$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: BQiIkHKIsYDd93FxVhv2cBMo+obmYkhBwZmVj5Em5Vc= Subject key identifier: 9B:49:57:B2:8B:15:89:E9:E6:CD:2C:BC:DE:D0:07:BC:36:68:49:3F Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 01DD Signing time: Sun 11 May 2025 01:50:53 +0000 Manifest this update: Sun 11 May 2025 01:50:52 +0000 Manifest next update: Sun 18 May 2025 01:50:52 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: 3jvMMXK1e6KDNRcyeQiadjfXCJDhdCV05mCFEf42z4M=) 2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: CgMPU2zKmFQv28rwsx7lyUdY/WjeUcfrzEMiRjZzUr8=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: l/45mJzVlvrXkvMnYsTOqET7KEWpbH/MA+sFMBUmJ+A=) 4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: FMfFksLuvdDh719tgVb78yQXrHhuawjPdGhDWuzq2VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: May 11 01:50:52 2025 GMT Not After : May 18 01:50:52 2025 GMT Subject: CN=6820027d-b538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:bf:a0:2d:74:32:54:74:a5:75:ad:62:2f: cc:69:db:0b:e9:d2:9d:cf:eb:63:7b:bb:d0:d1:3c: ec:74:b7:2d:82:78:d7:cd:b3:fd:bf:26:84:cb:cf: eb:33:52:8d:5e:5a:8d:e7:bb:81:1a:6e:1b:bb:fe: 62:07:53:70:02:53:52:57:b8:93:fb:67:63:72:14: 65:be:4a:43:a7:9a:2d:77:c1:97:d1:23:82:71:b5: dd:a5:26:89:d0:83:52:c5:9d:79:78:f3:f1:30:15: cc:dc:e6:c5:72:e9:7d:5e:8b:25:60:e1:3c:39:e9: 95:b9:08:8d:90:a8:cf:51:f6:50:85:e8:f4:96:be: bb:45:5e:41:08:d7:e8:c1:4b:bf:66:ce:d3:d3:fb: 1a:54:70:c8:ca:ff:7c:84:df:13:b6:83:29:bd:72: 2a:40:89:77:f9:95:65:4c:ea:7d:51:cf:97:4b:e4: 2f:1e:6e:f9:a4:03:40:f2:f4:5b:5b:e4:4d:b4:da: eb:1b:b5:cc:14:91:45:4f:74:d4:cb:01:fa:95:79: 60:42:fc:d3:9a:e7:9b:6b:06:21:9b:7c:24:04:18: 77:8d:e9:66:0e:6c:0f:c0:58:48:dc:8a:60:ef:78: 39:0e:f2:39:52:3a:d5:a7:3b:ea:98:19:e0:49:01: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:49:57:B2:8B:15:89:E9:E6:CD:2C:BC:DE:D0:07:BC:36:68:49:3F X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a6:2f:08:c2:ee:07:ac:5c:de:0f:d0:1d:db:53:44:27:51: 67:b5:02:e0:e8:4b:b4:2c:6c:22:e1:1d:80:6b:2a:ac:47:82: 38:08:13:be:43:a4:5d:cc:1d:1a:00:f4:83:54:c8:38:34:8b: d5:0d:e1:92:11:cf:80:7e:eb:ac:4c:d8:46:3e:ee:7a:12:1b: 46:f9:14:dc:78:33:d8:0e:21:51:80:3c:94:4c:cd:7e:92:2a: 12:0e:3c:39:23:bd:6a:94:22:07:8b:06:bc:0f:7d:bf:c4:bb: 3e:65:0e:b7:8f:c3:17:55:f1:f3:c2:99:e8:8e:3e:75:4a:5e: 29:bf:09:4f:47:96:d6:c6:69:7f:8e:49:54:27:fc:45:a4:e7: e3:3f:af:87:8b:e7:3d:80:2e:43:5e:34:bb:7c:8e:5a:c4:f3: 3a:b4:da:a4:a6:a9:8c:21:72:69:b3:3b:a6:47:2f:0a:ad:7f: 3f:a1:47:23:53:f2:35:10:a4:68:b5:cd:fc:fe:03:92:79:1a: 48:30:08:e8:c6:9a:25:39:4d:b1:f5:72:a9:6d:80:81:c6:2f: 75:3b:d6:8f:a6:19:a9:73:a3:d1:ab:27:63:f7:97:35:cb:d7: ce:91:92:90:95:8a:7b:c3:88:b2:0f:99:93:e9:71:b2:d3:f9: 2b:e5:93:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUwNTExMDE1MDUyWhcNMjUwNTE4MDE1MDUyWjAYMRYwFAYD VQQDEw02ODIwMDI3ZC1iNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3u/oC10MlR0pXWtYi/MadsL6dKdz+tje7vQ0TzsdLctgnjXzbP9vyaEy8/r M1KNXlqN57uBGm4bu/5iB1NwAlNSV7iT+2djchRlvkpDp5otd8GX0SOCcbXdpSaJ 0INSxZ15ePPxMBXM3ObFcul9XoslYOE8OemVuQiNkKjPUfZQhej0lr67RV5BCNfo wUu/Zs7T0/saVHDIyv98hN8TtoMpvXIqQIl3+ZVlTOp9Uc+XS+QvHm75pANA8vRb W+RNtNrrG7XMFJFFT3TUywH6lXlgQvzTmuebawYhm3wkBBh3jelmDmwPwFhI3Ipg 73g5DvI5UjrVpzvqmBngSQEfbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtJV7KL FYnp5s0svN7QB7w2aEk/MB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1pi8Iwu4HrFzeD9Ad21NEJ1FntQLg6Eu0LGwi4R2AayqsR4I4CBO+ Q6RdzB0aAPSDVMg4NIvVDeGSEc+AfuusTNhGPu56EhtG+RTceDPYDiFRgDyUTM1+ kioSDjw5I71qlCIHiwa8D32/xLs+ZQ63j8MXVfHzwpnojj51Sl4pvwlPR5bWxml/ jklUJ/xFpOfjP6+Hi+c9gC5DXjS7fI5axPM6tNqkpqmMIXJpszumRy8KrX8/oUcj U/I1EKRotc38/gOSeRpIMAjoxpolOU2x9XKpbYCBxi91O9aPphmpc6PRqydj95c1 y9fOkZKQlYp7w4iyD5mT6XGy0/kr5ZPC -----END CERTIFICATE-----Generated at Sun May 11 09:15:45 2025 by rpki-client