$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft File: _x_VyU8S81-tE63yeZqJj94Gysk.mft (raw, json) Hash identifier: ZnzOYvpiozcx1QuGBB6BPfLNmJnZTvE33YKFkA/QTsY= Subject key identifier: 0D:95:DA:CF:9A:9F:32:6A:C9:6F:A6:C5:87:33:03:D5:C9:6B:D8:F3 Authority key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9 Certificate issuer: /CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft Manifest number: A9 Signing time: Fri 09 May 2025 05:10:17 +0000 Manifest this update: Fri 09 May 2025 05:10:17 +0000 Manifest next update: Fri 16 May 2025 05:10:17 +0000 Files and hashes: 1: _x_VyU8S81-tE63yeZqJj94Gysk.crl (hash: 6bkQ1H+t2oZGoZ+fHLkFGXu8ZEQhz+ODwGUpMri0DrI=) 2: A81815BE31B711EF8F3D5F6BC4F9AE02.roa (hash: GayQFIjNRG0i4Xav60C+tvTYkjjCA22TmJl4oiKb6AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91504D6, serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9 Validity Not Before: May 9 05:10:17 2025 GMT Not After : May 16 05:10:17 2025 GMT Subject: CN=681d8e39-2b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:af:85:f3:a6:1a:bb:e0:5d:72:8b:18:d5: f1:91:ee:31:f2:27:47:7c:35:67:7f:d2:4b:5d:4f: 40:6f:3d:18:b7:ff:17:a7:8b:71:90:0f:a1:12:c1: 47:e2:2c:6f:8e:96:ea:67:a0:5e:a0:a7:f6:7a:9e: 8a:ae:e1:a3:f0:48:91:42:2d:d1:e1:a1:05:6d:35: 6e:b1:29:23:00:b7:ba:34:e9:f2:b2:b6:ea:0b:0e: 7d:5b:c1:06:d9:a3:91:22:ab:f1:4d:65:ee:0e:5f: c1:0d:19:86:34:d8:0b:86:cc:d6:7c:5f:81:de:ce: a1:97:5b:af:8d:b3:e3:c8:9d:d1:e9:f8:23:1c:d1: 45:3f:87:c0:b8:24:fb:25:6b:9a:07:24:01:db:18: d5:35:fb:9a:aa:4b:5d:73:6d:88:78:2c:7b:78:5b: cb:f5:d5:49:b9:c5:b3:36:a9:3c:0d:52:15:9f:7f: e1:61:bc:de:45:e5:40:00:ff:3a:9d:99:2f:b7:c5: 93:4b:1b:aa:8b:c4:ab:b7:01:d6:80:8a:ac:25:c8: 82:04:c9:c2:b0:69:6d:68:0b:d4:72:f4:42:2d:56: a0:51:b6:c6:28:1f:fb:29:fa:ac:74:af:2e:71:c1: b3:a4:64:90:c6:13:de:fd:43:24:c9:10:9f:32:69: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:95:DA:CF:9A:9F:32:6A:C9:6F:A6:C5:87:33:03:D5:C9:6B:D8:F3 X509v3 Authority Key Identifier: keyid:FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:72:26:0d:65:5c:d7:28:15:f3:47:49:85:50:5e:19:0b:8a: 65:0c:51:ef:0a:49:45:44:99:bf:48:10:49:03:7e:d4:bc:dc: 9c:db:e2:ff:12:bc:5d:a3:d9:b5:48:f7:a2:15:60:aa:88:4f: 0e:15:a1:4a:80:b8:3f:96:52:dc:51:5f:79:6a:a9:03:bc:36: 1b:20:4d:64:ee:da:0c:79:7e:a8:b6:e6:7b:25:40:cc:e6:13: 5e:cc:7b:5b:28:ab:4e:9a:e5:87:1c:76:77:2b:c2:36:0f:9d: d5:8c:c8:2e:08:1c:f6:b1:2f:8d:0f:e4:6b:2e:a5:0a:a9:7a: 60:34:93:0e:ee:ba:6b:68:2d:df:6c:c9:37:15:29:19:49:bb: ce:43:77:7a:bc:a4:d6:36:02:7c:56:c0:ec:4f:4a:31:b9:3a: 02:48:a8:4a:4e:a1:0c:0f:c8:5b:9c:ce:f6:f3:7b:18:a3:7e: a6:7b:a5:93:3c:97:f3:6f:b5:ac:21:6d:e4:22:49:a5:7d:3c: 8d:53:b6:b3:94:fb:0f:f1:55:d0:8d:b1:84:d0:49:03:be:6b: b4:f6:b1:93:93:3c:60:7d:6a:8f:d5:6a:a6:52:fe:ae:88:02: 43:8a:c0:29:04:26:9d:0a:ea:cc:1c:8f:b3:4b:02:ea:9a:ca: d8:4b:dc:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA0RDYxMTAvBgNVBAUTKEZGMUZENUM5NEYxMkYzNUZBRDEzQURGMjc5OUE4OThG REUwNkNBQzkwHhcNMjUwNTA5MDUxMDE3WhcNMjUwNTE2MDUxMDE3WjAYMRYwFAYD VQQDEw02ODFkOGUzOS0yYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAus6vhfOmGrvgXXKLGNXxke4x8idHfDVnf9JLXU9Abz0Yt/8Xp4txkA+hEsFH 4ixvjpbqZ6BeoKf2ep6KruGj8EiRQi3R4aEFbTVusSkjALe6NOnysrbqCw59W8EG 2aORIqvxTWXuDl/BDRmGNNgLhszWfF+B3s6hl1uvjbPjyJ3R6fgjHNFFP4fAuCT7 JWuaByQB2xjVNfuaqktdc22IeCx7eFvL9dVJucWzNqk8DVIVn3/hYbzeReVAAP86 nZkvt8WTSxuqi8SrtwHWgIqsJciCBMnCsGltaAvUcvRCLVagUbbGKB/7KfqsdK8u ccGzpGSQxhPe/UMkyRCfMmkqUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2V2s+a nzJqyW+mxYczA9XJa9jzMB8GA1UdIwQYMBaAFP8f1clPEvNfrROt8nmaiY/eBsrJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9CNkMwOTM0QzMx QTkxMUVGQjZGQjFENjBDNEY5QUUwMi9feF9WeVU4UzgxLXRFNjN5ZVpxSmo5NEd5 c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL194X1Z5VThTODEtdEU2M3llWnFKajk0R3lzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDRENi9CNkMwOTM0QzMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi9feF9WeVU4Uzgx LXRFNjN5ZVpxSmo5NEd5c2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAciYNZVzXKBXzR0mFUF4ZC4plDFHvCklFRJm/SBBJA37UvNyc2+L/ Erxdo9m1SPeiFWCqiE8OFaFKgLg/llLcUV95aqkDvDYbIE1k7toMeX6otuZ7JUDM 5hNezHtbKKtOmuWHHHZ3K8I2D53VjMguCBz2sS+ND+RrLqUKqXpgNJMO7rpraC3f bMk3FSkZSbvOQ3d6vKTWNgJ8VsDsT0oxuToCSKhKTqEMD8hbnM7283sYo36me6WT PJfzb7WsIW3kIkmlfTyNU7azlPsP8VXQjbGE0EkDvmu09rGTkzxgfWqP1WqmUv6u iAJDisApBCadCurMHI+zSwLqmsrYS9zQ -----END CERTIFICATE-----Generated at Sun May 11 01:53:08 2025 by rpki-client