$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: np+vc1TWPzEipMR2h/VocsgW547AjLLib1wge3uxUfk= Subject key identifier: 14:C8:78:CE:07:D1:E0:E2:ED:B9:2A:FF:F9:B6:76:1D:DA:1D:E7:E7 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0C59 Signing time: Sat 10 May 2025 18:07:00 +0000 Manifest this update: Sat 10 May 2025 18:06:59 +0000 Manifest next update: Sat 17 May 2025 18:06:59 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: M8XN5Ue+Zgqpc854NxATLYFkWQgSUJxL0tYLpwocA3o=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: UjvCEDYZnGIMs7cUk//riKADIcRlVC/6WW+32mEJgZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: May 10 18:06:59 2025 GMT Not After : May 17 18:06:59 2025 GMT Subject: CN=681f95c4-649b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:48:20:60:c3:50:d6:80:5e:d1:7e:8a:9d: 95:ae:2b:48:80:1e:b2:56:26:6b:6e:09:cc:92:c6: c1:3a:07:31:5e:3f:72:53:4b:51:fb:ec:35:28:59: f2:60:03:6d:d5:c3:77:25:92:90:21:9d:9e:5e:12: 57:be:47:ff:0e:a4:5b:8a:92:ff:0a:24:83:eb:ae: 2a:f7:df:21:fb:da:37:e2:c2:89:8a:51:df:c8:a6: f3:d5:ed:0d:b8:66:e6:74:9c:06:2c:6c:94:9b:8e: 1d:f3:76:11:bf:55:93:a1:9d:72:14:d7:eb:fd:6f: 3b:fb:60:65:01:aa:f0:95:64:30:bc:6c:21:7f:03: 1f:23:b0:36:1e:7a:3f:f2:33:4d:a9:09:7c:d2:c0: ff:83:fa:c2:08:a6:1c:9f:25:70:c9:a6:1f:53:f3: 6f:49:c4:83:db:00:f7:c9:31:2d:75:eb:68:fa:d2: 93:4f:f9:08:71:08:db:10:4e:93:b4:42:05:15:40: b8:08:eb:26:38:ef:eb:25:89:70:5b:8e:f1:20:fd: d8:ac:3c:01:7d:e3:fe:74:97:88:11:9b:b5:59:fa: f7:b6:67:c8:a8:d3:fc:ce:76:7e:e9:ff:9e:20:91: d5:72:d5:b1:0e:ab:50:93:71:44:fa:a8:07:bf:2f: 79:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C8:78:CE:07:D1:E0:E2:ED:B9:2A:FF:F9:B6:76:1D:DA:1D:E7:E7 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c9:e8:15:b7:50:85:a7:a1:0c:fc:01:30:6e:6d:5b:7e:f0: ba:1d:42:f2:41:aa:e4:b2:dc:d1:c7:c1:85:4d:15:7b:1c:d0: 58:36:88:30:2f:45:22:ec:42:44:93:63:fd:cf:46:2d:07:ab: 74:f5:19:34:56:f0:d9:fd:28:c4:6e:3b:ad:cd:53:4b:c8:2e: 7b:52:01:42:76:2b:e0:05:40:27:ec:2f:58:c3:b2:6b:48:59: 9a:c1:1a:5e:a6:d0:a7:3c:d6:02:58:c7:71:ac:73:f6:a9:93: 48:53:cf:ad:28:3d:44:39:42:62:7d:8e:a6:27:84:37:64:3f: 09:56:c3:83:aa:e2:fe:21:20:18:4e:f7:a3:a5:b4:8d:00:da: 77:2a:5e:d9:52:15:57:d0:4b:0e:f8:a3:3c:f5:c6:3a:a2:43: 42:60:c6:11:37:8f:55:c1:bd:25:98:5d:1f:44:db:f9:9b:55: c1:eb:95:25:f0:39:b0:9f:48:af:f8:b4:84:6b:51:06:c9:07: e8:98:3e:a4:de:f2:a7:e0:a6:5c:74:a4:ad:5d:a3:ba:52:0f: 86:9a:0f:6f:0b:b1:ae:56:63:31:8b:bc:ed:46:89:5c:e7:40: 55:e8:9b:47:07:98:e8:b1:c4:39:6c:e8:50:d0:46:21:a7:da: 42:54:64:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjUwNTEwMTgwNjU5WhcNMjUwNTE3MTgwNjU5WjAYMRYwFAYD VQQDEw02ODFmOTVjNC02NDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt01IIGDDUNaAXtF+ip2VritIgB6yViZrbgnMksbBOgcxXj9yU0tR++w1KFny YANt1cN3JZKQIZ2eXhJXvkf/DqRbipL/CiSD664q998h+9o34sKJilHfyKbz1e0N uGbmdJwGLGyUm44d83YRv1WToZ1yFNfr/W87+2BlAarwlWQwvGwhfwMfI7A2Hno/ 8jNNqQl80sD/g/rCCKYcnyVwyaYfU/NvScSD2wD3yTEtdeto+tKTT/kIcQjbEE6T tEIFFUC4COsmOO/rJYlwW47xIP3YrDwBfeP+dJeIEZu1Wfr3tmfIqNP8znZ+6f+e IJHVctWxDqtQk3FE+qgHvy95qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTIeM4H 0eDi7bkq//m2dh3aHefnMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSyegVt1CFp6EM/AEwbm1bfvC6HULyQarkstzRx8GFTRV7HNBYNogw L0Ui7EJEk2P9z0YtB6t09Rk0VvDZ/SjEbjutzVNLyC57UgFCdivgBUAn7C9Yw7Jr SFmawRpeptCnPNYCWMdxrHP2qZNIU8+tKD1EOUJifY6mJ4Q3ZD8JVsODquL+ISAY TvejpbSNANp3Kl7ZUhVX0EsO+KM89cY6okNCYMYRN49Vwb0lmF0fRNv5m1XB65Ul 8Dmwn0iv+LSEa1EGyQfomD6k3vKn4KZcdKStXaO6Ug+Gmg9vC7GuVmMxi7ztRolc 50BV6JtHB5joscQ5bOhQ0EYhp9pCVGRz -----END CERTIFICATE-----Generated at Sun May 11 14:51:26 2025 by rpki-client