$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: 7VHJFJr1faBpuTVbaxKksNIqdAHqS2w4mCerLKhnN+g= Subject key identifier: CB:8C:80:F6:20:D1:0C:33:36:09:FD:CF:CE:CA:38:A5:DC:6F:CB:17 Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: 4E Signing time: Tue 13 May 2025 06:41:10 +0000 Manifest this update: Tue 13 May 2025 06:41:10 +0000 Manifest next update: Tue 20 May 2025 06:41:10 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: k7L7x+8F1oBXX+wzu4FTyNkPlzUQKsQVOAkWrvAtJQA=) 2: 8D88F6EEDC9011EFA0219858C4F9AE02.roa (hash: jLDieWIRNg8FoWvPe6GNayNZYERhEqz23NTu1Iqy4LY=) 3: 06C84D20DC9B11EFB3BCA087C4F9AE02.roa (hash: jckmyQxpUBI6CgfUPTNi2GpMJpyKjsAzxMXFFNKFXtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: May 13 06:41:10 2025 GMT Not After : May 20 06:41:10 2025 GMT Subject: CN=6822e986-9462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:04:50:c7:57:a8:51:e1:62:90:82:00:f0: 18:7c:31:3b:82:3a:38:57:82:49:3d:c9:38:23:c3: bd:3c:15:93:77:82:16:c4:98:aa:c7:34:4e:ab:dd: c9:5c:89:0a:32:57:71:93:e6:bf:66:57:ce:7e:7f: a9:06:74:3b:28:f7:3e:c7:54:30:58:0c:7c:e9:27: fa:83:f8:00:f5:20:db:34:26:be:78:7c:e6:3a:d8: d8:f2:d0:52:47:65:0c:0a:80:99:51:57:a4:16:18: 96:03:30:6a:a5:8a:12:3c:2d:83:45:05:f5:5e:ec: 53:eb:1d:24:f2:31:35:fe:62:5f:be:69:65:10:b2: 2a:53:b5:e1:b2:94:8b:c6:14:50:83:26:e5:e5:b0: 05:5b:03:50:2d:7c:78:df:65:c4:86:c5:82:40:34: 8c:68:0a:30:3c:64:77:c2:3e:52:33:3d:ad:f3:61: 1e:b4:c9:27:47:77:7a:37:bb:38:77:e9:0e:7b:8a: 03:4b:95:d0:ef:de:28:8f:66:86:6f:2c:94:b1:cc: 96:92:fc:df:2c:82:fa:47:55:dd:48:10:c0:fb:c3: 1e:05:6d:e0:e1:7d:3b:b6:d2:1d:d1:99:5f:49:31: 42:83:06:f0:7f:0b:a5:2e:84:96:82:2e:e5:fe:90: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8C:80:F6:20:D1:0C:33:36:09:FD:CF:CE:CA:38:A5:DC:6F:CB:17 X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:27:6c:d0:04:d2:69:3b:f5:55:82:a0:c1:6a:96:06:f5:b5: 2a:10:f2:1a:62:f2:c7:ea:bf:fa:84:14:2f:07:9f:6d:72:1a: 79:98:59:98:94:d6:43:2c:b1:13:1d:fb:a3:a9:fa:37:95:b5: e8:9b:8e:b0:5d:07:03:95:03:db:dc:c4:ee:8e:d5:38:6f:41: 38:46:94:8c:dc:0c:9e:60:90:60:d6:de:e9:33:72:12:9a:89: 79:a1:ef:39:3e:cc:ea:8c:a3:42:75:af:89:f7:97:69:1a:c9: 9d:6b:a0:cc:4c:af:c2:7a:81:08:b5:f1:9d:f6:56:20:d9:3a: 2e:34:b4:30:d0:4f:ca:b6:0a:3e:62:7c:17:22:09:89:89:29: ac:26:9a:64:32:bc:c9:c6:9d:b8:4f:90:7d:c4:41:00:ef:0f: d0:51:78:4a:6c:41:96:c1:f8:85:0f:bc:93:67:d4:8e:49:b7: 77:da:41:5c:36:80:07:c8:9e:6d:fc:fc:3a:5f:b5:7b:ca:c2: 6d:64:48:5c:6b:4c:3d:3f:bd:01:77:02:26:32:a4:27:16:8f: 18:df:50:b9:07:4e:c0:44:e6:87:4b:fc:c9:9b:c6:f7:41:86: 61:4e:c8:5d:71:23:ec:ff:8d:6e:e2:56:5b:ef:13:fb:12:3d: 02:4a:27:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODVFOTExMC8GA1UEBRMoRjY5OEI1QjQ3QTA2RDUzMDdERUM2MDg5NjkwNjMwNzRC NjhGRjVDQTAeFw0yNTA1MTMwNjQxMTBaFw0yNTA1MjAwNjQxMTBaMBgxFjAUBgNV BAMTDTY4MjJlOTg2LTk0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwRARQx1eoUeFikIIA8Bh8MTuCOjhXgkk9yTgjw708FZN3ghbEmKrHNE6r3clc iQoyV3GT5r9mV85+f6kGdDso9z7HVDBYDHzpJ/qD+AD1INs0Jr54fOY62Njy0FJH ZQwKgJlRV6QWGJYDMGqlihI8LYNFBfVe7FPrHSTyMTX+Yl++aWUQsipTteGylIvG FFCDJuXlsAVbA1AtfHjfZcSGxYJANIxoCjA8ZHfCPlIzPa3zYR60ySdHd3o3uzh3 6Q57igNLldDv3iiPZoZvLJSxzJaS/N8sgvpHVd1IEMD7wx4FbeDhfTu20h3RmV9J MUKDBvB/C6UuhJaCLuX+kJ/7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy4yA9iDR DDM2Cf3Pzso4pdxvyxcwHwYDVR0jBBgwFoAU9pi1tHoG1TB97GCJaQYwdLaP9cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0M5MjgwNDNBRDE3 NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDlj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXBpMXRIb0cxVEI5N0dDSmFRWXdkTGFQOWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NUU5L0M5MjgwNDNBRDE3NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRC OTdHQ0phUVl3ZExhUDljby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFYnbNAE0mk79VWCoMFqlgb1tSoQ8hpi8sfqv/qEFC8Hn21yGnmYWZiU 1kMssRMd+6Op+jeVteibjrBdBwOVA9vcxO6O1ThvQThGlIzcDJ5gkGDW3ukzchKa iXmh7zk+zOqMo0J1r4n3l2kayZ1roMxMr8J6gQi18Z32ViDZOi40tDDQT8q2Cj5i fBciCYmJKawmmmQyvMnGnbhPkH3EQQDvD9BReEpsQZbB+IUPvJNn1I5Jt3faQVw2 gAfInm38/DpftXvKwm1kSFxrTD0/vQF3AiYypCcWjxjfULkHTsBE5odL/MmbxvdB hmFOyF1xI+z/jW7iVlvvE/sSPQJKJ04= -----END CERTIFICATE-----Generated at Tue May 13 10:15:07 2025 by rpki-client