$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: emv3mEttt46btLLakVrMuceG+5k2vg0t1MJEp8vbgU0= Subject key identifier: 09:59:67:45:87:07:9A:43:39:BF:EF:50:E5:4E:4F:30:A1:2F:84:46 Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 034E Signing time: Fri 25 Apr 2025 00:46:57 +0000 Manifest this update: Fri 25 Apr 2025 00:46:57 +0000 Manifest next update: Fri 02 May 2025 00:46:57 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: RvAO0xZ73sU0vT2zy+ZB7C+uGMKFTu1s5NiD6aayo5g=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: q4NAjQjTJMFxxldl/AAiP8pDMUCdKKJhMRmCf+Jtl3M=) 3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: ICtuLoIJdvxcdfC6YrLD+/53y4ZZXc5VV+d4pptI4w0=) 4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: sTauF35xc8SZpRjcL8yNs6xEdRvTaoYQZFwMt4H/aTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Apr 25 00:46:57 2025 GMT Not After : May 2 00:46:57 2025 GMT Subject: CN=680adb81-165e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:d6:5d:34:38:09:9a:d3:9f:68:c3:1c:42: 75:be:64:f1:66:c9:56:31:b3:6d:a2:ba:68:af:d5: 9d:29:45:54:0c:51:e5:6e:a9:6d:8b:ae:e4:a8:35: fd:e1:14:f9:b9:e1:15:76:42:61:ba:8f:1e:91:7d: 98:a6:33:72:60:80:2e:94:d6:52:94:b3:b2:5c:1c: a6:59:8c:c7:40:46:55:02:1c:cd:d0:88:84:ed:b1: 82:3e:19:81:6f:79:52:e9:db:6f:f2:c1:68:0d:3c: e6:a8:31:09:c5:0f:b2:43:41:67:82:73:fa:f9:ef: 4a:d7:28:bd:03:45:ee:76:29:b8:cf:88:8f:97:23: 14:5f:6b:f9:37:79:9b:a5:00:66:c5:4d:a2:0d:26: 03:d4:a0:31:f6:cd:a7:ee:2d:bb:f8:9d:99:87:50: 52:b3:63:85:3f:a1:62:f1:a7:75:1d:f7:40:34:d5: 98:80:ca:67:1a:1f:1f:f7:db:a7:9a:32:6b:dc:22: f3:ed:a4:1a:7a:e8:13:79:2d:1d:ac:28:ee:a2:53: d1:ac:2e:01:31:d4:b0:3e:66:2f:33:70:69:da:a4: 4c:64:7e:12:a5:83:11:fc:3c:9e:a5:cb:6a:ce:c5: 2c:d2:62:ec:21:4e:0a:a9:a3:9e:84:08:96:be:32: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:59:67:45:87:07:9A:43:39:BF:EF:50:E5:4E:4F:30:A1:2F:84:46 X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:85:fd:88:01:c3:38:a1:50:26:66:2a:6d:85:53:b5:ad:ef: e8:06:4f:38:65:f7:46:64:8f:35:d6:df:b3:23:7d:28:bb:bb: 7d:30:f7:12:45:0a:9a:31:1d:fc:eb:85:00:24:fa:30:12:74: d2:6d:48:70:c6:65:18:ac:e9:1f:47:d4:35:14:22:fb:f4:12: 6b:c8:73:3d:6b:45:46:e8:c3:17:f0:7e:9e:ce:fb:44:dd:0b: 6f:59:0c:69:e6:5d:91:4c:9b:ee:a3:4a:f0:93:92:0e:ab:20: a6:6c:98:31:aa:3a:62:3d:d0:4e:fc:4c:14:3e:19:1e:8e:dc: 1d:be:be:ff:81:8d:8f:fd:45:a4:d5:d3:35:2b:69:a6:51:04: 16:68:80:ed:ef:a2:8c:d0:6d:54:25:7a:16:80:83:ab:a8:b6: 9c:22:8c:78:05:74:17:64:d6:04:e9:03:77:4c:e4:24:1b:78: 53:35:62:22:2f:fb:e7:a4:7e:3d:1a:cb:e3:1d:8f:86:07:c0: 88:8a:85:35:ec:ba:de:a6:77:02:95:99:54:b5:8c:13:50:3f: 83:0d:15:ec:ff:54:00:71:2e:8e:3e:2a:60:8b:ea:fe:f8:7b: 9a:2f:87:4b:e8:1b:64:61:45:32:e5:70:55:c5:fd:70:3a:a1: 74:f0:31:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjUwNDI1MDA0NjU3WhcNMjUwNTAyMDA0NjU3WjAYMRYwFAYD VQQDEw02ODBhZGI4MS0xNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApa/WXTQ4CZrTn2jDHEJ1vmTxZslWMbNtorpor9WdKUVUDFHlbqlti67kqDX9 4RT5ueEVdkJhuo8ekX2YpjNyYIAulNZSlLOyXBymWYzHQEZVAhzN0IiE7bGCPhmB b3lS6dtv8sFoDTzmqDEJxQ+yQ0FngnP6+e9K1yi9A0Xudim4z4iPlyMUX2v5N3mb pQBmxU2iDSYD1KAx9s2n7i27+J2Zh1BSs2OFP6Fi8ad1HfdANNWYgMpnGh8f99un mjJr3CLz7aQaeugTeS0drCjuolPRrC4BMdSwPmYvM3Bp2qRMZH4SpYMR/Dyepctq zsUs0mLsIU4KqaOehAiWvjLKWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlZZ0WH B5pDOb/vUOVOTzChL4RGMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3hf2IAcM4oVAmZipthVO1re/oBk84ZfdGZI811t+zI30ou7t9MPcS RQqaMR3864UAJPowEnTSbUhwxmUYrOkfR9Q1FCL79BJryHM9a0VG6MMX8H6ezvtE 3QtvWQxp5l2RTJvuo0rwk5IOqyCmbJgxqjpiPdBO/EwUPhkejtwdvr7/gY2P/UWk 1dM1K2mmUQQWaIDt76KM0G1UJXoWgIOrqLacIox4BXQXZNYE6QN3TOQkG3hTNWIi L/vnpH49GsvjHY+GB8CIioU17LrepncClZlUtYwTUD+DDRXs/1QAcS6OPipgi+r+ +HuaL4dL6BtkYUUy5XBVxf1wOqF08DEB -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:05 2025 by rpki-client