$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft File: V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json) Hash identifier: 1K+vuV6aL1mMaK4eNWmZ8ygqtypmCoBtayY46jWBhYc= Subject key identifier: 13:0E:DE:80:80:11:B6:1A:6A:6D:EA:41:AF:98:11:61:0A:06:A6:C6 Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Certificate serial: 0896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft Manifest number: 088F Signing time: Mon 12 May 2025 20:24:35 +0000 Manifest this update: Mon 12 May 2025 20:24:35 +0000 Manifest next update: Mon 19 May 2025 20:24:35 +0000 Files and hashes: 1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: SohIrbbG1nq1dk7Q6orT/vjuo7eTsiZIi53ntpFeFDc=) 2: 19EF4D1ABE5A11EDAA537748C4F9AE02.roa (hash: miZMhJRep9ETR17YW7gWoj6LqwgVkbNzRlMxX+ZmBhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Validity Not Before: May 12 20:24:35 2025 GMT Not After : May 19 20:24:35 2025 GMT Subject: CN=68225903-3752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:db:e6:e2:d6:6c:a3:65:c5:42:ee:05:5e: 6c:17:87:da:c8:b3:7c:fc:ef:2f:f8:54:6d:80:61: eb:05:43:fd:55:6b:a6:16:7a:12:22:e3:47:c3:56: 5e:23:ff:11:7c:8a:51:96:43:a6:5e:b7:75:18:b5: c9:e6:75:01:75:6d:fd:c8:49:47:b4:76:ef:a5:40: 04:ca:aa:e3:2d:bf:ed:01:ad:15:e9:58:b6:0e:08: f1:af:a9:58:57:ff:1f:7e:08:74:d1:20:68:3e:f3: 15:94:cd:5b:52:7c:96:bc:c5:f7:9e:cc:b1:45:90: f8:b2:b8:f9:27:87:df:e5:83:a7:77:bd:e6:54:f2: 81:14:4a:76:fe:c2:d1:61:c5:c7:33:3c:6d:b4:c9: ea:5b:e2:32:87:8b:e9:8e:92:59:09:32:04:ea:1f: d6:a5:50:cd:b3:ab:ef:e9:56:12:4c:7e:12:5d:8c: 43:91:2b:87:81:39:04:dc:da:f4:2b:0c:0d:66:43: 38:49:fc:c9:ea:06:08:76:d9:2f:0c:f0:ac:96:ae: ed:13:e8:62:9f:ea:e1:09:cd:02:8d:6c:40:00:78: db:80:b9:73:63:0a:73:02:61:e9:4c:3d:d8:98:8b: 5a:71:d0:3e:d9:6f:36:fb:e0:05:d6:bf:d5:fd:ee: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0E:DE:80:80:11:B6:1A:6A:6D:EA:41:AF:98:11:61:0A:06:A6:C6 X509v3 Authority Key Identifier: keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f3:40:f3:92:21:79:61:1a:38:70:2d:ec:71:ea:b1:30:e3: 6b:5f:20:87:03:09:c3:47:3a:9f:5b:be:48:6a:44:6d:b0:14: 29:e1:33:e0:55:75:57:d0:6f:2f:e3:cf:78:a0:1a:4d:47:dd: ac:fa:e7:5a:99:54:29:f1:f8:b7:0c:d5:8b:30:b6:8d:30:2d: 8f:75:b3:8b:7d:18:35:d0:da:90:08:f6:c4:fa:54:50:15:db: 13:c0:a6:7c:82:99:2b:c1:7e:c3:8b:72:96:a2:f6:30:e7:2b: ca:ae:aa:a7:0c:fe:51:b8:7b:95:b4:6a:bc:b7:7a:8a:ae:6f: 57:39:ed:4c:37:6a:24:4f:10:1f:08:9d:35:4b:c9:3a:8e:e8: 37:95:e1:4b:1d:d2:0f:d2:55:0c:c4:e3:af:78:6d:4e:2e:7c: 14:58:6d:49:18:46:ed:52:dd:b3:f0:39:7b:db:f1:f6:54:04: 3d:2f:ab:31:98:02:cf:14:83:fa:dc:bd:5c:37:95:00:7b:8d: fa:42:c7:36:23:b4:0b:61:0c:72:32:93:4d:65:bd:83:4f:27: 47:c7:4d:41:0c:f5:ca:70:98:e2:a6:eb:2f:30:22:7c:e5:8d: 72:e4:21:21:fa:f4:42:48:ae:c4:05:0e:06:77:b8:f8:ab:60: 34:e4:db:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTcxMTAvBgNVBAUTKDU3REI0MkFCOUVCQkVGQkZFMjEwNzNGNTAwN0ZDMzc2 MkM1RkJCMDgwHhcNMjUwNTEyMjAyNDM1WhcNMjUwNTE5MjAyNDM1WjAYMRYwFAYD VQQDEw02ODIyNTkwMy0zNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPTb5uLWbKNlxULuBV5sF4fayLN8/O8v+FRtgGHrBUP9VWumFnoSIuNHw1Ze I/8RfIpRlkOmXrd1GLXJ5nUBdW39yElHtHbvpUAEyqrjLb/tAa0V6Vi2Dgjxr6lY V/8ffgh00SBoPvMVlM1bUnyWvMX3nsyxRZD4srj5J4ff5YOnd73mVPKBFEp2/sLR YcXHMzxttMnqW+Iyh4vpjpJZCTIE6h/WpVDNs6vv6VYSTH4SXYxDkSuHgTkE3Nr0 KwwNZkM4SfzJ6gYIdtkvDPCslq7tE+hin+rhCc0CjWxAAHjbgLlzYwpzAmHpTD3Y mItacdA+2W82++AF1r/V/e6m9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMO3oCA EbYaam3qQa+YEWEKBqbGMB8GA1UdIwQYMBaAFFfbQqueu++/4hBz9QB/w3YsX7sI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5Ny8yNEVEMjE1NkJD MjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3X2lFSFAxQUhfRGRpeGZ1 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y5dENxNTY3NzdfaUVIUDFBSF9EZGl4ZnV3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5Ny8yNEVEMjE1NkJDMjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3 X2lFSFAxQUhfRGRpeGZ1d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM80DzkiF5YRo4cC3sceqxMONrXyCHAwnDRzqfW75IakRtsBQp4TPg VXVX0G8v4894oBpNR92s+udamVQp8fi3DNWLMLaNMC2PdbOLfRg10NqQCPbE+lRQ FdsTwKZ8gpkrwX7Di3KWovYw5yvKrqqnDP5RuHuVtGq8t3qKrm9XOe1MN2okTxAf CJ01S8k6jug3leFLHdIP0lUMxOOveG1OLnwUWG1JGEbtUt2z8Dl72/H2VAQ9L6sx mALPFIP63L1cN5UAe436Qsc2I7QLYQxyMpNNZb2DTydHx01BDPXKcJjipusvMCJ8 5Y1y5CEh+vRCSK7EBQ4Gd7j4q2A05Ntd -----END CERTIFICATE-----Generated at Tue May 13 04:37:29 2025 by rpki-client