$ rpki-client -vvf rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft File: t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft (raw, json) Hash identifier: H1iPPcVRvp/oxDhl10iGRdiuek2uUd5xXMnx2MnuqOY= Subject key identifier: 3F:00:89:58:C7:64:CE:8A:E0:3F:F7:19:42:FD:43:4C:02:1E:E4:1E Authority key identifier: B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43 Certificate issuer: /CN=A9191EE7/serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft Manifest number: 0688 Signing time: Sat 10 May 2025 21:52:33 +0000 Manifest this update: Sat 10 May 2025 21:52:32 +0000 Manifest next update: Sat 17 May 2025 21:52:32 +0000 Files and hashes: 1: t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl (hash: cURqJelx4z7ghLwcWVgLy3oYYuIunbFlVwy5ZytXPNs=) 2: BF289EBC6F7911EBA5D39C85C4F9AE02.roa (hash: AaF3FcFShOiafDSRHmqVYnDEeJGLyPeUuLGsOLhjuVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191EE7, serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43 Validity Not Before: May 10 21:52:32 2025 GMT Not After : May 17 21:52:32 2025 GMT Subject: CN=681fcaa0-112a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:b5:0d:3a:c8:e4:c0:1b:3d:8d:73:3a:0e: db:91:f2:3c:29:c3:c4:ef:b7:98:b4:c0:70:64:c2: d6:d8:ee:2d:a8:50:09:41:64:10:90:b9:64:ae:e7: bb:84:91:cd:fb:1f:87:8f:49:c4:68:ba:1a:23:54: 32:6f:a8:57:2e:71:e9:f3:7d:67:13:37:bb:0d:fa: 08:12:00:7d:f7:61:ea:62:1d:31:31:c9:37:ba:c8: b9:ae:18:e9:6b:9f:bb:ab:e4:04:58:2e:55:6b:9d: 9c:9c:c0:00:1c:88:1e:81:53:d3:1f:84:50:b1:7f: 97:4c:4c:9c:82:2a:ba:43:a8:e0:0f:ca:e5:09:ac: 30:f4:fe:c5:8e:60:23:4d:5b:4b:1c:1f:54:24:da: 22:d2:70:1f:1f:dc:72:be:0f:33:a7:ae:a5:0f:a6: 40:b3:d6:68:26:ab:cb:8e:93:3b:e4:c7:4d:53:12: 63:1c:fc:31:eb:8e:b2:b0:62:c2:a4:89:60:01:b8: 60:b5:88:cf:fa:0e:19:d2:59:4b:7b:55:30:ed:7b: f0:40:13:e2:c3:db:66:a7:64:30:86:88:71:78:72: 96:07:0b:df:90:f0:9a:86:dc:b4:5e:d3:b8:c0:c0: 79:38:da:46:e4:af:d9:4d:6c:7b:cc:7c:de:a3:9e: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:89:58:C7:64:CE:8A:E0:3F:F7:19:42:FD:43:4C:02:1E:E4:1E X509v3 Authority Key Identifier: keyid:B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:96:56:3f:dc:ba:e8:89:db:77:dc:0b:aa:cc:59:ce:5e:29: ee:0a:66:15:75:4d:66:e1:44:34:81:12:52:72:99:7b:17:8f: f4:f4:75:98:65:98:86:92:13:2d:28:43:23:8a:0f:3c:bc:ab: 3a:73:56:b3:70:bf:e1:d8:0d:9f:68:b1:e0:d9:21:75:d6:fb: e2:07:65:ed:eb:8b:2c:67:8e:60:ff:0b:3f:47:bb:d1:8f:87: 10:22:41:c4:18:f0:5e:d0:c5:90:6c:1f:97:3f:de:cd:62:fd: 8c:94:5a:b8:ff:64:15:2a:f7:7c:4f:e5:81:ce:a9:a6:05:91: f8:54:c7:92:96:4a:a7:58:1f:2b:7e:59:36:0a:65:d1:ec:d2: 61:e1:fc:c9:32:b5:10:15:67:a8:53:e4:64:9e:58:6b:de:32: ab:5c:0d:25:8f:08:61:d6:61:90:9b:6a:f1:2f:31:03:91:1e: 56:23:14:63:97:ac:54:06:f8:da:96:e1:41:d4:53:b9:91:79: 64:a9:23:bc:2c:64:5e:6c:e8:5d:23:f3:e2:cc:ef:9e:04:3e: b0:f1:85:8c:71:10:00:28:9f:65:6c:10:b3:58:7e:c2:60:a9: 3d:47:de:d0:9f:0a:89:92:76:5f:2e:3a:3c:9e:ee:20:55:af: 15:7b:07:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFRTcxMTAvBgNVBAUTKEI3REZDODAyNzIwQjQzRjAzNjM1MUIwQkM3MTYzRjIy RTUzNTNENDMwHhcNMjUwNTEwMjE1MjMyWhcNMjUwNTE3MjE1MjMyWjAYMRYwFAYD VQQDEw02ODFmY2FhMC0xMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdi1DTrI5MAbPY1zOg7bkfI8KcPE77eYtMBwZMLW2O4tqFAJQWQQkLlkrue7 hJHN+x+Hj0nEaLoaI1Qyb6hXLnHp831nEze7DfoIEgB992HqYh0xMck3usi5rhjp a5+7q+QEWC5Va52cnMAAHIgegVPTH4RQsX+XTEycgiq6Q6jgD8rlCaww9P7FjmAj TVtLHB9UJNoi0nAfH9xyvg8zp66lD6ZAs9ZoJqvLjpM75MdNUxJjHPwx646ysGLC pIlgAbhgtYjP+g4Z0llLe1Uw7XvwQBPiw9tmp2QwhohxeHKWBwvfkPCahty0XtO4 wMB5ONpG5K/ZTWx7zHzeo56StQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8AiVjH ZM6K4D/3GUL9Q0wCHuQeMB8GA1UdIwQYMBaAFLffyAJyC0PwNjUbC8cWPyLlNT1D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUVFNy8wNERDMzA0MjZG NzgxMUVCOTJGRTA3ODJDNEY5QUUwMi90OV9JQW5JTFFfQTJOUnNMeHhZX0l1VTFQ VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5X0lBbklMUV9BMk5Sc0x4eFlfSXVVMVBVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUVFNy8wNERDMzA0MjZGNzgxMUVCOTJGRTA3ODJDNEY5QUUwMi90OV9JQW5JTFFf QTJOUnNMeHhZX0l1VTFQVU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxllY/3Lroidt33AuqzFnOXinuCmYVdU1m4UQ0gRJScpl7F4/09HWY ZZiGkhMtKEMjig88vKs6c1azcL/h2A2faLHg2SF11vviB2Xt64ssZ45g/ws/R7vR j4cQIkHEGPBe0MWQbB+XP97NYv2MlFq4/2QVKvd8T+WBzqmmBZH4VMeSlkqnWB8r flk2CmXR7NJh4fzJMrUQFWeoU+Rknlhr3jKrXA0ljwhh1mGQm2rxLzEDkR5WIxRj l6xUBvjaluFB1FO5kXlkqSO8LGRebOhdI/PizO+eBD6w8YWMcRAAKJ9lbBCzWH7C YKk9R97QnwqJknZfLjo8nu4gVa8Vewds -----END CERTIFICATE-----Generated at Sun May 11 10:36:13 2025 by rpki-client