing time: Thu 24 Apr 2025 20:27:54 +0000 Manifest this update: Thu 24 Apr 2025 20:27:53 +0000 Manifest next update: Thu 01 May 2025 20:27:53 +0000 Files and hashes: 1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: G7kOZp8Q/gdl50eqQbF0pr8kurIBcPK34SydCwdneto=) 2: 19EF4D1ABE5A11EDAA537748C4F9AE02.roa (hash: miZMhJRep9ETR17YW7gWoj6LqwgVkbNzRlMxX+ZmBhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Validity Not Before: Apr 24 20:27:53 2025 GMT Not After : May 1 20:27:53 2025 GMT Subject: CN=680a9ec9-936b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:d1:82:7f:3a:d0:ea:92:67:5b:88:3d:41: 3c:ee:e4:ce:60:a3:a8:cb:64:d8:e1:2b:e4:75:fe: fe:0f:50:28:87:41:45:f7:59:d0:8e:e0:30:24:e4: 3c:6b:7e:de:97:45:c3:9e:ad:06:34:c7:c5:4f:dc: 60:0c:08:c1:c8:89:0c:02:91:6c:cd:50:7e:b8:4b: f3:fc:5e:a4:1c:8b:c6:06:c7:c5:d1:23:25:7a:50: 40:cc:d9:0c:d5:b2:d3:43:fd:fc:91:29:79:60:81: e3:77:ce:13:75:dd:cd:3e:a8:c0:c8:fc:1d:f0:a2: 10:13:9f:05:11:dd:26:24:ab:86:c6:d6:84:c7:eb: 03:dc:c3:a4:00:33:8f:cc:94:77:28:a8:1f:e5:16: 8b:96:3f:a3:bc:44:bd:e7:df:67:39:79:fb:55:4e: 9f:58:99:12:22:28:6f:3b:29:6e:0e:06:00:2a:d9: fa:6e:31:d6:83:ab:15:8b:74:b0:85:ff:a8:19:18: ad:47:2f:77:b7:69:44:46:61:ab:53:a5:e7:4f:54: 01:0a:1d:b3:90:62:37:9a:57:80:9f:5b:ee:df:6a: 72:a9:0f:bf:89:24:46:fc:ba:fd:77:e4:21:0e:90: e0:ba:25:ec:c3:1d:31:48:37:b6:42:88:a6:8a:9a: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:26:FE:6F:76:5E:66:21:81:F9:70:38:D2:EB:E1:D3:3F:98:F6:8D X509v3 Authority Key Identifier: keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:27:bc:34:46:f4:d9:4a:02:07:77:ef:24:22:a1:ed:1d:45: f7:c7:2d:4f:a4:c7:d1:02:ce:1a:d3:4f:d0:d3:a6:b4:0c:d2: f5:58:ba:3e:b3:ed:3f:ee:8a:fb:eb:3e:74:72:00:62:a6:62: 03:17:79:96:9b:9c:3c:47:63:a9:54:0b:1b:6c:94:9c:fd:ca: 41:bf:c3:38:1a:f9:22:8c:41:bb:fe:3b:7e:c9:64:92:bb:22: a9:6e:d4:7f:18:87:c7:c8:49:b8:6f:02:4c:f9:e7:a3:d9:ae: 4f:4b:09:ac:c8:04:3e:ac:1f:29:08:50:f9:55:a5:45:66:3e: 5d:46:17:85:66:be:ba:e4:c7:8c:95:aa:13:db:4b:66:b4:41: d3:a6:8b:69:34:2f:35:3d:49:b3:05:57:55:f4:2e:1c:5f:96: 06:0b:36:f8:6b:37:08:fd:14:13:67:90:49:ac:6c:2a:31:42: cb:5e:b4:ba:72:bc:28:03:7e:ff:d2:c6:9e:70:91:49:3c:30: 4b:87:86:7f:4e:ac:70:7b:42:15:1d:2b:23:45:7a:9f:51:6d: 5a:0f:66:bd:da:cc:d7:2d:e6:d0:03:dc:ce:38:34:21:04:ca: 43:92:f6:87:f4:ac:65:4a:5d:30:07:7f:8c:eb:ce:52:f9:88: bf:3e:3b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTcxMTAvBgNVBAUTKDU3REI0MkFCOUVCQkVGQkZFMjEwNzNGNTAwN0ZDMzc2 MkM1RkJCMDgwHhcNMjUwNDI0MjAyNzUzWhcNMjUwNTAxMjAyNzUzWjAYMRYwFAYD VQQDEw02ODBhOWVjOS05MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0LRgn860OqSZ1uIPUE87uTOYKOoy2TY4Svkdf7+D1Aoh0FF91nQjuAwJOQ8 a37el0XDnq0GNMfFT9xgDAjByIkMApFszVB+uEvz/F6kHIvGBsfF0SMlelBAzNkM 1bLTQ/38kSl5YIHjd84Tdd3NPqjAyPwd8KIQE58FEd0mJKuGxtaEx+sD3MOkADOP zJR3KKgf5RaLlj+jvES9599nOXn7VU6fWJkSIihvOyluDgYAKtn6bjHWg6sVi3Sw hf+oGRitRy93t2lERmGrU6XnT1QBCh2zkGI3mleAn1vu32pyqQ+/iSRG/Lr9d+Qh DpDguiXswx0xSDe2Qoimipo7RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0m/m92 XmYhgflwONLr4dM/mPaNMB8GA1UdIwQYMBaAFFfbQqueu++/4hBz9QB/w3YsX7sI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5Ny8yNEVEMjE1NkJD MjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3X2lFSFAxQUhfRGRpeGZ1 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y5dENxNTY3NzdfaUVIUDFBSF9EZGl4ZnV3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5Ny8yNEVEMjE1NkJDMjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3 X2lFSFAxQUhfRGRpeGZ1d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8J7w0RvTZSgIHd+8kIqHtHUX3xy1PpMfRAs4a00/Q06a0DNL1WLo+ s+0/7or76z50cgBipmIDF3mWm5w8R2OpVAsbbJSc/cpBv8M4GvkijEG7/jt+yWSS uyKpbtR/GIfHyEm4bwJM+eej2a5PSwmsyAQ+rB8pCFD5VaVFZj5dRheFZr665MeM laoT20tmtEHTpotpNC81PUmzBVdV9C4cX5YGCzb4azcI/RQTZ5BJrGwqMULLXrS6 crwoA37/0saecJFJPDBLh4Z/Tqxwe0IVHSsjRXqfUW1aD2a92szXLebQA9zOODQh BMpDkvaH9KxlSl0wB3+M685S+Yi/Pjt1 -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:24 2025 by rpki-client