$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: fx3eiv9nmyIfryZeyoPigjqdEVr/S6D2yJiKsGQZ33Q= Subject key identifier: A3:AD:D1:3F:2D:78:27:D5:1B:F7:7E:14:43:17:18:28:82:62:C1:C0 Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0B8D Signing time: Sat 10 May 2025 18:47:37 +0000 Manifest this update: Sat 10 May 2025 18:47:37 +0000 Manifest next update: Sat 17 May 2025 18:47:37 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: wCR0KZ/EzXUpSVgKOHtO5vQ2I5jRmQaNqJBb8K9MU20=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: ukt0pxqY8ok4zBKJR2dRuTwyGN5+UeLkjnvL96GEj4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2963 (0xb93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: May 10 18:47:37 2025 GMT Not After : May 17 18:47:37 2025 GMT Subject: CN=681f9f49-4f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:30:c5:73:09:b8:85:3c:ce:d7:06:38:82: b0:0f:91:6b:0b:09:51:2e:95:16:1e:1b:fa:61:60: 56:3a:6a:4f:43:ae:e3:93:f2:88:5e:cf:37:5d:e6: 6b:a6:a5:d8:e7:77:e0:4d:ab:8e:aa:73:67:ca:4b: 4c:97:72:03:7d:2f:5d:ef:db:2f:29:62:a5:87:08: 8d:68:ef:95:35:7a:53:c0:df:85:3f:7e:2a:16:11: 3a:8e:31:99:37:75:0b:38:a3:d0:ef:20:fc:13:86: d8:02:79:81:f0:72:93:f1:1c:9a:c0:06:14:2e:93: 7c:d9:08:37:dd:a7:08:88:db:e0:5d:6e:f2:41:48: ad:64:0b:8c:10:f6:8d:4e:84:20:33:74:b4:51:e2: f4:11:9b:78:8c:14:94:7f:45:42:83:6c:92:41:86: 04:91:c2:f2:73:49:3d:bf:1a:db:a9:b1:6b:b0:36: 85:17:e7:87:e6:f5:65:de:36:59:b5:c6:8b:c3:d0: 72:7d:19:00:c5:20:89:79:bf:42:69:05:99:ff:46: 3a:22:76:38:5a:ca:eb:e9:a1:75:17:01:7c:40:de: 94:a0:d7:5a:b2:e5:f6:da:52:39:3b:04:9c:7d:30: 27:31:53:26:77:ab:d8:d9:58:79:28:ac:f5:b1:9f: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AD:D1:3F:2D:78:27:D5:1B:F7:7E:14:43:17:18:28:82:62:C1:C0 X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:00:b6:ec:77:e4:9d:f3:61:d2:c5:e8:63:84:19:cd:b6:b0: 38:32:1c:1b:f9:f0:66:b5:3e:5c:5c:b5:c0:56:43:e7:b8:4e: bf:45:54:ba:d4:ca:0f:6d:0c:d8:8b:af:85:ca:fa:5d:fd:f7: fa:c3:f7:28:1d:e3:6e:ba:8d:ba:5b:f2:39:13:7c:ee:8f:e7: 87:d5:e6:99:a1:2e:5c:10:e1:39:a3:fc:80:82:71:3a:08:ab: 6c:5c:1a:31:a9:aa:24:34:a9:a8:88:d9:a2:07:12:91:78:a7: 60:a1:f3:33:4a:8c:6e:bd:b5:25:bb:e6:b1:d2:d1:bf:17:85: 8c:16:a5:a9:31:db:ba:d7:d8:99:51:cc:58:8e:0d:b8:d1:a0: f1:c1:23:2d:f7:89:70:a0:4f:4f:3b:63:71:81:70:35:4c:4c: a0:ed:70:7e:9e:c5:7e:f6:73:b1:0f:13:b9:aa:b8:bb:c7:6a: 3b:d0:87:65:a8:1c:2b:b5:40:01:57:1a:d9:ea:f8:f7:a7:bc: a8:aa:03:31:1b:a1:80:41:fa:dc:33:ac:b9:70:01:96:d3:48: f2:aa:44:84:74:d4:0c:f0:b1:8e:20:ae:80:ff:37:e4:21:18: da:72:01:e8:e7:b6:a2:24:41:1c:67:27:11:e8:6b:6f:7f:2a: 0f:36:b7:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUwNTEwMTg0NzM3WhcNMjUwNTE3MTg0NzM3WjAYMRYwFAYD VQQDEw02ODFmOWY0OS00Zjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LgwxXMJuIU8ztcGOIKwD5FrCwlRLpUWHhv6YWBWOmpPQ67jk/KIXs83XeZr pqXY53fgTauOqnNnyktMl3IDfS9d79svKWKlhwiNaO+VNXpTwN+FP34qFhE6jjGZ N3ULOKPQ7yD8E4bYAnmB8HKT8RyawAYULpN82Qg33acIiNvgXW7yQUitZAuMEPaN ToQgM3S0UeL0EZt4jBSUf0VCg2ySQYYEkcLyc0k9vxrbqbFrsDaFF+eH5vVl3jZZ tcaLw9ByfRkAxSCJeb9CaQWZ/0Y6InY4Wsrr6aF1FwF8QN6UoNdasuX22lI5OwSc fTAnMVMmd6vY2Vh5KKz1sZ+LIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOt0T8t eCfVG/d+FEMXGCiCYsHAMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKALbsd+Sd82HSxehjhBnNtrA4Mhwb+fBmtT5cXLXAVkPnuE6/RVS6 1MoPbQzYi6+Fyvpd/ff6w/coHeNuuo26W/I5E3zuj+eH1eaZoS5cEOE5o/yAgnE6 CKtsXBoxqaokNKmoiNmiBxKReKdgofMzSoxuvbUlu+ax0tG/F4WMFqWpMdu619iZ UcxYjg240aDxwSMt94lwoE9PO2NxgXA1TEyg7XB+nsV+9nOxDxO5qri7x2o70Idl qBwrtUABVxrZ6vj3p7yoqgMxG6GAQfrcM6y5cAGW00jyqkSEdNQM8LGOIK6A/zfk IRjacgHo57aiJEEcZycR6GtvfyoPNreV -----END CERTIFICATE-----Generated at Sun May 11 13:35:34 2025 by rpki-client