$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: he0EvzUQCksk3qg0v/a2UXfvJSMpWYtwtjMj3D8rwgE= Subject key identifier: DE:36:6B:52:BC:22:F1:B0:D4:9F:E6:3D:21:CD:44:91:53:75:7F:30 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 1524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 151A Signing time: Wed 14 May 2025 16:53:43 +0000 Manifest this update: Wed 14 May 2025 16:53:43 +0000 Manifest next update: Wed 21 May 2025 16:53:43 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: AUcGXKXtz7RxfSwfZqq24AX1cq3fExDKNXJkaFt+qMY=) 2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: S5mRurG916ui1hjUc9swark9ywmNDAZ5nDRIJrKsR2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5412 (0x1524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: May 14 16:53:43 2025 GMT Not After : May 21 16:53:43 2025 GMT Subject: CN=6824ca97-0c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9e:a6:63:02:3d:a4:e4:fa:d2:a2:33:66:86: ef:0d:ad:1f:25:77:42:ae:cc:de:23:d0:6e:bc:52: 01:2c:96:12:90:d1:e4:ff:9c:1e:03:cb:15:9f:b1: 98:7d:68:a9:06:a1:dc:5e:5a:80:fa:47:7e:49:c3: 01:79:34:aa:db:6c:22:3e:b8:21:59:7b:ef:72:3f: 34:0f:ae:7e:a9:6a:67:56:d1:6b:69:da:aa:90:b2: 74:c6:41:21:ee:8d:cd:06:db:68:7b:88:2d:32:ba: 89:d7:75:3b:df:05:95:a8:f6:83:0e:60:c2:64:06: c5:d6:c3:61:06:01:62:2c:68:7a:da:52:a2:02:d0: 19:33:cd:cf:c3:f0:f6:82:08:44:fd:18:46:fb:aa: 51:81:d9:79:32:a3:ba:7b:5b:b1:7c:0e:00:39:ef: 69:75:cc:bf:0f:9b:d6:c2:f4:13:98:f4:70:fb:09: f5:f3:98:f5:2a:e7:74:c4:51:c1:73:30:91:8a:ba: fb:e0:5c:5f:e1:f1:35:92:cd:88:22:db:67:11:98: b6:cf:bb:51:df:7a:9f:ce:b7:dc:ed:65:24:35:3e: 86:03:43:d3:13:ec:41:50:f8:72:96:50:58:94:16: 7f:8d:bd:7e:a4:bb:9d:06:bc:c1:78:00:63:31:55: e9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:36:6B:52:BC:22:F1:B0:D4:9F:E6:3D:21:CD:44:91:53:75:7F:30 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c2:ff:38:40:bb:f5:4b:03:a5:cb:1d:75:c4:20:aa:a3:84: 86:9f:79:52:10:91:ca:d3:86:35:e0:e7:3e:f6:fb:ea:f3:e5: 48:37:64:85:e6:b3:75:4f:4a:09:62:30:4b:02:0f:68:8b:3f: 47:45:ee:9d:01:e9:73:58:6b:da:da:5a:96:46:c9:a8:49:b6: 69:6d:87:b9:8e:bd:bd:55:65:3d:33:c5:7e:be:97:c3:42:b3: 39:70:7b:f9:da:3c:54:95:34:35:42:f6:dc:8f:9b:7b:7f:0e: a8:0e:82:6a:6c:39:85:f0:30:dd:aa:de:6f:6a:fb:1e:93:7a: 32:b8:b7:53:1b:af:e5:d0:86:1e:6d:f8:2a:6f:a7:da:79:b9: a7:cf:c7:ef:70:b1:68:f8:0f:03:4e:ed:18:77:f5:54:7c:07: 81:ed:6e:e6:4e:f0:5d:28:ac:6a:d2:25:dd:89:84:75:67:eb: ef:5a:91:51:cf:9a:d3:59:13:38:d3:a7:01:ec:7d:d6:ce:05: 3e:0e:a9:96:6a:d6:52:1e:7d:3c:6a:cf:ca:24:fb:2f:89:59: 3c:23:f0:09:a1:ed:5b:e2:7e:03:b1:4c:9c:28:80:f1:cc:e4: d1:aa:f3:13:cd:e9:95:40:30:60:66:8c:03:93:92:02:a9:0b: a5:5a:be:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwNTE0MTY1MzQzWhcNMjUwNTIxMTY1MzQzWjAYMRYwFAYD VQQDEw02ODI0Y2E5Ny0wYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2p6mYwI9pOT60qIzZobvDa0fJXdCrszeI9BuvFIBLJYSkNHk/5weA8sVn7GY fWipBqHcXlqA+kd+ScMBeTSq22wiPrghWXvvcj80D65+qWpnVtFradqqkLJ0xkEh 7o3NBttoe4gtMrqJ13U73wWVqPaDDmDCZAbF1sNhBgFiLGh62lKiAtAZM83Pw/D2 gghE/RhG+6pRgdl5MqO6e1uxfA4AOe9pdcy/D5vWwvQTmPRw+wn185j1Kud0xFHB czCRirr74Fxf4fE1ks2IIttnEZi2z7tR33qfzrfc7WUkNT6GA0PTE+xBUPhyllBY lBZ/jb1+pLudBrzBeABjMVXpFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN42a1K8 IvGw1J/mPSHNRJFTdX8wMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGwv84QLv1SwOlyx11xCCqo4SGn3lSEJHK04Y14Oc+9vvq8+VIN2SF 5rN1T0oJYjBLAg9oiz9HRe6dAelzWGva2lqWRsmoSbZpbYe5jr29VWU9M8V+vpfD QrM5cHv52jxUlTQ1Qvbcj5t7fw6oDoJqbDmF8DDdqt5vavsek3oyuLdTG6/l0IYe bfgqb6faebmnz8fvcLFo+A8DTu0Yd/VUfAeB7W7mTvBdKKxq0iXdiYR1Z+vvWpFR z5rTWRM406cB7H3WzgU+DqmWatZSHn08as/KJPsviVk8I/AJoe1b4n4DsUycKIDx zOTRqvMTzemVQDBgZowDk5ICqQulWr7h -----END CERTIFICATE-----Generated at Thu May 15 12:24:20 2025 by rpki-client