$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json) Hash identifier: zJpsJI4Athde7YpKOGgg0oQfccRyAqBWImru193El08= Subject key identifier: BF:40:A5:A6:6A:D0:7D:EE:DC:C7:DB:26:81:04:62:D1:5D:0A:0C:86 Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Certificate serial: 0320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft Manifest number: 031B Signing time: Tue 13 May 2025 00:57:54 +0000 Manifest this update: Tue 13 May 2025 00:57:53 +0000 Manifest next update: Tue 20 May 2025 00:57:53 +0000 Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: mpYb2DtR0CCGfdRZgPjDCNoRigss7yDl8R2aSGkPV7k=) 2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: C1ezUxuL3ClkX3BgQjjS1dTVihRitOogxbbsy9SR+JY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Validity Not Before: May 13 00:57:53 2025 GMT Not After : May 20 00:57:53 2025 GMT Subject: CN=68229912-1703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:ab:b3:e9:83:2a:59:c5:3d:44:0c:ac:87: 5f:50:d9:69:0f:a4:1b:8a:cb:5b:1c:75:fa:f2:b5: f4:56:b7:43:81:ab:44:47:a8:25:c6:9e:fe:d1:54: ef:8d:64:dc:8f:f9:aa:f2:1a:ef:b8:bc:9e:26:3d: b5:f3:81:43:45:9a:08:3a:39:49:32:48:93:c6:df: 53:c1:3c:c5:4d:7f:74:7d:a9:5a:6b:31:bd:97:01: d1:19:7f:95:69:ef:43:14:ae:14:67:cb:e6:e6:80: a4:16:58:ba:81:3d:0b:e3:20:84:a0:5b:26:13:60: 63:84:cd:a4:ac:5d:db:b1:c2:cf:1b:84:de:db:f4: 10:28:fc:56:1d:8b:6a:2f:f6:dc:a0:cd:9b:18:dc: a0:d1:ea:28:dc:7e:76:d3:1e:84:ab:cb:d7:0c:fe: f5:1e:95:63:8c:ed:17:ba:23:f9:19:bc:86:21:ac: b0:29:9e:74:84:95:1d:74:77:b5:e4:ed:47:25:42: ff:62:51:55:ef:48:b4:b2:90:6a:bd:97:00:78:f1: 32:f1:37:74:f0:5d:fa:fd:0c:05:b8:4e:ae:15:0c: 2c:9b:6a:57:5b:08:c7:35:2a:43:d8:cd:73:ea:50: fc:6e:60:1e:eb:83:64:33:c0:97:1c:11:f7:61:60: 90:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:40:A5:A6:6A:D0:7D:EE:DC:C7:DB:26:81:04:62:D1:5D:0A:0C:86 X509v3 Authority Key Identifier: keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:44:43:2e:92:7d:de:67:74:11:18:b9:f6:ac:35:c8:65:ca: 68:17:13:5e:05:f6:72:42:97:b2:ec:03:3c:6c:15:d6:8f:9d: 05:f9:23:17:59:fd:fa:d4:1b:ac:bb:00:62:55:68:bd:3b:89: ea:f7:e0:80:c7:37:53:aa:6d:4f:df:87:01:49:ea:01:77:da: 70:f7:21:c8:aa:62:8d:b4:36:c6:43:67:90:02:0f:d2:8d:cd: 38:b2:e2:04:2d:f8:e2:9e:20:91:a4:51:9e:87:3a:69:2e:a6: 80:82:28:67:3f:d9:6d:2e:46:7d:36:ed:68:4f:12:dd:3b:2a: bc:4f:53:94:9a:19:61:d0:c2:3c:2c:78:7b:cc:d6:42:56:43: 1b:34:c5:78:2a:93:6d:ef:fa:87:4d:c7:2c:3c:37:db:54:d0: 60:65:1c:b5:81:16:f4:c8:e4:0f:51:fe:61:41:cf:c4:f8:4f: 94:5e:96:ea:f2:f0:60:f2:18:4b:57:1f:d1:f7:cf:ab:17:07: 09:a3:f8:37:1e:f6:8a:64:13:cb:61:e6:c6:29:27:a3:ae:df: cb:ed:29:f1:bb:21:ec:ce:65:54:75:f4:94:86:a4:b1:de:6e: 7f:eb:50:80:8d:26:37:e7:0d:4a:df:1e:f9:82:7c:ca:c0:51: 98:a6:e5:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy MUYwQTUxMzUwHhcNMjUwNTEzMDA1NzUzWhcNMjUwNTIwMDA1NzUzWjAYMRYwFAYD VQQDEw02ODIyOTkxMi0xNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5Grs+mDKlnFPUQMrIdfUNlpD6QbistbHHX68rX0VrdDgatER6glxp7+0VTv jWTcj/mq8hrvuLyeJj2184FDRZoIOjlJMkiTxt9TwTzFTX90falaazG9lwHRGX+V ae9DFK4UZ8vm5oCkFli6gT0L4yCEoFsmE2BjhM2krF3bscLPG4Te2/QQKPxWHYtq L/bcoM2bGNyg0eoo3H520x6Eq8vXDP71HpVjjO0XuiP5GbyGIaywKZ50hJUddHe1 5O1HJUL/YlFV70i0spBqvZcAePEy8Td08F36/QwFuE6uFQwsm2pXWwjHNSpD2M1z 6lD8bmAe64NkM8CXHBH3YWCQIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9ApaZq 0H3u3MfbJoEEYtFdCgyGMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP UndMZktmSFUzUFVoOEtVVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKREMukn3eZ3QRGLn2rDXIZcpoFxNeBfZyQpey7AM8bBXWj50F+SMX Wf361BusuwBiVWi9O4nq9+CAxzdTqm1P34cBSeoBd9pw9yHIqmKNtDbGQ2eQAg/S jc04suIELfjiniCRpFGehzppLqaAgihnP9ltLkZ9Nu1oTxLdOyq8T1OUmhlh0MI8 LHh7zNZCVkMbNMV4KpNt7/qHTccsPDfbVNBgZRy1gRb0yOQPUf5hQc/E+E+UXpbq 8vBg8hhLVx/R98+rFwcJo/g3HvaKZBPLYebGKSejrt/L7SnxuyHszmVUdfSUhqSx 3m5/61CAjSY35w1K3x75gnzKwFGYpuWU -----END CERTIFICATE-----Generated at Wed May 14 08:10:18 2025 by rpki-client