$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json) Hash identifier: 3itLxZfFol3F0V8c0ASsb6FP5m0h0Rwg2sFwPq1V7+M= Subject key identifier: 44:21:8A:80:F0:60:1E:B6:12:61:F5:C9:6B:56:DF:DD:DA:42:10:76 Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Certificate serial: 0917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft Manifest number: 0912 Signing time: Thu 24 Apr 2025 20:11:31 +0000 Manifest this update: Thu 24 Apr 2025 20:11:31 +0000 Manifest next update: Thu 01 May 2025 20:11:31 +0000 Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: c/9/VIQwC64z3hH8IWviXTjAcfnNfA4TCfLxyX4M8wI=) 2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: WPNbmXIljXf5DGJzTyP9mhxu+4YyVGP6cfR3qyAMYCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Validity Not Before: Apr 24 20:11:31 2025 GMT Not After : May 1 20:11:31 2025 GMT Subject: CN=680a9af3-2573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:02:09:e9:0f:41:c8:3c:b5:30:95:16:be: 30:86:78:64:00:95:07:7b:a9:41:49:ec:13:79:3c: b6:2a:6a:eb:ee:d4:c9:3e:8d:16:4b:c4:29:0b:4e: e0:3c:c5:14:a7:3c:3f:b4:4a:ba:38:7e:85:42:2d: a8:32:7a:16:0b:d5:d6:da:85:d0:e9:e7:b0:2b:13: ee:76:ef:7e:4b:f1:1b:ca:82:d3:bf:31:23:b1:f0: 1f:eb:0d:cc:24:5c:0f:d1:41:33:55:e1:de:0d:11: a1:c1:c3:f4:5a:58:e4:a3:77:ac:9b:70:91:f5:1c: ee:81:18:8a:12:23:3e:40:9c:94:2d:f8:24:6d:37: d0:a9:0e:16:6e:fe:67:c5:58:03:62:2a:5e:42:e5: 8d:60:41:f3:91:1f:57:c3:17:27:57:f0:ac:7a:14: 08:35:95:c2:7e:0e:f1:1e:0c:31:ba:54:c9:9f:05: 63:22:c2:31:53:aa:6d:a5:1a:d6:99:7c:7d:61:7d: 7b:e2:78:47:e7:c6:3a:2c:e0:60:e8:bf:82:4c:c6: c4:2e:57:fa:ef:e8:cf:11:e2:eb:b3:e8:a7:2e:2b: 62:c2:b6:67:e0:e9:b7:c6:e4:db:ea:07:13:74:b0: 90:50:fe:68:42:9a:24:be:57:63:6c:20:01:23:02: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:21:8A:80:F0:60:1E:B6:12:61:F5:C9:6B:56:DF:DD:DA:42:10:76 X509v3 Authority Key Identifier: keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:9d:48:65:ac:30:12:00:20:00:7b:9d:8b:e9:ce:7b:00:6d: 6b:a8:17:96:fb:42:ed:99:45:38:80:7b:03:01:bc:96:17:ca: 8c:8b:9f:9d:83:f5:58:a2:7f:2e:b8:50:eb:b1:69:d3:e7:57: 09:98:71:18:0d:52:ec:af:a0:da:e5:ca:eb:00:fb:06:c1:8b: 1a:4e:3a:61:84:f2:bb:5a:71:ce:6a:da:3a:7f:29:ea:d8:4f: 5b:2b:98:6e:50:73:7c:f1:c3:07:37:66:e0:3f:e9:75:80:bc: fc:b5:a2:4b:4e:eb:90:2f:9d:25:64:cd:a4:1a:ea:12:2e:36: ba:0e:4e:aa:86:0f:35:fa:b2:59:07:e5:9a:74:0b:58:f1:a3: 59:ba:6a:d2:03:01:3e:94:d5:e3:6d:ac:a9:a5:94:31:a8:84: b9:a0:1a:41:af:fd:f2:bd:b3:b0:d0:77:4d:6c:c0:b7:d0:2f: c3:12:18:fe:09:6d:5d:c3:3e:e3:ea:63:f7:61:5f:1c:9a:e8: a6:82:5f:9c:e7:bb:94:c1:54:b6:6c:a5:36:c7:8c:46:45:6e: 0a:a4:60:9d:f4:6f:46:c3:33:ec:bb:2a:d9:63:9d:f0:cb:f5: c9:97:b8:e3:2b:5c:79:23:a8:bf:71:2d:db:da:f4:a1:e2:81: 12:12:3b:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0 Njg2NTVCMDYwHhcNMjUwNDI0MjAxMTMxWhcNMjUwNTAxMjAxMTMxWjAYMRYwFAYD VQQDEw02ODBhOWFmMy0yNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTACCekPQcg8tTCVFr4whnhkAJUHe6lBSewTeTy2Kmrr7tTJPo0WS8QpC07g PMUUpzw/tEq6OH6FQi2oMnoWC9XW2oXQ6eewKxPudu9+S/EbyoLTvzEjsfAf6w3M JFwP0UEzVeHeDRGhwcP0Wljko3esm3CR9RzugRiKEiM+QJyULfgkbTfQqQ4Wbv5n xVgDYipeQuWNYEHzkR9XwxcnV/CsehQINZXCfg7xHgwxulTJnwVjIsIxU6ptpRrW mXx9YX174nhH58Y6LOBg6L+CTMbELlf67+jPEeLrs+inLitiwrZn4Om3xuTb6gcT dLCQUP5oQpokvldjbCABIwIawwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQhioDw YB62EmH1yWtW393aQhB2MB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrnUhlrDASACAAe52L6c57AG1rqBeW+0LtmUU4gHsDAbyWF8qMi5+d g/VYon8uuFDrsWnT51cJmHEYDVLsr6Da5crrAPsGwYsaTjphhPK7WnHOato6fynq 2E9bK5huUHN88cMHN2bgP+l1gLz8taJLTuuQL50lZM2kGuoSLja6Dk6qhg81+rJZ B+WadAtY8aNZumrSAwE+lNXjbayppZQxqIS5oBpBr/3yvbOw0HdNbMC30C/DEhj+ CW1dwz7j6mP3YV8cmuimgl+c57uUwVS2bKU2x4xGRW4KpGCd9G9GwzPsuyrZY53w y/XJl7jjK1x5I6i/cS3b2vSh4oESEjua -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:35 2025 by rpki-client