$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: Hzk03pTFmPcfLnA7pgGjC+Jj+1+RYqqtdMRdzmTinR0= Subject key identifier: 25:32:19:40:F9:32:4B:D6:05:63:D2:10:BE:E9:B3:A0:74:DE:1C:66 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: 0176 Signing time: Fri 09 May 2025 02:54:03 +0000 Manifest this update: Fri 09 May 2025 02:54:03 +0000 Manifest next update: Fri 16 May 2025 02:54:03 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: 68BWECyVTvYC04e1W2YV7Ig32cycgdORz+PL/vD2/Eg=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: ed+DKZIJR1YbPJAhfNED0AymtEOfO9waIhPjdUrWQck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: May 9 02:54:03 2025 GMT Not After : May 16 02:54:03 2025 GMT Subject: CN=681d6e4b-7ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:75:85:c2:c4:71:3a:2f:3d:8e:bd:20:3c: 41:ab:dd:dc:67:8c:ab:57:7b:17:b0:ac:83:53:3b: 98:47:58:f7:0c:dc:17:21:4d:89:ba:9a:13:71:48: ab:96:92:0a:95:de:4e:48:5f:58:e2:99:d4:64:06: e8:bd:b3:ce:c4:5d:37:a6:27:32:ae:2a:d6:0e:63: 7c:e3:bd:d1:c3:f0:3c:16:e3:8b:c6:53:96:01:70: 3e:3e:9b:49:82:2e:4e:d9:31:c1:04:a9:91:c3:36: a0:9d:01:d7:86:e4:4e:27:34:e5:06:66:60:8f:33: 38:79:90:43:55:73:c3:4f:7b:44:8f:0c:9d:19:44: ba:4e:d4:68:2f:c2:fd:8e:0d:8f:02:1f:a3:a2:bb: 1f:c0:fe:16:79:82:d9:a9:18:0c:3e:40:cf:d5:75: f7:08:0f:85:e6:fc:95:ca:a6:c2:b4:61:ac:75:e2: c4:b5:7c:44:0a:80:09:4a:b9:7f:5b:37:5f:99:05: 3a:cc:2f:55:de:7e:2a:b5:19:49:fa:48:ee:4e:a7: 6f:7b:9b:d4:64:83:07:b2:f6:96:aa:6f:49:a7:76: 15:b3:8c:be:bf:48:cc:06:75:08:bf:a3:69:08:43: 84:c0:1c:76:ce:2b:15:00:d2:f2:8a:5b:92:25:6e: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:32:19:40:F9:32:4B:D6:05:63:D2:10:BE:E9:B3:A0:74:DE:1C:66 X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:59:f1:11:b0:b5:30:0a:00:c9:01:e2:26:de:78:3e:cc:36: 83:25:79:dd:29:28:ec:61:00:be:46:88:6b:78:49:3e:5e:3c: ea:e3:48:18:d2:0e:90:ad:2f:c6:0f:14:fc:b4:fd:92:ea:71: 5f:c0:9d:29:a3:ff:68:8c:05:20:ff:af:88:1e:be:97:1c:d9: 63:b3:fb:54:d3:f4:9a:72:99:7f:26:78:10:fe:18:d4:44:b4: a5:b7:80:9b:82:83:cb:70:5e:0d:74:ce:18:38:0a:0d:83:0c: 92:06:76:fa:08:65:22:4a:57:4a:a4:61:5b:8b:81:e3:e3:b5: 43:36:ee:ca:21:73:63:74:1d:9f:e7:85:78:e4:56:7f:d9:ab: 93:9e:f2:d5:40:53:7c:56:5b:5a:3d:69:31:5c:fd:dd:04:54: 4b:99:67:86:18:0a:29:88:ef:90:0e:33:85:8d:36:8e:66:75: 41:88:50:5f:2e:ad:a3:aa:cf:6f:0b:e2:87:78:cf:fa:49:d0: a9:c6:ac:dc:c9:fe:0e:8a:b6:9a:f0:ca:25:da:0a:84:77:84: 9f:bc:20:a5:d7:a8:20:26:f3:5a:39:bb:25:e1:8c:4f:b3:0d: 11:bb:45:df:23:8e:2d:d0:13:8e:04:67:0b:c0:77:c4:d2:1e: 33:00:ce:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjUwNTA5MDI1NDAzWhcNMjUwNTE2MDI1NDAzWjAYMRYwFAYD VQQDEw02ODFkNmU0Yi03ZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2F1hcLEcTovPY69IDxBq93cZ4yrV3sXsKyDUzuYR1j3DNwXIU2JupoTcUir lpIKld5OSF9Y4pnUZAbovbPOxF03picyrirWDmN8473Rw/A8FuOLxlOWAXA+PptJ gi5O2THBBKmRwzagnQHXhuROJzTlBmZgjzM4eZBDVXPDT3tEjwydGUS6TtRoL8L9 jg2PAh+jorsfwP4WeYLZqRgMPkDP1XX3CA+F5vyVyqbCtGGsdeLEtXxECoAJSrl/ WzdfmQU6zC9V3n4qtRlJ+kjuTqdve5vUZIMHsvaWqm9Jp3YVs4y+v0jMBnUIv6Np CEOEwBx2zisVANLyiluSJW5+NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUyGUD5 MkvWBWPSEL7ps6B03hxmMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEWfERsLUwCgDJAeIm3ng+zDaDJXndKSjsYQC+RohreEk+Xjzq40gY 0g6QrS/GDxT8tP2S6nFfwJ0po/9ojAUg/6+IHr6XHNljs/tU0/Sacpl/JngQ/hjU RLSlt4CbgoPLcF4NdM4YOAoNgwySBnb6CGUiSldKpGFbi4Hj47VDNu7KIXNjdB2f 54V45FZ/2auTnvLVQFN8VltaPWkxXP3dBFRLmWeGGAopiO+QDjOFjTaOZnVBiFBf Lq2jqs9vC+KHeM/6SdCpxqzcyf4Oiraa8Mol2gqEd4SfvCCl16ggJvNaObsl4YxP sw0Ru0XfI44t0BOOBGcLwHfE0h4zAM70 -----END CERTIFICATE-----Generated at Sat May 10 13:18:42 2025 by rpki-client