$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft File: 9h2bowrjVcgD-A3M8sQV3gB9eVM.mft (raw, json) Hash identifier: 9FU3EsOoProSExyZk+BPOYNqh6cZbWW+FzkajSWjyB8= Subject key identifier: 7D:5E:C2:29:BA:52:09:69:B3:5E:21:AB:80:99:E0:BA:2C:16:7A:0A Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 Certificate issuer: /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953 Certificate serial: 08B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft Manifest number: 089E Signing time: Mon 12 May 2025 20:25:26 +0000 Manifest this update: Mon 12 May 2025 20:25:25 +0000 Manifest next update: Mon 19 May 2025 20:25:25 +0000 Files and hashes: 1: 9h2bowrjVcgD-A3M8sQV3gB9eVM.crl (hash: znCCGW+MgYtLxVMQvZxr/Vujo0KIVALLomC22xRSILE=) 2: F84E14F6F7A411EC88E84259C4F9AE02.roa (hash: P/auEJgutUVl8dFubgi2n2lxk6hlWtNvdq3SLvKI4fQ=) 3: A069584E32B311EF809D8B35C4F9AE02.roa (hash: Gw0kNl2t8PieKLC+KrgxefhotSeMoj6pQV0MiEUUWsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC510, serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953 Validity Not Before: May 12 20:25:25 2025 GMT Not After : May 19 20:25:25 2025 GMT Subject: CN=68225935-dac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:18:7b:eb:04:bc:65:96:73:87:6d:7c:36: 5a:85:af:36:0f:84:52:6e:27:65:75:c1:47:d1:14: 4c:c4:ab:6e:95:ed:e5:ba:72:af:04:60:fb:a9:af: 30:f9:b1:02:0b:74:f5:d5:98:70:b1:30:e7:58:aa: 9e:2e:97:85:43:d1:e1:b7:72:6d:b9:13:85:03:b4: 75:04:b5:8b:6c:ba:ac:88:7e:32:fd:c2:64:49:d2: ca:35:74:a7:6a:b4:00:85:bb:4b:67:e2:ea:b7:5b: 04:75:0d:16:55:2f:bc:c3:a6:7e:80:d3:55:9e:0a: 38:7c:3d:ed:9b:f0:a8:9a:4a:1e:30:48:16:0f:23: 03:a3:c1:3d:a8:97:a6:32:51:03:a4:a4:94:5c:32: eb:ef:25:9e:b4:f9:fb:00:1b:87:a9:c5:03:b5:2c: 69:b5:e2:26:45:84:39:eb:64:a0:cd:ab:ea:ce:9a: 6d:83:4e:11:59:87:f1:ae:5a:33:1b:0f:88:35:41: ab:7f:4a:91:68:5a:20:f5:43:dd:03:c8:4c:a0:85: 81:30:a5:a0:7f:11:91:d5:09:7f:46:65:80:3e:66: b3:0a:59:ad:8c:d3:54:cf:26:62:87:ec:fd:03:9c: 2f:0a:68:61:12:a5:98:ca:63:89:ce:66:39:45:24: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5E:C2:29:BA:52:09:69:B3:5E:21:AB:80:99:E0:BA:2C:16:7A:0A X509v3 Authority Key Identifier: keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9f:32:13:ff:3f:26:56:99:e1:45:c5:3c:3c:75:44:49:c0: 1a:c1:a0:1b:18:10:7a:3e:5b:06:13:69:78:f0:9e:d0:fb:e6: 40:5d:89:91:b8:1b:45:00:73:43:2c:0f:f8:b5:ee:9b:26:1e: f2:ff:b0:fb:74:63:49:bc:80:24:b4:a1:d4:65:a8:19:b7:7b: f2:26:75:5f:bc:ff:b0:f2:bf:34:17:bb:87:55:69:30:be:69: f8:f2:2f:f7:5a:1e:5c:73:b3:0b:d7:e2:db:a2:61:32:d3:f1: 63:b4:20:dc:d4:fd:ab:0a:fa:a7:f4:49:d8:ea:44:6b:cc:16: b0:55:f3:78:fe:65:be:f2:50:4a:3e:fb:ee:cf:22:81:5c:3a: 19:ad:6d:7c:58:89:8a:56:27:7d:de:6b:fa:e0:a0:4a:26:35: a6:60:aa:4a:c1:ec:fa:fc:12:5d:44:d9:2f:11:84:2c:79:b0: 51:af:dd:16:37:8a:a7:52:77:88:e8:1a:b5:b4:74:ad:54:e4: 5d:3c:fd:4d:07:54:b6:67:17:68:00:ec:3f:98:79:04:e3:a6: 50:80:81:22:1c:d6:2e:a1:30:3f:30:93:23:06:3f:4c:b8:04: 73:19:10:f6:c1:79:24:11:b5:6a:25:1b:e8:55:7b:b2:3f:50: 10:ac:5c:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1MTAxMTAvBgNVBAUTKEY2MUQ5QkEzMEFFMzU1QzgwM0Y4MERDQ0YyQzQxNURF MDA3RDc5NTMwHhcNMjUwNTEyMjAyNTI1WhcNMjUwNTE5MjAyNTI1WjAYMRYwFAYD VQQDEw02ODIyNTkzNS1kYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAYYe+sEvGWWc4dtfDZaha82D4RSbidldcFH0RRMxKtule3lunKvBGD7qa8w +bECC3T11ZhwsTDnWKqeLpeFQ9Hht3JtuROFA7R1BLWLbLqsiH4y/cJkSdLKNXSn arQAhbtLZ+Lqt1sEdQ0WVS+8w6Z+gNNVngo4fD3tm/ComkoeMEgWDyMDo8E9qJem MlEDpKSUXDLr7yWetPn7ABuHqcUDtSxpteImRYQ562Sgzavqzpptg04RWYfxrloz Gw+INUGrf0qRaFog9UPdA8hMoIWBMKWgfxGR1Ql/RmWAPmazClmtjNNUzyZih+z9 A5wvCmhhEqWYymOJzmY5RSTlEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1ewim6 Uglps14hq4CZ4LosFnoKMB8GA1UdIwQYMBaAFPYdm6MK41XIA/gNzPLEFd4AfXlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzUxMC9FQzMxRTI1OEJE MTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZjZ0QtQTNNOHNRVjNnQjll Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloMmJvd3JqVmNnRC1BM004c1FWM2dCOWVWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzUxMC9FQzMxRTI1OEJEMTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZj Z0QtQTNNOHNRVjNnQjllVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnnzIT/z8mVpnhRcU8PHVEScAawaAbGBB6PlsGE2l48J7Q++ZAXYmR uBtFAHNDLA/4te6bJh7y/7D7dGNJvIAktKHUZagZt3vyJnVfvP+w8r80F7uHVWkw vmn48i/3Wh5cc7ML1+LbomEy0/FjtCDc1P2rCvqn9EnY6kRrzBawVfN4/mW+8lBK PvvuzyKBXDoZrW18WImKVid93mv64KBKJjWmYKpKwez6/BJdRNkvEYQsebBRr90W N4qnUneI6Bq1tHStVORdPP1NB1S2ZxdoAOw/mHkE46ZQgIEiHNYuoTA/MJMjBj9M uARzGRD2wXkkEbVqJRvoVXuyP1AQrFz+ -----END CERTIFICATE-----Generated at Wed May 14 13:18:23 2025 by rpki-client