$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: RNUR4G/FxG3nGnvC2Z/yxS10tNC/1mm+X4drZ0zlTO0= Subject key identifier: FC:B8:92:7E:76:D1:4F:5D:BE:A3:B7:FD:5F:12:BD:C1:F0:64:6E:E4 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 08C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 0899 Signing time: Mon 12 May 2025 20:25:19 +0000 Manifest this update: Mon 12 May 2025 20:25:18 +0000 Manifest next update: Mon 19 May 2025 20:25:18 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: 0MydO+0GdVMNXlhbBJ6o/mvlGI5B5c4zfmU1Jn3/TAg=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 4: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 5: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) 6: 7DE1B508BC8A11EABAFA684CC4F9AE02.roa (hash: xSH87kbILGHWEWNfAJ7BQelcc3h9X/JlnMHEz3L2hKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2244 (0x8c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: May 12 20:25:18 2025 GMT Not After : May 19 20:25:18 2025 GMT Subject: CN=6822592e-baf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:94:78:91:72:83:85:b5:8e:2a:16:bb:7f: ed:92:e8:58:26:fc:13:2f:c1:a1:0f:d8:ff:1d:e1: e2:ff:bb:1a:de:a2:62:e6:a7:8f:15:81:fa:b1:a3: f4:b1:39:76:6d:72:31:9a:ac:b3:87:54:66:7b:ae: de:2b:38:cf:38:21:15:c0:2d:72:48:86:ca:8c:6f: e5:cf:ed:62:f4:45:22:d8:a3:08:70:37:80:70:eb: f3:f5:00:3d:0e:eb:6e:57:cb:14:ed:26:ad:47:64: 0f:c1:30:b4:d5:0b:18:72:47:1d:99:d9:79:c1:40: 9a:c2:5c:1a:f2:a3:89:b6:49:6d:13:f1:3f:ac:7f: 32:7e:37:35:1c:4d:39:67:54:4b:1d:6e:c7:9e:ee: dd:3e:bd:36:b8:d4:09:d2:a6:b7:dc:8e:3a:0e:7e: ea:01:41:1e:97:99:22:52:d1:b2:d9:cb:41:17:a1: e1:4e:1b:5e:37:ec:46:d5:09:fa:12:4e:d9:83:9c: 20:b0:f7:92:21:31:09:31:8f:8c:48:a0:68:69:a7: 21:79:a7:b9:cc:14:e1:41:47:5f:29:d2:c2:22:d0: da:dd:64:ef:88:b1:87:98:f4:f2:19:f3:04:0c:c2: db:48:ee:d0:cc:83:c6:64:0e:5b:d1:36:bd:5c:1d: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B8:92:7E:76:D1:4F:5D:BE:A3:B7:FD:5F:12:BD:C1:F0:64:6E:E4 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:04:d3:18:ac:f7:b3:3b:a2:6d:a0:4d:77:ee:11:f1:35:4f: 85:a5:9a:3b:ec:46:f6:f0:6f:df:61:4a:a9:1e:72:3d:b7:cf: 78:f0:0f:9e:b3:91:91:9c:a0:77:bb:8d:8b:f6:26:cc:85:be: 64:2d:96:47:56:1d:73:c1:10:f3:d0:ed:94:a8:c0:73:fb:82: a4:25:53:2f:35:5f:60:cb:7c:b0:65:c9:c1:09:ef:f8:76:46: a2:1c:78:bf:f1:6f:f9:06:4f:7a:46:52:3e:6d:a3:10:08:1f: ed:75:2e:06:6d:a9:8d:1d:6e:a6:3d:b7:42:4a:0c:51:90:93: 4f:8e:34:50:c0:9e:0a:1d:dd:73:52:7d:c4:b1:56:8c:9a:01: 3d:d1:05:72:2a:5a:b2:28:06:a2:01:8e:2f:cc:03:eb:81:bc: a8:e2:ef:df:46:ac:ef:15:22:ea:92:d3:5e:8f:93:3b:2e:6b: 66:e7:33:14:d3:ca:73:a4:73:09:32:63:c3:62:ff:3f:0d:97: ff:5f:03:c7:1e:8d:4c:d4:76:a3:a7:17:95:55:3f:9f:7f:53: 8b:f3:27:35:44:61:a9:05:9b:87:28:98:6a:79:a7:29:92:54: ac:1c:aa:ef:cb:b1:9a:98:86:f1:00:45:45:f1:87:51:6a:a6: 1f:51:a2:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwNTEyMjAyNTE4WhcNMjUwNTE5MjAyNTE4WjAYMRYwFAYD VQQDEw02ODIyNTkyZS1iYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbqUeJFyg4W1jioWu3/tkuhYJvwTL8GhD9j/HeHi/7sa3qJi5qePFYH6saP0 sTl2bXIxmqyzh1Rme67eKzjPOCEVwC1ySIbKjG/lz+1i9EUi2KMIcDeAcOvz9QA9 DutuV8sU7SatR2QPwTC01QsYckcdmdl5wUCawlwa8qOJtkltE/E/rH8yfjc1HE05 Z1RLHW7Hnu7dPr02uNQJ0qa33I46Dn7qAUEel5kiUtGy2ctBF6HhThteN+xG1Qn6 Ek7Zg5wgsPeSITEJMY+MSKBoaacheae5zBThQUdfKdLCItDa3WTviLGHmPTyGfME DMLbSO7QzIPGZA5b0Ta9XB3L7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy4kn52 0U9dvqO3/V8SvcHwZG7kMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrBNMYrPezO6JtoE137hHxNU+FpZo77Eb28G/fYUqpHnI9t8948A+e s5GRnKB3u42L9ibMhb5kLZZHVh1zwRDz0O2UqMBz+4KkJVMvNV9gy3ywZcnBCe/4 dkaiHHi/8W/5Bk96RlI+baMQCB/tdS4GbamNHW6mPbdCSgxRkJNPjjRQwJ4KHd1z Un3EsVaMmgE90QVyKlqyKAaiAY4vzAPrgbyo4u/fRqzvFSLqktNej5M7Lmtm5zMU 08pzpHMJMmPDYv8/DZf/XwPHHo1M1HajpxeVVT+ff1OL8yc1RGGpBZuHKJhqeacp klSsHKrvy7GamIbxAEVF8YdRaqYfUaJC -----END CERTIFICATE-----Generated at Tue May 13 08:32:33 2025 by rpki-client