$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: Ycq0eu0k3iKFJshS7t+8Nr93yia8DXvKy9GOSOUYAlc= Subject key identifier: 49:E5:83:40:24:E6:2A:EA:4B:1F:C3:0E:C2:2F:48:2F:5F:2A:AE:30 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0D55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0D4E Signing time: Sat 10 May 2025 17:50:52 +0000 Manifest this update: Sat 10 May 2025 17:50:52 +0000 Manifest next update: Sat 17 May 2025 17:50:52 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: LENvQ2Mzdq4YJ3+90bcbr8rvAUK6HL0O1uxJ3hvMSlQ=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: May 10 17:50:52 2025 GMT Not After : May 17 17:50:52 2025 GMT Subject: CN=681f91fc-e5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:06:9c:fc:05:d6:d9:f6:34:cd:c8:fd:3d: b5:13:82:13:5e:dd:4c:ce:86:1d:bb:b5:e7:df:5f: df:21:12:c1:dd:2f:73:2f:ed:58:8c:82:ed:aa:54: 11:e0:19:d2:c5:b3:1c:f5:b1:d5:17:cc:33:26:90: 12:29:44:59:cd:0a:e2:4d:6b:c2:9c:b9:6a:b4:0a: b1:9d:7a:0f:8e:51:62:4c:9e:a5:c0:90:0c:3e:af: ea:e8:6c:fd:76:34:a3:e3:fd:af:16:ad:a8:ab:91: c5:05:c4:72:c9:c2:74:ea:a5:1c:db:ea:6f:e0:fe: 68:8f:25:1f:9a:7c:6b:1d:a6:9e:62:16:74:59:59: e8:38:06:53:e1:0e:b0:85:1e:3c:89:7e:8e:2c:ce: a7:f2:60:16:51:d8:89:e1:54:54:fe:c4:6b:51:9f: e0:2a:70:cb:a2:d5:9a:83:17:d6:e4:64:cc:49:4d: 26:77:10:aa:a9:2e:bd:9d:df:28:56:69:e0:bd:2b: 8d:1a:51:ec:3b:25:51:f7:e8:88:e4:69:14:db:25: f1:12:16:8b:19:c1:f6:d9:2f:7f:28:64:7b:5a:01: ca:47:f5:f9:be:2e:f0:e6:45:80:e0:ab:d8:78:c9: b9:11:fe:fb:d7:b3:ca:56:c8:22:01:12:18:9d:ff: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E5:83:40:24:E6:2A:EA:4B:1F:C3:0E:C2:2F:48:2F:5F:2A:AE:30 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ac:a9:6a:7b:73:39:31:25:63:f4:26:c1:81:15:b4:4e:f0: 36:45:40:f1:36:26:bd:99:6e:91:c7:2d:55:c1:53:de:2b:6e: e5:d7:50:84:ac:50:3a:34:5b:04:d4:1f:ee:93:36:27:cc:af: 72:5d:02:30:38:dc:88:d9:34:c9:07:fc:b9:67:ac:1b:bd:03: 82:30:02:78:8b:7f:71:ee:6e:57:63:5d:49:ea:60:50:f7:cf: 6e:c8:7c:10:69:ef:b2:a4:c8:64:04:5a:87:6c:11:a3:a7:4b: 32:c3:f9:7d:05:af:5f:d6:9f:37:b7:69:6a:e1:04:b5:16:cf: 5f:11:9e:39:4b:84:58:d2:b4:54:1d:47:89:6b:13:84:92:ad: 31:a6:44:57:85:f8:4a:b5:5c:a5:84:1c:51:c4:af:21:c5:28: eb:4b:08:7f:cb:1e:21:d3:d9:c6:f0:e1:2c:fe:9e:d4:33:73: 43:64:d0:ba:15:eb:4d:68:92:6e:aa:81:8f:a4:3b:62:d3:33: 4d:82:7b:7e:1f:18:e5:c5:7b:4c:65:c6:a0:be:02:b0:b9:52: 0c:34:14:ae:f4:51:d9:2b:4e:08:f8:12:2e:e9:cc:28:15:da: e7:16:ab:2a:74:b5:a7:09:eb:4d:25:cf:fc:a0:38:e6:4b:2c: 97:fa:81:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjUwNTEwMTc1MDUyWhcNMjUwNTE3MTc1MDUyWjAYMRYwFAYD VQQDEw02ODFmOTFmYy1lNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eAGnPwF1tn2NM3I/T21E4ITXt1MzoYdu7Xn31/fIRLB3S9zL+1YjILtqlQR 4BnSxbMc9bHVF8wzJpASKURZzQriTWvCnLlqtAqxnXoPjlFiTJ6lwJAMPq/q6Gz9 djSj4/2vFq2oq5HFBcRyycJ06qUc2+pv4P5ojyUfmnxrHaaeYhZ0WVnoOAZT4Q6w hR48iX6OLM6n8mAWUdiJ4VRU/sRrUZ/gKnDLotWagxfW5GTMSU0mdxCqqS69nd8o VmngvSuNGlHsOyVR9+iI5GkU2yXxEhaLGcH22S9/KGR7WgHKR/X5vi7w5kWA4KvY eMm5Ef7717PKVsgiARIYnf8jswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnlg0Ak 5irqSx/DDsIvSC9fKq4wMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsrKlqe3M5MSVj9CbBgRW0TvA2RUDxNia9mW6Rxy1VwVPeK27l11CE rFA6NFsE1B/ukzYnzK9yXQIwONyI2TTJB/y5Z6wbvQOCMAJ4i39x7m5XY11J6mBQ 989uyHwQae+ypMhkBFqHbBGjp0syw/l9Ba9f1p83t2lq4QS1Fs9fEZ45S4RY0rRU HUeJaxOEkq0xpkRXhfhKtVylhBxRxK8hxSjrSwh/yx4h09nG8OEs/p7UM3NDZNC6 FetNaJJuqoGPpDti0zNNgnt+HxjlxXtMZcagvgKwuVIMNBSu9FHZK04I+BIu6cwo FdrnFqsqdLWnCetNJc/8oDjmSyyX+oGu -----END CERTIFICATE-----Generated at Sun May 11 14:45:08 2025 by rpki-client