$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: Og30PpVbFoDtDPD2oVGtfbW4V5xN+Nf5wuAEZ7/LqSo= Subject key identifier: 0C:55:BE:4E:A9:0E:9D:B4:BF:11:3E:EA:A7:E8:80:74:0F:07:09:6E Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: 7C Signing time: Sun 11 May 2025 05:27:10 +0000 Manifest this update: Sun 11 May 2025 05:27:10 +0000 Manifest next update: Sun 18 May 2025 05:27:10 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: 1YhEuU6qStYXUux66cnGZ3U6/r0cUnr7B+BXnQR4Spw=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: hF0cvJ5WGf8hjnk2FrHWwiuqbgTh6n818KkJ7xF10xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: May 11 05:27:10 2025 GMT Not After : May 18 05:27:10 2025 GMT Subject: CN=6820352e-0fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:1e:f9:28:c1:9c:68:cd:90:13:2a:87:f7: d9:fd:27:d0:d0:39:d1:21:67:a8:9f:34:0c:5a:cb: 04:5e:e8:3f:aa:46:f7:8c:70:a1:cb:65:23:1f:e0: 7a:03:fb:ec:f1:26:59:fb:b1:f5:8c:87:ed:71:3a: 29:58:b0:1d:e9:b9:2f:f3:23:8a:0d:2e:7b:72:b5: c6:0f:7b:db:42:4e:61:b7:6a:30:6e:62:00:fa:a5: 6e:30:79:2c:4b:e9:0a:d8:a8:b0:8e:fd:85:79:6b: fd:0c:8d:40:33:1b:f1:44:67:01:76:f3:2d:a8:78: 88:f0:59:2b:ea:21:6e:fc:b7:42:85:aa:1e:2c:c9: 77:d4:c6:73:35:41:bf:5d:5a:2a:5f:fc:c7:c4:8f: 98:ef:4e:15:f6:ce:d6:fd:96:e1:cf:f6:0c:a2:bc: ee:70:a1:4f:bc:67:e8:f9:4b:92:16:97:70:8f:d0: a9:40:22:e5:14:36:63:93:92:6b:27:10:15:c3:63: 41:99:cb:55:52:11:f0:72:b9:86:06:00:cc:39:fe: 45:ed:20:98:5c:58:c6:6c:8f:01:d4:2c:d2:49:3a: a2:de:89:f3:9f:cb:19:2f:54:70:0f:bf:2d:dc:df: 47:a4:97:d9:5a:f2:41:78:53:fb:7a:ac:3c:e5:b3: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:55:BE:4E:A9:0E:9D:B4:BF:11:3E:EA:A7:E8:80:74:0F:07:09:6E X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:bf:44:18:67:18:fe:4c:93:87:6e:b2:86:04:a3:cd:e5:84: 5b:5f:2b:d5:3d:89:0b:1b:c5:72:08:37:35:de:6e:ff:06:94: a7:47:78:b6:ca:5d:31:69:46:c7:24:ef:f8:83:30:3e:8e:19: fe:8f:97:22:b9:ce:57:a6:71:8a:5b:b7:72:74:4a:b3:59:a5: b7:a1:90:6b:8b:d8:8e:b0:d3:29:f7:0a:9f:49:ab:82:56:85: 9c:74:f1:41:22:1f:46:a6:84:b6:0e:d5:68:2c:06:bb:02:61: f5:06:14:d9:da:bc:1a:a7:63:fc:89:34:c7:92:5d:4c:12:91: d4:3f:f4:f1:e3:72:c0:66:40:e3:be:14:42:46:45:3a:ea:72: 64:be:a9:49:41:6b:d2:a6:a3:dd:88:81:7a:94:fb:0d:bf:cb: 1e:9e:08:88:6f:f4:dc:9a:3e:59:a4:b9:d3:e6:6a:a7:b6:28: b4:4c:69:6c:a4:1b:7e:45:4f:85:5e:06:93:ae:7e:9b:a9:e8: 75:49:7d:97:34:19:3c:1d:4b:ab:6b:8e:81:4a:41:54:86:e1: 2c:8f:76:46:49:d3:0d:83:57:8b:36:a1:60:89:21:ce:e4:37: cb:29:63:1a:65:2e:3c:36:a0:47:d8:83:15:92:9b:59:df:17: 0b:c8:c3:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTU0QTExMC8GA1UEBRMoRjQwMTU3MUY0RTBGRThGODBENTdDRDAyN0NEOUVFMTVE NzM4OEYyNDAeFw0yNTA1MTEwNTI3MTBaFw0yNTA1MTgwNTI3MTBaMBgxFjAUBgNV BAMTDTY4MjAzNTJlLTBmYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFOh75KMGcaM2QEyqH99n9J9DQOdEhZ6ifNAxaywRe6D+qRveMcKHLZSMf4HoD ++zxJln7sfWMh+1xOilYsB3puS/zI4oNLntytcYPe9tCTmG3ajBuYgD6pW4weSxL 6QrYqLCO/YV5a/0MjUAzG/FEZwF28y2oeIjwWSvqIW78t0KFqh4syXfUxnM1Qb9d Wipf/MfEj5jvThX2ztb9luHP9gyivO5woU+8Z+j5S5IWl3CP0KlAIuUUNmOTkmsn EBXDY0GZy1VSEfByuYYGAMw5/kXtIJhcWMZsjwHULNJJOqLeifOfyxkvVHAPvy3c 30ekl9la8kF4U/t6rDzls7XXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDFW+TqkO nbS/ET7qp+iAdA8HCW4wHwYDVR0jBBgwFoAU9AFXH04P6PgNV80CfNnuFdc4jyQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNTRBL0JFODRBODIwNzFB NTExRUY4RDgwNUM3OEM0RjlBRTAyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUFGWEgwNFA2UGdOVjgwQ2ZObnVGZGM0anlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NTRBL0JFODRBODIwNzFBNTExRUY4RDgwNUM3OEM0RjlBRTAyLzlBRlhIMDRQNlBn TlY4MENmTm51RmRjNGp5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMm/RBhnGP5Mk4dusoYEo83lhFtfK9U9iQsbxXIINzXebv8GlKdHeLbK XTFpRsck7/iDMD6OGf6PlyK5zlemcYpbt3J0SrNZpbehkGuL2I6w0yn3Cp9Jq4JW hZx08UEiH0amhLYO1WgsBrsCYfUGFNnavBqnY/yJNMeSXUwSkdQ/9PHjcsBmQOO+ FEJGRTrqcmS+qUlBa9Kmo92IgXqU+w2/yx6eCIhv9NyaPlmkudPmaqe2KLRMaWyk G35FT4VeBpOufpup6HVJfZc0GTwdS6trjoFKQVSG4SyPdkZJ0w2DV4s2oWCJIc7k N8spYxplLjw2oEfYgxWSm1nfFwvIwxA= -----END CERTIFICATE-----Generated at Tue May 13 00:27:59 2025 by rpki-client