$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft File: n095sMMg0u--SKvL-paoRdZHlu8.mft (raw, json) Hash identifier: 0APYbCTKX7DzOlaA72l7d1jZz70zv8zgReyAdR1IsoY= Subject key identifier: 1C:73:2F:AE:1D:19:21:AB:97:6B:D6:FE:CD:04:A0:97:B0:56:7F:12 Authority key identifier: 9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF Certificate issuer: /CN=A91A78A7/serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft Manifest number: 01C9 Signing time: Tue 13 May 2025 01:29:53 +0000 Manifest this update: Tue 13 May 2025 01:29:52 +0000 Manifest next update: Tue 20 May 2025 01:29:52 +0000 Files and hashes: 1: n095sMMg0u--SKvL-paoRdZHlu8.crl (hash: 1cMB8s1leCDTF9fSgb2+Xi5S1416zsmGhxzP/9ks/J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF Validity Not Before: May 13 01:29:52 2025 GMT Not After : May 20 01:29:52 2025 GMT Subject: CN=6822a090-327e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:ac:5a:7c:17:4e:79:de:51:83:67:b1:88: 32:8f:cd:1b:fc:15:55:08:83:b0:a8:0d:94:b0:53: 38:f3:a0:30:1d:21:c3:47:6b:d5:d2:a1:5a:c8:aa: eb:55:de:d1:31:6e:ce:02:15:94:22:66:ce:89:af: 9c:59:c3:5f:12:e9:88:a9:0a:97:a3:06:f9:78:12: 38:f2:18:4a:e1:47:56:50:f6:ee:6b:9c:7d:ea:70: 4a:f3:e7:22:9b:ac:60:5d:6e:24:0b:3a:30:c0:b7: c9:a8:49:09:fd:f7:e5:12:a6:16:56:48:57:c6:ae: 48:43:85:d9:02:42:9f:27:0f:22:14:91:63:f3:b6: 9a:3e:2b:02:ce:ff:62:b1:2f:5a:32:21:b1:06:28: 82:8a:4a:03:22:47:7d:e5:02:5b:ed:de:73:0b:12: 67:6f:4a:97:15:5c:33:2b:5b:b1:d3:5c:d1:3a:65: ae:4c:c0:4b:8a:bd:16:c0:c2:29:e2:ec:8c:45:80: bc:a7:dd:c0:62:b4:db:40:7c:e3:f0:11:26:45:fc: 73:40:b9:3e:73:fe:c0:de:a8:07:00:ea:cd:03:e4: d6:f1:59:ac:85:1e:1f:31:d9:a7:14:3f:d3:4e:ba: 12:de:67:e7:46:98:b5:dd:ce:9c:08:16:95:b9:b3: 9b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:73:2F:AE:1D:19:21:AB:97:6B:D6:FE:CD:04:A0:97:B0:56:7F:12 X509v3 Authority Key Identifier: keyid:9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:2b:6a:ca:7d:6f:5e:c6:94:d3:31:bb:34:57:ff:cc:29:7f: 50:c1:39:f7:66:f6:2f:da:cc:68:2a:c2:74:a2:3f:4f:14:71: f9:6f:09:6a:d4:df:22:61:bb:15:85:df:b7:bd:f8:9c:7d:d8: cd:4d:ac:4c:7d:19:ee:fd:15:54:b5:5c:1e:7e:2f:57:0b:06: cc:df:4f:9f:f7:96:88:a3:dc:0e:3b:f4:01:7f:a6:75:c5:73: 3f:e0:fc:c6:fd:52:50:bd:24:db:a7:e6:b9:58:49:31:a9:4e: 6f:d8:5e:91:0b:eb:29:f4:e4:26:3e:7b:af:8b:e9:70:8e:59: 7d:58:db:c6:d8:e2:1b:a0:f4:a3:54:bc:0e:3d:98:8b:48:62: ce:a7:d9:7b:eb:ba:a9:af:b3:67:23:91:3b:6d:10:29:83:9d: 21:8c:a6:f6:4f:98:5a:87:cf:1f:3c:fe:c8:3b:0b:bf:43:5f: 7b:48:a4:1e:09:dc:a3:1b:2a:6c:4a:39:bd:fe:46:75:8a:e4: fd:7d:6f:8b:c6:63:ad:a3:c3:a3:d4:83:6b:93:fd:9e:7a:b7: 52:d7:f8:94:4e:97:d9:d5:c4:ed:b0:d3:b4:e7:61:a6:54:e7: 16:9f:fe:0c:0b:0c:3b:ab:99:22:18:a9:37:03:c8:18:f3:51: bf:ee:ca:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDlGNEY3OUIwQzMyMEQyRUZCRTQ4QUJDQkZBOTZBODQ1 RDY0Nzk2RUYwHhcNMjUwNTEzMDEyOTUyWhcNMjUwNTIwMDEyOTUyWjAYMRYwFAYD VQQDEw02ODIyYTA5MC0zMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQ+sWnwXTnneUYNnsYgyj80b/BVVCIOwqA2UsFM486AwHSHDR2vV0qFayKrr Vd7RMW7OAhWUImbOia+cWcNfEumIqQqXowb5eBI48hhK4UdWUPbua5x96nBK8+ci m6xgXW4kCzowwLfJqEkJ/fflEqYWVkhXxq5IQ4XZAkKfJw8iFJFj87aaPisCzv9i sS9aMiGxBiiCikoDIkd95QJb7d5zCxJnb0qXFVwzK1ux01zROmWuTMBLir0WwMIp 4uyMRYC8p93AYrTbQHzj8BEmRfxzQLk+c/7A3qgHAOrNA+TW8VmshR4fMdmnFD/T TroS3mfnRpi13c6cCBaVubObwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxzL64d GSGrl2vW/s0EoJewVn8SMB8GA1UdIwQYMBaAFJ9PebDDINLvvkiry/qWqEXWR5bv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy81MEQ2MUJCNjcx M0QxMUVEOUZERjNEMTJDNEY5QUUwMi9uMDk1c01NZzB1LS1TS3ZMLXBhb1JkWkhs dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wOTVzTU1nMHUtLVNLdkwtcGFvUmRaSGx1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy81MEQ2MUJCNjcxM0QxMUVEOUZERjNEMTJDNEY5QUUwMi9uMDk1c01NZzB1 LS1TS3ZMLXBhb1JkWkhsdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnK2rKfW9expTTMbs0V//MKX9QwTn3ZvYv2sxoKsJ0oj9PFHH5bwlq 1N8iYbsVhd+3vficfdjNTaxMfRnu/RVUtVwefi9XCwbM30+f95aIo9wOO/QBf6Z1 xXM/4PzG/VJQvSTbp+a5WEkxqU5v2F6RC+sp9OQmPnuvi+lwjll9WNvG2OIboPSj VLwOPZiLSGLOp9l767qpr7NnI5E7bRApg50hjKb2T5hah88fPP7IOwu/Q197SKQe CdyjGypsSjm9/kZ1iuT9fW+LxmOto8Oj1INrk/2eerdS1/iUTpfZ1cTtsNO052Gm VOcWn/4MCww7q5kiGKk3A8gY81G/7soF -----END CERTIFICATE-----Generated at Tue May 13 15:11:08 2025 by rpki-client