$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: MjVZ98cF6P4KnxC0O316LpzHEu0AgFfS2cCnaH5vcBI= Subject key identifier: 56:49:53:93:31:9D:1C:81:95:52:4E:6A:83:CE:27:24:96:1A:82:81 Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 0166 Signing time: Tue 13 May 2025 03:09:46 +0000 Manifest this update: Tue 13 May 2025 03:09:45 +0000 Manifest next update: Tue 20 May 2025 03:09:45 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: 2DxueMZx+D9THssnDqkypo4L9kpa9bKIcXYLBcDvt4U=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /g02epL+NyCJaEeLF1U/HHteqWgxtq7I5NLpXCZSdQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: May 13 03:09:45 2025 GMT Not After : May 20 03:09:45 2025 GMT Subject: CN=6822b7f9-4859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:df:be:b8:ff:f4:f5:36:80:02:85:de:3f: fd:ef:d0:89:38:f2:6a:0f:89:f7:fa:c2:00:5b:0e: 07:94:b2:c9:11:be:42:59:b3:07:e2:ca:e5:d1:c1: ff:01:a6:48:aa:46:c8:32:61:43:6e:3e:ef:3e:0b: 10:64:01:ea:76:72:ec:7e:be:46:85:32:ea:52:c7: af:f0:08:70:e8:54:02:3c:92:ff:a5:db:5d:1b:08: 44:5a:c9:c5:f5:cf:5b:f5:1d:4f:6b:01:39:15:68: 3f:d4:78:1e:ae:0c:00:b7:11:72:48:d5:fe:6d:c9: d0:57:62:46:fe:3c:c7:5d:a9:df:b4:11:82:ac:4a: 09:30:0d:eb:38:d7:6f:fc:37:d7:9e:f8:28:fd:39: be:44:94:c9:ee:73:af:35:ee:91:d7:4c:d5:d3:ab: ab:e0:bf:60:b7:f4:c9:44:65:69:10:d3:24:d9:d0: 89:6b:93:0e:21:68:bf:fb:dd:e5:dd:11:d2:7a:50: ce:3f:9f:ed:95:0a:23:66:cf:2d:36:c4:ad:9d:8c: d5:80:77:0c:7a:fd:23:06:8c:c5:bc:7e:ac:a9:53: 4f:a7:f8:3b:17:0b:31:a8:7a:75:f3:7c:23:7e:00: a3:b7:1f:06:f2:51:87:b3:39:2d:e1:be:ce:25:18: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:49:53:93:31:9D:1C:81:95:52:4E:6A:83:CE:27:24:96:1A:82:81 X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ff:8f:82:db:21:5b:77:7f:b6:32:22:be:2c:f9:3c:ab:0d: c4:5a:8c:fc:9a:a3:b7:17:6e:c5:8b:5a:57:e0:db:91:18:cc: a7:b3:60:66:0a:e0:fd:74:1e:e3:70:21:6f:9e:28:98:c0:85: 03:7e:b3:76:44:84:b6:22:b4:e0:6a:29:0a:5f:af:90:3f:1d: d2:3f:5a:3f:e8:2d:e5:9c:8b:52:4b:33:43:25:c8:56:cb:7b: c6:74:25:e6:c6:9a:32:7f:a2:b6:f7:5a:d1:19:1f:f6:69:89: 63:b7:56:ab:e5:65:04:42:c5:a4:98:a5:ed:e0:94:54:51:de: 89:49:a6:63:9e:ac:36:92:6a:6e:bc:cc:66:16:b6:fa:60:ff: c9:8d:62:4a:ea:65:47:35:8f:d9:8c:4b:67:4d:c0:92:18:81: 42:56:f4:49:81:6f:7a:dd:05:12:cb:b4:28:2b:4b:07:31:c8: 61:fa:d3:51:1f:6b:61:50:60:bc:29:94:70:01:ff:6e:9c:62: ef:e6:30:8e:e3:5e:12:5c:56:55:85:8f:36:f9:69:b4:bc:af: a8:7c:58:2d:02:c5:60:d4:43:96:fe:83:cd:32:02:77:e4:67: 06:57:7b:c1:5c:03:f8:9e:b0:a0:5e:4a:03:2c:4f:67:71:9d: b5:be:66:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUwNTEzMDMwOTQ1WhcNMjUwNTIwMDMwOTQ1WjAYMRYwFAYD VQQDEw02ODIyYjdmOS00ODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8Xfvrj/9PU2gAKF3j/979CJOPJqD4n3+sIAWw4HlLLJEb5CWbMH4srl0cH/ AaZIqkbIMmFDbj7vPgsQZAHqdnLsfr5GhTLqUsev8Ahw6FQCPJL/pdtdGwhEWsnF 9c9b9R1PawE5FWg/1HgergwAtxFySNX+bcnQV2JG/jzHXanftBGCrEoJMA3rONdv /DfXnvgo/Tm+RJTJ7nOvNe6R10zV06ur4L9gt/TJRGVpENMk2dCJa5MOIWi/+93l 3RHSelDOP5/tlQojZs8tNsStnYzVgHcMev0jBozFvH6sqVNPp/g7FwsxqHp183wj fgCjtx8G8lGHszkt4b7OJRj7PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZJU5Mx nRyBlVJOaoPOJySWGoKBMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr/4+C2yFbd3+2MiK+LPk8qw3EWoz8mqO3F27Fi1pX4NuRGMyns2Bm CuD9dB7jcCFvniiYwIUDfrN2RIS2IrTgaikKX6+QPx3SP1o/6C3lnItSSzNDJchW y3vGdCXmxpoyf6K291rRGR/2aYljt1ar5WUEQsWkmKXt4JRUUd6JSaZjnqw2kmpu vMxmFrb6YP/JjWJK6mVHNY/ZjEtnTcCSGIFCVvRJgW963QUSy7QoK0sHMchh+tNR H2thUGC8KZRwAf9unGLv5jCO414SXFZVhY82+Wm0vK+ofFgtAsVg1EOW/oPNMgJ3 5GcGV3vBXAP4nrCgXkoDLE9ncZ21vmaA -----END CERTIFICATE-----Generated at Wed May 14 12:37:10 2025 by rpki-client