$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json) Hash identifier: I6uA1ZHcpA/FiYxedBJXWRAazQW6opZ2Edps1qneD+M= Subject key identifier: 2D:32:48:61:26:DA:27:FF:35:A0:E2:60:77:FB:A0:6C:0B:71:2C:42 Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft Manifest number: 15 Signing time: Fri 25 Apr 2025 06:59:43 +0000 Manifest this update: Fri 25 Apr 2025 06:59:43 +0000 Manifest next update: Fri 02 May 2025 06:59:43 +0000 Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: wgNpe/4RFD2k2w3UeUnLMYvc8NbnPy3YtVftzuIcT+0=) 2: 16B651C6048411F094895C27C4F9AE02.roa (hash: pwAo4LzFE8ykOXOE/sO5tKhbyP75rksTaUDUQRDRnG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Validity Not Before: Apr 25 06:59:43 2025 GMT Not After : May 2 06:59:43 2025 GMT Subject: CN=680b32df-c8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:55:a2:13:e4:2e:11:f9:02:e0:c2:8c:a4: b2:7e:67:99:19:4b:d7:e5:20:e5:8d:45:44:16:7e: 09:f4:20:fd:84:b6:69:bb:6c:82:3a:bd:a5:ed:69: 13:7a:bb:c8:d7:3f:06:1a:31:c0:af:b2:6f:38:e4: 16:bf:4c:93:3e:f9:e2:fc:88:0a:dc:19:b2:24:0c: cd:b6:5f:ec:bd:e2:50:fa:b5:ab:81:14:54:11:bf: 11:0e:9d:4f:c9:b9:9a:26:38:f2:d5:17:f3:b8:b1: 37:f9:dd:88:6a:a9:c4:38:6d:e5:f3:23:d2:75:6a: b6:68:3b:1c:ba:bf:a8:dc:5c:47:3c:d6:69:92:f8: 71:6d:c4:a9:01:2f:c1:11:e4:c1:dd:88:82:0d:62: 99:cb:ee:7e:2d:68:fa:24:eb:fe:96:1e:57:08:c8: 0a:d7:99:5d:9b:ad:7d:71:06:fc:ae:e5:2e:56:db: 19:2e:78:25:2a:b5:5a:e6:c1:38:39:e7:80:61:7b: 87:71:5a:89:6e:1a:c5:35:bb:34:82:8a:8f:b8:d9: 29:b4:aa:8e:78:1c:88:c9:60:fe:4e:ff:81:64:d6: be:3e:66:4c:18:2a:6b:a8:b0:dc:d1:5b:fe:2b:8d: 81:80:d7:c0:60:8e:c1:ba:a0:01:95:d4:76:46:76: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:32:48:61:26:DA:27:FF:35:A0:E2:60:77:FB:A0:6C:0B:71:2C:42 X509v3 Authority Key Identifier: keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6a:2a:61:a4:26:3b:be:dc:c0:87:80:e6:29:f7:8d:dd:0f: 91:d9:f5:4c:2c:54:d2:f1:fa:f5:4a:b5:2c:84:53:bf:66:bc: e9:37:33:c4:df:a1:0a:c8:6d:2a:16:01:c7:be:33:fa:dc:2f: 27:71:11:41:1b:09:40:3a:ad:0c:4a:84:02:1e:9f:77:a5:97: 83:a8:68:81:d5:98:a5:42:7d:7d:59:0c:a5:02:74:6b:48:c2: 3d:6c:e5:d5:65:b9:b7:9f:0a:79:22:a7:be:a3:10:ae:6c:69: 3f:30:07:e8:e6:8f:ff:10:ac:66:6f:c2:8b:99:04:48:c1:c6: 7e:79:f9:59:b0:d2:88:0f:1b:26:aa:4d:9b:23:91:d1:e4:3e: cb:9a:00:42:cc:8a:ae:e5:bb:ec:d3:1e:18:43:1e:39:aa:58: 0b:01:8e:34:f6:f9:17:27:61:59:89:5d:a2:1b:b9:e7:87:6c: f3:8d:f1:85:8d:d4:48:94:9b:d7:5c:00:12:4f:f0:da:46:81: c7:88:cc:36:c2:8b:11:6c:41:10:0d:e9:a7:60:ea:12:10:9a: 48:ca:18:ad:f4:44:df:93:f7:41:07:15:f6:5c:40:24:b7:8e: 88:e2:31:a0:d4:02:8b:bc:71:df:de:ce:fc:e0:db:48:e2:42: a0:ae:ae:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTVGOTExMC8GA1UEBRMoRjVCQkFFODVDNkZGQjM2MENFRDQwODBEMTEzNkEyQkZE M0E5N0ZEMTAeFw0yNTA0MjUwNjU5NDNaFw0yNTA1MDIwNjU5NDNaMBgxFjAUBgNV BAMTDTY4MGIzMmRmLWM4YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6wVWiE+QuEfkC4MKMpLJ+Z5kZS9flIOWNRUQWfgn0IP2Etmm7bII6vaXtaRN6 u8jXPwYaMcCvsm845Ba/TJM++eL8iArcGbIkDM22X+y94lD6tauBFFQRvxEOnU/J uZomOPLVF/O4sTf53YhqqcQ4beXzI9J1arZoOxy6v6jcXEc81mmS+HFtxKkBL8ER 5MHdiIINYpnL7n4taPok6/6WHlcIyArXmV2brX1xBvyu5S5W2xkueCUqtVrmwTg5 54Bhe4dxWoluGsU1uzSCio+42Sm0qo54HIjJYP5O/4Fk1r4+ZkwYKmuosNzRW/4r jYGA18BgjsG6oAGV1HZGdsEhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULTJIYSba J/81oOJgd/ugbAtxLEIwHwYDVR0jBBgwFoAU9buuhcb/s2DO1AgNETaiv9Opf9Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNUY5LzY5MjBDNzRBMDQ4 MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJETzFBZ05FVGFpdjlPcGY5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWJ1dWhjYl9zMkRPMUFnTkVUYWl2OU9wZjlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NUY5LzY5MjBDNzRBMDQ4MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJE TzFBZ05FVGFpdjlPcGY5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGtqKmGkJju+3MCHgOYp943dD5HZ9UwsVNLx+vVKtSyEU79mvOk3M8Tf oQrIbSoWAce+M/rcLydxEUEbCUA6rQxKhAIen3ell4OoaIHVmKVCfX1ZDKUCdGtI wj1s5dVlubefCnkip76jEK5saT8wB+jmj/8QrGZvwouZBEjBxn55+Vmw0ogPGyaq TZsjkdHkPsuaAELMiq7lu+zTHhhDHjmqWAsBjjT2+RcnYVmJXaIbueeHbPON8YWN 1EiUm9dcABJP8NpGgceIzDbCixFsQRAN6adg6hIQmkjKGK30RN+T90EHFfZcQCS3 jojiMaDUAou8cd/ezvzg20jiQqCuroM= -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:28 2025 by rpki-client