$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: hzZDeyhWyFA/mswnDUmRfRgtLl1DDSpDT8ljFtKWxKM= Subject key identifier: B7:DB:DC:F0:04:C0:96:2E:F7:2A:47:EC:D1:04:D3:5D:E8:DD:5B:84 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 07B2 Signing time: Sat 10 May 2025 20:52:11 +0000 Manifest this update: Sat 10 May 2025 20:52:10 +0000 Manifest next update: Sat 17 May 2025 20:52:10 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: qB9H2vW4m2OhvleLmfIUD6ZhRYeBiW1OYl3b+MCB2aU=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: ipH52NvI6j7Qm3VJ3UEcq9yvGVo2LC48K1opbVhCFvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: May 10 20:52:10 2025 GMT Not After : May 17 20:52:10 2025 GMT Subject: CN=681fbc7a-838e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:fc:62:65:df:34:ca:3e:46:8b:b1:c1:fb: d2:93:65:28:0a:57:e8:b1:d3:e0:4a:84:1e:45:c4: d4:0d:e8:f0:5e:ab:b5:9c:b9:17:b2:11:2a:d7:5e: cf:d0:4b:0e:59:d2:80:e9:18:39:3f:e2:b4:e2:8d: 6e:e3:48:10:01:46:5e:97:eb:19:3d:2d:d1:02:5e: ab:68:2e:87:fb:b6:8f:c4:d4:a5:0c:c3:27:ce:8e: a9:10:cc:fd:51:41:1b:11:35:fc:1c:b4:99:62:9f: b4:0a:62:80:37:63:7d:56:df:8b:a7:95:d3:67:fe: a3:30:d6:03:19:0e:c5:90:5e:8b:43:4b:58:67:57: c4:d5:ab:85:57:b1:06:ab:51:93:16:dd:02:d7:58: 8f:08:c4:e0:ec:bd:20:23:6a:16:bc:12:80:30:a7: 40:a6:eb:36:af:11:02:04:1b:f2:6e:b9:58:5a:d9: 57:05:d5:8c:2e:89:d3:e3:d2:7a:7e:f1:65:a5:d8: c6:7e:78:41:6c:60:67:c8:ad:1b:42:f2:4e:a1:6e: 0c:cd:71:82:1e:dd:7a:69:19:74:23:53:bf:91:95: da:7e:a9:77:4d:ff:85:47:3d:db:95:3d:fc:27:bf: ea:d2:d4:17:28:c0:b3:0b:fe:03:36:7c:21:99:6f: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DB:DC:F0:04:C0:96:2E:F7:2A:47:EC:D1:04:D3:5D:E8:DD:5B:84 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8c:8d:00:39:28:d1:e4:53:26:a9:d2:d2:ec:29:c1:61:0d: a0:de:22:46:13:7f:23:a6:4e:b6:01:d7:58:b8:ab:5b:22:5a: 37:14:ad:c9:b6:5d:42:d8:f5:17:6e:58:8a:31:f1:05:56:d0: 34:31:89:8d:0e:80:d8:84:69:6f:b4:75:98:b8:5d:bc:98:2d: eb:23:cd:ed:08:7e:ca:72:80:0f:bd:a7:8e:7d:5c:a9:e8:bc: 39:2a:af:64:31:5d:25:d9:de:e8:ed:c2:5e:fe:a3:f9:60:f4: b6:1d:4a:ef:49:c5:8a:58:43:e5:17:e0:bc:6b:57:66:7b:d9: 13:11:72:78:27:1a:94:ed:71:ba:55:38:0d:8b:84:93:0b:88: 42:61:b9:4e:3a:da:a0:57:d7:3a:e1:59:70:7c:e5:f2:09:d3: c2:3c:f6:10:62:c0:4d:5e:32:8f:8a:13:60:76:4f:a5:7e:9b: 9b:e1:53:8f:20:20:89:4f:1d:2e:0f:25:78:76:fc:82:8e:6d: b3:69:8b:a7:9e:21:78:1b:14:b4:d3:2c:f6:2a:a3:5b:3b:44: 2e:dc:e9:37:66:a6:04:7c:09:7c:55:80:c8:32:d6:87:02:e5: 61:5c:1f:6a:a2:52:e0:f8:1a:56:5a:b5:44:73:7c:1b:8b:f4: 7b:90:11:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjUwNTEwMjA1MjEwWhcNMjUwNTE3MjA1MjEwWjAYMRYwFAYD VQQDEw02ODFmYmM3YS04MzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhL8YmXfNMo+RouxwfvSk2UoClfosdPgSoQeRcTUDejwXqu1nLkXshEq117P 0EsOWdKA6Rg5P+K04o1u40gQAUZel+sZPS3RAl6raC6H+7aPxNSlDMMnzo6pEMz9 UUEbETX8HLSZYp+0CmKAN2N9Vt+Lp5XTZ/6jMNYDGQ7FkF6LQ0tYZ1fE1auFV7EG q1GTFt0C11iPCMTg7L0gI2oWvBKAMKdApus2rxECBBvybrlYWtlXBdWMLonT49J6 fvFlpdjGfnhBbGBnyK0bQvJOoW4MzXGCHt16aRl0I1O/kZXafql3Tf+FRz3blT38 J7/q0tQXKMCzC/4DNnwhmW+2pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfb3PAE wJYu9ypH7NEE013o3VuEMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALjI0AOSjR5FMmqdLS7CnBYQ2g3iJGE38jpk62AddYuKtbIlo3FK3J tl1C2PUXbliKMfEFVtA0MYmNDoDYhGlvtHWYuF28mC3rI83tCH7KcoAPvaeOfVyp 6Lw5Kq9kMV0l2d7o7cJe/qP5YPS2HUrvScWKWEPlF+C8a1dme9kTEXJ4JxqU7XG6 VTgNi4STC4hCYblOOtqgV9c64VlwfOXyCdPCPPYQYsBNXjKPihNgdk+lfpub4VOP ICCJTx0uDyV4dvyCjm2zaYunniF4GxS00yz2KqNbO0Qu3Ok3ZqYEfAl8VYDIMtaH AuVhXB9qolLg+BpWWrVEc3wbi/R7kBEB -----END CERTIFICATE-----Generated at Mon May 12 07:30:16 2025 by rpki-client