$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft File: 9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json) Hash identifier: 4gyapZe4ay3cy/oKYNhdnUfmtY7+9Tgf9SJP2f5spwA= Subject key identifier: 69:AB:1A:E3:75:36:ED:AA:E4:7F:3D:4F:46:6E:29:02:21:A2:D3:FE Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F Certificate issuer: /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft Manifest number: 03E6 Signing time: Fri 25 Apr 2025 00:17:22 +0000 Manifest this update: Fri 25 Apr 2025 00:17:22 +0000 Manifest next update: Fri 02 May 2025 00:17:22 +0000 Files and hashes: 1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: EkClDrZjlxtibRMxPuF0OPQLDKG0l42Pi2SFKwWGDOA=) 2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: +nAeLjb+TBEYVVPImLnPfEQNMqbzuQHLMiBByx+ZAiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Validity Not Before: Apr 25 00:17:22 2025 GMT Not After : May 2 00:17:22 2025 GMT Subject: CN=680ad492-6b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:b0:8d:1a:bc:19:08:16:6b:df:7c:81:4e: 7c:35:5b:46:a0:37:0f:99:fc:bb:c6:fc:e4:7d:6f: 24:31:52:a4:c2:0f:70:94:e3:79:12:08:53:83:03: e2:d6:1d:a2:63:cd:b5:44:fe:45:9c:28:75:ce:3a: b5:25:e5:68:54:c7:7f:44:6b:92:9d:de:8f:d0:be: 66:10:e9:d5:90:81:9a:4c:6b:fd:e5:a5:25:c5:17: 7c:9d:0a:55:0c:78:04:7e:ad:6d:44:57:ee:0c:89: 8c:05:a5:90:e5:a2:a8:8e:08:f0:56:a4:a1:4b:cb: f2:b3:fc:a3:3b:9c:4f:0d:97:5d:bf:98:d9:c4:09: 89:27:b5:84:6f:53:fc:56:30:cb:48:bf:7a:e2:12: 90:03:df:4f:24:c7:34:0d:46:26:e0:c7:19:eb:6e: 42:22:f4:32:d0:68:c8:8c:22:09:99:27:b8:4d:03: cb:b3:0a:49:80:c2:99:2f:e3:fe:d8:f3:82:bb:62: 84:fd:38:5e:03:86:e7:eb:34:c4:a9:e5:7e:f8:9b: ad:35:0d:a8:ba:2b:8d:14:d2:72:f4:7d:cb:12:27: ff:7a:ea:2b:03:36:a2:0d:1f:f1:67:33:3b:56:d8: 59:12:3a:ba:d7:c8:83:07:53:cb:fe:3a:8f:1f:be: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AB:1A:E3:75:36:ED:AA:E4:7F:3D:4F:46:6E:29:02:21:A2:D3:FE X509v3 Authority Key Identifier: keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:89:e6:12:1e:6e:08:d9:7a:17:9a:9c:71:e0:fc:ce:c9:58: ae:31:7a:c9:69:bb:d8:26:6e:98:3c:e4:81:e1:9f:f0:d3:0f: c3:12:d6:68:00:fe:75:c9:6e:af:ff:0f:8c:df:36:a2:d7:5d: 8b:77:32:a1:aa:f8:0d:ba:fa:89:12:b3:27:5a:f8:14:78:f3: 66:c5:fd:b1:83:c1:41:28:7f:9e:a9:2c:85:ec:d1:61:4c:60: cd:fb:91:fa:23:7d:db:4b:44:a7:88:21:fc:c9:75:99:bf:c9: 8a:c9:05:51:36:e7:bc:1c:b6:c7:2d:86:72:2e:9e:97:a6:20: e6:49:1f:47:1d:d7:f3:0f:d7:9a:d0:38:ce:bb:b6:0d:98:09: 6c:95:47:cc:03:25:cd:f3:0d:ec:52:d4:b3:21:f5:a9:1a:5b: 3d:6d:64:16:35:9b:b1:4f:5d:68:92:19:d5:e4:2b:ec:34:23: 6f:90:a1:10:75:e3:0c:ea:06:e8:1f:cf:3e:c9:2b:ea:02:e9: eb:aa:3e:52:5a:aa:e4:3f:65:27:21:fd:ae:ef:19:6b:94:21: c9:4c:de:16:2b:fb:d7:86:4d:6d:ee:58:ea:1a:74:cc:e3:4d: 41:34:ef:a8:1f:6d:0a:34:27:65:76:98:38:ed:9e:e9:50:09: 1c:bd:6c:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCODExMTAvBgNVBAUTKEY0MTU3Rjc0NEM0MjEwQzNGRjQ2QUFGMEUwMjJERUU2 ODlGNDZFM0YwHhcNMjUwNDI1MDAxNzIyWhcNMjUwNTAyMDAxNzIyWjAYMRYwFAYD VQQDEw02ODBhZDQ5Mi02YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiGwjRq8GQgWa998gU58NVtGoDcPmfy7xvzkfW8kMVKkwg9wlON5EghTgwPi 1h2iY821RP5FnCh1zjq1JeVoVMd/RGuSnd6P0L5mEOnVkIGaTGv95aUlxRd8nQpV DHgEfq1tRFfuDImMBaWQ5aKojgjwVqShS8vys/yjO5xPDZddv5jZxAmJJ7WEb1P8 VjDLSL964hKQA99PJMc0DUYm4McZ625CIvQy0GjIjCIJmSe4TQPLswpJgMKZL+P+ 2POCu2KE/TheA4bn6zTEqeV++JutNQ2ouiuNFNJy9H3LEif/euorAzaiDR/xZzM7 VthZEjq618iDB1PL/jqPH76itwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmrGuN1 Nu2q5H89T0ZuKQIhotP+MB8GA1UdIwQYMBaAFPQVf3RMQhDD/0aq8OAi3uaJ9G4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0I4MS80OUM4OTI1RTc3 MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VNUF9ScXJ3NENMZTVvbjBi ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCVl9kRXhDRU1QX1Jxcnc0Q0xlNW9uMGJqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0I4MS80OUM4OTI1RTc3MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VN UF9ScXJ3NENMZTVvbjBiajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfieYSHm4I2XoXmpxx4PzOyViuMXrJabvYJm6YPOSB4Z/w0w/DEtZo AP51yW6v/w+M3zai112LdzKhqvgNuvqJErMnWvgUePNmxf2xg8FBKH+eqSyF7NFh TGDN+5H6I33bS0SniCH8yXWZv8mKyQVRNue8HLbHLYZyLp6XpiDmSR9HHdfzD9ea 0DjOu7YNmAlslUfMAyXN8w3sUtSzIfWpGls9bWQWNZuxT11okhnV5CvsNCNvkKEQ deMM6gboH88+ySvqAunrqj5SWqrkP2UnIf2u7xlrlCHJTN4WK/vXhk1t7ljqGnTM 401BNO+oH20KNCdldpg47Z7pUAkcvWw9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:59 2025 by rpki-client