$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json) Hash identifier: zJgVjPVEuqBS29XgxWpHhRlgAPn/JEavIzcHuTzLG1g= Subject key identifier: 0F:7B:1F:6A:8D:78:A9:0D:28:D2:48:A7:80:09:D7:64:9E:80:27:58 Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Certificate serial: 075B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft Manifest number: 0750 Signing time: Thu 24 Apr 2025 21:26:50 +0000 Manifest this update: Thu 24 Apr 2025 21:26:49 +0000 Manifest next update: Thu 01 May 2025 21:26:49 +0000 Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: gXpJLi32l9K1LB8cV0HKFEkx1S7+CjzyMWWPHsr1NgU=) 2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: 54RasFpInkk46NqANXGRnQQRyrIL2lzCqTjJuJoAKLM=) 3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: eITJ7zYLAhKWDtK1wNVCYFqUDK3lmpweT8MrA45hMHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Validity Not Before: Apr 24 21:26:49 2025 GMT Not After : May 1 21:26:49 2025 GMT Subject: CN=680aac99-4fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a5:53:e4:f6:1c:7a:c5:11:1c:77:89:00:97: 51:cf:06:04:59:d1:2a:01:f8:c0:ea:a1:c2:17:6c: 48:c1:d2:e1:1f:2d:e9:4a:12:0f:b9:de:9d:a3:81: 6b:e4:79:01:c4:7f:3d:69:ef:b6:0f:b6:34:87:dd: 67:b0:da:2f:1c:14:9a:88:8d:f5:0e:0a:31:96:24: df:8b:af:60:b6:ca:af:22:3a:e8:c9:35:64:d5:25: f9:f9:c6:11:fb:10:c1:ee:e3:cc:cf:ba:1f:6a:7a: d8:47:cb:43:20:79:0a:dd:04:67:85:37:cb:c6:fe: bd:9f:94:2c:dc:36:91:31:fd:72:5f:b8:34:60:b1: eb:51:90:8c:bb:aa:c6:01:40:4d:39:a0:76:f6:b8: c7:25:d1:23:68:d4:81:56:08:b6:51:04:3c:95:38: 51:c3:0d:8f:b1:77:50:03:2a:b6:df:a0:56:5f:a8: 9a:f0:78:20:32:5f:7f:9d:1a:5f:bc:aa:fc:fa:5b: 23:0a:b0:f4:c4:fb:49:87:bd:d8:cf:10:46:ba:b0: 8b:12:6a:53:28:37:db:b1:4f:0c:2f:cb:c2:9f:64: c2:4d:32:d8:59:53:08:d7:07:04:57:cd:e8:a2:77: 27:ab:e4:26:b6:7b:30:bb:b6:a8:52:93:11:56:34: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7B:1F:6A:8D:78:A9:0D:28:D2:48:A7:80:09:D7:64:9E:80:27:58 X509v3 Authority Key Identifier: keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:04:9a:d3:eb:a3:3e:85:c2:30:ce:78:ca:d5:03:4c:0c:30: 70:22:f2:b5:22:be:80:9a:5e:e4:cf:5c:0e:93:42:25:51:fe: d6:86:eb:88:28:5c:dd:5f:53:67:73:30:c6:22:81:da:ef:32: fe:6c:56:70:8b:34:d5:23:c3:6d:11:f8:5d:3c:b6:12:b6:93: 4e:4a:69:ee:b3:4b:23:93:b7:79:b1:3e:64:87:69:72:07:ee: f6:bc:0a:5a:cd:84:6c:cb:85:a5:ca:18:db:00:c0:b2:76:28: 2f:2c:c9:06:9b:df:be:b2:49:28:9d:94:d2:19:43:83:de:74: b5:2b:46:49:70:bb:38:89:1e:98:df:3f:97:8e:0c:87:80:28: 13:4d:c0:98:ff:74:3e:44:0f:74:fc:dd:42:dd:2d:36:80:a0: ee:75:db:2d:1d:8d:1c:6d:1c:66:34:aa:4c:4d:b5:a9:6b:10: af:e8:c7:93:89:38:9f:8c:22:e6:dc:df:0d:fe:62:3c:a5:96: cb:a1:b8:8c:2e:d2:f0:6e:49:24:88:32:d3:01:e7:d9:6f:08: 63:0b:4b:b4:b4:f1:fc:d2:dc:e7:c5:e6:b3:ee:ca:ae:d8:49: cb:90:12:bf:c6:4b:e9:38:df:84:36:3b:ac:09:c6:23:29:7a: 65:57:6a:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3RTQxMTAvBgNVBAUTKDhCREE4QTFGRTA3QjQ2QzMzMDYzMDQ2QTcyNUVBQjg1 NjQyQjlDMkQwHhcNMjUwNDI0MjEyNjQ5WhcNMjUwNTAxMjEyNjQ5WjAYMRYwFAYD VQQDEw02ODBhYWM5OS00ZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36VT5PYcesURHHeJAJdRzwYEWdEqAfjA6qHCF2xIwdLhHy3pShIPud6do4Fr 5HkBxH89ae+2D7Y0h91nsNovHBSaiI31DgoxliTfi69gtsqvIjroyTVk1SX5+cYR +xDB7uPMz7ofanrYR8tDIHkK3QRnhTfLxv69n5Qs3DaRMf1yX7g0YLHrUZCMu6rG AUBNOaB29rjHJdEjaNSBVgi2UQQ8lThRww2PsXdQAyq236BWX6ia8HggMl9/nRpf vKr8+lsjCrD0xPtJh73YzxBGurCLEmpTKDfbsU8ML8vCn2TCTTLYWVMI1wcEV83o oncnq+Qmtnswu7aoUpMRVjSv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA97H2qN eKkNKNJIp4AJ12SegCdYMB8GA1UdIwQYMBaAFIvaih/ge0bDMGMEanJeq4VkK5wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzdFNC8zNkZCMTE0NDFE NUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1JzTXdZd1JxY2w2cmhXUXJu QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5cUtILUI3UnNNd1l3UnFjbDZyaFdRcm5DMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzdFNC8zNkZCMTE0NDFENUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1Jz TXdZd1JxY2w2cmhXUXJuQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUBJrT66M+hcIwznjK1QNMDDBwIvK1Ir6Aml7kz1wOk0IlUf7WhuuI KFzdX1NnczDGIoHa7zL+bFZwizTVI8NtEfhdPLYStpNOSmnus0sjk7d5sT5kh2ly B+72vApazYRsy4WlyhjbAMCydigvLMkGm9++skkonZTSGUOD3nS1K0ZJcLs4iR6Y 3z+XjgyHgCgTTcCY/3Q+RA90/N1C3S02gKDuddstHY0cbRxmNKpMTbWpaxCv6MeT iTifjCLm3N8N/mI8pZbLobiMLtLwbkkkiDLTAefZbwhjC0u0tPH80tznxeaz7squ 2EnLkBK/xkvpON+ENjusCcYjKXplV2ob -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:24 2025 by rpki-client