$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: mjMRzxpY/9kpEAldC54zpqJYGW5YGREJs+yi3DXK1ow= Subject key identifier: 6B:8B:36:6D:0A:07:B6:E2:97:ED:13:B8:04:CF:39:24:E7:99:3A:97 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 151A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 1510 Signing time: Thu 24 Apr 2025 16:49:51 +0000 Manifest this update: Thu 24 Apr 2025 16:49:51 +0000 Manifest next update: Thu 01 May 2025 16:49:51 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: EhJBXx8KjX8bw4flKN/1QVIv+N+8r7SyOXitzgRLJoo=) 2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: S5mRurG916ui1hjUc9swark9ywmNDAZ5nDRIJrKsR2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5402 (0x151a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Apr 24 16:49:51 2025 GMT Not After : May 1 16:49:51 2025 GMT Subject: CN=680a6baf-f617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:97:fd:9f:f0:fd:9c:c6:3b:a3:8e:96:17: 26:e0:78:ee:c3:7c:13:6a:9f:1a:97:6d:2c:b4:37: 42:77:61:31:89:a9:5f:a9:b3:be:2a:81:b6:be:66: 63:53:d3:53:c6:8c:15:49:a6:97:e1:2e:5d:9a:2a: aa:3e:18:94:27:90:6b:3a:00:4a:50:98:be:6e:c1: 89:bb:02:e3:9c:7c:6d:4b:09:ad:21:47:10:f8:38: 06:7d:0d:3b:a0:e0:6a:ea:05:61:df:99:80:dc:08: 7e:59:5c:19:aa:e9:55:4b:6e:83:78:a8:0f:b8:62: 44:33:b5:7b:a8:34:f1:bd:94:d9:69:00:8d:27:2c: 4f:41:bd:87:bf:88:18:69:bc:00:3a:ea:cc:b2:cb: a0:df:c0:e8:06:2a:3b:88:29:06:2a:9f:a4:8e:63: 82:37:44:56:64:f1:14:d9:33:77:6b:87:bc:a3:7d: c6:e5:ce:9d:ff:00:64:33:7a:5c:ab:b5:79:08:4a: 16:76:2f:39:da:59:cd:c0:fa:95:a8:d6:52:92:9b: 7c:16:6e:2a:e3:ec:01:99:c0:a2:4b:3c:8e:06:64: bb:c8:ac:b0:8c:b9:8d:fc:95:9e:63:ee:de:40:83: a1:7f:d2:1c:45:67:72:06:e8:11:97:41:4e:0a:02: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8B:36:6D:0A:07:B6:E2:97:ED:13:B8:04:CF:39:24:E7:99:3A:97 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:87:8b:62:30:a9:cb:0c:82:4b:c8:f2:77:be:21:34:c0:f3: d4:d4:1c:31:40:ef:24:12:be:a1:68:4b:1d:9d:57:91:bd:d0: 00:9e:4d:91:e6:74:50:c2:57:0b:6d:62:39:a2:a9:9c:22:13: fa:89:ec:a5:a5:d0:a0:c0:a2:8b:16:94:25:0b:1d:61:2b:c7: 69:b6:19:6e:f7:55:ea:4e:73:45:8a:83:21:2a:24:6e:31:ef: 24:4d:3b:5f:5e:f3:1e:3d:a5:78:61:3a:af:90:52:39:a0:c0: be:53:35:86:05:09:10:f3:6b:e1:a9:db:5a:de:0d:2e:3b:b5: 78:8b:51:61:e5:61:46:f6:c7:4f:4a:49:bc:b3:6c:c7:42:26: 6e:11:c1:23:50:a7:12:b9:cb:46:dd:c3:00:34:fc:6f:9e:c8: 96:ff:ed:58:4e:14:f4:04:97:a7:54:f0:db:a9:f9:d2:c2:2e: b0:9c:78:95:0b:0c:65:bb:40:b8:25:ee:f2:25:48:7e:df:d4: 2b:e4:2f:ad:2c:19:36:d0:b6:35:29:88:f4:be:13:50:de:03: 39:14:21:45:79:eb:1b:73:2a:a3:09:7b:2c:eb:22:96:6c:5a: 51:6a:b5:2c:3d:4d:ae:9c:85:ae:78:4f:9f:bf:f8:f5:8a:a3: 34:d0:61:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwNDI0MTY0OTUxWhcNMjUwNTAxMTY0OTUxWjAYMRYwFAYD VQQDEw02ODBhNmJhZi1mNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt62X/Z/w/ZzGO6OOlhcm4Hjuw3wTap8al20stDdCd2ExialfqbO+KoG2vmZj U9NTxowVSaaX4S5dmiqqPhiUJ5BrOgBKUJi+bsGJuwLjnHxtSwmtIUcQ+DgGfQ07 oOBq6gVh35mA3Ah+WVwZqulVS26DeKgPuGJEM7V7qDTxvZTZaQCNJyxPQb2Hv4gY abwAOurMssug38DoBio7iCkGKp+kjmOCN0RWZPEU2TN3a4e8o33G5c6d/wBkM3pc q7V5CEoWdi852lnNwPqVqNZSkpt8Fm4q4+wBmcCiSzyOBmS7yKywjLmN/JWeY+7e QIOhf9IcRWdyBugRl0FOCgJJ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuLNm0K B7bil+0TuATPOSTnmTqXMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfh4tiMKnLDIJLyPJ3viE0wPPU1BwxQO8kEr6haEsdnVeRvdAAnk2R 5nRQwlcLbWI5oqmcIhP6ieylpdCgwKKLFpQlCx1hK8dpthlu91XqTnNFioMhKiRu Me8kTTtfXvMePaV4YTqvkFI5oMC+UzWGBQkQ82vhqdta3g0uO7V4i1Fh5WFG9sdP Skm8s2zHQiZuEcEjUKcSuctG3cMANPxvnsiW/+1YThT0BJenVPDbqfnSwi6wnHiV Cwxlu0C4Je7yJUh+39Qr5C+tLBk20LY1KYj0vhNQ3gM5FCFFeesbcyqjCXss6yKW bFpRarUsPU2unIWueE+fv/j1iqM00GFM -----END CERTIFICATE-----Generated at Sat Apr 26 17:03:17 2025 by rpki-client