$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: lhIcZ63zadolRtLw0ZcHUNDotc5hjSXDXLiF8iSVqcs= Subject key identifier: C0:B7:80:58:6B:0C:79:31:0F:C2:3D:D8:7F:BE:82:EF:89:98:96:96 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: 74 Signing time: Fri 25 Apr 2025 05:47:33 +0000 Manifest this update: Fri 25 Apr 2025 05:47:33 +0000 Manifest next update: Fri 02 May 2025 05:47:33 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: R89MA2pkVT4lm0loVV7sPVhY36lvQlnfCEMCVKsdSWk=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: hF0cvJ5WGf8hjnk2FrHWwiuqbgTh6n818KkJ7xF10xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Apr 25 05:47:33 2025 GMT Not After : May 2 05:47:33 2025 GMT Subject: CN=680b21f5-3d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:3d:f6:03:e0:91:f8:62:e7:32:cd:88:1e: cd:ce:e0:08:f1:da:8b:e3:84:f1:34:f5:5a:ef:9e: ae:e6:33:53:6c:f6:de:0f:40:6a:d6:e7:97:77:d1: a5:d5:5d:b6:6d:fe:4f:e3:76:d3:76:f3:25:ea:29: 59:be:34:ef:90:45:ac:fd:ba:61:7b:ed:ca:70:eb: aa:87:31:9d:c3:2d:a5:28:c1:15:68:cc:8d:30:5e: 13:0f:c1:e9:95:fe:ee:48:fc:67:3b:a9:a6:5f:ac: c5:a0:0d:f1:8d:c3:7a:b9:98:de:4d:aa:4f:e9:5b: 5c:90:93:30:59:3d:f2:07:3d:3b:e6:84:64:ae:e9: 9a:33:9e:7b:7c:ab:5b:31:58:81:9a:cd:c8:4c:44: c7:99:f9:d5:bc:d8:88:6f:bb:bf:b4:a4:2a:16:16: c0:a8:a9:c5:71:cd:99:3b:a8:8c:71:cc:0b:3c:52: 81:9c:b7:3d:db:41:93:1f:95:fd:40:fc:df:a1:7b: ef:27:ac:25:7f:07:64:37:b2:f2:44:2b:56:71:56: e2:cc:3a:aa:80:50:de:10:e1:14:f6:1b:69:5e:47: d4:0b:7b:6d:e0:b2:e7:ed:f4:47:62:af:38:b4:d8: 34:c5:e5:65:55:d5:81:42:15:60:3f:61:71:7c:7e: 6b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B7:80:58:6B:0C:79:31:0F:C2:3D:D8:7F:BE:82:EF:89:98:96:96 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:42:07:c5:51:5a:90:88:de:b8:07:84:fe:3d:8d:0f:27:ed: 11:05:af:29:e1:29:e5:c0:2a:4c:b0:53:2b:04:04:9e:05:ec: 9c:92:98:8c:d9:d9:f5:f6:b5:b9:51:c7:97:ad:43:98:6b:4d: 4f:46:58:34:0b:d9:ee:39:f1:e7:37:a1:4d:5d:16:90:d8:c1: 29:00:ea:9c:79:74:56:31:bf:8a:49:82:b3:38:ea:d9:93:78: 94:49:44:39:b3:1d:45:90:d3:9c:88:9a:8e:ba:0c:2a:e9:66: 85:66:2d:2b:84:a6:b1:00:e5:fe:f3:83:52:3c:5f:e3:c9:00: e8:e1:9e:28:17:b2:f7:11:00:b6:53:ff:1c:17:24:24:04:bc: 95:d4:72:8b:2c:39:2c:d3:25:6c:ea:92:de:43:bd:5f:c7:d5: b7:49:f1:f6:d6:94:d5:91:73:41:9c:03:31:c7:ed:36:bf:80: 5c:41:3e:08:2d:f6:64:ee:76:99:9e:24:4b:00:b5:b3:14:5a: 2d:d1:35:d6:e0:bf:32:c3:7c:34:f3:bd:29:19:e2:71:f4:7a: 17:67:77:fa:de:4c:4e:07:fd:01:35:0e:a0:09:95:5a:56:fd: 22:5c:d1:3b:93:79:c2:0a:85:48:01:41:31:6e:f0:59:0f:cc: 8b:40:71:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTU0QTExMC8GA1UEBRMoRjQwMTU3MUY0RTBGRThGODBENTdDRDAyN0NEOUVFMTVE NzM4OEYyNDAeFw0yNTA0MjUwNTQ3MzNaFw0yNTA1MDIwNTQ3MzNaMBgxFjAUBgNV BAMTDTY4MGIyMWY1LTNkMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOcT32A+CR+GLnMs2IHs3O4Ajx2ovjhPE09Vrvnq7mM1Ns9t4PQGrW55d30aXV XbZt/k/jdtN28yXqKVm+NO+QRaz9umF77cpw66qHMZ3DLaUowRVozI0wXhMPwemV /u5I/Gc7qaZfrMWgDfGNw3q5mN5Nqk/pW1yQkzBZPfIHPTvmhGSu6Zoznnt8q1sx WIGazchMRMeZ+dW82Ihvu7+0pCoWFsCoqcVxzZk7qIxxzAs8UoGctz3bQZMflf1A /N+he+8nrCV/B2Q3svJEK1ZxVuLMOqqAUN4Q4RT2G2leR9QLe23gsuft9Edirzi0 2DTF5WVV1YFCFWA/YXF8fmtRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwLeAWGsM eTEPwj3Yf76C74mYlpYwHwYDVR0jBBgwFoAU9AFXH04P6PgNV80CfNnuFdc4jyQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNTRBL0JFODRBODIwNzFB NTExRUY4RDgwNUM3OEM0RjlBRTAyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUFGWEgwNFA2UGdOVjgwQ2ZObnVGZGM0anlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NTRBL0JFODRBODIwNzFBNTExRUY4RDgwNUM3OEM0RjlBRTAyLzlBRlhIMDRQNlBn TlY4MENmTm51RmRjNGp5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADxCB8VRWpCI3rgHhP49jQ8n7REFrynhKeXAKkywUysEBJ4F7JySmIzZ 2fX2tblRx5etQ5hrTU9GWDQL2e458ec3oU1dFpDYwSkA6px5dFYxv4pJgrM46tmT eJRJRDmzHUWQ05yImo66DCrpZoVmLSuEprEA5f7zg1I8X+PJAOjhnigXsvcRALZT /xwXJCQEvJXUcossOSzTJWzqkt5DvV/H1bdJ8fbWlNWRc0GcAzHH7Ta/gFxBPggt 9mTudpmeJEsAtbMUWi3RNdbgvzLDfDTzvSkZ4nH0ehdnd/reTE4H/QE1DqAJlVpW /SJc0TuTecIKhUgBQTFu8FkPzItAccM= -----END CERTIFICATE-----Generated at Sat Apr 26 05:03:41 2025 by rpki-client