$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: eBtQqZlvIwuASgT6tjTdqL4I//t6dwbIHOYujtnU3go= Subject key identifier: 04:42:B2:EB:F4:5B:84:50:45:D6:CF:A8:2C:B0:68:61:24:87:98:CD Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0C88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0C81 Signing time: Thu 24 Apr 2025 18:11:27 +0000 Manifest this update: Thu 24 Apr 2025 18:11:27 +0000 Manifest next update: Thu 01 May 2025 18:11:27 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: wFmvwU7nDhXM/xP2/SEuT0VoKLU5yXo8GRuhXCWttX4=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: Apr 24 18:11:27 2025 GMT Not After : May 1 18:11:27 2025 GMT Subject: CN=680a7ecf-b767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:5a:05:69:9f:40:73:8b:2e:37:cd:6a:5f: 5b:f1:51:79:40:55:b1:e2:ca:ec:8f:2a:1c:49:36: 54:55:c3:21:6a:a6:74:cb:55:aa:a3:e5:0a:d0:7c: 6f:fb:8b:2c:3c:2a:67:18:77:c9:20:db:90:82:9b: 1a:a2:17:02:5c:50:c3:d5:e4:1a:d0:8b:8c:df:90: 62:19:4e:b1:5a:9f:15:8e:41:b7:23:28:68:ed:b5: dd:9a:89:64:6d:bc:16:f1:3e:9d:c7:5c:81:ed:ae: 39:d8:a2:9f:fd:8f:c3:76:da:99:73:9a:45:eb:d7: da:b9:6b:37:92:e4:e6:4b:78:51:82:40:a0:ab:82: 87:6b:0f:8e:9f:33:5b:5b:7b:67:a8:e5:72:f4:bb: b9:52:15:9d:d6:14:6d:29:88:a2:ae:10:0f:32:e5: b6:40:c2:91:d6:5e:52:33:d1:e2:d6:c1:9f:65:54: 8b:f9:48:95:12:3a:9d:fc:74:11:e3:1a:62:e3:cf: d2:62:11:13:3b:7b:15:43:d4:b9:5c:9b:6c:d8:fe: 2c:a7:1d:c4:43:32:a7:00:94:63:d2:e6:2f:9c:4f: de:e4:9e:0a:06:6b:56:7d:f9:c1:3d:16:9a:40:4f: 76:9a:b2:0b:b1:b2:22:51:48:a5:7e:e4:f2:60:c8: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:B2:EB:F4:5B:84:50:45:D6:CF:A8:2C:B0:68:61:24:87:98:CD X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:31:28:c1:58:dd:a7:dd:53:c0:e3:b9:19:94:e2:87:e7:af: 3e:e8:b4:07:40:a1:25:90:a7:f3:9c:38:01:01:c6:75:ef:f3: 0b:2c:a8:42:02:bc:d1:cc:7e:62:6d:7c:4e:34:ad:95:4a:42: 85:77:29:db:db:cf:0e:fe:2d:9c:b0:ca:ca:f2:cd:de:7f:fb: d6:c7:50:24:56:d4:ed:1f:90:cf:54:55:43:85:a9:40:cb:94: 6e:02:a7:27:da:65:de:83:63:b9:79:f8:24:d0:93:ef:e0:56: 45:43:01:bf:0e:4a:3e:bf:84:0f:53:06:27:ff:af:9c:7b:b7: 0c:fb:26:c1:d7:d1:17:b4:e4:e7:b6:21:e0:12:9d:89:9a:32: e6:4c:06:a0:ab:95:92:f3:bc:17:58:f1:a2:77:6d:45:a6:09: cc:f3:d8:72:d2:5b:22:fb:cc:8b:32:da:20:93:6b:b7:a9:4b: 2b:52:f6:de:52:52:7a:74:21:3c:bc:a9:8f:8d:28:75:b9:c4: eb:81:59:c6:0d:78:c3:c9:32:79:b9:be:e5:5b:e4:01:78:a9: 66:30:3c:57:3d:7e:ef:09:89:23:bd:96:26:ac:32:01:53:c2: 3a:2f:d6:ff:ac:dd:04:36:d9:f1:f6:42:8e:0b:e0:ea:22:39: 01:51:0e:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjUwNDI0MTgxMTI3WhcNMjUwNTAxMTgxMTI3WjAYMRYwFAYD VQQDEw02ODBhN2VjZi1iNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyv9aBWmfQHOLLjfNal9b8VF5QFWx4srsjyocSTZUVcMhaqZ0y1Wqo+UK0Hxv +4ssPCpnGHfJINuQgpsaohcCXFDD1eQa0IuM35BiGU6xWp8VjkG3Iyho7bXdmolk bbwW8T6dx1yB7a452KKf/Y/DdtqZc5pF69fauWs3kuTmS3hRgkCgq4KHaw+OnzNb W3tnqOVy9Lu5UhWd1hRtKYiirhAPMuW2QMKR1l5SM9Hi1sGfZVSL+UiVEjqd/HQR 4xpi48/SYhETO3sVQ9S5XJts2P4spx3EQzKnAJRj0uYvnE/e5J4KBmtWffnBPRaa QE92mrILsbIiUUilfuTyYMg4PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARCsuv0 W4RQRdbPqCywaGEkh5jNMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABMSjBWN2n3VPA47kZlOKH568+6LQHQKElkKfznDgBAcZ17/MLLKhC ArzRzH5ibXxONK2VSkKFdynb288O/i2csMrK8s3ef/vWx1AkVtTtH5DPVFVDhalA y5RuAqcn2mXeg2O5efgk0JPv4FZFQwG/Dko+v4QPUwYn/6+ce7cM+ybB19EXtOTn tiHgEp2JmjLmTAagq5WS87wXWPGid21FpgnM89hy0lsi+8yLMtogk2u3qUsrUvbe UlJ6dCE8vKmPjSh1ucTrgVnGDXjDyTJ5ub7lW+QBeKlmMDxXPX7vCYkjvZYmrDIB U8I6L9b/rN0ENtnx9kKOC+DqIjkBUQ6I -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:30 2025 by rpki-client