$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: V9TXaQFPmqQ7xRrz+weZmb2dUUf99Szn3dw9V2qvF4w= Subject key identifier: 02:50:76:B0:3C:4E:AB:AD:D1:62:50:29:DA:B0:9C:EE:7E:86:FA:BC Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 0621 Signing time: Thu 24 Apr 2025 22:36:05 +0000 Manifest this update: Thu 24 Apr 2025 22:36:05 +0000 Manifest next update: Thu 01 May 2025 22:36:05 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: b/0WCgsE4yE5CTlyngkvFVRxXNU+HRKHZxpAThQX938=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: 6bWPYL9HlnXbgKm1pf8hjZDzf0KdOhZ+kEEuV8xvMnc=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: GSq2aTh4Ighs8Kd5WfNm9bR33IhLvfkn/9rz4nvZ37o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Apr 24 22:36:05 2025 GMT Not After : May 1 22:36:05 2025 GMT Subject: CN=680abcd5-e341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:c6:a1:ea:fb:42:98:e1:dc:37:63:ab:1f: 85:28:9f:47:3a:75:14:f0:69:d3:5f:d1:76:9a:30: 41:0a:6d:de:7b:24:4e:ce:3b:62:20:d3:f0:89:fe: 1d:9f:95:4b:78:e1:d7:5c:b2:53:bf:f6:49:52:15: c9:05:5d:d4:32:4e:92:c0:a7:7f:6a:41:bc:c6:d7: ff:7d:36:60:f7:53:a3:00:28:38:01:04:20:ad:52: d8:12:81:f2:13:d3:81:11:51:9a:e9:ee:2a:1c:6d: 92:1b:af:fb:1f:12:b4:e3:41:90:36:77:84:6d:31: 0b:ef:f8:64:8d:58:70:33:e9:b5:3a:91:69:63:8d: 73:ec:6c:35:ae:c2:a6:4a:68:9f:25:bd:2a:c5:1f: 79:11:40:93:4b:16:16:01:6c:1e:61:72:c4:fb:51: f6:c4:54:ce:fc:60:1f:0d:a3:ed:7a:65:64:be:9b: df:fb:7d:ba:5b:4e:40:c3:fe:c6:28:79:ec:86:d7: 5e:a4:aa:31:e7:78:1b:2c:36:67:d7:a5:ea:f6:f2: 68:ae:29:47:ea:5f:59:cc:20:36:53:e8:b3:87:08: ac:d9:b3:7d:2d:73:be:98:d9:f8:9d:84:58:fa:11: 8e:ad:99:8f:2f:fc:7d:22:e2:01:da:03:ec:e3:76: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:50:76:B0:3C:4E:AB:AD:D1:62:50:29:DA:B0:9C:EE:7E:86:FA:BC X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ae:9c:8d:38:1e:81:37:30:d4:c7:51:3b:3b:6d:2e:13:22: e5:3f:bb:86:f7:da:92:b2:e1:41:b6:1a:9a:fe:6f:92:0f:da: b9:27:92:64:09:87:60:a1:d4:a4:2d:c5:2c:f1:b2:97:86:76: c1:85:bb:b6:69:ab:fd:73:09:4d:36:0e:d4:8d:a7:47:c1:8d: b1:53:c5:44:af:a1:19:df:59:41:c9:26:3c:41:94:3b:dc:d7: 9b:21:5b:24:f2:35:36:1d:d0:f6:5f:ee:f5:2e:81:54:61:36: 59:04:51:a3:02:7b:45:08:10:79:7c:98:c0:bb:fe:83:20:e6: b7:52:22:12:28:1d:06:b7:ba:54:db:dd:67:4c:55:de:a2:62: da:ef:70:ca:9e:38:97:d1:61:74:57:f7:6b:33:14:f5:5a:a3: 6a:c7:9e:de:b8:59:a3:25:65:01:a4:13:70:11:ba:3f:75:cf: 0c:d7:5d:49:2b:cd:da:da:7d:d2:d7:5b:8c:26:3b:7e:75:32: 9c:59:06:66:30:ea:60:ab:1a:2d:3a:ab:1f:73:32:a8:30:f0: 92:24:e4:51:24:43:6b:50:c5:a0:a1:1b:ac:7b:94:0d:c7:38: 91:d9:c8:46:cd:18:c3:66:6d:5f:0c:fb:7a:c1:ef:90:9d:2e: d4:ac:a7:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjUwNDI0MjIzNjA1WhcNMjUwNTAxMjIzNjA1WjAYMRYwFAYD VQQDEw02ODBhYmNkNS1lMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDTGoer7Qpjh3Ddjqx+FKJ9HOnUU8GnTX9F2mjBBCm3eeyROzjtiINPwif4d n5VLeOHXXLJTv/ZJUhXJBV3UMk6SwKd/akG8xtf/fTZg91OjACg4AQQgrVLYEoHy E9OBEVGa6e4qHG2SG6/7HxK040GQNneEbTEL7/hkjVhwM+m1OpFpY41z7Gw1rsKm SmifJb0qxR95EUCTSxYWAWweYXLE+1H2xFTO/GAfDaPtemVkvpvf+326W05Aw/7G KHnshtdepKox53gbLDZn16Xq9vJorilH6l9ZzCA2U+izhwis2bN9LXO+mNn4nYRY +hGOrZmPL/x9IuIB2gPs43Yt7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJQdrA8 Tqut0WJQKdqwnO5+hvq8MB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcrpyNOB6BNzDUx1E7O20uEyLlP7uG99qSsuFBthqa/m+SD9q5J5Jk CYdgodSkLcUs8bKXhnbBhbu2aav9cwlNNg7UjadHwY2xU8VEr6EZ31lBySY8QZQ7 3NebIVsk8jU2HdD2X+71LoFUYTZZBFGjAntFCBB5fJjAu/6DIOa3UiISKB0Gt7pU 291nTFXeomLa73DKnjiX0WF0V/drMxT1WqNqx57euFmjJWUBpBNwEbo/dc8M111J K83a2n3S11uMJjt+dTKcWQZmMOpgqxotOqsfczKoMPCSJORRJENrUMWgoRuse5QN xziR2chGzRjDZm1fDPt6we+QnS7UrKdy -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:17 2025 by rpki-client