$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: jlCze7hroAVArvOaoIrKRW/mlsvz1XB40+rfvUvUkvI= Subject key identifier: DC:70:37:C1:03:1A:CB:06:7F:C3:99:E0:4F:A3:A4:A8:EB:25:E0:5F Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 0332 Signing time: Fri 09 May 2025 00:52:22 +0000 Manifest this update: Fri 09 May 2025 00:52:21 +0000 Manifest next update: Fri 16 May 2025 00:52:21 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: YykJun5tH5ppiQjHsWfgo4wRrGjAfSbt5WmEZt0Htns=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: AvM4EHFc35a+/i0JOm+PYVnypM/t1zc/v7lGdHSDzQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: May 9 00:52:21 2025 GMT Not After : May 16 00:52:21 2025 GMT Subject: CN=681d51c5-4a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:b9:1a:b1:11:7c:0d:ae:ef:fd:50:22:65: 61:88:79:07:59:fb:fe:19:c0:f1:dc:84:d6:d7:25: 11:95:50:c5:26:f9:f3:83:4a:b9:24:64:22:2f:4c: be:ba:73:3e:3d:9c:8c:79:fc:b2:45:9f:8d:93:ac: 0e:c1:8d:7b:bd:03:8d:9b:7f:94:7f:79:92:bb:b6: 83:fe:3c:3a:e9:4a:ed:96:92:cb:1a:5a:58:24:6c: f6:30:28:f6:72:f2:8a:13:43:2a:ed:33:f2:96:e9: 9e:51:67:30:bf:3a:be:25:3a:51:a2:72:e0:6b:28: 7a:12:af:06:b8:dd:01:ad:c0:3e:95:0e:05:9f:96: 16:1a:d7:fe:3f:20:5f:7b:f0:ef:cd:4c:7e:29:09: 96:04:e4:00:cd:52:10:f8:78:ab:2c:c7:09:8f:e3: 6e:67:bc:b8:cf:32:7b:e4:1f:91:33:ff:08:ab:ad: e9:c8:ae:21:25:76:e7:bb:19:2f:69:34:e6:46:f1: 80:47:b9:82:f5:84:c9:56:8f:b7:72:ba:b8:f7:60: 7e:c4:53:c3:2a:d2:00:6d:9b:4e:c6:fb:d1:c5:32: c5:75:f2:e7:38:db:a9:14:49:ae:35:14:55:4b:78: ca:a9:ac:66:f1:eb:c2:33:09:01:9e:d5:78:71:22: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:70:37:C1:03:1A:CB:06:7F:C3:99:E0:4F:A3:A4:A8:EB:25:E0:5F X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b6:2b:79:4d:2c:74:f5:2b:a4:f0:ab:43:28:0d:c0:79:82: 3a:58:7d:2f:94:45:5f:bf:6a:eb:c7:50:c2:d3:e1:2a:51:d0: 90:06:61:42:5c:cb:a1:ae:5c:85:e9:c1:0d:5d:c3:d9:dc:bf: db:02:2d:3a:ed:ab:fa:d7:da:f3:84:35:74:2c:c7:98:53:b2: a9:8a:bf:a9:eb:e4:06:3b:ee:bd:ea:9f:04:5e:67:a4:50:32: 58:0d:4e:bf:c1:71:5a:81:3e:85:71:e6:1d:0d:2f:d2:3c:e2: 57:0e:5f:32:8b:c1:64:9c:69:e8:1f:b8:87:44:0d:cc:f9:1e: ff:5a:29:a6:6c:a6:06:01:f1:de:a9:74:c4:f6:9e:7e:a5:51: 6c:d1:82:99:bc:91:8e:69:3f:f9:58:ca:6d:43:ea:c8:51:a2: 9b:39:fc:9f:a0:17:4a:8c:45:66:f9:be:72:4f:e7:cc:e4:d2: f3:4a:ec:4e:69:8d:80:e6:fa:c2:5f:a0:25:5e:9f:fe:5a:d7: 89:6c:4b:bf:6c:10:73:be:ca:07:34:c4:72:4e:a8:3f:0b:c0: de:3d:66:c3:5b:bb:5d:5b:62:08:7b:6d:fa:80:70:49:ef:ed: 65:e7:b1:53:20:a0:21:1d:68:3e:2b:f6:80:a1:16:1d:f7:5d: 63:88:a8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjUwNTA5MDA1MjIxWhcNMjUwNTE2MDA1MjIxWjAYMRYwFAYD VQQDEw02ODFkNTFjNS00YTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoK5GrERfA2u7/1QImVhiHkHWfv+GcDx3ITW1yURlVDFJvnzg0q5JGQiL0y+ unM+PZyMefyyRZ+Nk6wOwY17vQONm3+Uf3mSu7aD/jw66UrtlpLLGlpYJGz2MCj2 cvKKE0Mq7TPylumeUWcwvzq+JTpRonLgayh6Eq8GuN0BrcA+lQ4Fn5YWGtf+PyBf e/DvzUx+KQmWBOQAzVIQ+HirLMcJj+NuZ7y4zzJ75B+RM/8Iq63pyK4hJXbnuxkv aTTmRvGAR7mC9YTJVo+3crq492B+xFPDKtIAbZtOxvvRxTLFdfLnONupFEmuNRRV S3jKqaxm8evCMwkBntV4cSKBvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxwN8ED GssGf8OZ4E+jpKjrJeBfMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCltit5TSx09Suk8KtDKA3AeYI6WH0vlEVfv2rrx1DC0+EqUdCQBmFC XMuhrlyF6cENXcPZ3L/bAi067av619rzhDV0LMeYU7Kpir+p6+QGO+696p8EXmek UDJYDU6/wXFagT6FceYdDS/SPOJXDl8yi8FknGnoH7iHRA3M+R7/WimmbKYGAfHe qXTE9p5+pVFs0YKZvJGOaT/5WMptQ+rIUaKbOfyfoBdKjEVm+b5yT+fM5NLzSuxO aY2A5vrCX6AlXp/+WteJbEu/bBBzvsoHNMRyTqg/C8DePWbDW7tdW2IIe236gHBJ 7+1l57FTIKAhHWg+K/aAoRYd911jiKjh -----END CERTIFICATE-----Generated at Sat May 10 04:48:10 2025 by rpki-client