$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json) Hash identifier: hMiZqY5iALDGC0m9GDbZFlANRVBNiLM0buSsSFkfhi8= Subject key identifier: 2C:A4:0C:B3:CA:38:B5:24:30:11:D6:DB:76:40:CB:97:C6:AE:CE:C8 Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Certificate serial: 0C3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft Manifest number: 0C36 Signing time: Fri 16 May 2025 18:45:20 +0000 Manifest this update: Fri 16 May 2025 18:45:19 +0000 Manifest next update: Fri 23 May 2025 18:45:19 +0000 Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: F72XtncpbxIe2EcO6rYR4z2Lvg7cJ/lroxNNghA4O3M=) 2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: fzV6mKN4RsRKk9FHAZNWKpTQRTVNAoWs1ftj78Q3KMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Validity Not Before: May 16 18:45:19 2025 GMT Not After : May 23 18:45:19 2025 GMT Subject: CN=682787bf-5781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:28:5f:e0:19:c8:7c:4e:0b:71:f6:3e:24:93: f7:e4:fc:fd:ab:22:43:2c:de:d1:e6:f5:70:fd:3c: 18:92:73:62:19:01:22:52:cd:bc:1f:64:3d:45:ae: 85:1b:4f:e3:59:ac:93:4e:b0:36:4e:8c:58:44:85: 9f:50:8d:17:0f:6d:46:10:3f:2c:29:05:cd:63:4c: ac:a8:77:87:02:2d:61:6a:00:8f:ee:32:30:ea:4d: 56:1d:ca:78:83:05:e5:07:70:52:3a:e4:1c:d4:2a: e5:83:48:0e:3f:38:4f:6b:6b:a9:81:6c:2a:ca:1b: 4e:cf:1c:80:63:a5:4e:ab:d8:8a:e2:cc:d8:1d:23: 55:6b:81:61:43:b3:ba:ec:f7:a4:a2:f2:6a:2e:38: 28:55:ef:f1:b2:c9:97:ee:59:f2:a1:9e:23:f7:ce: f4:6e:9e:de:d7:de:c7:fe:89:05:f1:fc:50:bc:30: b0:86:3a:0d:26:2a:62:00:41:56:b1:e6:39:d0:8b: a8:42:9a:cd:e8:db:79:92:62:56:82:ab:0c:3d:eb: b4:a6:47:b4:3b:87:bd:51:aa:8b:69:80:e6:11:4b: ac:ec:5f:ec:a9:04:64:61:33:e5:89:5e:9c:a4:66: 60:63:72:7a:27:43:35:1a:f9:77:db:50:26:98:ee: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:0C:B3:CA:38:B5:24:30:11:D6:DB:76:40:CB:97:C6:AE:CE:C8 X509v3 Authority Key Identifier: keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:19:b2:64:29:f8:d6:14:cc:f2:94:2e:34:ed:8d:5f:99:5d: 76:38:00:a1:bc:7d:01:e0:98:75:6f:a3:c2:ac:04:36:99:e5: 2c:bc:e4:ab:75:70:b0:a1:4b:72:e7:d7:12:03:2a:e1:aa:15: 64:6e:10:35:3a:fb:87:02:04:5a:e4:ff:50:37:f7:f6:fd:17: 96:61:25:ba:3b:81:15:ca:ee:17:c6:9b:81:cf:35:6c:ad:ca: e8:8e:0a:03:05:15:86:1f:e0:d1:55:5e:bc:8d:2c:aa:9c:dd: 5b:5f:3e:0f:9f:c8:fa:1c:2c:9a:5f:f2:ba:f6:49:d9:33:27: 09:6e:28:fc:b7:74:48:24:e9:95:0f:1b:15:39:83:a4:5d:95: 5f:2d:af:92:8b:2d:15:22:9b:ad:0b:45:f8:4d:44:5e:e4:91: 87:db:5e:fc:4c:5b:42:4e:d0:de:48:60:6a:ac:fd:4e:13:06: 71:ae:7f:21:a4:11:42:bd:70:ca:22:7a:d7:78:34:67:94:f5: be:d7:47:7b:99:a8:4e:cd:4f:a5:9f:c3:84:0c:14:28:54:2f: 7a:97:2b:fa:45:f9:89:76:0b:c5:e0:e2:76:d8:40:01:71:92: 73:7d:ae:79:bf:61:02:5b:04:bb:49:4f:96:85:be:41:e2:0b: 78:6c:05:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB REQ4MjdEQ0QwHhcNMjUwNTE2MTg0NTE5WhcNMjUwNTIzMTg0NTE5WjAYMRYwFAYD VQQDEw02ODI3ODdiZi01NzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Chf4BnIfE4LcfY+JJP35Pz9qyJDLN7R5vVw/TwYknNiGQEiUs28H2Q9Ra6F G0/jWayTTrA2ToxYRIWfUI0XD21GED8sKQXNY0ysqHeHAi1hagCP7jIw6k1WHcp4 gwXlB3BSOuQc1Crlg0gOPzhPa2upgWwqyhtOzxyAY6VOq9iK4szYHSNVa4FhQ7O6 7PekovJqLjgoVe/xssmX7lnyoZ4j9870bp7e197H/okF8fxQvDCwhjoNJipiAEFW seY50IuoQprN6Nt5kmJWgqsMPeu0pke0O4e9UaqLaYDmEUus7F/sqQRkYTPliV6c pGZgY3J6J0M1Gvl321AmmO70BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCykDLPK OLUkMBHW23ZAy5fGrs7IMB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3 MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBGQi8yNTdCQjJDNDA3MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhr NmlRUWVTcGdQTnV0MkNmYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBGbJkKfjWFMzylC407Y1fmV12OAChvH0B4Jh1b6PCrAQ2meUsvOSr dXCwoUty59cSAyrhqhVkbhA1OvuHAgRa5P9QN/f2/ReWYSW6O4EVyu4XxpuBzzVs rcrojgoDBRWGH+DRVV68jSyqnN1bXz4Pn8j6HCyaX/K69knZMycJbij8t3RIJOmV DxsVOYOkXZVfLa+Siy0VIputC0X4TURe5JGH2178TFtCTtDeSGBqrP1OEwZxrn8h pBFCvXDKInrXeDRnlPW+10d7mahOzU+ln8OEDBQoVC96lyv6RfmJdgvF4OJ22EAB cZJzfa55v2ECWwS7SU+Whb5B4gt4bAXJ -----END CERTIFICATE-----Generated at Sat May 17 04:05:05 2025 by rpki-client