$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: 2boEMoXJ4GvJulGhAuftyrtqDCL1py5y7zJrh5F/qtQ= Subject key identifier: DD:E4:D9:40:CF:DC:F6:73:51:D4:CC:A6:BC:A9:C0:5E:F4:35:AB:00 Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: 7F Signing time: Tue 13 May 2025 05:50:46 +0000 Manifest this update: Tue 13 May 2025 05:50:46 +0000 Manifest next update: Tue 20 May 2025 05:50:46 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: i8HuH4WCIRbv6UqZw7EfXBvcmeeXPSl7Jp2aViDtvWY=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: May 13 05:50:46 2025 GMT Not After : May 20 05:50:46 2025 GMT Subject: CN=6822ddb6-74b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:22:e3:f0:53:75:8e:5d:eb:22:40:25:ce: ff:45:1b:1f:c7:be:c1:6a:f4:a2:db:52:e2:fc:53: 6f:80:6d:85:e2:af:e0:a4:3b:af:87:6a:c3:3d:22: 75:ab:8a:4b:7b:18:d1:13:6b:02:bc:d6:38:60:89: ae:ac:af:07:33:89:d7:3a:68:7c:2d:98:ff:87:b8: 75:c6:b0:a5:71:9f:e8:fb:61:72:80:5c:8d:1b:db: 0e:78:1c:44:1c:0f:9a:91:71:0c:ae:42:1e:0a:8a: de:44:fe:b1:3e:1f:e3:51:02:26:25:f2:0b:c4:79: 71:77:63:b1:b1:cb:30:59:3f:c8:0e:0f:92:e9:cd: 84:6b:1e:2e:32:d0:e3:8e:11:37:07:e6:57:13:d5: 6d:81:c8:3c:6f:50:5f:78:71:ab:43:87:9b:50:a3: 6d:e9:e1:a2:d6:f5:02:1f:3d:53:1d:8d:8b:d1:b9: 6c:ea:e8:3e:8d:3d:f4:97:0f:6f:1d:19:48:f5:0c: 1a:a3:7d:77:d1:25:d8:ed:96:16:92:60:00:40:7e: fe:a0:98:f5:06:ae:71:9b:d8:fa:c1:bb:2e:0a:0f: 34:27:69:c8:2e:8a:0b:15:a8:90:08:c7:43:8f:da: 12:4b:18:ac:eb:f9:8e:06:13:75:8b:11:ce:3b:59: 5a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E4:D9:40:CF:DC:F6:73:51:D4:CC:A6:BC:A9:C0:5E:F4:35:AB:00 X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:30:49:65:ac:13:1a:a6:1a:87:e3:af:a0:6a:48:29:86:16: f6:ab:01:6e:09:03:c5:8d:e4:2e:7b:95:75:8d:55:43:9d:59: 1c:d7:de:0f:fa:89:79:b8:34:c2:41:20:1c:05:98:77:ed:11: dc:74:c7:62:f7:ae:46:a7:1d:65:7d:e7:ec:04:ad:2a:ad:0e: f4:3c:c0:1d:4d:24:78:d6:2e:cf:d5:4e:8a:ed:73:cd:a0:1c: 64:50:d8:01:cb:4f:da:fd:90:8d:9a:3a:21:69:ab:2b:12:ff: 4c:bd:67:75:44:0d:4c:69:77:eb:aa:5f:8b:00:2f:da:1a:38: ad:99:ba:09:7d:e7:b8:13:ab:d1:06:41:a1:fa:8f:7d:9f:f0: b2:ff:cf:aa:9c:e3:0d:92:9a:6c:ed:b7:fe:d8:47:4e:3b:af: 3d:f3:09:3e:78:43:c6:0c:92:6e:42:eb:d3:72:29:62:4f:54: 87:de:1d:53:c9:50:7d:fe:ca:db:69:e3:f4:9f:d4:bf:69:d5: d9:d1:60:37:01:5c:c7:a6:30:c9:60:e8:18:2c:8a:59:c1:cc: 92:7d:ff:46:4c:7b:9b:50:3d:20:cd:91:12:92:8b:73:90:a2: 1f:e0:04:25:2e:c0:5a:61:fb:a0:30:f2:61:c9:43:20:d1:aa: e9:2e:20:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjUwNTEzMDU1MDQ2WhcNMjUwNTIwMDU1MDQ2WjAYMRYwFAYD VQQDEw02ODIyZGRiNi03NGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlYi4/BTdY5d6yJAJc7/RRsfx77BavSi21Li/FNvgG2F4q/gpDuvh2rDPSJ1 q4pLexjRE2sCvNY4YImurK8HM4nXOmh8LZj/h7h1xrClcZ/o+2FygFyNG9sOeBxE HA+akXEMrkIeCoreRP6xPh/jUQImJfILxHlxd2OxscswWT/IDg+S6c2Eax4uMtDj jhE3B+ZXE9Vtgcg8b1BfeHGrQ4ebUKNt6eGi1vUCHz1THY2L0bls6ug+jT30lw9v HRlI9Qwao3130SXY7ZYWkmAAQH7+oJj1Bq5xm9j6wbsuCg80J2nILooLFaiQCMdD j9oSSxis6/mOBhN1ixHOO1laQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3k2UDP 3PZzUdTMprypwF70NasAMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlMEllrBMaphqH46+gakgphhb2qwFuCQPFjeQue5V1jVVDnVkc194P +ol5uDTCQSAcBZh37RHcdMdi965Gpx1lfefsBK0qrQ70PMAdTSR41i7P1U6K7XPN oBxkUNgBy0/a/ZCNmjohaasrEv9MvWd1RA1MaXfrql+LAC/aGjitmboJfee4E6vR BkGh+o99n/Cy/8+qnOMNkpps7bf+2EdOO6898wk+eEPGDJJuQuvTciliT1SH3h1T yVB9/srbaeP0n9S/adXZ0WA3AVzHpjDJYOgYLIpZwcySff9GTHubUD0gzZESkotz kKIf4AQlLsBaYfugMPJhyUMg0arpLiA8 -----END CERTIFICATE-----Generated at Wed May 14 03:06:31 2025 by rpki-client