$ rpki-client -vvf rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft File: mqU9J74bthSVPDedOeC7xfHBJKc.mft (raw, json) Hash identifier: apr1E1pZ+KCg6vkWpDlySUN1+gjNDxsRffITA8UhtSQ= Subject key identifier: 73:31:5F:F8:46:34:32:F0:D0:A1:E8:90:24:D7:F1:A2:58:62:C2:40 Authority key identifier: 9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7 Certificate issuer: /CN=A91814CB/serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7 Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft Manifest number: 0BC9 Signing time: Sat 10 May 2025 18:41:43 +0000 Manifest this update: Sat 10 May 2025 18:41:43 +0000 Manifest next update: Sat 17 May 2025 18:41:43 +0000 Files and hashes: 1: mqU9J74bthSVPDedOeC7xfHBJKc.crl (hash: 3Y79sPcJsTkDhWaGZw9KkB/1ZAH7jdKmi2EAvTGiAjQ=) 2: F4F827D6BB6C11EF80151572C4F9AE02.roa (hash: 25pluhiPmnAm9YwUWup9o5G24MQf1uEQRknQIFNX3KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814CB, serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7 Validity Not Before: May 10 18:41:43 2025 GMT Not After : May 17 18:41:43 2025 GMT Subject: CN=681f9de7-facf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:ae:6c:62:2f:0c:79:84:ea:0b:3d:39:60: 2e:4b:7e:45:8c:79:25:3e:f3:18:b7:bb:ca:da:67: 55:f5:d3:4b:98:a3:63:b1:cf:e5:29:bc:c2:54:c6: d8:be:39:2f:f1:14:72:ee:17:1a:b7:c3:25:e9:cc: 68:78:ce:10:1a:d1:d7:ae:7b:83:f7:60:6d:7a:79: 20:8a:12:16:59:a6:59:e7:6b:20:a0:f0:c5:a0:d8: 28:e9:31:83:07:3e:40:4f:d4:11:c2:3e:60:5d:7d: 99:12:01:9a:e1:66:53:1a:2c:9b:b2:25:9c:8c:79: 3b:c8:53:8a:ab:0a:af:fc:33:c6:12:7c:d2:6c:8d: 42:53:58:66:79:0a:e8:7b:01:d0:44:7b:c7:76:fc: 0f:c4:99:c4:13:5b:4a:84:bc:f0:f8:92:2b:da:a7: 95:b5:d4:cc:33:45:77:a6:e3:15:b3:a0:85:d9:b2: 2a:0b:6e:a7:8a:29:a7:dc:9b:ee:c0:ee:d1:f9:3f: 4c:62:fe:c3:d8:f3:5e:39:8e:3c:7b:81:3a:57:a7: 97:cf:b3:9d:8c:da:1b:dd:77:a5:28:ff:63:18:a6: 60:2c:3f:1b:72:eb:21:bc:10:51:0d:8d:90:75:d9: 75:2c:fc:e2:fe:95:71:76:69:8e:ee:01:25:6e:58: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:31:5F:F8:46:34:32:F0:D0:A1:E8:90:24:D7:F1:A2:58:62:C2:40 X509v3 Authority Key Identifier: keyid:9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:14:62:68:eb:51:23:d8:f0:7a:36:83:dc:2e:70:6f:5b:e7: fd:fd:58:a0:ef:ba:8f:65:7d:c2:fa:bf:14:a3:2f:b7:fc:ce: 39:d9:07:99:55:c8:21:b9:59:41:ef:29:46:18:10:13:57:98: 6e:0c:95:f2:7e:31:55:8b:bc:67:40:ec:79:41:b3:56:4f:77: 0f:c7:f3:f9:72:a0:37:46:a8:8e:24:e9:b9:03:bd:b1:0e:48: 0d:04:40:70:b7:8f:81:86:18:23:fa:2b:8c:ad:9c:1a:22:5e: 7a:54:06:2e:50:97:ba:3c:c4:45:63:d2:fb:ed:8b:b4:5d:a0: 94:87:97:18:aa:6e:5e:d9:db:9e:2b:d5:77:52:e8:50:eb:ed: b9:b9:71:2d:1c:2f:e0:d6:65:5d:c9:54:d1:2e:db:58:70:88: 47:3a:d5:ed:05:8b:6a:a5:75:12:f8:33:cc:94:ee:fb:4a:11: b1:be:98:da:11:61:97:14:05:b8:5b:af:14:7e:ec:95:ee:66: 0a:eb:c9:a6:25:32:52:15:10:4d:e5:12:e0:37:56:45:3f:6c: cf:17:b6:a1:49:8c:58:17:16:60:59:7c:03:31:07:34:b3:91: 12:ed:15:db:a1:8a:f0:6b:cd:6b:cc:95:5b:e3:d0:e5:70:c4: 2b:58:60:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0Q0IxMTAvBgNVBAUTKDlBQTUzRDI3QkUxQkI2MTQ5NTNDMzc5RDM5RTBCQkM1 RjFDMTI0QTcwHhcNMjUwNTEwMTg0MTQzWhcNMjUwNTE3MTg0MTQzWjAYMRYwFAYD VQQDEw02ODFmOWRlNy1mYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kCubGIvDHmE6gs9OWAuS35FjHklPvMYt7vK2mdV9dNLmKNjsc/lKbzCVMbY vjkv8RRy7hcat8Ml6cxoeM4QGtHXrnuD92BtenkgihIWWaZZ52sgoPDFoNgo6TGD Bz5AT9QRwj5gXX2ZEgGa4WZTGiybsiWcjHk7yFOKqwqv/DPGEnzSbI1CU1hmeQro ewHQRHvHdvwPxJnEE1tKhLzw+JIr2qeVtdTMM0V3puMVs6CF2bIqC26niimn3Jvu wO7R+T9MYv7D2PNeOY48e4E6V6eXz7OdjNob3XelKP9jGKZgLD8bcushvBBRDY2Q ddl1LPzi/pVxdmmO7gElblioqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMxX/hG NDLw0KHokCTX8aJYYsJAMB8GA1UdIwQYMBaAFJqlPSe+G7YUlTw3nTngu8XxwSSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRDQi9BREVDNTQzQTFE NzgxMUVBOEQzMDE3NDRDNEY5QUUwMi9tcVU5Sjc0YnRoU1ZQRGVkT2VDN3hmSEJK S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xVTlKNzRidGhTVlBEZWRPZUM3eGZIQkpLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTRDQi9BREVDNTQzQTFENzgxMUVBOEQzMDE3NDRDNEY5QUUwMi9tcVU5Sjc0YnRo U1ZQRGVkT2VDN3hmSEJKS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGFGJo61Ej2PB6NoPcLnBvW+f9/Vig77qPZX3C+r8Uoy+3/M452QeZ VcghuVlB7ylGGBATV5huDJXyfjFVi7xnQOx5QbNWT3cPx/P5cqA3RqiOJOm5A72x DkgNBEBwt4+Bhhgj+iuMrZwaIl56VAYuUJe6PMRFY9L77Yu0XaCUh5cYqm5e2due K9V3UuhQ6+25uXEtHC/g1mVdyVTRLttYcIhHOtXtBYtqpXUS+DPMlO77ShGxvpja EWGXFAW4W68UfuyV7mYK68mmJTJSFRBN5RLgN1ZFP2zPF7ahSYxYFxZgWXwDMQc0 s5ES7RXboYrwa81rzJVb49DlcMQrWGCJ -----END CERTIFICATE-----Generated at Sun May 11 22:19:41 2025 by rpki-client