$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: 7kYxD016V81/YIgZkZfBftg0fT8Li8Bi7FVR2nBxB44= Subject key identifier: 39:8B:CB:AA:93:88:6D:5B:E3:69:3B:50:D3:E1:C7:7E:CD:27:92:65 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 01D5 Signing time: Fri 25 Apr 2025 02:07:06 +0000 Manifest this update: Fri 25 Apr 2025 02:07:06 +0000 Manifest next update: Fri 02 May 2025 02:07:06 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: coUpQXhr7ZUxIcUSA2lq45FoHrqeXS/sMyXQOYOgV8o=) 2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: CgMPU2zKmFQv28rwsx7lyUdY/WjeUcfrzEMiRjZzUr8=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: l/45mJzVlvrXkvMnYsTOqET7KEWpbH/MA+sFMBUmJ+A=) 4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: FMfFksLuvdDh719tgVb78yQXrHhuawjPdGhDWuzq2VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Apr 25 02:07:06 2025 GMT Not After : May 2 02:07:06 2025 GMT Subject: CN=680aee4a-7a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:3f:2b:46:da:18:db:be:7d:b7:12:29:58: 45:8b:e5:fb:c0:e7:f0:88:4d:46:46:0f:98:3a:66: 7b:7f:91:12:14:80:77:46:9f:67:73:5a:e5:d5:1a: 16:3d:fb:66:32:95:4f:37:68:19:13:ff:da:6b:08: 45:d1:ca:72:81:b5:e2:0c:fb:f6:a8:b1:06:ae:a3: 31:97:94:aa:38:ce:96:de:eb:a5:94:56:15:08:cd: 75:5c:cb:a0:63:4c:5b:3d:36:ce:b7:08:2a:46:26: 7a:67:f8:db:fc:b8:78:ec:e0:9f:7a:7e:76:9c:65: 6f:fe:81:a8:92:34:2e:49:85:b0:14:5f:74:27:89: b4:e3:5f:cd:2d:d8:1f:34:01:32:f3:e0:45:e1:f4: 52:78:66:da:69:76:b3:38:05:0c:ed:35:1b:3b:63: 15:ea:3a:f4:a2:7c:95:4b:2c:e2:b1:49:27:70:eb: 1d:69:e9:f8:ab:e1:97:f5:f5:a1:d7:02:60:c8:b5: 7c:8c:2d:84:f2:92:86:e6:7e:95:77:75:2a:b7:7b: 73:e1:42:b2:bd:76:5d:f3:41:34:31:55:e9:39:4d: d1:07:8e:a5:35:3a:b5:ae:b9:db:cd:8b:ae:06:51: 99:ab:f0:e6:50:ed:69:1f:b1:7f:ef:b6:ac:c4:af: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8B:CB:AA:93:88:6D:5B:E3:69:3B:50:D3:E1:C7:7E:CD:27:92:65 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d3:ff:b9:16:20:d8:7d:3c:40:0a:60:1d:c4:9a:15:33:7b: d7:11:3b:d3:ad:1b:b4:45:73:41:85:19:80:96:b9:5d:dd:c2: 20:6f:f7:dd:18:b3:04:ba:ff:e3:59:82:57:78:ef:e9:f3:bb: 52:3f:23:ce:4b:3a:24:15:b7:7c:de:49:fe:2e:b4:f5:f3:77: 1a:34:e9:01:7a:49:64:9c:f5:82:c3:c8:c7:20:87:f8:74:ce: dd:60:97:58:b0:86:f8:a2:83:47:76:ee:e9:05:87:1e:4d:2d: 58:18:34:4e:a9:23:04:0d:3e:f6:52:21:58:05:b3:96:c8:e4: 97:ea:e5:3d:0e:ea:67:16:f1:9e:f0:10:e1:0e:68:b2:cf:78: 73:38:d7:5d:a1:0e:05:e4:d3:97:59:22:91:fb:0c:4d:72:43: f1:58:b9:da:55:bf:3e:e6:8e:14:6f:d2:2d:92:e0:7f:ac:81: 62:04:ba:3c:5a:de:24:7c:9e:02:fc:43:3e:f6:f7:6b:16:8c: 7c:91:29:82:1d:85:20:94:ff:36:7f:34:de:f6:eb:5f:0a:6d: d4:c2:3a:21:03:78:38:a0:b9:90:72:58:56:22:39:1d:ca:ac: 81:f1:14:98:39:77:88:27:20:45:e8:93:90:af:d1:93:0b:08: b9:96:93:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUwNDI1MDIwNzA2WhcNMjUwNTAyMDIwNzA2WjAYMRYwFAYD VQQDEw02ODBhZWU0YS03YTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0M/K0baGNu+fbcSKVhFi+X7wOfwiE1GRg+YOmZ7f5ESFIB3Rp9nc1rl1RoW PftmMpVPN2gZE//aawhF0cpygbXiDPv2qLEGrqMxl5SqOM6W3uullFYVCM11XMug Y0xbPTbOtwgqRiZ6Z/jb/Lh47OCfen52nGVv/oGokjQuSYWwFF90J4m041/NLdgf NAEy8+BF4fRSeGbaaXazOAUM7TUbO2MV6jr0onyVSyzisUkncOsdaen4q+GX9fWh 1wJgyLV8jC2E8pKG5n6Vd3Uqt3tz4UKyvXZd80E0MVXpOU3RB46lNTq1rrnbzYuu BlGZq/DmUO1pH7F/77asxK9D3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmLy6qT iG1b42k7UNPhx37NJ5JlMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE0/+5FiDYfTxACmAdxJoVM3vXETvTrRu0RXNBhRmAlrld3cIgb/fd GLMEuv/jWYJXeO/p87tSPyPOSzokFbd83kn+LrT183caNOkBeklknPWCw8jHIIf4 dM7dYJdYsIb4ooNHdu7pBYceTS1YGDROqSMEDT72UiFYBbOWyOSX6uU9DupnFvGe 8BDhDmiyz3hzONddoQ4F5NOXWSKR+wxNckPxWLnaVb8+5o4Ub9ItkuB/rIFiBLo8 Wt4kfJ4C/EM+9vdrFox8kSmCHYUglP82fzTe9utfCm3UwjohA3g4oLmQclhWIjkd yqyB8RSYOXeIJyBF6JOQr9GTCwi5lpMP -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:45 2025 by rpki-client