$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json) Hash identifier: ckFHktJlfJE3qJxwKjFHu6bTEOHr/RvYEkocFdwBXuk= Subject key identifier: 00:97:B3:C7:4F:BE:DC:4E:01:9A:5A:9F:8B:84:20:CD:6A:73:7B:51 Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft Manifest number: CD Signing time: Sat 03 May 2025 05:03:08 +0000 Manifest this update: Sat 03 May 2025 05:03:08 +0000 Manifest next update: Sat 10 May 2025 05:03:08 +0000 Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: h3+ZjD2HJqD8i12rHmQM0aJ62jybtcvd/qEqrQvc7kM=) 2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: zOrZe+jWeFBIsL39iLL8vvCILEMIHLBZ3vsTVrAh2HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: May 3 05:03:08 2025 GMT Not After : May 10 05:03:08 2025 GMT Subject: CN=6815a38c-532c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:86:b6:ce:68:dd:d6:cc:f4:b8:f1:10:c0: bb:52:1c:9f:5a:30:e8:81:8f:6a:0f:dd:a7:1e:7f: 49:f5:a2:65:ce:c2:54:be:53:14:9a:13:a2:b0:55: af:e6:e5:06:55:9d:ae:ce:3b:5e:f3:48:f3:3f:7a: 96:f3:41:ee:ae:41:1f:f7:e0:e7:e6:64:55:a2:0f: ba:dd:6a:40:2a:2a:c6:da:82:0d:24:08:09:01:e2: e6:d6:4b:34:e0:21:b0:cb:88:ee:e8:4a:c4:7e:7f: 19:1a:17:d2:f5:d1:98:d8:fc:ee:bd:3e:95:f6:e9: d8:9a:8e:9c:15:46:f6:45:4c:b7:b6:18:34:d1:1e: d9:64:c0:61:ca:c7:d8:b5:ca:1b:b2:bd:d8:a5:60: 8b:07:9f:58:ba:f3:14:8c:3f:04:02:7b:4f:0a:09: 78:73:f6:72:3d:a8:5a:c8:b7:b6:2f:ee:8c:2e:13: b7:bb:60:0c:9b:61:8e:f4:5a:71:87:2f:bc:7c:a2: bd:01:36:b6:b0:29:bd:57:c8:cc:8f:85:c8:4a:a5: aa:17:d8:2b:47:97:cb:c3:cc:b4:8b:67:f5:18:93: c5:a4:07:31:7b:eb:2d:91:2c:47:6b:fd:43:7d:f5: 40:1c:d0:96:61:08:af:71:9c:ad:12:eb:0d:b8:c7: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:97:B3:C7:4F:BE:DC:4E:01:9A:5A:9F:8B:84:20:CD:6A:73:7B:51 X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:48:23:90:a0:c2:ab:e9:c1:c0:c1:ac:34:bd:40:f4:c6:f1: b2:bf:3b:3c:83:68:94:e1:e1:1b:12:f0:de:48:b5:01:3e:d3: 95:bd:b3:bc:21:4c:9e:c6:54:f0:5a:d4:26:0b:c8:b3:70:09: 9b:29:a8:a7:b7:d8:8f:6e:27:bc:9a:36:24:86:f9:4a:01:6e: 69:14:de:e5:c0:52:52:a9:4c:59:62:81:64:f9:c9:4f:95:01: 1a:cd:75:73:ac:e3:2a:56:fa:64:07:3d:02:47:be:c5:f6:a4: 94:a0:b2:f7:51:49:0c:a8:4b:40:8e:a8:fc:d6:3a:0c:cf:68: ac:13:2e:17:0d:81:80:6f:a6:ed:5b:65:3f:08:f6:0f:b7:60: e3:66:c2:9b:36:4f:14:6c:74:de:c8:56:26:02:36:e6:6f:f1: 00:ea:12:7d:15:51:47:87:c8:f8:94:a3:a0:66:54:e2:5f:63: 16:bd:70:a8:d4:56:3d:94:51:e4:e1:b9:f7:5e:11:3b:72:ea: a6:df:96:9c:5e:0e:ad:c2:9a:ef:25:0f:94:97:98:ab:ee:24: 7a:36:eb:c0:ec:ca:3c:b7:7b:42:2e:07:97:7c:32:41:1e:a9: a1:c2:80:de:37:37:10:8f:53:cc:03:c8:b1:4f:2d:8f:f3:c9: d8:68:71:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzMxMTAvBgNVBAUTKEY0MTNGNTFEODdCQkZGNEIwQTQxMDcyMTg3NDc2RUJF MDdEMzYxQkYwHhcNMjUwNTAzMDUwMzA4WhcNMjUwNTEwMDUwMzA4WjAYMRYwFAYD VQQDEw02ODE1YTM4Yy01MzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqKGts5o3dbM9LjxEMC7UhyfWjDogY9qD92nHn9J9aJlzsJUvlMUmhOisFWv 5uUGVZ2uzjte80jzP3qW80HurkEf9+Dn5mRVog+63WpAKirG2oINJAgJAeLm1ks0 4CGwy4ju6ErEfn8ZGhfS9dGY2PzuvT6V9unYmo6cFUb2RUy3thg00R7ZZMBhysfY tcobsr3YpWCLB59YuvMUjD8EAntPCgl4c/ZyPahayLe2L+6MLhO3u2AMm2GO9Fpx hy+8fKK9ATa2sCm9V8jMj4XISqWqF9grR5fLw8y0i2f1GJPFpAcxe+stkSxHa/1D ffVAHNCWYQivcZytEusNuMfN7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACXs8dP vtxOAZpan4uEIM1qc3tRMB8GA1UdIwQYMBaAFPQT9R2Hu/9LCkEHIYdHbr4H02G/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDMy8yNEI4RTI1OEVF N0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18wc0tRUWNoaDBkdXZnZlRZ YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFliOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDMy8yNEI4RTI1OEVFN0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18w c0tRUWNoaDBkdXZnZlRZYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmSCOQoMKr6cHAwaw0vUD0xvGyvzs8g2iU4eEbEvDeSLUBPtOVvbO8 IUyexlTwWtQmC8izcAmbKaint9iPbie8mjYkhvlKAW5pFN7lwFJSqUxZYoFk+clP lQEazXVzrOMqVvpkBz0CR77F9qSUoLL3UUkMqEtAjqj81joMz2isEy4XDYGAb6bt W2U/CPYPt2DjZsKbNk8UbHTeyFYmAjbmb/EA6hJ9FVFHh8j4lKOgZlTiX2MWvXCo 1FY9lFHk4bn3XhE7cuqm35acXg6twprvJQ+Ul5ir7iR6NuvA7Mo8t3tCLgeXfDJB HqmhwoDeNzcQj1PMA8ixTy2P88nYaHHG -----END CERTIFICATE-----Generated at Mon May 5 03:33:18 2025 by rpki-client