$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: +VQzebPsHG5q1xKtnJDYUOXokZdoNmZmBOBT3I7yaXc= Subject key identifier: 2D:7B:68:1E:F8:01:16:AC:E7:C0:9A:E8:D6:C1:8A:D5:CA:C1:50:30 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0C51 Signing time: Thu 24 Apr 2025 18:14:47 +0000 Manifest this update: Thu 24 Apr 2025 18:14:47 +0000 Manifest next update: Thu 01 May 2025 18:14:47 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: fqrnkuj2d+SnUvTcIANfBHKCxPZw9se1no74lWmpAv8=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Apr 24 18:14:47 2025 GMT Not After : May 1 18:14:47 2025 GMT Subject: CN=680a7f97-c960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:cd:90:76:ad:c4:25:54:6d:47:c0:be:76: 84:40:1f:f7:78:f8:e2:0f:1f:78:f3:df:1e:c1:8b: 72:2c:75:d7:3c:e0:b3:2c:b7:b0:e1:0b:01:f3:82: 40:5c:24:3c:a5:5f:d0:d3:30:f2:5d:bb:0d:af:43: 70:8b:bd:12:2e:77:5d:d9:6b:d0:cd:11:1f:15:15: 09:68:a3:54:66:5e:fb:fb:30:72:d6:6d:cb:e9:25: 5b:00:c5:6e:f2:ff:aa:2e:a4:15:9b:85:b0:c0:51: 3d:40:fa:14:ce:8b:c2:9c:f0:ea:9e:fb:a5:fc:fa: 5a:90:9b:4f:03:66:63:0c:a2:dd:e0:6a:45:38:39: ed:57:0f:3b:a2:37:2f:64:b4:2b:c6:ec:ea:4b:29: 82:b8:ce:2a:fa:9e:65:02:99:08:01:54:8b:16:99: 33:5c:e4:da:c2:28:15:88:c9:df:12:55:70:f5:14: d4:5e:6d:b8:98:35:5f:f1:87:5b:05:6e:39:97:ff: 9b:c1:aa:05:96:b6:85:4b:4e:03:1c:dd:a6:14:17: 08:7e:d2:53:0f:4b:9f:a0:78:82:9c:c2:e3:7f:c4: 92:a5:35:a9:55:d9:11:d8:4c:a3:a0:d7:c4:91:66: 6e:ce:d1:c2:5e:ea:15:27:cd:d2:b0:fb:43:f2:b1: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7B:68:1E:F8:01:16:AC:E7:C0:9A:E8:D6:C1:8A:D5:CA:C1:50:30 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:50:76:62:3b:9e:24:a0:f6:0f:fb:1b:21:5c:dc:f5:72:46: ea:21:01:10:66:59:b5:ea:99:b0:be:d6:87:86:e9:01:e0:93: 55:40:4c:09:43:a5:d5:dd:96:9d:fb:87:26:1b:fc:e1:14:7d: d8:8c:a4:f7:de:a9:c3:6e:1d:95:2c:09:66:6f:dd:2a:cf:17: 2f:61:0b:92:1d:a4:ea:c2:5d:00:0d:3b:2e:74:8c:b7:b8:81: 70:ed:6b:5a:e3:5a:44:b9:45:7a:78:d0:96:e4:c1:ec:db:45: 9a:f9:2d:2d:68:8a:ee:d4:b9:26:74:a2:59:9c:68:80:71:e2: ce:5f:b7:3e:19:e2:e7:f7:d6:ef:89:b3:6d:45:65:ee:98:0a: 1a:ee:9b:bf:4b:14:f3:53:6d:b6:6e:12:a5:17:51:51:e8:75: 72:f6:9d:4b:ea:a3:ed:3f:5a:b3:24:3f:77:a0:8b:7b:07:e9: 0d:66:3c:a9:e5:f2:0e:24:e5:f7:82:55:84:fc:f5:73:32:cc: 33:c0:09:4b:99:f8:17:37:0e:68:c6:b3:57:43:2f:1e:74:0a: d5:4c:c4:bb:0c:53:02:f5:79:e6:90:40:61:73:cc:3f:07:c5: ef:45:e5:80:b1:0e:b4:81:01:c4:7a:43:25:ae:26:e0:11:a4: 9a:30:a7:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUwNDI0MTgxNDQ3WhcNMjUwNTAxMTgxNDQ3WjAYMRYwFAYD VQQDEw02ODBhN2Y5Ny1jOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD3NkHatxCVUbUfAvnaEQB/3ePjiDx94898ewYtyLHXXPOCzLLew4QsB84JA XCQ8pV/Q0zDyXbsNr0Nwi70SLndd2WvQzREfFRUJaKNUZl77+zBy1m3L6SVbAMVu 8v+qLqQVm4WwwFE9QPoUzovCnPDqnvul/PpakJtPA2ZjDKLd4GpFODntVw87ojcv ZLQrxuzqSymCuM4q+p5lApkIAVSLFpkzXOTawigViMnfElVw9RTUXm24mDVf8Ydb BW45l/+bwaoFlraFS04DHN2mFBcIftJTD0ufoHiCnMLjf8SSpTWpVdkR2EyjoNfE kWZuztHCXuoVJ83SsPtD8rHiPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC17aB74 ARas58Ca6NbBitXKwVAwMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqUHZiO54koPYP+xshXNz1ckbqIQEQZlm16pmwvtaHhukB4JNVQEwJ Q6XV3Zad+4cmG/zhFH3YjKT33qnDbh2VLAlmb90qzxcvYQuSHaTqwl0ADTsudIy3 uIFw7Wta41pEuUV6eNCW5MHs20Wa+S0taIru1LkmdKJZnGiAceLOX7c+GeLn99bv ibNtRWXumAoa7pu/SxTzU222bhKlF1FR6HVy9p1L6qPtP1qzJD93oIt7B+kNZjyp 5fIOJOX3glWE/PVzMswzwAlLmfgXNw5oxrNXQy8edArVTMS7DFMC9XnmkEBhc8w/ B8XvReWAsQ60gQHEekMlribgEaSaMKfu -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:03 2025 by rpki-client