$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: 0Z3M8iQSnTsAhN5iVrgG7MUYmGynjbtWjaV+ZoUVJOs= Subject key identifier: CC:38:91:BD:F2:0E:B7:A4:23:F6:70:4C:0B:7D:D9:65:16:DA:E7:75 Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 348E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 3486 Signing time: Mon 12 May 2025 14:47:05 +0000 Manifest this update: Mon 12 May 2025 14:47:04 +0000 Manifest next update: Mon 19 May 2025 14:47:04 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: nT1P3LP+M1i+9kTaPJKIKp4BFiDHGQ940pVLYAiJu5A=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: t/NnMy3xpmssx9DBTqRefxAqemELZw1L5Qwj8l5jaiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13454 (0x348e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: May 12 14:47:04 2025 GMT Not After : May 19 14:47:04 2025 GMT Subject: CN=682209e8-a55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f9:bb:3c:48:fd:04:e0:d5:0d:dd:b7:4c:dd: 36:63:fd:8d:8b:e1:e8:8d:db:b6:f4:53:5c:38:d5: b3:a4:9f:a8:45:10:fc:c8:95:e7:d2:87:e7:48:5e: fe:1a:62:b6:6c:bf:44:3e:c8:45:ed:4f:ed:27:97: 9c:93:cb:69:43:f2:93:27:62:94:32:aa:d9:34:55: 7b:4e:c4:ac:47:fb:f4:57:89:78:76:92:c4:e5:fd: 77:ab:cd:19:4a:94:c4:16:17:1b:0f:1c:b2:df:6f: 63:13:5e:26:4c:91:1d:ad:80:2f:ed:81:64:02:df: 3d:c0:8e:1c:3b:e2:4f:46:fb:5b:b1:39:8d:2a:10: 8c:0a:5c:c3:70:69:72:ee:09:50:bb:c4:17:1c:8f: 9e:63:b1:7d:d1:39:b9:6a:99:6d:b8:8e:0b:5a:89: 18:01:a2:e1:23:d6:2f:49:70:bb:82:1a:48:5a:c6: 69:68:07:e7:f3:49:fa:b4:4c:35:53:a0:15:58:ae: d3:68:f0:a4:67:b9:7d:4b:7a:f2:d4:01:eb:f0:52: 70:26:9c:b4:ef:0e:c0:0a:20:50:8f:c9:d8:8b:47: d7:44:c5:cf:98:0c:23:6f:3b:f7:1f:b8:5d:99:7e: 2c:1e:5a:e3:6a:79:a5:c8:f1:75:98:73:2b:ec:cd: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:38:91:BD:F2:0E:B7:A4:23:F6:70:4C:0B:7D:D9:65:16:DA:E7:75 X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9a:b7:cf:8e:bb:f4:8b:0b:c9:ba:ea:99:a1:df:67:47:ff: 31:6b:64:6e:3f:5d:ab:ee:e8:f0:0b:11:e6:b8:75:f7:6a:66: 4a:7c:67:00:80:4b:31:9c:fa:cc:20:b2:82:94:87:2a:f5:20: 72:d4:29:27:05:8b:d3:d5:d5:44:bc:3c:1e:ce:30:cd:6f:fe: 3a:98:81:ab:7e:3b:70:a4:48:cc:37:db:b0:a5:03:6a:0a:b3: ed:5e:29:ab:33:a2:18:b3:c3:a0:44:e5:3c:f2:b2:c8:ec:22: 67:bf:da:e2:84:9f:e6:54:c2:b5:39:56:c5:de:c6:1e:2b:e5: 3c:c9:d4:74:b4:81:c0:6a:c8:44:ed:c5:72:59:9d:4f:3d:c3: 70:2e:10:5e:d4:9d:c7:3a:5d:3b:b3:21:2c:aa:a8:62:90:b4: 71:a0:f6:ce:27:82:54:08:2e:9f:b6:a5:ea:a4:0c:a6:df:2d: ff:ac:4a:5c:38:bd:e3:bb:73:db:e6:df:63:a3:d6:96:01:5b: 18:69:bc:4b:d2:ac:af:be:65:f6:c4:48:41:37:b8:67:9b:c3: 5c:fb:84:c3:8a:4a:76:3d:af:54:49:16:94:c0:b7:1c:57:e3: a8:b0:85:18:a0:81:5e:e4:c3:c4:1a:42:68:64:03:52:e0:0c: 84:3b:fd:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjUwNTEyMTQ0NzA0WhcNMjUwNTE5MTQ0NzA0WjAYMRYwFAYD VQQDEw02ODIyMDllOC1hNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fm7PEj9BODVDd23TN02Y/2Ni+Hojdu29FNcONWzpJ+oRRD8yJXn0ofnSF7+ GmK2bL9EPshF7U/tJ5eck8tpQ/KTJ2KUMqrZNFV7TsSsR/v0V4l4dpLE5f13q80Z SpTEFhcbDxyy329jE14mTJEdrYAv7YFkAt89wI4cO+JPRvtbsTmNKhCMClzDcGly 7glQu8QXHI+eY7F90Tm5apltuI4LWokYAaLhI9YvSXC7ghpIWsZpaAfn80n6tEw1 U6AVWK7TaPCkZ7l9S3ry1AHr8FJwJpy07w7ACiBQj8nYi0fXRMXPmAwjbzv3H7hd mX4sHlrjanmlyPF1mHMr7M1ciwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw4kb3y DrekI/ZwTAt92WUW2ud1MB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/mrfPjrv0iwvJuuqZod9nR/8xa2RuP12r7ujwCxHmuHX3amZKfGcA gEsxnPrMILKClIcq9SBy1CknBYvT1dVEvDwezjDNb/46mIGrfjtwpEjMN9uwpQNq CrPtXimrM6IYs8OgROU88rLI7CJnv9rihJ/mVMK1OVbF3sYeK+U8ydR0tIHAashE 7cVyWZ1PPcNwLhBe1J3HOl07syEsqqhikLRxoPbOJ4JUCC6ftqXqpAym3y3/rEpc OL3ju3Pb5t9jo9aWAVsYabxL0qyvvmX2xEhBN7hnm8Nc+4TDikp2Pa9USRaUwLcc V+OosIUYoIFe5MPEGkJoZANS4AyEO/1G -----END CERTIFICATE-----Generated at Wed May 14 09:35:50 2025 by rpki-client