$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: ux0aLFgz5cuMj7TNg37QRFierykm5Y31dQTmLLLPb0s= Subject key identifier: B0:17:E8:16:4A:59:9D:23:9F:D9:14:24:45:DB:C2:A2:F9:CC:F6:39 Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 01A6 Signing time: Fri 25 Apr 2025 02:29:29 +0000 Manifest this update: Fri 25 Apr 2025 02:29:29 +0000 Manifest next update: Fri 02 May 2025 02:29:29 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: CU1vVGtcPsy9q0IeCSTOGd28zDT4d/wTULSZ6U18TPU=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Apr 25 02:29:29 2025 GMT Not After : May 2 02:29:29 2025 GMT Subject: CN=680af389-f029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:46:a0:a4:09:85:dc:e5:aa:8f:74:9d:8c: 6b:42:08:31:80:ff:48:36:b4:c7:0f:53:3d:71:08: 2c:09:6f:c4:67:37:16:90:b5:b8:db:92:54:bd:a8: d8:3d:1f:2f:c0:f5:ff:b6:f8:ad:ed:4c:56:57:9b: b8:22:a0:63:54:21:ff:90:6f:49:6d:28:de:06:ec: ac:ee:c5:81:d5:a7:c3:c1:99:5c:15:f2:00:02:3c: 01:7b:09:4a:e3:84:50:85:e4:5f:73:41:cb:c7:80: 6f:a1:5e:cc:8b:25:2f:99:af:e5:6f:a5:ad:3a:11: 1e:44:28:a2:0e:c8:54:34:93:2d:f2:49:81:13:f7: a0:2c:05:c0:62:2d:de:7d:5d:da:5d:1a:46:88:c8: 2c:3a:87:d7:29:76:9d:7c:17:18:1b:1f:74:f1:d0: 9f:dd:f2:b2:fc:0d:56:09:92:a3:e1:84:88:08:ba: 7e:c7:bc:d8:54:ac:6b:e1:ec:38:9f:1c:12:12:17: 22:1d:9b:0f:09:f4:69:6e:ad:54:45:8d:ad:aa:30: 8b:49:9b:a3:af:59:4b:6b:30:4e:4f:80:c2:68:f8: 65:f4:0d:68:b1:c4:e4:f9:58:92:0e:fe:dc:25:5c: 1f:a4:b8:b3:36:00:96:55:ef:42:fa:d6:d6:28:03: 98:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:17:E8:16:4A:59:9D:23:9F:D9:14:24:45:DB:C2:A2:F9:CC:F6:39 X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ac:88:9a:6e:06:fa:98:1d:8a:01:4f:ef:04:e3:74:bf:fd: 10:7e:2b:c4:6d:d6:63:b4:d7:1e:70:77:77:09:a3:f3:b6:66: 23:c2:12:ee:f7:9f:ec:09:e5:60:23:0c:09:79:fc:df:ed:34: 28:20:dd:4b:7d:c8:60:4e:25:a8:61:c8:f7:4f:1d:f3:8a:7c: b1:fa:09:17:32:63:e3:a7:8d:07:92:74:68:2b:6c:88:c9:b8: ab:de:58:f1:e6:37:d6:e3:b2:94:bb:3d:86:42:8e:7a:27:b0: 01:fd:25:34:64:1d:fe:13:df:5c:69:d9:d5:6b:8d:d7:d4:c0: 83:ae:a1:41:89:53:cc:27:72:5c:bc:fd:e7:1e:c3:e0:7a:3a: f2:db:2c:cc:e9:a7:12:ab:51:9f:d1:d4:c5:89:24:be:95:4d: 13:0c:b5:a7:4c:21:69:35:0d:11:a7:cc:1e:e4:02:29:19:86: 8b:32:3c:5f:7c:16:c8:f0:2b:65:ac:19:d3:07:a7:64:bb:a4: 1a:c5:1f:20:6c:85:f9:a5:54:26:f5:c0:75:98:7d:70:0b:a9: 55:be:bc:e9:45:4f:64:aa:bd:84:0b:18:bb:97:d4:51:37:72: 32:72:c2:34:6e:c1:28:5c:b9:56:2f:8e:a0:0a:bc:cd:5b:99: d8:ea:2d:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUwNDI1MDIyOTI5WhcNMjUwNTAyMDIyOTI5WjAYMRYwFAYD VQQDEw02ODBhZjM4OS1mMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfNGoKQJhdzlqo90nYxrQggxgP9INrTHD1M9cQgsCW/EZzcWkLW425JUvajY PR8vwPX/tvit7UxWV5u4IqBjVCH/kG9JbSjeBuys7sWB1afDwZlcFfIAAjwBewlK 44RQheRfc0HLx4BvoV7MiyUvma/lb6WtOhEeRCiiDshUNJMt8kmBE/egLAXAYi3e fV3aXRpGiMgsOofXKXadfBcYGx908dCf3fKy/A1WCZKj4YSICLp+x7zYVKxr4ew4 nxwSEhciHZsPCfRpbq1URY2tqjCLSZujr1lLazBOT4DCaPhl9A1oscTk+ViSDv7c JVwfpLizNgCWVe9C+tbWKAOY4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAX6BZK WZ0jn9kUJEXbwqL5zPY5MB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6rIiabgb6mB2KAU/vBON0v/0QfivEbdZjtNcecHd3CaPztmYjwhLu 95/sCeVgIwwJefzf7TQoIN1LfchgTiWoYcj3Tx3zinyx+gkXMmPjp40HknRoK2yI ybir3ljx5jfW47KUuz2GQo56J7AB/SU0ZB3+E99cadnVa43X1MCDrqFBiVPMJ3Jc vP3nHsPgejry2yzM6acSq1Gf0dTFiSS+lU0TDLWnTCFpNQ0Rp8we5AIpGYaLMjxf fBbI8CtlrBnTB6dku6QaxR8gbIX5pVQm9cB1mH1wC6lVvrzpRU9kqr2ECxi7l9RR N3IycsI0bsEoXLlWL46gCrzNW5nY6i1x -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:55 2025 by rpki-client