$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json) Hash identifier: 5sIAN1SPGNv2P4VR12z+Utpr+1WGKmsbJV0offPNQNE= Subject key identifier: 09:65:5B:F7:B2:80:17:F5:1D:84:F1:12:57:CB:B5:90:6D:CC:5B:CB Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft Manifest number: 20 Signing time: Mon 05 May 2025 06:46:54 +0000 Manifest this update: Mon 05 May 2025 06:46:53 +0000 Manifest next update: Mon 12 May 2025 06:46:53 +0000 Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: q8CIA7DJU/8vi03ivDyPnaxHqGQMulDQ5KqvMrnPXhA=) 2: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: PQY0mTJA0slWwObUdYpstelwiTL+prFfmuh+/qU35kg=) 3: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: tN7XrcdoarGJoE1RdPj/CCm6dWvl1EGT3dxhZCMygsY=) 4: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: ri7YInMAbSmSsjfWYal4W711k38R/upA65HcOLcK83k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 06:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Validity Not Before: May 5 06:46:53 2025 GMT Not After : May 12 06:46:53 2025 GMT Subject: CN=68185edd-ce19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:b5:79:05:52:d7:36:d0:2f:7c:9a:68:46: 7b:f6:d9:38:98:7a:27:21:26:68:d6:14:be:5b:62: 9b:9c:ce:d7:24:6b:69:bf:2c:83:54:27:59:be:26: 30:1a:11:c1:27:fd:b9:65:63:43:50:82:25:0e:5a: 9e:56:80:29:3f:a9:4c:8e:fb:62:69:b7:d0:17:58: 36:55:24:ed:60:e9:d9:59:1f:2c:f8:d2:ee:07:a1: e2:bf:df:d2:47:9b:f0:eb:1b:be:b2:89:0d:e5:6f: a6:2e:25:d1:c5:56:3e:b6:ab:ae:31:89:7c:1a:a4: 83:49:31:fc:ea:84:58:66:f3:32:98:d9:d9:4a:8e: 4c:c6:fe:39:65:38:31:1f:f5:c8:f1:63:7c:5f:ab: 36:86:0c:54:b8:fb:ad:5e:e8:39:8b:98:bb:be:36: df:2c:a6:ca:e1:b2:1f:34:c9:5f:22:81:14:b5:67: b2:1b:8d:f9:0a:58:06:ec:e5:5a:9d:2c:88:98:9c: d7:5c:73:66:55:9e:f9:93:6d:4a:dd:17:4f:ce:24: c5:9d:6f:07:88:c9:88:64:bf:ab:47:28:78:a1:f8: 7b:77:68:e5:d1:75:ab:6f:aa:26:f8:2e:14:8b:14: 42:83:cf:a6:2c:da:27:b1:a1:3e:77:05:0e:c1:47: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:65:5B:F7:B2:80:17:F5:1D:84:F1:12:57:CB:B5:90:6D:CC:5B:CB X509v3 Authority Key Identifier: keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:b5:35:16:62:d0:cf:e3:8a:c8:d6:71:55:a2:1a:85:87:90: 20:b0:d4:67:0f:16:67:f1:30:ed:6b:03:46:68:f3:c0:cc:de: f5:4c:0c:65:05:0e:ae:81:37:83:76:bb:83:83:90:68:f9:84: 4f:38:8b:08:eb:cf:4b:7c:c5:32:c1:dd:e8:00:b2:1f:2a:86: bb:70:c6:a0:42:c5:8c:7f:d8:c4:0c:d1:b8:d1:ea:6c:61:b0: e9:cc:55:54:6f:61:74:c0:7b:67:c2:1c:96:82:6e:7c:9f:79: 1f:8e:d4:ac:56:44:69:44:34:59:54:f0:cd:45:a4:6e:99:4d: 3d:31:80:b5:3b:e5:c8:fe:6a:63:e9:e0:1f:94:63:53:73:e9: 56:15:f5:8e:31:2b:c9:4a:81:f2:45:7f:af:1e:15:f0:43:01: 8a:ca:5b:a4:4d:e1:b9:ae:d7:28:f7:e6:7c:96:95:89:6e:fc: 25:16:57:02:b2:9e:8f:08:f4:f5:3b:61:82:76:39:61:d2:01: 11:db:6e:01:31:57:a8:09:27:47:0f:0b:f7:fc:8e:19:1e:25: 6e:30:8b:ec:e5:76:8e:43:ad:65:70:90:21:ce:48:df:44:81: 48:5b:6e:35:5b:90:63:de:ab:16:73:ef:3d:b4:7d:cf:fb:ae: a8:20:54:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QkE4NDExMC8GA1UEBRMoRjQ5NDk2Rjk1REY5NTg4ODFCRjRCN0U5NzJFNTFCNkYz Q0E1OURGQTAeFw0yNTA1MDUwNjQ2NTNaFw0yNTA1MTIwNjQ2NTNaMBgxFjAUBgNV BAMTDTY4MTg1ZWRkLWNlMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe+rV5BVLXNtAvfJpoRnv22TiYeichJmjWFL5bYpucztcka2m/LINUJ1m+JjAa EcEn/bllY0NQgiUOWp5WgCk/qUyO+2Jpt9AXWDZVJO1g6dlZHyz40u4HoeK/39JH m/DrG76yiQ3lb6YuJdHFVj62q64xiXwapINJMfzqhFhm8zKY2dlKjkzG/jllODEf 9cjxY3xfqzaGDFS4+61e6DmLmLu+Nt8spsrhsh80yV8igRS1Z7IbjfkKWAbs5Vqd LIiYnNdcc2ZVnvmTbUrdF0/OJMWdbweIyYhkv6tHKHih+Ht3aOXRdatvqib4LhSL FEKDz6Ys2iexoT53BQ7BR+J5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCWVb97KA F/UdhPESV8u1kG3MW8swHwYDVR0jBBgwFoAU9JSW+V35WIgb9LfpcuUbbzylnfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCQTg0LzcyQzEwNDVDMDUx RjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0lnYjlMZnBjdVViYnp5bG5m by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUpTVy1WMzVXSWdiOUxmcGN1VWJienlsbmZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC QTg0LzcyQzEwNDVDMDUxRjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0ln YjlMZnBjdVViYnp5bG5mby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAm1NRZi0M/jisjWcVWiGoWHkCCw1GcPFmfxMO1rA0Zo88DM3vVMDGUF Dq6BN4N2u4ODkGj5hE84iwjrz0t8xTLB3egAsh8qhrtwxqBCxYx/2MQM0bjR6mxh sOnMVVRvYXTAe2fCHJaCbnyfeR+O1KxWRGlENFlU8M1FpG6ZTT0xgLU75cj+amPp 4B+UY1Nz6VYV9Y4xK8lKgfJFf68eFfBDAYrKW6RN4bmu1yj35nyWlYlu/CUWVwKy no8I9PU7YYJ2OWHSARHbbgExV6gJJ0cPC/f8jhkeJW4wi+zldo5DrWVwkCHOSN9E gUhbbjVbkGPeqxZz7z20fc/7rqggVEY= -----END CERTIFICATE-----Generated at Mon May 5 14:27:58 2025 by rpki-client