$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: a64isPxLg+Wk9ME/aJsTsxqdhaC/HLDxzLUEGNfliDk= Subject key identifier: AF:10:85:9B:E5:9F:69:AD:5C:A8:5C:52:1C:C6:D0:20:57:BE:A9:B8 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 01D0 Signing time: Fri 09 May 2025 02:01:49 +0000 Manifest this update: Fri 09 May 2025 02:01:48 +0000 Manifest next update: Fri 16 May 2025 02:01:48 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: aoYmWyk5DeKKEExMp0FR29t0TtgUmIF3qPZBJ0wUkBQ=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: May 9 02:01:48 2025 GMT Not After : May 16 02:01:48 2025 GMT Subject: CN=681d620d-aa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:2e:a7:bb:67:6f:ab:20:33:27:b0:8f:dc: c1:b8:f6:78:c3:b2:20:25:39:b1:59:13:96:cb:13: 72:c8:7c:dc:55:76:0b:b7:d0:47:7c:fd:2c:56:65: 7c:7f:34:eb:a7:0b:03:c2:85:e3:54:6d:6c:2a:1e: e4:ca:c5:f0:83:8d:ae:39:11:0a:f3:95:e5:68:43: 08:2d:95:c5:ef:eb:3b:78:73:2e:ec:fb:af:34:7f: 0b:0a:d3:b3:af:cc:11:e0:93:1c:bf:9f:7f:4c:a2: 71:e5:a8:8c:a1:17:3c:13:0a:51:bb:1e:91:5c:63: 1f:ef:2e:cb:2d:f1:5a:5d:12:6f:a4:e8:06:79:f4: af:fc:22:3b:0b:91:38:b0:ef:87:71:0a:ba:56:05: 4e:ad:14:61:04:a2:8e:4c:d2:c0:80:59:02:75:77: 47:30:0d:0b:94:a7:f6:92:e9:43:00:bb:50:f0:f8: 7e:85:09:04:e3:e4:fa:d3:c4:26:cd:98:62:ad:cb: e4:fe:29:a7:b3:7e:d6:15:18:e6:7d:b8:70:ea:d6: 2c:9d:0a:7d:10:d9:d9:2c:ef:44:5e:88:8d:d6:27: 63:e6:15:e0:7c:05:09:8c:49:06:68:d8:d3:e7:8a: 15:93:95:52:24:79:d9:cf:2e:ce:2f:5c:b7:f6:52: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:10:85:9B:E5:9F:69:AD:5C:A8:5C:52:1C:C6:D0:20:57:BE:A9:B8 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:98:23:ba:5d:5e:1c:2d:59:5f:74:71:5b:d0:97:35:49:6a: 2d:57:1a:8b:96:82:48:74:b7:92:43:ba:5a:6f:25:aa:b8:74: 8d:4f:28:08:84:a5:54:a1:2e:c8:90:b3:80:f1:08:27:82:4c: a9:01:0b:72:26:2b:6c:d4:43:c8:10:cc:c7:21:f3:d6:97:30: 55:3a:46:31:b5:13:c2:30:f8:26:87:07:6d:d4:19:27:85:1c: c8:c3:7b:13:f6:92:e6:5e:77:e7:c7:ca:37:d5:40:33:ee:c6: 7b:a1:d8:ef:97:a7:ff:a5:19:13:5d:7f:de:fe:7c:77:83:71: 5d:fc:aa:41:ba:32:cf:72:a0:1d:82:47:e6:4e:cb:3d:45:e2: a6:95:27:b5:ef:34:2d:2f:d8:92:4a:2b:36:d2:f8:16:19:5a: d3:bc:95:da:67:a6:4d:35:78:94:55:5e:0f:4d:34:7a:00:7c: 84:de:04:23:2d:58:b9:88:98:74:5e:06:8e:d1:27:3c:7a:5e: 48:a0:d0:65:5e:39:ed:36:3e:5d:9a:3a:6b:ed:0f:53:bb:4b: 44:4e:cf:dc:e1:9a:33:86:78:da:e7:f7:86:87:c7:6c:11:0c: e0:38:75:b8:58:c6:ad:11:ee:dc:af:a1:e3:4c:0d:83:07:4e: c1:88:e6:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUwNTA5MDIwMTQ4WhcNMjUwNTE2MDIwMTQ4WjAYMRYwFAYD VQQDEw02ODFkNjIwZC1hYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBUup7tnb6sgMyewj9zBuPZ4w7IgJTmxWROWyxNyyHzcVXYLt9BHfP0sVmV8 fzTrpwsDwoXjVG1sKh7kysXwg42uOREK85XlaEMILZXF7+s7eHMu7PuvNH8LCtOz r8wR4JMcv59/TKJx5aiMoRc8EwpRux6RXGMf7y7LLfFaXRJvpOgGefSv/CI7C5E4 sO+HcQq6VgVOrRRhBKKOTNLAgFkCdXdHMA0LlKf2kulDALtQ8Ph+hQkE4+T608Qm zZhircvk/imns37WFRjmfbhw6tYsnQp9ENnZLO9EXoiN1idj5hXgfAUJjEkGaNjT 54oVk5VSJHnZzy7OL1y39lLI8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8QhZvl n2mtXKhcUhzG0CBXvqm4MB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkmCO6XV4cLVlfdHFb0Jc1SWotVxqLloJIdLeSQ7pabyWquHSNTygI hKVUoS7IkLOA8QgngkypAQtyJits1EPIEMzHIfPWlzBVOkYxtRPCMPgmhwdt1Bkn hRzIw3sT9pLmXnfnx8o31UAz7sZ7odjvl6f/pRkTXX/e/nx3g3Fd/KpBujLPcqAd gkfmTss9ReKmlSe17zQtL9iSSis20vgWGVrTvJXaZ6ZNNXiUVV4PTTR6AHyE3gQj LVi5iJh0XgaO0Sc8el5IoNBlXjntNj5dmjpr7Q9Tu0tETs/c4Zozhnja5/eGh8ds EQzgOHW4WMatEe7cr6HjTA2DB07BiOZA -----END CERTIFICATE-----Generated at Fri May 9 06:25:55 2025 by rpki-client