$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: teGlb1bGjq0b2z91aeo1Xz+Qo5H4FzZCrNDYw+8ZAi4= Subject key identifier: 52:BC:66:6D:67:91:3B:66:AC:EE:85:FA:DC:85:F5:AF:58:A9:1D:8C Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 09 Signing time: Fri 09 May 2025 07:11:32 +0000 Manifest this update: Fri 09 May 2025 07:11:31 +0000 Manifest next update: Fri 16 May 2025 07:11:31 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: toYvIrGBizGVUds1RaWfZSLIjiYEQJYoOBja2MMcdhE=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 07:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: May 9 07:11:31 2025 GMT Not After : May 16 07:11:31 2025 GMT Subject: CN=681daaa4-ac23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:5c:2f:40:ea:40:2d:79:74:50:02:b5:a9: 13:b0:69:ee:33:e1:81:3c:d5:83:2e:76:03:53:fa: fc:d7:9d:db:26:44:19:13:db:88:5b:f1:54:1a:30: 0f:25:48:06:86:25:b2:80:4a:43:ff:ce:f9:67:38: 88:9a:e6:e2:e0:b1:61:0d:9d:3f:2c:12:b3:de:21: b7:31:80:24:0a:fb:0b:08:07:37:25:31:c3:1e:15: ea:1a:5b:f0:be:0c:14:50:e0:12:90:37:85:40:db: 36:86:36:91:61:12:b3:72:bb:2a:06:6d:cb:8c:e5: e4:74:82:7a:38:ec:19:c1:29:26:c9:03:92:8e:bd: e0:b5:d7:4c:03:15:18:a3:32:cd:f8:51:0d:6a:bb: 93:44:04:e0:8f:20:ae:90:1c:49:76:0a:ce:e1:f0: 84:d3:7b:48:40:17:ad:67:68:58:8f:b8:ea:21:01: 32:05:ec:b9:b5:7b:0b:0b:a8:8c:c6:cc:f6:4a:8e: b8:4d:f6:e5:b1:cb:69:cf:87:13:6a:39:fd:b7:4a: bb:d3:ad:5c:25:0d:11:33:3c:7e:bb:2d:88:fa:71: a6:59:04:49:2e:71:39:4e:36:ae:d8:2b:91:77:3a: 7b:32:f2:6a:92:00:25:e3:39:9b:50:49:fb:a3:80: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BC:66:6D:67:91:3B:66:AC:EE:85:FA:DC:85:F5:AF:58:A9:1D:8C X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:11:51:3a:78:a7:d8:2c:87:c1:5e:ab:4e:53:ed:57:f1:d3: d7:00:72:45:66:48:ae:6d:90:d6:b8:ac:0d:2d:a5:a3:38:37: a0:e8:a5:c1:58:47:1e:3e:1d:16:e4:f1:5b:51:11:ec:48:ac: 34:ad:e1:ef:aa:4e:f4:75:02:ec:d1:80:d7:f6:df:a0:0d:6b: 2c:33:2a:f7:bb:b0:a8:c8:01:80:eb:e5:02:50:e1:dc:69:49: b4:64:34:e9:b6:be:aa:b6:65:b0:e6:5e:7f:c4:f9:56:69:00: 11:e5:28:3b:ce:48:88:be:8b:e5:af:5d:b5:01:73:fc:1b:c6: 77:b4:74:2f:30:07:a0:15:0c:20:32:e6:11:bc:9b:de:bb:1e: 62:e8:2f:4c:ea:7b:20:95:ff:59:6a:b3:27:6e:a3:e2:6e:44: e3:0a:30:c3:58:50:ac:a3:bf:06:18:38:db:4e:9b:3d:fc:fb: d1:a4:66:c1:45:7f:09:95:27:c6:c8:6a:18:a7:d0:1a:2b:a2: 63:e7:da:1e:8a:54:5f:5d:7c:08:a9:17:68:74:c6:64:e9:00: 19:09:77:94:af:d8:f2:1a:9f:29:e4:10:2f:48:37:3b:0b:26: 4b:79:20:3b:a9:2e:b0:80:08:86:35:59:1b:e6:de:a3:d1:aa: 5f:c6:8d:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTA1MDkwNzExMzFaFw0yNTA1MTYwNzExMzFaMBgxFjAUBgNV BAMTDTY4MWRhYWE0LWFjMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa6VwvQOpALXl0UAK1qROwae4z4YE81YMudgNT+vzXndsmRBkT24hb8VQaMA8l SAaGJbKASkP/zvlnOIia5uLgsWENnT8sErPeIbcxgCQK+wsIBzclMcMeFeoaW/C+ DBRQ4BKQN4VA2zaGNpFhErNyuyoGbcuM5eR0gno47BnBKSbJA5KOveC110wDFRij Ms34UQ1qu5NEBOCPIK6QHEl2Cs7h8ITTe0hAF61naFiPuOohATIF7Lm1ewsLqIzG zPZKjrhN9uWxy2nPhxNqOf23SrvTrVwlDREzPH67LYj6caZZBEkucTlONq7YK5F3 Onsy8mqSACXjOZtQSfujgLU5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUrxmbWeR O2as7oX63IX1r1ipHYwwHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB0RUTp4p9gsh8Feq05T7Vfx09cAckVmSK5tkNa4rA0tpaM4N6DopcFY Rx4+HRbk8VtREexIrDSt4e+qTvR1AuzRgNf236ANaywzKve7sKjIAYDr5QJQ4dxp SbRkNOm2vqq2ZbDmXn/E+VZpABHlKDvOSIi+i+WvXbUBc/wbxne0dC8wB6AVDCAy 5hG8m967HmLoL0zqeyCV/1lqsyduo+JuROMKMMNYUKyjvwYYONtOmz38+9GkZsFF fwmVJ8bIahin0BoromPn2h6KVF9dfAipF2h0xmTpABkJd5Sv2PIanynkEC9INzsL Jkt5IDupLrCACIY1WRvm3qPRql/GjYU= -----END CERTIFICATE-----Generated at Sun May 11 03:14:34 2025 by rpki-client