$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: oXvlYaGyLp40z/xZcACG2Siy0TyZA8fpIxXVL294D9s= Subject key identifier: 39:EC:C4:57:02:8C:81:30:BE:E2:6C:AE:95:7F:F3:43:13:8B:C9:D3 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 025E Signing time: Sun 11 May 2025 01:18:31 +0000 Manifest this update: Sun 11 May 2025 01:18:31 +0000 Manifest next update: Sun 18 May 2025 01:18:31 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: Vz1r+qQWwRwYGy/YWMXoawfprtTq9e960ABAWBlXwzE=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: zKt5rIlG3Ic7UH3iJOhsHCuRIq5p4/W7QWgInl/Ff3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: May 11 01:18:31 2025 GMT Not After : May 18 01:18:31 2025 GMT Subject: CN=681ffae7-a9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ab:fc:fa:9e:f7:d9:47:fe:70:95:ec:67:7d: 5d:39:f0:66:b7:41:ac:82:77:9b:5b:6e:57:fd:cc: c0:f1:36:b7:7f:ca:90:09:9a:53:47:9c:15:06:ba: 1d:95:8b:12:6c:b8:31:59:cf:46:31:f3:dd:10:e6: c3:2b:0c:af:69:1d:16:37:0b:92:57:ea:37:8f:d7: df:9a:2d:b9:39:f8:10:ea:33:4e:d1:69:d0:66:e9: 2a:e5:18:55:da:37:12:fc:53:94:a7:47:04:12:0e: 99:24:00:21:18:06:f4:59:7c:61:2e:31:0b:0c:eb: e5:47:46:37:ad:17:09:ca:75:81:9b:9d:11:51:f9: 63:66:e0:90:b3:06:56:b7:e2:74:00:88:10:66:a2: d4:72:38:d7:81:b4:e8:b2:a3:87:a2:63:bd:87:a6: 90:2d:1c:75:56:3a:62:4a:10:2a:15:f6:5c:f2:95: fa:93:e3:92:d4:fd:83:49:df:82:0d:95:d0:fc:51: 21:c9:db:1e:ab:90:af:c6:05:57:54:c3:d8:c6:ed: eb:05:51:b4:c1:8a:d9:26:b1:f5:25:1d:f9:90:c8: 52:e8:19:88:5d:6e:17:16:5e:1c:16:9c:bc:ea:a9: b2:4c:18:ce:ba:a4:9d:9b:00:05:fe:87:37:ba:de: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:C4:57:02:8C:81:30:BE:E2:6C:AE:95:7F:F3:43:13:8B:C9:D3 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:0f:d6:69:5d:7a:c6:46:10:ea:1f:ba:95:d2:51:6d:8b:e8: ac:19:45:15:a0:a2:b8:2c:8d:89:0b:5e:cb:1f:7b:8d:27:98: f5:ba:70:bd:74:63:91:83:fb:a6:ac:75:17:b9:82:70:d5:6a: b9:d5:8e:f0:a3:90:05:fd:dc:2c:5d:b4:40:03:24:80:6e:84: 49:ea:38:c0:64:f0:d9:18:c7:32:f2:02:e2:34:95:9b:62:83: 3b:65:7e:51:78:4b:38:29:07:ed:35:8e:d3:61:c0:5c:a1:e9: 35:63:52:d9:e5:f4:f6:a1:3b:14:ac:a9:ab:77:7a:60:19:95: fa:25:96:46:31:fa:1c:ca:ea:a8:4c:25:04:f5:9f:62:4e:b6: fa:83:d7:f3:7e:99:53:61:c8:6c:a2:99:54:ad:bc:30:93:c1: 36:49:0c:43:dc:52:ba:b2:eb:9b:46:c4:53:87:ec:d2:59:80: 05:d9:43:83:47:bd:bb:dc:0f:b6:8f:fa:82:8c:96:82:f0:07: bf:b5:2d:68:13:43:a5:9b:3c:c7:69:a3:79:72:8d:ad:9b:c3: 7f:62:b2:f1:dc:0a:20:61:b0:49:79:0f:83:03:4e:2f:02:b2: ad:64:19:32:27:70:07:6a:0c:c0:67:95:ef:4d:3d:e8:d2:43: 80:68:0f:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUwNTExMDExODMxWhcNMjUwNTE4MDExODMxWjAYMRYwFAYD VQQDEw02ODFmZmFlNy1hOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qv8+p732Uf+cJXsZ31dOfBmt0GsgnebW25X/czA8Ta3f8qQCZpTR5wVBrod lYsSbLgxWc9GMfPdEObDKwyvaR0WNwuSV+o3j9ffmi25OfgQ6jNO0WnQZukq5RhV 2jcS/FOUp0cEEg6ZJAAhGAb0WXxhLjELDOvlR0Y3rRcJynWBm50RUfljZuCQswZW t+J0AIgQZqLUcjjXgbTosqOHomO9h6aQLRx1VjpiShAqFfZc8pX6k+OS1P2DSd+C DZXQ/FEhydseq5CvxgVXVMPYxu3rBVG0wYrZJrH1JR35kMhS6BmIXW4XFl4cFpy8 6qmyTBjOuqSdmwAF/oc3ut7NMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnsxFcC jIEwvuJsrpV/80MTi8nTMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVD9ZpXXrGRhDqH7qV0lFti+isGUUVoKK4LI2JC17LH3uNJ5j1unC9 dGORg/umrHUXuYJw1Wq51Y7wo5AF/dwsXbRAAySAboRJ6jjAZPDZGMcy8gLiNJWb YoM7ZX5ReEs4KQftNY7TYcBcoek1Y1LZ5fT2oTsUrKmrd3pgGZX6JZZGMfocyuqo TCUE9Z9iTrb6g9fzfplTYchsoplUrbwwk8E2SQxD3FK6suubRsRTh+zSWYAF2UOD R7273A+2j/qCjJaC8Ae/tS1oE0OlmzzHaaN5co2tm8N/YrLx3AogYbBJeQ+DA04v ArKtZBkyJ3AHagzAZ5XvTT3o0kOAaA/v -----END CERTIFICATE-----Generated at Sun May 11 15:35:42 2025 by rpki-client