$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft File: 9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json) Hash identifier: kem7TnZWL1xZsE/H9ngHD8YbP5pbR7YVLKksoxcAkTA= Subject key identifier: 15:08:BD:0B:44:FC:03:3F:AF:BB:77:88:32:AD:AF:4F:9D:4E:6A:73 Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 Certificate issuer: /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Certificate serial: 085F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft Manifest number: 1392 Signing time: Thu 24 Apr 2025 19:02:55 +0000 Manifest this update: Thu 24 Apr 2025 19:02:55 +0000 Manifest next update: Thu 01 May 2025 19:02:55 +0000 Files and hashes: 1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: sqsxhbeNHk3MDwBBW+JnQq0CRzqtybeRiR4o8fDGMmE=) 2: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: pBil4YvB7UVloyu8DhnduF+muuJFikEsjN7164UGvgI=) 3: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: h5frQG89R9e/TKYUgyXgA4IPep2flQE62K3sYBLnEpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Validity Not Before: Apr 24 19:02:55 2025 GMT Not After : May 1 19:02:55 2025 GMT Subject: CN=680a8adf-cfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:fd:e4:0a:3a:ef:be:0c:f1:c0:ac:ca:3e: 72:6e:02:37:4d:1a:40:3f:33:c7:c9:7c:be:df:05: d6:82:c8:d4:38:e1:e6:42:26:f1:76:6b:fd:ef:22: b6:22:97:32:8c:12:e6:32:7c:7d:08:53:43:3e:56: a2:93:ba:b6:60:cd:91:ed:46:2d:d9:35:ca:02:de: 87:ec:3c:29:30:13:45:e4:98:e2:21:0c:75:4e:66: 7d:89:7f:00:15:dd:4b:f6:c1:f2:44:51:89:ed:02: 86:05:98:b7:f7:12:b5:75:4c:34:ce:af:7f:b9:71: c4:c8:93:0e:10:ba:db:8e:1e:7e:1b:f0:28:ea:04: fc:59:59:3a:45:f0:bc:75:73:be:12:39:35:54:cc: 94:ad:91:47:57:ae:10:4a:40:72:83:34:b7:6b:2d: 64:f4:86:40:39:11:9c:d4:cd:70:dd:41:ac:19:ce: d7:33:42:7a:b3:c2:99:15:d7:a1:25:b0:94:38:03: 8a:54:e3:60:ef:3a:34:d7:37:e2:20:d9:d0:42:c1: f2:ee:6f:8f:6c:03:a4:e5:c1:f6:ab:bb:4e:ba:0a: 8e:70:49:04:80:5c:7c:c0:10:90:86:f2:cc:d9:2d: bb:12:91:1e:22:bc:41:90:53:17:39:56:b8:79:ea: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:08:BD:0B:44:FC:03:3F:AF:BB:77:88:32:AD:AF:4F:9D:4E:6A:73 X509v3 Authority Key Identifier: keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:23:7f:79:d2:3a:4f:7e:8b:99:ae:d6:a4:81:f8:f6:57:70: 74:47:2f:42:42:49:89:db:62:3a:a9:e6:0c:8c:d9:59:ec:35: 57:5f:1b:e9:19:96:55:02:e5:96:2a:4f:e8:11:b9:a0:4f:9e: ab:b2:79:f3:c6:a5:00:79:6e:ce:c1:5c:fa:fc:5a:0f:95:fe: d3:3d:4d:75:89:65:ab:52:a4:96:4f:35:8e:db:c4:f9:ae:69: 7c:c3:f7:ec:3c:6d:fa:59:18:24:ba:0e:04:25:69:b7:f9:73: 5b:8a:27:cc:2b:b7:e8:e3:12:21:5d:84:7f:1d:e7:84:bb:13: b7:6f:51:00:57:77:b6:f4:59:11:46:ab:28:a2:c5:e3:a9:8d: ab:d5:81:86:5a:08:01:cc:db:69:8b:97:f3:18:37:a7:64:c1: 5e:aa:65:73:f6:43:ad:e5:18:5b:1b:98:8b:1e:50:93:10:32: 4a:c5:42:cc:b5:0a:f7:ad:57:0c:fb:61:f9:a6:73:e2:39:cf: 23:77:17:65:b1:94:00:2b:b3:36:5d:53:b2:f2:15:22:24:e0: 74:91:28:b3:82:fd:41:c1:f4:8c:34:36:5b:06:6f:b0:a9:83: 00:7b:66:21:f6:fb:22:34:a3:c3:8e:1c:8a:1f:da:f1:bf:b2: e0:f7:f9:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKEY2MUI0REVBNTg3OTk5Q0I2RTE1QzU0MDg5RTREQjk4 M0QwMUJCMTAwHhcNMjUwNDI0MTkwMjU1WhcNMjUwNTAxMTkwMjU1WjAYMRYwFAYD VQQDEw02ODBhOGFkZi1jZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3q795Ao6774M8cCsyj5ybgI3TRpAPzPHyXy+3wXWgsjUOOHmQibxdmv97yK2 IpcyjBLmMnx9CFNDPlaik7q2YM2R7UYt2TXKAt6H7DwpMBNF5JjiIQx1TmZ9iX8A Fd1L9sHyRFGJ7QKGBZi39xK1dUw0zq9/uXHEyJMOELrbjh5+G/Ao6gT8WVk6RfC8 dXO+Ejk1VMyUrZFHV64QSkBygzS3ay1k9IZAORGc1M1w3UGsGc7XM0J6s8KZFdeh JbCUOAOKVONg7zo01zfiINnQQsHy7m+PbAOk5cH2q7tOugqOcEkEgFx8wBCQhvLM 2S27EpEeIrxBkFMXOVa4eeoE7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUIvQtE /AM/r7t3iDKtr0+dTmpzMB8GA1UdIwQYMBaAFPYbTepYeZnLbhXFQInk25g9AbsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1jdHVGY1ZBaWVUYm1EMEJ1 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlodE42bGg1bWN0dUZjVkFpZVRibUQwQnV4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1j dHVGY1ZBaWVUYm1EMEJ1eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCII3950jpPfouZrtakgfj2V3B0Ry9CQkmJ22I6qeYMjNlZ7DVXXxvp GZZVAuWWKk/oEbmgT56rsnnzxqUAeW7OwVz6/FoPlf7TPU11iWWrUqSWTzWO28T5 rml8w/fsPG36WRgkug4EJWm3+XNbiifMK7fo4xIhXYR/HeeEuxO3b1EAV3e29FkR RqsoosXjqY2r1YGGWggBzNtpi5fzGDenZMFeqmVz9kOt5RhbG5iLHlCTEDJKxULM tQr3rVcM+2H5pnPiOc8jdxdlsZQAK7M2XVOy8hUiJOB0kSizgv1BwfSMNDZbBm+w qYMAe2Yh9vsiNKPDjhyKH9rxv7Lg9/kp -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:53 2025 by rpki-client