$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: Z9Skbu/baTviBleW/E3dX/xccUgXiO8OIFNBOOQ4pQ4= Subject key identifier: A0:E7:DE:20:10:45:96:BC:1E:AF:12:D3:65:04:A7:2E:66:2A:EC:6A Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 01B0 Signing time: Thu 15 May 2025 02:41:13 +0000 Manifest this update: Thu 15 May 2025 02:41:12 +0000 Manifest next update: Thu 22 May 2025 02:41:12 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: yD+eOkBOjN/QwgdEpFYSKDIh1Wwnglg3yfqbdrEZBlA=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: May 15 02:41:12 2025 GMT Not After : May 22 02:41:12 2025 GMT Subject: CN=68255449-ddfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:c9:4c:25:90:ad:25:eb:d2:e5:40:8c:84: 8a:8f:58:54:70:bd:d1:04:18:d6:d8:88:23:06:01: e1:35:f8:ab:ae:e6:c2:63:e7:fb:97:9b:0c:6e:21: b8:99:f8:49:71:2a:5d:1b:77:a5:97:de:20:39:93: 66:1b:a9:fb:98:8a:ca:5b:db:f2:90:ed:e4:50:d5: 23:65:8b:70:f8:d6:89:64:f2:c9:b3:c3:d5:34:fd: 03:f2:5c:77:08:fc:95:e1:3e:03:3c:c9:dd:89:15: 9f:6a:4f:0d:ad:fa:2d:72:ea:f9:5c:bc:51:0b:78: 3a:09:6f:c7:53:7f:7b:67:d4:0e:5f:17:21:d6:4f: 0d:bc:bb:e2:1f:57:1b:2a:fd:f7:87:6f:c0:53:27: d2:2e:a5:6d:1f:a0:ad:12:24:e8:da:8a:78:04:1f: 8d:55:63:2a:95:5d:d1:f5:22:03:42:30:fe:1d:31: ed:50:00:17:3b:e8:df:49:cd:d5:2d:9e:db:e6:f1: 2e:e7:b6:bb:6c:ee:e2:82:02:60:7c:dd:3a:f3:c7: a4:12:60:b6:ef:b6:ed:8c:41:c2:8a:64:60:1f:09: 77:85:2c:2d:4f:ad:55:9b:54:4c:06:de:0c:e9:63: 9a:8a:80:9e:81:e2:48:d4:e4:6a:1e:1b:cb:06:03: b2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E7:DE:20:10:45:96:BC:1E:AF:12:D3:65:04:A7:2E:66:2A:EC:6A X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:d7:9b:ce:a4:fb:77:94:cc:2e:7b:1f:1c:21:9b:ed:dc:f7: dd:fb:39:26:af:4f:10:92:42:e3:a4:62:64:3c:da:5a:71:dc: 82:41:30:9a:40:df:0f:db:fd:22:4d:5a:40:38:c5:8a:17:0e: be:b6:5f:0f:cd:eb:04:27:31:7a:c8:bc:b5:78:15:bf:4a:68: df:92:b7:22:81:3c:e3:5b:81:1a:f9:0c:8f:3d:6b:9f:e7:74: af:99:1a:42:7b:6f:66:23:9c:eb:36:b6:4f:21:05:af:68:f4: ba:2f:75:06:98:53:60:6e:54:62:41:fb:ba:ce:67:fb:90:88: 29:b7:0c:93:8f:ec:c1:50:79:e5:fd:5a:38:bd:2f:ba:5c:75: 8a:13:7d:97:d5:0d:6f:62:bf:e6:bf:23:51:ce:ed:91:1e:12: 3c:5b:02:e1:33:29:a0:dc:41:2c:d9:a3:0f:d4:ab:ec:e1:70: b0:ba:8a:93:b4:02:cc:56:3f:8f:d7:50:37:5d:c5:4d:44:2b: 22:ed:5c:60:50:56:63:2b:54:cc:59:92:32:9c:69:9f:d5:0a: 9d:88:7e:28:f8:0e:bd:19:c6:53:54:84:1a:78:48:81:c6:48: cd:16:bd:b5:ec:66:3d:33:15:c1:23:61:7a:54:4f:7a:ae:c5: 33:1b:31:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUwNTE1MDI0MTEyWhcNMjUwNTIyMDI0MTEyWjAYMRYwFAYD VQQDEw02ODI1NTQ0OS1kZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PDJTCWQrSXr0uVAjISKj1hUcL3RBBjW2IgjBgHhNfirrubCY+f7l5sMbiG4 mfhJcSpdG3ell94gOZNmG6n7mIrKW9vykO3kUNUjZYtw+NaJZPLJs8PVNP0D8lx3 CPyV4T4DPMndiRWfak8Nrfotcur5XLxRC3g6CW/HU397Z9QOXxch1k8NvLviH1cb Kv33h2/AUyfSLqVtH6CtEiTo2op4BB+NVWMqlV3R9SIDQjD+HTHtUAAXO+jfSc3V LZ7b5vEu57a7bO7iggJgfN0688ekEmC277btjEHCimRgHwl3hSwtT61Vm1RMBt4M 6WOaioCegeJI1ORqHhvLBgOyZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDn3iAQ RZa8Hq8S02UEpy5mKuxqMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm15vOpPt3lMwuex8cIZvt3Pfd+zkmr08QkkLjpGJkPNpacdyCQTCa QN8P2/0iTVpAOMWKFw6+tl8PzesEJzF6yLy1eBW/SmjfkrcigTzjW4Ea+QyPPWuf 53SvmRpCe29mI5zrNrZPIQWvaPS6L3UGmFNgblRiQfu6zmf7kIgptwyTj+zBUHnl /Vo4vS+6XHWKE32X1Q1vYr/mvyNRzu2RHhI8WwLhMymg3EEs2aMP1Kvs4XCwuoqT tALMVj+P11A3XcVNRCsi7VxgUFZjK1TMWZIynGmf1QqdiH4o+A69GcZTVIQaeEiB xkjNFr217GY9MxXBI2F6VE96rsUzGzE5 -----END CERTIFICATE-----Generated at Thu May 15 19:10:18 2025 by rpki-client