$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft File: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json) Hash identifier: DeDdRqETilX89kfLU2c3yHYraN5wT0rv31gk9sn6eg4= Subject key identifier: BA:DB:01:AD:BD:B2:2E:03:F6:8A:48:27:76:5A:A2:3B:9A:25:43:87 Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA Certificate issuer: /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft Manifest number: 8D Signing time: Sun 11 May 2025 05:15:40 +0000 Manifest this update: Sun 11 May 2025 05:15:39 +0000 Manifest next update: Sun 18 May 2025 05:15:39 +0000 Files and hashes: 1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: 3ptd5KPHmMwpyg4J8F4WERg5BGdNgirOY47MFuRvt+U=) 2: 1CDD9EF85B9F11EFACE3275CC4F9AE02.roa (hash: v4ejIpdySbBIKimD5EDirkHkD31xywXn/idyAwvPc/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA Validity Not Before: May 11 05:15:39 2025 GMT Not After : May 18 05:15:39 2025 GMT Subject: CN=6820327c-597b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:65:36:10:c9:6a:ae:06:21:7a:4e:7d:e1: 78:88:4d:d6:37:13:c0:7b:e7:07:e2:2c:7b:7f:32: 8e:35:26:88:6f:cf:84:d0:4a:97:24:0b:85:ec:65: 9f:6b:50:b1:0d:b7:3b:a9:80:25:4d:0b:15:6e:a3: c2:3e:bc:93:4d:59:c0:f1:66:af:0d:b5:8b:9f:b0: 30:c9:4c:98:87:fe:eb:6c:07:ff:1b:09:59:20:3d: 1e:68:c2:eb:6c:21:f8:ab:eb:52:b6:a6:ef:52:24: 40:67:a3:a7:9c:35:02:01:8e:06:6a:35:4a:b0:af: 25:b4:7f:bf:f6:87:29:a2:d2:ad:44:7a:f4:5f:fe: 88:0c:5f:44:7e:fc:51:72:7c:f8:13:43:44:ce:aa: 6a:d7:84:3d:8f:59:b9:74:7a:d9:a0:c9:d5:b0:b1: 8f:53:6f:7a:5c:36:14:c6:12:ea:ea:b3:9c:43:8e: 12:d9:6c:36:8f:5c:d7:7c:06:ee:3b:ac:38:53:ce: ad:70:94:58:8e:17:bb:6d:dd:4e:e2:99:e6:79:c0: 24:73:eb:8c:ae:ef:97:1f:5d:f6:f3:40:0b:d2:af: 6e:f5:36:eb:8d:1c:1d:f5:7b:62:0c:90:9e:a3:b3: 71:b2:21:d6:fc:a5:b1:5c:8d:d3:c4:2a:11:45:79: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DB:01:AD:BD:B2:2E:03:F6:8A:48:27:76:5A:A2:3B:9A:25:43:87 X509v3 Authority Key Identifier: keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:56:29:6a:d8:ca:32:c6:a8:33:f9:53:79:d9:26:0f:57:4c: 16:f8:63:12:24:3a:d7:d1:58:b3:de:f9:21:17:54:e0:25:3c: 79:34:14:86:bb:49:1f:c3:e8:47:8e:3b:ff:d0:b6:d3:ef:2e: 14:71:27:78:c4:fd:aa:93:c4:f3:0b:91:d8:98:ef:f6:a2:9f: d6:e7:3f:75:f6:ea:f2:d3:67:01:14:8a:55:fa:d9:dc:ce:ff: 29:4e:53:f2:cd:e8:e7:cf:a4:92:48:8e:cb:36:58:38:5d:78: 59:6b:b3:76:55:a2:e0:0d:50:d1:93:40:ad:95:f7:49:07:8a: e2:7b:41:d3:89:a1:61:45:3f:5b:4b:82:b6:eb:6f:01:51:28: 99:72:75:81:49:31:c0:19:91:73:11:d3:4f:fc:45:43:f2:ca: 62:dd:47:9d:0d:12:61:dd:ab:fa:b7:30:c4:44:f0:86:51:de: b1:24:24:39:3d:e9:8c:c9:e9:21:a7:66:fa:99:f3:65:40:11: 8a:21:20:c5:b6:cd:ab:6a:f0:24:16:c6:d7:8c:e6:16:bf:23: 58:59:cc:b4:ae:f8:f0:1b:a4:e0:21:a2:53:30:84:44:fb:7c: 26:f1:f5:7e:04:d8:d4:08:07:09:3d:c6:37:a0:1d:52:a4:3e: ec:cb:15:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzRTIxMTAvBgNVBAUTKEY2QkE2RTYzMEE2QUE5OEQ4MjE1NjgyNjRFMDI3Qjk4 OERGNUM5QkEwHhcNMjUwNTExMDUxNTM5WhcNMjUwNTE4MDUxNTM5WjAYMRYwFAYD VQQDEw02ODIwMzI3Yy01OTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdxlNhDJaq4GIXpOfeF4iE3WNxPAe+cH4ix7fzKONSaIb8+E0EqXJAuF7GWf a1CxDbc7qYAlTQsVbqPCPryTTVnA8WavDbWLn7AwyUyYh/7rbAf/GwlZID0eaMLr bCH4q+tStqbvUiRAZ6OnnDUCAY4GajVKsK8ltH+/9ocpotKtRHr0X/6IDF9EfvxR cnz4E0NEzqpq14Q9j1m5dHrZoMnVsLGPU296XDYUxhLq6rOcQ44S2Ww2j1zXfAbu O6w4U86tcJRYjhe7bd1O4pnmecAkc+uMru+XH13280AL0q9u9TbrjRwd9XtiDJCe o7NxsiHW/KWxXI3TxCoRRXnDIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrbAa29 si4D9opIJ3ZaojuaJUOHMB8GA1UdIwQYMBaAFPa6bmMKaqmNghVoJk4Ce5iN9cm6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNFMi9EQTYyMkU5QTVC OUUxMUVGQkNEQkM1NUJDNEY5QUUwMi85cnB1WXdwcXFZMkNGV2dtVGdKN21JMzF5 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlycHVZd3BxcVkyQ0ZXZ21UZ0o3bUkzMXliby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNFMi9EQTYyMkU5QTVCOUUxMUVGQkNEQkM1NUJDNEY5QUUwMi85cnB1WXdwcXFZ MkNGV2dtVGdKN21JMzF5Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByVilq2Moyxqgz+VN52SYPV0wW+GMSJDrX0Viz3vkhF1TgJTx5NBSG u0kfw+hHjjv/0LbT7y4UcSd4xP2qk8TzC5HYmO/2op/W5z919ury02cBFIpV+tnc zv8pTlPyzejnz6SSSI7LNlg4XXhZa7N2VaLgDVDRk0CtlfdJB4rie0HTiaFhRT9b S4K2628BUSiZcnWBSTHAGZFzEdNP/EVD8spi3UedDRJh3av6tzDERPCGUd6xJCQ5 PemMyekhp2b6mfNlQBGKISDFts2ravAkFsbXjOYWvyNYWcy0rvjwG6TgIaJTMIRE +3wm8fV+BNjUCAcJPcY3oB1SpD7syxWi -----END CERTIFICATE-----Generated at Mon May 12 22:48:54 2025 by rpki-client