$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: L4bYvWvTblF37rz4Y5h4jZlUQiC+4JmJ6Tv36jo/qAk= Subject key identifier: D2:18:BC:FF:D5:00:F6:B7:32:AE:2F:49:57:61:C4:87:59:F5:AE:F5 Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 01A0 Signing time: Sun 11 May 2025 02:17:24 +0000 Manifest this update: Sun 11 May 2025 02:17:23 +0000 Manifest next update: Sun 18 May 2025 02:17:23 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: sWAk1aBrGv7T4JjKhMJyO116vbD1Jcq2Ev0/vOfBWNw=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: May 11 02:17:23 2025 GMT Not After : May 18 02:17:23 2025 GMT Subject: CN=682008b3-977f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:ff:6b:56:36:c0:80:07:96:7d:d3:ea:01: f7:4c:de:01:54:9f:bc:67:10:0c:5d:57:8e:51:b5: cc:59:0c:51:ec:b9:2c:0c:1d:70:cd:06:5c:eb:51: f5:4c:00:00:5e:0d:af:28:6b:93:d0:69:a6:43:68: d1:84:79:cb:51:2e:96:11:d8:8d:74:18:e9:f8:18: a0:7c:25:8c:f6:b7:59:c8:ca:70:cd:55:de:2f:c1: ab:4d:20:61:94:91:ae:36:3f:bd:23:6b:c1:ae:e3: cb:18:0d:e2:e1:b9:c3:21:d4:f3:de:f8:e1:7d:e4: ec:cb:10:f6:55:fb:e4:7a:0a:a6:bd:a4:ed:e6:50: a5:da:1d:02:d2:10:ae:7a:36:80:73:a5:50:bf:7b: 33:01:b7:a4:50:a8:b3:32:0e:a8:bf:54:56:2b:c7: 05:02:f1:e3:86:00:c7:b1:9d:2a:e1:44:b8:f7:91: b5:55:82:0f:88:00:3e:46:7c:73:1d:c9:76:dd:4a: 52:31:64:4e:26:a1:e8:2a:07:58:c5:ca:89:d3:76: 9f:b9:c5:3e:24:37:72:b2:e0:5e:90:ef:4e:9a:35: 9d:a2:00:50:e7:8a:c0:06:0d:c5:a4:92:52:7d:f0: 92:7c:13:da:c3:14:dc:3a:6f:d7:73:41:c2:31:32: d6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:18:BC:FF:D5:00:F6:B7:32:AE:2F:49:57:61:C4:87:59:F5:AE:F5 X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4c:b1:af:a0:d1:2d:cf:5f:fd:4e:b1:4a:9b:93:2e:48:ff: 8b:52:04:2c:3b:85:a3:82:8d:8e:b1:65:23:e0:c9:de:7a:4d: 85:28:04:ad:af:ee:d9:39:2a:27:bc:dd:ea:7a:98:93:ac:4b: f3:09:48:43:e3:9f:22:f0:dd:04:57:fd:c2:6c:80:25:a7:b2: b2:f0:fa:71:f2:0b:70:80:33:cd:b9:7b:57:fd:e7:c2:a9:4c: 9b:3a:ba:32:37:12:04:c8:44:f6:65:6b:46:94:03:0f:01:98: 06:32:fc:19:4e:17:47:89:ae:9d:f3:8c:69:6b:fc:ee:e7:23: 66:97:87:48:3b:5d:85:00:69:2c:ac:85:01:24:41:7d:7c:11: a4:77:16:23:27:5c:3d:af:ac:ee:52:30:51:bb:96:66:62:fe: 22:4f:7d:5f:08:fe:57:24:20:71:8a:97:5d:3c:3e:f5:b5:a0: 29:3e:6e:03:18:4e:e2:c4:f6:e2:a9:c2:76:03:1c:0a:d7:c1: 5d:63:d3:1a:06:82:67:b5:53:93:cb:d7:af:08:16:28:d1:53: d0:44:2e:f0:92:c8:b2:8a:42:cd:da:4f:31:89:13:ab:f1:a6: 9b:8e:f8:34:69:ec:68:a4:51:53:f7:aa:ab:f6:fb:03:7b:4e: 58:a0:5e:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjUwNTExMDIxNzIzWhcNMjUwNTE4MDIxNzIzWjAYMRYwFAYD VQQDEw02ODIwMDhiMy05NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBj/a1Y2wIAHln3T6gH3TN4BVJ+8ZxAMXVeOUbXMWQxR7LksDB1wzQZc61H1 TAAAXg2vKGuT0GmmQ2jRhHnLUS6WEdiNdBjp+BigfCWM9rdZyMpwzVXeL8GrTSBh lJGuNj+9I2vBruPLGA3i4bnDIdTz3vjhfeTsyxD2VfvkegqmvaTt5lCl2h0C0hCu ejaAc6VQv3szAbekUKizMg6ov1RWK8cFAvHjhgDHsZ0q4US495G1VYIPiAA+Rnxz Hcl23UpSMWROJqHoKgdYxcqJ03afucU+JDdysuBekO9OmjWdogBQ54rABg3FpJJS ffCSfBPawxTcOm/Xc0HCMTLWuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIYvP/V APa3Mq4vSVdhxIdZ9a71MB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCITLGvoNEtz1/9TrFKm5MuSP+LUgQsO4Wjgo2OsWUj4Mneek2FKASt r+7ZOSonvN3qepiTrEvzCUhD458i8N0EV/3CbIAlp7Ky8Ppx8gtwgDPNuXtX/efC qUybOroyNxIEyET2ZWtGlAMPAZgGMvwZThdHia6d84xpa/zu5yNml4dIO12FAGks rIUBJEF9fBGkdxYjJ1w9r6zuUjBRu5ZmYv4iT31fCP5XJCBxipddPD71taApPm4D GE7ixPbiqcJ2AxwK18FdY9MaBoJntVOTy9evCBYo0VPQRC7wksiyikLN2k8xiROr 8aabjvg0aexopFFT96qr9vsDe05YoF6L -----END CERTIFICATE-----Generated at Mon May 12 14:34:25 2025 by rpki-client