$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json) Hash identifier: xq/iZtVQf3T2lumIa4btKymc7bH47ZS/yVCzqR3/Z00= Subject key identifier: A5:A2:2D:92:43:ED:47:8F:81:18:0D:F5:79:68:B6:78:2E:82:11:9D Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Certificate serial: 0322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft Manifest number: 031B Signing time: Thu 15 May 2025 01:11:54 +0000 Manifest this update: Thu 15 May 2025 01:11:53 +0000 Manifest next update: Thu 22 May 2025 01:11:53 +0000 Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: UXO26Fo6BWJCF0lpYTCsHLC0UqHai47ITrejr95lqu8=) 2: 148BC3E8833B11EEA71E1715C4F9AE02.roa (hash: 1o3ksyli1ZEbtFwVgIIX+J8xMbJMLDqAM0N6HCXHRdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 802 (0x322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Validity Not Before: May 15 01:11:53 2025 GMT Not After : May 22 01:11:53 2025 GMT Subject: CN=68253f59-a3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:41:89:9f:ea:18:9c:46:e1:9a:82:fc:25: 4a:a4:40:3e:70:3d:15:16:d6:7e:a8:85:fa:bf:95: 57:71:9b:ef:7f:c2:4d:77:eb:1e:b1:3f:e9:f4:46: f5:72:f0:58:81:6e:00:2f:76:e0:d6:97:95:cc:73: 1c:80:50:ff:3c:70:12:37:12:b0:6b:6a:2e:d5:6b: 83:a3:e8:95:37:fa:0f:d7:99:df:bf:26:cf:82:04: 11:1c:57:73:ad:94:2b:6c:7d:51:52:1e:64:65:9f: 93:69:b9:7b:36:60:d2:26:18:6f:3a:8f:9e:9e:04: 3f:69:9b:4c:95:e3:0b:a0:16:c3:09:5d:c2:64:cd: dd:fe:c5:ae:d7:da:99:6e:09:bd:cb:53:bc:d9:fd: 11:b6:85:6d:7b:39:4f:7c:d1:cb:41:21:54:7b:12: ad:fe:8c:33:d4:f7:41:52:4b:50:fb:ad:00:e9:84: 71:15:b5:79:78:17:66:1a:fa:13:c8:36:46:64:c3: 07:7a:97:50:66:5d:0f:26:7f:69:23:bd:2a:1a:e4: 69:15:0e:10:a6:96:ee:52:9a:d4:76:b4:29:8d:56: 28:7f:93:3b:97:67:1e:1e:c2:37:9a:59:4b:8e:1a: 72:b5:4f:0d:3e:ce:df:7e:aa:43:4d:4f:78:43:ed: 8f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A2:2D:92:43:ED:47:8F:81:18:0D:F5:79:68:B6:78:2E:82:11:9D X509v3 Authority Key Identifier: keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ff:4f:db:71:62:84:f3:f9:ee:b2:74:ec:b6:4b:c3:47:bd: ea:a6:e7:06:aa:3c:b8:c3:07:88:54:39:92:94:c3:87:bf:82: 1d:93:82:f4:e8:13:2a:65:c1:12:0d:27:f3:83:fd:93:23:a7: 4e:d7:e2:e2:20:81:61:f8:a9:6c:57:0a:3e:bc:2f:56:16:20: 1a:e5:65:db:a3:35:9a:2a:a9:bf:cb:33:b7:83:12:bd:c3:11: 90:c3:94:e0:b1:78:a0:30:b2:12:2c:7e:5d:e3:eb:3b:4b:b7: f5:0b:a7:60:6d:c8:56:18:49:e5:da:99:cf:52:15:95:77:d9: 8a:af:74:ae:cf:03:72:99:de:f3:14:1e:58:50:81:77:92:6d: d3:be:fd:28:e2:ed:39:ab:2f:26:8d:39:66:1e:45:7c:71:40: 02:6b:a3:ff:2e:5d:5a:70:91:41:b7:a1:e9:81:ed:e5:bc:6f: 2c:e2:bf:f9:e2:8f:17:85:06:f8:9f:0b:8e:cb:2c:81:d5:c0: 28:dc:27:d6:a4:6c:63:39:9d:a8:96:ec:46:10:b9:8f:d9:e6: d0:72:bb:21:a6:80:a5:1d:56:1e:6c:1f:72:1f:85:53:41:38: 24:f2:1b:e0:5f:9f:73:1d:79:14:b1:b3:fc:94:74:97:0c:bf: 1f:7a:ef:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw NDc0QzkxQzYwHhcNMjUwNTE1MDExMTUzWhcNMjUwNTIyMDExMTUzWjAYMRYwFAYD VQQDEw02ODI1M2Y1OS1hM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKJBiZ/qGJxG4ZqC/CVKpEA+cD0VFtZ+qIX6v5VXcZvvf8JNd+sesT/p9Eb1 cvBYgW4AL3bg1peVzHMcgFD/PHASNxKwa2ou1WuDo+iVN/oP15nfvybPggQRHFdz rZQrbH1RUh5kZZ+Tabl7NmDSJhhvOo+engQ/aZtMleMLoBbDCV3CZM3d/sWu19qZ bgm9y1O82f0RtoVtezlPfNHLQSFUexKt/owz1PdBUktQ+60A6YRxFbV5eBdmGvoT yDZGZMMHepdQZl0PJn9pI70qGuRpFQ4QppbuUprUdrQpjVYof5M7l2ceHsI3mllL jhpytU8NPs7ffqpDTU94Q+2P+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWiLZJD 7UePgRgN9XlotngughGdMB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t VHhnWnU2aE0xYklFZE1rY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS/0/bcWKE8/nusnTstkvDR73qpucGqjy4wweIVDmSlMOHv4Idk4L0 6BMqZcESDSfzg/2TI6dO1+LiIIFh+KlsVwo+vC9WFiAa5WXbozWaKqm/yzO3gxK9 wxGQw5TgsXigMLISLH5d4+s7S7f1C6dgbchWGEnl2pnPUhWVd9mKr3SuzwNymd7z FB5YUIF3km3Tvv0o4u05qy8mjTlmHkV8cUACa6P/Ll1acJFBt6Hpge3lvG8s4r/5 4o8XhQb4nwuOyyyB1cAo3CfWpGxjOZ2oluxGELmP2ebQcrshpoClHVYebB9yH4VT QTgk8hvgX59zHXkUsbP8lHSXDL8feu+8 -----END CERTIFICATE-----Generated at Fri May 16 10:18:22 2025 by rpki-client