$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: Fs41Y11cpLMXsib9irUqq7MAbVE/IznrtY0tPgElL6Q= Subject key identifier: 3E:2C:9B:CF:B2:F4:A0:92:CA:5B:D5:B9:CC:A0:5D:31:45:C0:1E:25 Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: 74 Signing time: Thu 15 May 2025 06:05:05 +0000 Manifest this update: Thu 15 May 2025 06:05:05 +0000 Manifest next update: Thu 22 May 2025 06:05:05 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: VEDCC0lsAwuCimbEm8eYkcT8edKdeKv8tlSaGSZK++o=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: May 15 06:05:05 2025 GMT Not After : May 22 06:05:05 2025 GMT Subject: CN=68258411-d4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:14:65:f8:43:31:5e:eb:d4:2d:b7:50:ef: 06:e3:2a:2e:24:98:11:1b:27:c7:dd:a7:70:05:31: b9:8f:b8:44:95:a3:71:c4:cd:d3:8e:24:a4:32:b6: b0:b7:1c:d0:73:c6:e9:8a:a0:a0:00:97:1d:b3:69: e2:37:5f:27:75:38:c9:b6:49:e0:fb:f9:b8:d4:ea: dc:b1:0a:85:9c:86:cf:fa:5b:b5:5c:5c:7c:00:e0: c7:2a:bc:0d:dc:63:02:56:73:98:4a:88:dd:88:a0: 53:96:2c:6c:fc:81:80:ed:a4:10:9c:45:82:9f:21: d6:a8:a8:35:d6:42:9b:44:7d:d3:7b:ab:b9:3b:57: 8f:0c:72:c0:eb:56:2c:7b:25:be:78:18:27:e2:af: 8f:9d:25:a2:7c:bc:a7:61:cb:81:a8:73:06:d4:39: 4f:a8:a8:fa:f5:57:9c:64:73:50:ee:a8:1f:9e:21: e5:21:36:64:66:32:f2:48:29:75:4c:1e:0b:54:67: da:34:a8:2d:78:e4:50:77:d9:b3:c8:6b:72:0c:0f: 73:b6:82:46:21:9c:7c:87:ff:0c:2c:25:dc:c0:4a: c6:d3:2e:fa:ba:6c:48:3a:ea:e7:d6:a4:60:9a:bd: f7:69:b8:86:1b:93:7c:57:46:66:51:fc:3d:bd:72: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2C:9B:CF:B2:F4:A0:92:CA:5B:D5:B9:CC:A0:5D:31:45:C0:1E:25 X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:45:0d:bd:b1:88:f9:0d:59:a0:b1:7f:95:0c:21:91:f6:1e: c9:11:ff:c5:e3:1f:01:ac:47:98:66:da:a3:80:8a:70:34:87: 2a:cf:a9:82:0e:42:1e:41:a4:c2:25:44:81:d3:6f:e0:9e:1a: 66:59:d7:86:99:b5:4b:5c:ac:10:91:0a:59:4a:1c:30:5a:6f: 45:ce:9b:52:7e:db:a2:dc:50:ae:29:05:2e:50:9a:6d:1d:65: 3f:7a:19:bc:f6:cb:e7:a8:83:6e:20:6a:12:9b:39:99:bb:1d: 3e:a9:09:56:f5:4d:b0:33:e1:b7:93:23:ee:37:78:04:f9:4d: 2e:4a:98:b8:b2:8c:a8:6b:fc:40:90:39:82:e2:5d:c5:3a:5c: 3e:e3:bc:99:85:dd:aa:89:dd:25:17:1f:14:e8:76:aa:ae:70: cd:12:1c:45:56:36:0e:70:ca:b3:50:f2:e7:90:bc:83:ee:ba: 38:c8:bf:34:c0:3b:ad:1d:cd:b3:c9:3f:e7:6c:be:ba:3a:ba: 13:3d:db:1f:6c:c4:f5:54:ad:c2:8c:14:a7:88:15:6e:d1:c7: 14:b5:70:47:72:22:70:aa:1f:36:f3:fa:82:e1:d4:b2:4f:79: 73:49:de:97:6c:b8:3f:e2:44:87:80:3e:09:23:27:30:34:b0: aa:2e:6d:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU3MjExMC8GA1UEBRMoNzNEOTAwOTI0RTcwMTU0OEU2RTMyMDM4ODBGNkMwOTcy QTRDMjkxQTAeFw0yNTA1MTUwNjA1MDVaFw0yNTA1MjIwNjA1MDVaMBgxFjAUBgNV BAMTDTY4MjU4NDExLWQ0ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqvBRl+EMxXuvULbdQ7wbjKi4kmBEbJ8fdp3AFMbmPuESVo3HEzdOOJKQytrC3 HNBzxumKoKAAlx2zaeI3Xyd1OMm2SeD7+bjU6tyxCoWchs/6W7VcXHwA4McqvA3c YwJWc5hKiN2IoFOWLGz8gYDtpBCcRYKfIdaoqDXWQptEfdN7q7k7V48McsDrVix7 Jb54GCfir4+dJaJ8vKdhy4GocwbUOU+oqPr1V5xkc1DuqB+eIeUhNmRmMvJIKXVM HgtUZ9o0qC145FB32bPIa3IMD3O2gkYhnHyH/wwsJdzASsbTLvq6bEg66ufWpGCa vfdpuIYbk3xXRmZR/D29cklxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPiybz7L0 oJLKW9W5zKBdMUXAHiUwHwYDVR0jBBgwFoAUc9kAkk5wFUjm4yA4gPbAlypMKRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTcyL0U2QjQ0OTAyODQ4 MDExRUZBQUQ4RTIzM0M0RjlBRTAyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzlrQWtrNXdGVWptNHlBNGdQYkFseXBNS1JvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RTcyL0U2QjQ0OTAyODQ4MDExRUZBQUQ4RTIzM0M0RjlBRTAyL2M5a0FrazV3RlVq bTR5QTRnUGJBbHlwTUtSby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANJFDb2xiPkNWaCxf5UMIZH2HskR/8XjHwGsR5hm2qOAinA0hyrPqYIO Qh5BpMIlRIHTb+CeGmZZ14aZtUtcrBCRCllKHDBab0XOm1J+26LcUK4pBS5Qmm0d ZT96Gbz2y+eog24gahKbOZm7HT6pCVb1TbAz4beTI+43eAT5TS5KmLiyjKhr/ECQ OYLiXcU6XD7jvJmF3aqJ3SUXHxTodqqucM0SHEVWNg5wyrNQ8ueQvIPuujjIvzTA O60dzbPJP+dsvro6uhM92x9sxPVUrcKMFKeIFW7RxxS1cEdyInCqHzbz+oLh1LJP eXNJ3pdsuD/iRIeAPgkjJzA0sKoubcg= -----END CERTIFICATE-----Generated at Fri May 16 10:18:09 2025 by rpki-client