$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: XEkE8mbf/kUXdDiBkG9lm6F1jx5OmYGH/GlATNLTR3k= Subject key identifier: 79:A7:FC:C4:AE:AD:F3:92:D5:B9:29:CC:A3:D7:EE:7A:EA:CA:11:FC Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 08B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 088E Signing time: Thu 24 Apr 2025 20:28:58 +0000 Manifest this update: Thu 24 Apr 2025 20:28:57 +0000 Manifest next update: Thu 01 May 2025 20:28:57 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: 9o6pWQbFruvJYBgQKPST2oBbCd19yhd7ZyX4FxXEEkk=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: 9l2BnAHuJJyrHEmwkIwIFNFXNdEVQXjPc/3IgeT+NA4=) 3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: 44jc2HCK3ANOLLqkUGNn4VzJW+fDcOLIoQKKCEkW6FQ=) 4: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: uiQHUpFXfMyV6JWHHfyojaNEZ38IK1RSRYCfDGxO9D0=) 5: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: /dh2BYyOs2T7d9tTc6SvzUzA1l6MPCZkZgm7SbaZhYs=) 6: 7DE1B508BC8A11EABAFA684CC4F9AE02.roa (hash: aLYKuPmQ5XZ+o/2rxrD1UHlOU4eVMiGT8zGiWBda0Do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Apr 24 20:28:57 2025 GMT Not After : May 1 20:28:57 2025 GMT Subject: CN=680a9f0a-0aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:90:e9:ac:54:18:1d:43:32:f6:ad:ba:71:52: 2b:03:d3:09:85:2e:71:c0:a8:02:d6:2c:c0:a7:cc: ed:98:78:98:88:24:d7:15:1c:0b:11:76:7a:00:f0: 00:2d:aa:fd:90:7c:c9:ac:5b:e7:91:b6:ac:02:ab: 04:07:98:99:77:87:34:b4:77:0c:88:b9:9a:28:50: 49:42:87:ad:21:be:31:80:65:f2:c3:ec:9a:d2:98: 4e:c4:61:40:5b:16:e7:8d:c0:4c:c0:28:ad:64:e0: 24:f6:a3:1b:34:40:c4:23:52:a2:d1:ed:92:39:43: 02:f7:b3:57:36:d5:5f:3a:7f:5c:17:01:70:7a:b0: b1:b8:f0:03:69:3d:6c:a4:af:b3:c8:ce:03:32:3e: 05:95:6a:1d:cd:0f:88:c9:4c:c7:b5:aa:65:11:ac: 75:07:c0:82:28:ae:f3:78:81:2f:06:c6:de:05:4f: d4:a5:45:d5:96:fa:c6:3b:da:90:c5:69:a8:85:98: 10:0d:ec:03:59:9d:15:82:73:cb:26:ee:c3:1e:ef: 8f:e1:41:e8:6e:f5:27:4e:fd:4b:25:6c:5f:45:80: e2:58:a3:ee:4a:de:68:4b:a2:a6:0b:99:fc:b6:ba: ee:fe:3b:07:67:6d:e1:7e:53:ee:4c:98:5d:7e:ca: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A7:FC:C4:AE:AD:F3:92:D5:B9:29:CC:A3:D7:EE:7A:EA:CA:11:FC X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1c:2d:a6:cc:4b:47:9f:d8:fd:29:c8:96:30:92:ef:fe:cd: 44:77:04:fe:a2:7d:4d:4a:19:04:6d:16:eb:67:ac:b8:b2:3a: 1b:d4:5e:77:25:bf:e5:7c:cf:75:c0:bc:39:17:e8:0d:fd:be: 7f:f9:f3:06:bd:48:59:50:1a:c0:95:df:8d:b2:3a:c7:08:c1: 90:7f:e7:1e:a7:4c:ec:20:60:e7:80:40:de:9f:3b:7b:bc:58: 28:2a:15:b7:87:27:b1:f9:c6:1e:59:7c:ac:65:1c:a7:d1:50: 9a:b3:05:ad:37:34:e5:a7:7a:dc:5a:d5:c3:1a:e9:79:a1:22: 0f:c7:70:d3:f2:ef:22:69:88:69:11:d1:a2:f9:18:4b:5b:bc: 23:be:20:66:8d:5f:a0:e1:02:ad:35:ca:fb:27:c5:3f:1f:10: cc:fe:8d:ba:d3:ee:8a:2b:46:fd:48:5f:87:f9:20:55:7b:fc: 94:87:30:e2:4e:f9:ee:ab:79:5a:ce:bc:b7:51:d9:57:41:41: 5c:f7:27:e2:f4:6a:67:99:f6:3b:4c:c0:5f:28:5b:8c:88:3c: 44:24:39:4b:39:de:9a:cd:77:30:98:36:19:67:08:3d:d5:f0: 0b:9a:bd:51:47:6e:a8:a4:fa:08:ef:46:c5:77:ac:b7:85:fe: e9:5a:12:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwNDI0MjAyODU3WhcNMjUwNTAxMjAyODU3WjAYMRYwFAYD VQQDEw02ODBhOWYwYS0wYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZDprFQYHUMy9q26cVIrA9MJhS5xwKgC1izAp8ztmHiYiCTXFRwLEXZ6APAA Lar9kHzJrFvnkbasAqsEB5iZd4c0tHcMiLmaKFBJQoetIb4xgGXyw+ya0phOxGFA WxbnjcBMwCitZOAk9qMbNEDEI1Ki0e2SOUMC97NXNtVfOn9cFwFwerCxuPADaT1s pK+zyM4DMj4FlWodzQ+IyUzHtaplEax1B8CCKK7zeIEvBsbeBU/UpUXVlvrGO9qQ xWmohZgQDewDWZ0VgnPLJu7DHu+P4UHobvUnTv1LJWxfRYDiWKPuSt5oS6KmC5n8 trru/jsHZ23hflPuTJhdfsqh6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmn/MSu rfOS1bkpzKPX7nrqyhH8MB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHHC2mzEtHn9j9KciWMJLv/s1EdwT+on1NShkEbRbrZ6y4sjob1F53 Jb/lfM91wLw5F+gN/b5/+fMGvUhZUBrAld+NsjrHCMGQf+cep0zsIGDngEDenzt7 vFgoKhW3hyex+cYeWXysZRyn0VCaswWtNzTlp3rcWtXDGul5oSIPx3DT8u8iaYhp EdGi+RhLW7wjviBmjV+g4QKtNcr7J8U/HxDM/o260+6KK0b9SF+H+SBVe/yUhzDi Tvnuq3lazry3UdlXQUFc9yfi9GpnmfY7TMBfKFuMiDxEJDlLOd6azXcwmDYZZwg9 1fALmr1RR26opPoI70bFd6y3hf7pWhKD -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:51 2025 by rpki-client