$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: k7ktTZmgtJp/nYgPrSnOq5xD2GQ80IxItatRay7IMbA= Subject key identifier: 0F:62:42:F0:6F:38:06:62:B1:F8:4A:4F:06:E6:9C:38:4B:30:12:8B Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 347D Signing time: Thu 24 Apr 2025 14:47:30 +0000 Manifest this update: Thu 24 Apr 2025 14:47:29 +0000 Manifest next update: Thu 01 May 2025 14:47:29 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: IdH9+E7IiNtfnDKdYRYRbTTK+jtmeFbIhveX28IWXog=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: t/NnMy3xpmssx9DBTqRefxAqemELZw1L5Qwj8l5jaiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: Apr 24 14:47:29 2025 GMT Not After : May 1 14:47:29 2025 GMT Subject: CN=680a4f01-ff8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:e1:c7:f7:f5:22:b9:c4:41:6a:39:31:ed: 70:8b:07:42:10:89:d1:9b:88:3d:84:f9:53:cd:9a: 6e:5a:53:44:af:64:64:ec:bf:e2:0e:f0:32:e9:40: 9c:e5:c4:98:ff:f6:ed:ae:6e:be:71:ef:9c:b7:96: 46:c7:d7:ae:ed:10:6d:54:67:32:76:ed:38:5b:c6: d5:89:3a:f1:ea:69:4d:05:95:64:23:7b:26:ca:87: 70:64:cb:a9:42:0a:62:92:88:e3:c2:bd:43:fd:54: f0:b2:0a:4e:1f:06:d2:f7:4d:20:a0:20:20:b8:75: 6a:1c:d5:bf:2c:ed:12:06:16:84:c2:d8:59:8b:8d: 09:f6:1a:4d:04:e1:34:d3:f4:88:aa:32:11:ae:4e: 81:dc:e4:9b:fe:0b:ec:8c:d1:81:de:75:92:07:47: 98:2f:35:1b:ab:1c:ab:f9:fc:ae:2e:ae:34:16:a9: 63:17:4e:cc:e6:ee:53:8b:68:ba:99:44:2e:ab:0b: 70:80:dd:a6:a0:5f:c2:cd:72:46:f4:c0:fd:b2:8b: e7:f8:cd:82:eb:cf:ad:7e:6d:b2:84:82:93:12:3c: 9c:a8:77:55:5a:2f:f8:1c:43:56:89:19:01:32:73: 25:f8:0b:39:82:99:31:8a:75:2d:f1:a8:c1:cd:7c: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:62:42:F0:6F:38:06:62:B1:F8:4A:4F:06:E6:9C:38:4B:30:12:8B X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:8b:ef:53:8b:0b:c4:73:49:5c:d5:49:a9:26:49:06:f4:9c: c5:5e:fe:e0:8a:ee:6d:6e:1d:9b:fa:fb:a0:4e:46:e2:1c:67: 05:86:f9:ab:df:3c:9e:84:81:df:b6:ca:79:44:3a:e6:1f:d3: 1b:cd:55:1f:a1:be:19:88:90:d7:92:68:91:1b:eb:ef:dd:93: f9:11:92:96:46:dc:ce:5e:6d:42:76:87:9a:6f:81:90:50:f0: c2:75:0e:26:ce:69:45:be:44:c8:9e:44:ed:67:bd:1d:e4:5b: 2d:9b:2a:d0:07:83:ad:d5:6b:42:5b:07:31:2a:33:a4:e8:dd: 1a:ed:53:d1:5e:05:c2:cb:83:3c:46:69:73:2c:a5:ec:e8:b7: 96:41:46:62:7f:6c:69:8a:03:59:a6:94:d2:6a:73:fb:dc:df: ae:8c:f2:d8:a8:8e:b8:8d:b9:a1:12:51:38:bf:10:af:cc:8b: d1:72:df:ac:af:e2:70:b0:a4:b3:97:40:69:f6:68:3e:21:c6: 20:e5:da:c7:e6:f1:ef:87:72:f4:38:a3:cc:dc:a2:3f:8c:84: ac:6c:83:56:e1:0b:0a:e4:f8:06:69:54:a5:05:ca:c6:ab:54: d7:87:ee:d7:8d:fe:61:7a:10:ff:e7:32:55:70:2a:66:28:bb: 88:88:fb:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjUwNDI0MTQ0NzI5WhcNMjUwNTAxMTQ0NzI5WjAYMRYwFAYD VQQDEw02ODBhNGYwMS1mZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZXhx/f1IrnEQWo5Me1wiwdCEInRm4g9hPlTzZpuWlNEr2Rk7L/iDvAy6UCc 5cSY//btrm6+ce+ct5ZGx9eu7RBtVGcydu04W8bViTrx6mlNBZVkI3smyodwZMup Qgpikojjwr1D/VTwsgpOHwbS900goCAguHVqHNW/LO0SBhaEwthZi40J9hpNBOE0 0/SIqjIRrk6B3OSb/gvsjNGB3nWSB0eYLzUbqxyr+fyuLq40FqljF07M5u5Ti2i6 mUQuqwtwgN2moF/CzXJG9MD9sovn+M2C68+tfm2yhIKTEjycqHdVWi/4HENWiRkB MnMl+As5gpkxinUt8ajBzXyNnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9iQvBv OAZisfhKTwbmnDhLMBKLMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXi+9TiwvEc0lc1UmpJkkG9JzFXv7giu5tbh2b+vugTkbiHGcFhvmr 3zyehIHftsp5RDrmH9MbzVUfob4ZiJDXkmiRG+vv3ZP5EZKWRtzOXm1Cdoeab4GQ UPDCdQ4mzmlFvkTInkTtZ70d5FstmyrQB4Ot1WtCWwcxKjOk6N0a7VPRXgXCy4M8 RmlzLKXs6LeWQUZif2xpigNZppTSanP73N+ujPLYqI64jbmhElE4vxCvzIvRct+s r+JwsKSzl0Bp9mg+IcYg5drH5vHvh3L0OKPM3KI/jISsbINW4QsK5PgGaVSlBcrG q1TXh+7Xjf5hehD/5zJVcCpmKLuIiPt6 -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:00 2025 by rpki-client