$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json) Hash identifier: NG9Y9fOEgo8ZlpRipO1NYfrFXkcD7CVMjyblP90JGKs= Subject key identifier: DE:AB:94:84:6A:D5:94:ED:27:20:4D:BC:89:EE:B4:8D:E0:0B:6B:EE Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft Manifest number: 0B9C Signing time: Thu 24 Apr 2025 18:53:32 +0000 Manifest this update: Thu 24 Apr 2025 18:53:32 +0000 Manifest next update: Thu 01 May 2025 18:53:32 +0000 Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: nA0k9vhXCDejQ29DkUQ4Vs+Z8TZw2fhXnnmhElLuNks=) 2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: r5uWTU+sYs/vGgm5oMxXApeoTDyzrDhvLimJL0rhlzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: Apr 24 18:53:32 2025 GMT Not After : May 1 18:53:32 2025 GMT Subject: CN=680a88ac-828d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:7a:c3:1e:bc:78:d1:33:66:b1:21:92:26: 83:be:a0:aa:5b:ab:6f:c2:fd:3d:58:2e:c1:87:e6: ef:a2:40:49:5b:b3:75:30:6f:f2:f7:a6:92:dd:10: f8:61:f4:e4:a2:99:a7:7a:43:d7:c9:24:bd:e6:82: 70:72:06:e0:19:09:bc:95:d5:1b:a5:3b:44:0e:16: a9:be:51:7d:f1:4d:5b:66:f6:1d:0c:14:6f:29:0f: 47:65:9a:10:04:7c:15:02:d0:91:bd:94:3c:cf:ee: 13:74:17:ee:dc:92:dc:0f:5c:e8:76:3c:a4:2a:c3: 55:d8:fb:cb:12:10:d6:9e:32:58:d6:a4:35:86:ae: 01:95:5a:8d:48:43:85:c4:cf:50:fd:e6:a5:b3:9d: b4:e1:4f:c9:f8:2c:16:37:97:57:ff:8f:98:a7:7e: 02:d6:be:f4:b7:51:3b:b9:b4:fb:d2:db:27:62:da: 41:7a:43:27:8e:41:8d:61:6f:04:c7:8d:94:3b:b5: bc:b9:63:dd:ac:cd:f7:08:57:d9:0c:90:d3:c7:5f: 4d:ff:a7:7d:56:43:03:6c:2f:51:e3:72:d1:e9:2c: 8b:cb:aa:42:20:83:12:fe:48:31:b3:55:7a:c3:de: 0b:b2:12:0d:77:1f:b1:18:a7:73:af:72:4a:58:3a: ef:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AB:94:84:6A:D5:94:ED:27:20:4D:BC:89:EE:B4:8D:E0:0B:6B:EE X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:80:d1:ca:63:dd:b6:61:1c:c8:ba:1c:d0:1d:43:51:a3: 0b:2b:28:63:b8:ee:26:a3:be:8e:88:0d:ea:a2:b4:49:25:e2: 31:a0:34:3e:be:70:1f:71:2b:c7:5d:b2:1b:25:5d:16:af:fc: f2:b0:89:81:47:b0:bc:1e:af:bc:e4:ce:7d:cd:c4:74:43:92: 19:74:3e:84:e2:e6:38:c1:c1:c5:86:08:91:bb:d8:46:d0:89: ad:c6:1b:22:9d:e9:12:f9:6b:30:f7:33:a3:e7:cd:46:10:4e: 65:2e:f6:e5:a5:55:af:ca:14:e3:42:16:a0:e9:5b:26:db:e1: ec:7c:95:f4:ce:fe:71:f7:07:f2:ce:a2:f0:9c:57:7a:bf:85: f3:96:3a:7d:b1:94:c7:ed:78:8d:5d:65:84:42:9d:c3:82:5d: 30:fc:9b:c3:89:f7:5a:b1:61:ae:97:f6:ac:bc:b7:2d:4a:5e: 6b:6e:bf:ae:a9:20:18:cf:1a:ab:99:cc:86:48:8b:fb:e1:73: c4:63:65:2f:a2:59:a7:00:36:9b:a0:d1:34:d4:33:db:16:d6: 19:f2:4e:8e:a0:b8:a1:93:83:9c:5a:5e:ec:43:4e:31:0c:ad: c8:3e:bd:f6:ab:db:40:5e:04:e6:9e:fe:37:2d:39:6c:3c:fa: b3:0a:41:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjUwNDI0MTg1MzMyWhcNMjUwNTAxMTg1MzMyWjAYMRYwFAYD VQQDEw02ODBhODhhYy04MjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfV6wx68eNEzZrEhkiaDvqCqW6tvwv09WC7Bh+bvokBJW7N1MG/y96aS3RD4 YfTkopmnekPXySS95oJwcgbgGQm8ldUbpTtEDhapvlF98U1bZvYdDBRvKQ9HZZoQ BHwVAtCRvZQ8z+4TdBfu3JLcD1zodjykKsNV2PvLEhDWnjJY1qQ1hq4BlVqNSEOF xM9Q/eals5204U/J+CwWN5dX/4+Yp34C1r70t1E7ubT70tsnYtpBekMnjkGNYW8E x42UO7W8uWPdrM33CFfZDJDTx19N/6d9VkMDbC9R43LR6SyLy6pCIIMS/kgxs1V6 w94LshINdx+xGKdzr3JKWDrvHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6rlIRq 1ZTtJyBNvInutI3gC2vuMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py SGNRbi0tci1jZy03Q1h3aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjW4DRymPdtmEcyLoc0B1DUaMLKyhjuO4mo76OiA3qorRJJeIxoDQ+ vnAfcSvHXbIbJV0Wr/zysImBR7C8Hq+85M59zcR0Q5IZdD6E4uY4wcHFhgiRu9hG 0ImtxhsinekS+Wsw9zOj581GEE5lLvblpVWvyhTjQhag6Vsm2+HsfJX0zv5x9wfy zqLwnFd6v4Xzljp9sZTH7XiNXWWEQp3Dgl0w/JvDifdasWGul/asvLctSl5rbr+u qSAYzxqrmcyGSIv74XPEY2UvolmnADaboNE01DPbFtYZ8k6OoLihk4OcWl7sQ04x DK3IPr32q9tAXgTmnv43LTlsPPqzCkEC -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:32 2025 by rpki-client