$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: R9Wzed31yPIvqR/qitHhe0MoALfhVf6+YKE/TaHb8RY= Subject key identifier: 16:09:00:BF:DD:62:44:7B:1E:B7:8D:9C:5A:05:35:AE:D9:E9:96:2C Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 0363 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 0356 Signing time: Sun 11 May 2025 00:32:56 +0000 Manifest this update: Sun 11 May 2025 00:32:56 +0000 Manifest next update: Sun 18 May 2025 00:32:56 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: p0oKaXMwMKoEuGkYvBe7LtXy+MIVvcmDOYu1ONkB76A=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: q4NAjQjTJMFxxldl/AAiP8pDMUCdKKJhMRmCf+Jtl3M=) 3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: ICtuLoIJdvxcdfC6YrLD+/53y4ZZXc5VV+d4pptI4w0=) 4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: sTauF35xc8SZpRjcL8yNs6xEdRvTaoYQZFwMt4H/aTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 867 (0x363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: May 11 00:32:56 2025 GMT Not After : May 18 00:32:56 2025 GMT Subject: CN=681ff038-0b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:3a:20:fa:c5:3a:00:67:48:50:57:78:e2: c7:92:4d:e0:d0:fe:f3:c1:09:fd:0c:bb:7b:19:79: 19:b6:a3:4c:c2:02:a0:8f:52:f3:53:d6:43:7c:e3: 5f:c0:48:1c:d8:0a:67:40:40:ba:a8:a4:6e:77:8d: 93:2e:50:30:b2:21:72:2b:63:ce:f6:7e:2a:5b:9a: af:8c:9c:0d:01:78:5f:d7:4a:02:87:1d:d0:25:8d: 08:65:ac:65:5c:23:d5:1c:ca:97:ca:4e:45:ac:3b: 3c:eb:2e:35:60:1c:f4:ff:e1:3a:e5:dc:be:b2:4b: 32:22:ee:d2:3d:2a:96:dd:74:72:19:ce:9c:17:2f: d1:e7:0a:a3:ab:c8:b4:b6:d2:03:cb:ae:f7:d0:ee: 18:03:f0:22:1a:70:2d:75:38:bc:90:73:55:a1:09: d5:63:f2:de:cd:62:14:01:86:d7:bc:27:62:ed:8d: 0c:8d:9f:d5:9d:57:aa:e0:7a:15:51:43:9a:e7:16: e5:b6:e1:70:1e:28:aa:0c:e1:8c:ac:e8:3a:bd:26: 7d:6b:fc:6f:fe:7c:97:21:ca:3d:5f:66:cb:cf:74: 9f:43:3e:9a:ce:71:da:87:60:80:0e:15:26:e6:99: 0d:de:99:9a:9f:08:ef:f6:1c:a9:2b:14:df:77:70: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:09:00:BF:DD:62:44:7B:1E:B7:8D:9C:5A:05:35:AE:D9:E9:96:2C X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:f4:0d:9c:79:9e:61:53:f0:95:7b:00:bb:70:68:25:cd:b9: e4:b8:bf:2a:13:74:d6:f7:4e:37:75:2a:f1:f1:a1:55:d2:4b: 2d:55:6a:97:84:a0:27:d0:ca:d5:56:91:df:6f:c7:b0:c6:0c: d8:89:25:fa:83:32:70:da:c1:24:4a:44:5b:16:d7:2e:a9:59: e1:98:ed:b6:93:40:f0:c6:04:45:d0:16:4f:9a:bd:74:51:51: 36:88:df:a4:10:a3:9a:a1:3e:04:00:93:e6:83:03:84:67:df: 3d:c1:8c:5e:43:20:d1:a2:a8:ec:15:bd:fa:6f:a8:01:aa:21: 98:83:02:4b:41:ed:81:72:0d:28:68:85:50:89:06:40:90:c3: 20:98:50:75:84:41:42:d6:b3:ef:c0:61:de:a7:c8:c7:91:b4: 07:9d:4c:36:b7:20:9b:cd:b1:e8:a5:e8:ff:b5:f8:64:ed:b8: 5e:d6:b5:59:a1:32:d1:68:da:cb:90:22:c3:f7:22:da:97:8c: 40:91:6d:eb:0c:9c:87:86:58:58:83:29:31:47:9d:d4:06:46: 86:4f:f8:b7:0f:cf:8f:2f:f1:42:59:e4:c8:36:2f:2d:d3:b4: 96:16:81:de:22:08:05:7e:42:df:e2:3e:41:57:66:bc:0d:71: 97:6a:f7:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjUwNTExMDAzMjU2WhcNMjUwNTE4MDAzMjU2WjAYMRYwFAYD VQQDEw02ODFmZjAzOC0wYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDE6IPrFOgBnSFBXeOLHkk3g0P7zwQn9DLt7GXkZtqNMwgKgj1LzU9ZDfONf wEgc2ApnQEC6qKRud42TLlAwsiFyK2PO9n4qW5qvjJwNAXhf10oChx3QJY0IZaxl XCPVHMqXyk5FrDs86y41YBz0/+E65dy+sksyIu7SPSqW3XRyGc6cFy/R5wqjq8i0 ttIDy6730O4YA/AiGnAtdTi8kHNVoQnVY/LezWIUAYbXvCdi7Y0MjZ/VnVeq4HoV UUOa5xbltuFwHiiqDOGMrOg6vSZ9a/xv/nyXIco9X2bLz3SfQz6aznHah2CADhUm 5pkN3pmanwjv9hypKxTfd3CTswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYJAL/d YkR7HreNnFoFNa7Z6ZYsMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW9A2ceZ5hU/CVewC7cGglzbnkuL8qE3TW9043dSrx8aFV0kstVWqX hKAn0MrVVpHfb8ewxgzYiSX6gzJw2sEkSkRbFtcuqVnhmO22k0DwxgRF0BZPmr10 UVE2iN+kEKOaoT4EAJPmgwOEZ989wYxeQyDRoqjsFb36b6gBqiGYgwJLQe2Bcg0o aIVQiQZAkMMgmFB1hEFC1rPvwGHep8jHkbQHnUw2tyCbzbHopej/tfhk7bhe1rVZ oTLRaNrLkCLD9yLal4xAkW3rDJyHhlhYgykxR53UBkaGT/i3D8+PL/FCWeTINi8t 07SWFoHeIggFfkLf4j5BV2a8DXGXavcW -----END CERTIFICATE-----Generated at Sun May 11 20:56:57 2025 by rpki-client