$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: +D+7ShW2OEgjwiHalAglJpXeaL3OKXuGmAo97hBzR5A= Subject key identifier: FF:69:B2:AF:20:CF:BA:4D:E1:7F:C2:92:BE:EB:E7:85:1F:F8:C7:D2 Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0C42 Signing time: Mon 12 May 2025 18:18:26 +0000 Manifest this update: Mon 12 May 2025 18:18:25 +0000 Manifest next update: Mon 19 May 2025 18:18:25 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: pAaHn/cQOKwCXFZ/t1rThBaXbQt6d4q3gVou+750CCk=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lPRimtAIP991qjg2zYQ9MB+u2MSznOVIg7X2f5y/SnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: May 12 18:18:25 2025 GMT Not After : May 19 18:18:25 2025 GMT Subject: CN=68223b72-f3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:38:c9:43:b3:a9:75:d4:04:27:75:fc:4c: 82:0c:6b:ad:ae:6f:24:c8:a1:c2:02:cf:03:27:c6: 45:c3:ed:e1:cf:4a:d3:01:14:6d:3a:3c:fd:72:38: 69:33:50:ad:a3:44:82:09:6b:73:05:ae:88:c6:bc: 77:d5:58:60:47:21:55:80:8e:62:36:13:5d:53:45: b1:c0:cd:b4:d9:ff:c5:c7:f6:c0:6d:b3:57:e6:da: d9:10:98:f5:0a:cc:6d:c7:c1:40:3a:c5:4d:dd:b8: c0:6e:56:95:0c:b4:79:6c:bd:39:dc:af:2a:48:35: 43:1a:7c:11:93:81:3f:7e:6a:5b:39:be:8d:59:8d: d2:f0:05:ae:47:6d:39:97:61:10:6b:b2:a2:e1:03: bc:d3:c8:35:ae:a3:a2:9a:c5:90:6b:70:23:86:15: 1c:2a:cf:55:6b:bc:fd:d1:26:22:31:5a:2f:52:e1: fd:10:c3:db:17:fb:21:59:25:8d:1f:68:6d:4f:1c: 0a:7c:7f:32:22:32:ab:e7:82:3d:8b:46:aa:58:ab: 94:ae:81:76:76:b7:94:b7:b1:dc:6d:81:5b:b5:54: 25:1b:67:4e:26:ae:39:1b:8f:07:35:6b:ce:81:bb: 84:e2:a5:58:bd:35:0a:16:1c:9f:f8:d4:b1:df:2e: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:69:B2:AF:20:CF:BA:4D:E1:7F:C2:92:BE:EB:E7:85:1F:F8:C7:D2 X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:9d:33:4a:53:a2:71:8e:09:4d:ce:59:a0:c3:70:32:97:56: ec:79:9c:9a:c5:dd:7d:c5:df:2d:ff:95:94:15:47:ec:d4:41: 56:15:9e:b4:91:6d:83:fe:64:d1:b6:5b:8b:f4:0c:e8:65:be: d4:f1:8c:61:50:4c:eb:ba:7b:22:73:a7:dc:b2:27:24:e7:e9: d4:54:fe:07:b8:d9:c2:01:06:78:d4:cd:37:3c:03:a7:83:b4: 16:22:e9:6e:9d:41:9a:00:35:17:3a:e9:0e:ac:ad:db:21:6c: ea:79:c1:c7:3e:15:d0:ab:33:5d:ff:4b:43:09:ed:b2:2d:89: 59:d5:cb:88:17:01:a2:10:18:78:1d:52:2c:c3:b9:8e:1b:a0: 07:85:ae:66:19:b2:94:3f:09:04:1a:6d:4e:75:83:16:02:8b: 0b:24:70:3f:be:90:ae:60:d1:d5:e3:19:04:3c:41:8f:78:42: eb:f6:ad:2d:34:51:53:f6:66:f5:15:28:7a:86:2e:cc:88:61: 1f:18:ad:29:11:26:19:3b:18:1f:70:7e:33:4a:f7:fc:b9:97: 0a:8b:50:ea:e2:89:dd:e6:93:d0:07:bb:50:68:84:b5:e7:de: 98:c5:c6:12:d8:91:ee:7b:e7:cc:1b:91:85:a5:bb:73:81:91: 9f:6b:3b:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjUwNTEyMTgxODI1WhcNMjUwNTE5MTgxODI1WjAYMRYwFAYD VQQDEw02ODIyM2I3Mi1mM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQo4yUOzqXXUBCd1/EyCDGutrm8kyKHCAs8DJ8ZFw+3hz0rTARRtOjz9cjhp M1Cto0SCCWtzBa6Ixrx31VhgRyFVgI5iNhNdU0WxwM202f/Fx/bAbbNX5trZEJj1 Csxtx8FAOsVN3bjAblaVDLR5bL053K8qSDVDGnwRk4E/fmpbOb6NWY3S8AWuR205 l2EQa7Ki4QO808g1rqOimsWQa3AjhhUcKs9Va7z90SYiMVovUuH9EMPbF/shWSWN H2htTxwKfH8yIjKr54I9i0aqWKuUroF2dreUt7HcbYFbtVQlG2dOJq45G48HNWvO gbuE4qVYvTUKFhyf+NSx3y6wCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9psq8g z7pN4X/Ckr7r54Uf+MfSMB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAinTNKU6JxjglNzlmgw3Ayl1bseZyaxd19xd8t/5WUFUfs1EFWFZ60 kW2D/mTRtluL9AzoZb7U8YxhUEzrunsic6fcsick5+nUVP4HuNnCAQZ41M03PAOn g7QWIulunUGaADUXOukOrK3bIWzqecHHPhXQqzNd/0tDCe2yLYlZ1cuIFwGiEBh4 HVIsw7mOG6AHha5mGbKUPwkEGm1OdYMWAosLJHA/vpCuYNHV4xkEPEGPeELr9q0t NFFT9mb1FSh6hi7MiGEfGK0pESYZOxgfcH4zSvf8uZcKi1Dq4ond5pPQB7tQaIS1 596YxcYS2JHue+fMG5GFpbtzgZGfazsp -----END CERTIFICATE-----Generated at Mon May 12 23:13:21 2025 by rpki-client