$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: PcU6/kaGrfPo5qhjF/AUbA3qSH/ZIJLfoNU/1sTeJqo= Subject key identifier: B5:01:10:FA:0E:AE:11:6E:1C:8A:03:85:D2:F7:9F:09:67:92:D9:D0 Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0C37 Signing time: Thu 24 Apr 2025 18:23:37 +0000 Manifest this update: Thu 24 Apr 2025 18:23:36 +0000 Manifest next update: Thu 01 May 2025 18:23:36 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: 6i9+HYobkRdZoEllomSwUztM/HjMHpE2hxeYRBZURGs=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: zDl80I2OXRgu8XAGzajWbluuoVqJ4qa8l1cE9aEJ0WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: Apr 24 18:23:36 2025 GMT Not After : May 1 18:23:36 2025 GMT Subject: CN=680a81a9-8cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:e6:90:cc:2d:48:51:cd:84:3f:04:e0:db: 45:d8:3a:e2:57:55:ad:98:ec:7f:c1:11:01:39:58: e8:ef:a4:14:ab:ed:80:41:d1:5f:28:b8:8d:f6:13: 73:e0:ae:7c:6d:27:a7:9a:7a:e3:69:40:c9:e9:19: 51:67:8c:43:01:aa:14:90:6d:95:ea:a8:d7:49:d9: c6:32:a1:90:79:fa:94:df:d5:96:42:a1:d7:9e:e3: a4:e8:64:db:f7:8f:07:d8:49:0b:83:e8:fa:45:dc: 53:58:f4:70:f3:3c:d5:2c:37:c2:22:d7:d6:66:bc: fb:3d:40:07:46:31:b3:a0:db:2a:80:4e:fb:19:1b: ca:b0:72:7b:b9:f0:2d:4a:79:2b:9f:25:fa:c7:89: ba:78:39:0d:bf:71:96:a4:b2:1f:b1:4a:ca:f6:44: 41:ea:1f:73:f4:af:eb:f0:25:fe:16:ab:5e:8f:13: 8a:f0:f8:d4:bb:ef:39:31:27:69:4d:d9:19:87:32: 7d:a9:cf:53:50:dd:74:c4:bb:51:e8:a9:09:67:8a: 2e:2d:14:eb:cd:da:36:74:e1:60:6b:17:90:9f:a5: 55:99:89:f3:0b:08:d1:ac:e3:e9:58:9f:f9:cd:27: 66:3b:00:7f:48:3d:bd:94:28:41:f9:27:0f:6c:7f: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:01:10:FA:0E:AE:11:6E:1C:8A:03:85:D2:F7:9F:09:67:92:D9:D0 X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:9a:8e:e4:02:71:28:4c:99:4d:84:7b:e2:c0:a0:b7:66:79: 81:2d:fd:81:b3:9a:b0:f8:b4:c7:32:9f:c6:6f:79:02:0d:49: b7:cb:8c:47:ae:18:2e:12:97:c3:16:d6:63:84:8a:01:17:af: 08:8a:89:80:46:bd:54:32:54:90:37:4c:f3:34:6d:01:fe:c3: ef:3a:eb:2d:e8:fd:8f:2e:12:3e:f2:7b:21:46:04:dc:98:01: 0c:21:1c:ac:15:83:8f:69:83:3c:f3:ee:4a:90:00:71:4f:fe: 96:b5:4b:45:d8:48:b3:3a:0e:96:c4:10:72:33:a9:52:9d:5d: 64:29:fc:c0:31:d7:ee:0d:63:b5:e7:f3:7c:ed:c2:c1:9a:85: 02:2b:51:8f:fa:7b:91:61:34:d8:5e:cf:8f:f5:ad:9c:d2:65: f1:be:44:95:b8:7c:a6:9e:fe:e3:a6:63:ea:9b:17:6c:e8:f5: 84:63:b4:af:a4:76:51:26:4a:fc:b6:e4:a3:0b:78:28:74:c6: dc:d4:07:b2:10:26:f4:16:b7:a2:28:f1:03:5b:75:20:80:c6: f8:fb:aa:a1:f9:98:31:96:a5:09:eb:7c:2e:22:b0:c1:fd:54: 61:43:15:d5:f4:21:83:41:5f:bf:b3:ce:d3:84:4b:42:93:91: 57:b1:03:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjUwNDI0MTgyMzM2WhcNMjUwNTAxMTgyMzM2WjAYMRYwFAYD VQQDEw02ODBhODFhOS04Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzu7mkMwtSFHNhD8E4NtF2DriV1WtmOx/wREBOVjo76QUq+2AQdFfKLiN9hNz 4K58bSenmnrjaUDJ6RlRZ4xDAaoUkG2V6qjXSdnGMqGQefqU39WWQqHXnuOk6GTb 948H2EkLg+j6RdxTWPRw8zzVLDfCItfWZrz7PUAHRjGzoNsqgE77GRvKsHJ7ufAt SnkrnyX6x4m6eDkNv3GWpLIfsUrK9kRB6h9z9K/r8CX+FqtejxOK8PjUu+85MSdp TdkZhzJ9qc9TUN10xLtR6KkJZ4ouLRTrzdo2dOFgaxeQn6VVmYnzCwjRrOPpWJ/5 zSdmOwB/SD29lChB+ScPbH+xswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUBEPoO rhFuHIoDhdL3nwlnktnQMB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1mo7kAnEoTJlNhHviwKC3ZnmBLf2Bs5qw+LTHMp/Gb3kCDUm3y4xH rhguEpfDFtZjhIoBF68IiomARr1UMlSQN0zzNG0B/sPvOust6P2PLhI+8nshRgTc mAEMIRysFYOPaYM88+5KkABxT/6WtUtF2EizOg6WxBByM6lSnV1kKfzAMdfuDWO1 5/N87cLBmoUCK1GP+nuRYTTYXs+P9a2c0mXxvkSVuHymnv7jpmPqmxds6PWEY7Sv pHZRJkr8tuSjC3godMbc1AeyECb0FreiKPEDW3UggMb4+6qh+ZgxlqUJ63wuIrDB /VRhQxXV9CGDQV+/s87ThEtCk5FXsQOb -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:57 2025 by rpki-client