$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: 18DMvedgxJfKOjoYhvtMaPdZbQ8E6gI8Gv8SLRTVu8Q= Subject key identifier: 5C:54:36:69:26:A2:13:5C:54:29:F0:D7:48:85:A2:3A:92:48:61:68 Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: 9B Signing time: Tue 13 May 2025 05:27:49 +0000 Manifest this update: Tue 13 May 2025 05:27:49 +0000 Manifest next update: Tue 20 May 2025 05:27:49 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: ZjvKVdONzwBksehwIaLj8MquMD4oJhxaU3uLaFmWGHI=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: /DX7dbxTLTAh+dFwT5n2PZNSYyr7e+Nh1d2b2XOmU5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: May 13 05:27:49 2025 GMT Not After : May 20 05:27:49 2025 GMT Subject: CN=6822d855-f698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:8f:ed:10:ce:19:9c:9f:42:2c:0f:78:e9: 9c:18:4b:81:73:df:b3:49:06:b0:a7:52:49:ff:b9: 02:96:30:28:d9:3e:02:ff:c0:5a:46:31:c4:f7:1a: b6:18:60:ce:c8:3b:67:dd:8e:04:e5:65:d9:fa:6f: be:fe:3e:94:d6:ea:c7:44:04:8e:47:95:80:bd:30: 40:a4:bf:3c:a9:1e:9d:c7:1e:18:c6:5f:58:25:0e: 7b:7f:59:a9:09:22:00:7e:aa:39:42:ca:1c:91:45: 01:a0:5f:07:6a:d0:f8:ce:30:00:83:8a:38:d8:dd: 65:81:ab:6b:de:f0:25:8e:d8:98:b8:f4:cd:e2:2a: ff:7d:3a:cf:44:11:25:4b:ba:60:d2:2d:3d:3a:f5: 4b:89:ee:2a:d5:17:bf:d8:0f:cd:84:d4:19:f1:76: 5a:0b:0f:a7:47:d7:a1:6f:b5:61:2a:36:8e:f5:86: 98:93:7a:e3:11:d0:51:63:87:4a:6d:09:9a:b3:7c: f9:4d:2d:a7:33:f3:65:f5:e7:93:71:41:8c:54:50: 7b:db:18:2c:b0:9c:85:0a:ce:7c:53:a0:43:6a:51: 2b:50:16:bc:07:47:f1:56:69:f9:43:6a:77:00:94: db:fe:b1:18:93:d8:0e:8c:0a:a5:76:61:e1:4a:6b: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:54:36:69:26:A2:13:5C:54:29:F0:D7:48:85:A2:3A:92:48:61:68 X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:cf:29:dd:74:51:6f:fe:5e:a9:3d:13:47:11:3e:bd:3b:94: 54:27:3b:12:f9:15:c9:ab:52:77:e4:b7:a0:37:ec:f0:84:62: f9:84:12:97:6e:ed:4e:cc:c8:62:37:02:0e:e2:89:9b:cc:e8: a7:43:b6:60:f1:b7:3b:b4:0d:e1:f9:94:93:00:2b:f0:05:b5: 8a:aa:7f:33:f2:4c:91:d3:2e:28:cf:ae:58:bf:24:e9:91:22: 8c:0f:89:a9:91:93:1b:fb:e7:61:b2:a5:64:bf:46:2b:ba:0a: 6f:83:e0:b8:d4:e9:4e:e5:ff:02:b6:20:84:f3:ae:c5:0e:6b: a9:44:1b:2d:f1:94:d8:f9:ef:19:55:94:a8:72:12:84:c4:23: b7:41:e9:21:4e:d6:a4:70:15:57:54:63:50:9e:d7:99:e5:03: 47:92:57:0e:b0:7a:4c:ab:21:96:2f:8a:fa:dc:27:eb:3e:2f: 9a:c3:ae:99:f4:d0:1d:c8:7b:b1:55:49:c3:e7:de:10:36:ba: 41:59:34:d4:a5:c3:67:c6:e7:30:11:c2:bd:0e:76:9a:26:78: 39:aa:6e:2a:75:91:20:ed:34:87:58:85:e7:55:e5:78:39:63: 60:f0:fc:c3:68:19:96:a7:8e:16:83:db:21:ee:c6:c7:0a:c7: f3:a4:8e:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5 ODgzOTY2MDQwHhcNMjUwNTEzMDUyNzQ5WhcNMjUwNTIwMDUyNzQ5WjAYMRYwFAYD VQQDEw02ODIyZDg1NS1mNjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2euP7RDOGZyfQiwPeOmcGEuBc9+zSQawp1JJ/7kCljAo2T4C/8BaRjHE9xq2 GGDOyDtn3Y4E5WXZ+m++/j6U1urHRASOR5WAvTBApL88qR6dxx4Yxl9YJQ57f1mp CSIAfqo5QsockUUBoF8HatD4zjAAg4o42N1lgatr3vAljtiYuPTN4ir/fTrPRBEl S7pg0i09OvVLie4q1Re/2A/NhNQZ8XZaCw+nR9ehb7VhKjaO9YaYk3rjEdBRY4dK bQmas3z5TS2nM/Nl9eeTcUGMVFB72xgssJyFCs58U6BDalErUBa8B0fxVmn5Q2p3 AJTb/rEYk9gOjAqldmHhSmv6MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxUNmkm ohNcVCnw10iFojqSSGFoMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApzynddFFv/l6pPRNHET69O5RUJzsS+RXJq1J35LegN+zwhGL5hBKX bu1OzMhiNwIO4ombzOinQ7Zg8bc7tA3h+ZSTACvwBbWKqn8z8kyR0y4oz65YvyTp kSKMD4mpkZMb++dhsqVkv0Yrugpvg+C41OlO5f8CtiCE867FDmupRBst8ZTY+e8Z VZSochKExCO3QekhTtakcBVXVGNQnteZ5QNHklcOsHpMqyGWL4r63CfrPi+aw66Z 9NAdyHuxVUnD594QNrpBWTTUpcNnxucwEcK9DnaaJng5qm4qdZEg7TSHWIXnVeV4 OWNg8PzDaBmWp44Wg9sh7sbHCsfzpI6S -----END CERTIFICATE-----Generated at Tue May 13 11:33:28 2025 by rpki-client