$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json) Hash identifier: klexfPtJ8eils4suhJDqX3aXXH0A1BwuilvaN+Liqt4= Subject key identifier: 6F:4C:8A:F9:0C:5D:2D:61:6F:E9:5D:AD:2A:6F:31:F4:B2:85:31:CC Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 1375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft Manifest number: 136D Signing time: Thu 24 Apr 2025 16:59:19 +0000 Manifest this update: Thu 24 Apr 2025 16:59:19 +0000 Manifest next update: Thu 01 May 2025 16:59:19 +0000 Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: Z/JSHRMNdAvL0HkuI+lYFfR+FL5dQ1XxWeWF89mHLec=) 2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: YR3r/r5s57l7vc1QAVpusxxc4M0J/72ZS6UJiTG3pTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4981 (0x1375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Apr 24 16:59:19 2025 GMT Not After : May 1 16:59:19 2025 GMT Subject: CN=680a6de7-2296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:9e:6e:b0:71:09:06:86:eb:23:3b:f0:f1: 72:f2:e2:74:93:81:7d:42:1c:58:af:65:c1:8d:ad: 80:d9:f2:20:99:ab:1c:6f:36:1e:d0:de:22:ce:92: 7a:9c:9a:cb:b8:83:aa:ec:08:4a:44:97:df:04:c3: f4:c0:20:94:35:4e:20:6f:81:e1:fa:c6:31:8c:4c: 1d:d1:8b:92:a7:c3:b1:4b:be:30:38:ac:6e:a7:76: 3f:8b:3a:23:44:9c:9c:57:d5:ce:40:09:5c:eb:ce: bb:79:78:5c:fd:dd:06:99:4b:57:01:4d:99:74:19: e8:f4:b3:5c:1c:ad:09:98:d0:4e:6f:f5:f4:33:e8: e4:1c:93:ad:7e:25:cf:6c:ce:3c:a0:87:bf:95:f0: c9:61:2c:f7:5f:0d:78:4c:d7:ce:b0:2b:a6:41:48: 7e:6d:71:9c:f9:2f:57:1c:d8:d1:9a:a3:c1:91:38: 8d:9d:11:32:62:84:f5:ac:1d:53:c3:03:da:61:70: 2d:f1:a4:05:f3:6a:3e:85:49:a2:76:de:05:21:f5: c9:0b:4c:2d:3f:ca:5b:ca:d7:ac:e4:67:fa:50:0c: b3:d6:1b:b9:5c:16:37:d9:1b:65:1d:10:ec:df:87: 52:47:0a:7c:d1:cc:0e:40:57:5b:f9:db:5b:25:97: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4C:8A:F9:0C:5D:2D:61:6F:E9:5D:AD:2A:6F:31:F4:B2:85:31:CC X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:51:b8:50:cd:b2:50:e7:83:85:fb:74:a8:f9:c5:03:5f:c9: 09:f1:75:d2:ed:e7:3d:5f:73:ad:b4:c2:12:da:47:30:4d:24: eb:e6:76:9b:16:3e:6e:da:43:80:f2:1d:43:7c:79:55:8e:15: a1:4c:ca:19:22:b3:2d:ce:94:0a:cd:5e:b9:b4:d2:d8:05:1f: 83:c7:d1:c7:0c:f5:a0:13:ec:d1:87:c4:56:74:d4:c3:14:b8: 41:f5:9c:87:7f:fe:03:c4:5f:fa:b7:d5:70:30:06:c2:2c:22: 41:0f:47:ec:32:e7:23:5a:26:6d:01:7c:bc:a8:19:2f:51:df: 86:1b:01:39:cf:87:72:cb:f4:ad:92:83:58:e1:b8:64:c6:58: 66:a3:1f:d8:5a:28:00:1a:af:36:ba:61:3f:44:76:e4:c8:ea: cb:7d:8e:01:60:43:6f:89:b7:91:24:e1:fa:8c:0d:9e:23:b7: ce:b0:9b:15:37:62:7f:0b:2c:57:f7:1e:1f:4d:54:b9:52:af: 30:f4:da:62:c9:4f:94:a2:82:c6:b2:ed:eb:25:5a:6b:8b:54: ad:f4:e0:de:3e:72:10:5e:39:6f:da:f7:67:0b:bc:32:56:8a: ec:f5:cd:ce:05:04:fc:63:35:26:9a:f5:3a:87:bc:18:d8:ed: c2:29:2b:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjUwNDI0MTY1OTE5WhcNMjUwNTAxMTY1OTE5WjAYMRYwFAYD VQQDEw02ODBhNmRlNy0yMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYiebrBxCQaG6yM78PFy8uJ0k4F9QhxYr2XBja2A2fIgmascbzYe0N4izpJ6 nJrLuIOq7AhKRJffBMP0wCCUNU4gb4Hh+sYxjEwd0YuSp8OxS74wOKxup3Y/izoj RJycV9XOQAlc6867eXhc/d0GmUtXAU2ZdBno9LNcHK0JmNBOb/X0M+jkHJOtfiXP bM48oIe/lfDJYSz3Xw14TNfOsCumQUh+bXGc+S9XHNjRmqPBkTiNnREyYoT1rB1T wwPaYXAt8aQF82o+hUmidt4FIfXJC0wtP8pbytes5Gf6UAyz1hu5XBY32RtlHRDs 34dSRwp80cwOQFdb+dtbJZecewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9MivkM XS1hb+ldrSpvMfSyhTHMMB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjhEQi82NTc5Mzc4Qzk5MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3 WEc4U1Y0WDBEMXZDY0o5OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9UbhQzbJQ54OF+3So+cUDX8kJ8XXS7ec9X3OttMIS2kcwTSTr5nab Fj5u2kOA8h1DfHlVjhWhTMoZIrMtzpQKzV65tNLYBR+Dx9HHDPWgE+zRh8RWdNTD FLhB9ZyHf/4DxF/6t9VwMAbCLCJBD0fsMucjWiZtAXy8qBkvUd+GGwE5z4dyy/St koNY4bhkxlhmox/YWigAGq82umE/RHbkyOrLfY4BYENvibeRJOH6jA2eI7fOsJsV N2J/CyxX9x4fTVS5Uq8w9NpiyU+UooLGsu3rJVpri1St9ODePnIQXjlv2vdnC7wy Vors9c3OBQT8YzUmmvU6h7wY2O3CKSud -----END CERTIFICATE-----Generated at Sat Apr 26 05:14:29 2025 by rpki-client