$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: ZJ834aLjkNJYGCsME/4s1dPjl4rw9A6tUS6mT6KdtGQ= Subject key identifier: B4:74:A6:96:90:48:B0:72:32:23:0A:A1:19:AF:1D:25:4B:2F:C7:B7 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 0FBB Signing time: Wed 14 May 2025 17:50:27 +0000 Manifest this update: Wed 14 May 2025 17:50:27 +0000 Manifest next update: Wed 21 May 2025 17:50:27 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: kOLrgLOc3AWUjxhPZWHogArvp4QHL3nihcqQdpZuN8Y=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: sNPYnaNgf0/KN19CYq8xhtZnGWDk4qYxL4ZVFrLDAZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: May 14 17:50:27 2025 GMT Not After : May 21 17:50:27 2025 GMT Subject: CN=6824d7e3-4564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:68:eb:4b:0d:f6:bc:33:c0:c0:a5:c5:fd: 99:84:ca:91:5d:0b:c2:d3:21:aa:cc:a7:80:ba:f9: 1f:94:30:aa:88:21:73:fe:ce:f6:57:79:5c:a0:be: b1:79:4e:8e:64:80:24:d7:fe:4b:5e:ad:d5:33:3a: fc:32:2a:8d:4a:1d:b3:28:03:6d:42:d4:38:80:89: 69:0f:51:32:53:41:dd:a8:5f:6d:97:95:fa:1a:c9: 04:1d:dc:9a:41:3f:c9:94:ff:f7:42:0e:b1:59:48: 90:cc:be:e7:d7:70:65:c9:ce:b0:34:9e:83:e7:4d: 88:32:49:89:44:2a:8b:e2:10:d8:bc:b3:c6:aa:5d: ff:9d:a0:8b:b4:bf:4b:a2:0a:39:ea:d3:a1:2b:b8: ec:ab:fd:c5:80:7a:5b:17:d3:e4:35:6c:8c:80:32: 71:6d:60:01:1d:d0:c9:19:9d:fb:c4:8e:9c:91:bc: 42:76:ea:f8:72:25:7e:0b:6d:ee:d5:3f:74:bf:1d: e8:e2:59:cf:b1:01:24:5c:6b:1a:88:ba:64:e1:72: e0:e1:13:f5:e9:bf:5e:39:e4:eb:48:ae:02:77:0c: 3e:73:de:30:9a:48:95:19:dc:e7:3a:db:f0:82:a0: 38:9a:fb:38:be:97:be:e9:75:f5:98:39:66:b9:89: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:74:A6:96:90:48:B0:72:32:23:0A:A1:19:AF:1D:25:4B:2F:C7:B7 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:e1:1d:3c:36:05:f1:b1:37:9c:9a:ca:bc:73:f5:1d:d0:5d: 65:aa:7a:82:c2:8c:5f:eb:d6:b5:aa:b7:87:af:da:4c:9f:21: e2:dd:e3:9f:e8:91:90:57:d4:02:ed:45:ac:5d:8e:af:8a:13: 36:76:57:2d:a4:d8:8f:99:fd:d0:49:6a:a0:ec:0c:3e:8f:21: 20:9d:b8:5f:57:bb:3e:65:4c:96:03:28:d3:4d:2a:29:b6:f4: bf:4d:b6:3e:fc:69:2b:c1:3e:e7:95:5f:a0:6b:f4:64:1c:97: aa:6f:48:be:2e:f0:6e:05:f5:1c:50:a8:1a:c6:fe:c9:fe:0b: 6a:de:2a:bd:cf:9a:03:3c:6b:f7:8a:b8:34:3e:d1:87:9d:c4: 32:72:43:ab:94:2a:c3:87:9c:bc:34:8f:03:11:f0:c7:08:a6: 9c:da:16:af:71:6e:8e:37:6f:58:14:1d:8f:e8:85:81:18:86: bb:de:9c:ee:1a:06:1d:9f:12:6f:31:4a:a6:45:1f:f1:a1:62: 10:a3:a1:37:d2:35:66:47:29:e7:4d:0f:a3:9a:0a:46:d0:2b: 2d:b9:0a:3e:4d:bf:ac:9d:0f:20:bc:28:ea:30:6b:09:82:79: 91:b3:39:47:99:7e:73:4b:69:e2:f8:92:0f:af:3e:4b:03:dc: 0f:8a:10:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUwNTE0MTc1MDI3WhcNMjUwNTIxMTc1MDI3WjAYMRYwFAYD VQQDEw02ODI0ZDdlMy00NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHZo60sN9rwzwMClxf2ZhMqRXQvC0yGqzKeAuvkflDCqiCFz/s72V3lcoL6x eU6OZIAk1/5LXq3VMzr8MiqNSh2zKANtQtQ4gIlpD1EyU0HdqF9tl5X6GskEHdya QT/JlP/3Qg6xWUiQzL7n13Blyc6wNJ6D502IMkmJRCqL4hDYvLPGql3/naCLtL9L ogo56tOhK7jsq/3FgHpbF9PkNWyMgDJxbWABHdDJGZ37xI6ckbxCdur4ciV+C23u 1T90vx3o4lnPsQEkXGsaiLpk4XLg4RP16b9eOeTrSK4Cdww+c94wmkiVGdznOtvw gqA4mvs4vpe+6XX1mDlmuYl4OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLR0ppaQ SLByMiMKoRmvHSVLL8e3MB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC84R08NgXxsTecmsq8c/Ud0F1lqnqCwoxf69a1qreHr9pMnyHi3eOf 6JGQV9QC7UWsXY6vihM2dlctpNiPmf3QSWqg7Aw+jyEgnbhfV7s+ZUyWAyjTTSop tvS/TbY+/GkrwT7nlV+ga/RkHJeqb0i+LvBuBfUcUKgaxv7J/gtq3iq9z5oDPGv3 irg0PtGHncQyckOrlCrDh5y8NI8DEfDHCKac2havcW6ON29YFB2P6IWBGIa73pzu GgYdnxJvMUqmRR/xoWIQo6E30jVmRynnTQ+jmgpG0CstuQo+Tb+snQ8gvCjqMGsJ gnmRszlHmX5zS2ni+JIPrz5LA9wPihAi -----END CERTIFICATE-----Generated at Fri May 16 13:01:16 2025 by rpki-client