$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: fFrvv2rFgpagDDcYRuB0Y1zYtaWM6fbUwX2J69ylMTU= Subject key identifier: 81:23:93:1E:01:B8:B3:71:D1:9C:77:E4:75:AF:B2:4E:31:72:94:15 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1DB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1D8D Signing time: Sat 10 May 2025 16:03:37 +0000 Manifest this update: Sat 10 May 2025 16:03:36 +0000 Manifest next update: Sat 17 May 2025 16:03:36 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: xRKsdCEwCzFbCcpEfQxOxEAziNw/eEJe/6QX2lvWH2s=) 2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=) 3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7600 (0x1db0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: May 10 16:03:36 2025 GMT Not After : May 17 16:03:36 2025 GMT Subject: CN=681f78d8-c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:63:7d:85:24:6e:3e:ab:71:66:d0:1b:d9: e9:ea:8c:a0:db:74:48:14:53:0d:24:b6:32:c1:4b: a0:ff:93:f4:9b:2e:d1:dc:d4:27:7b:ba:f7:ad:71: 88:b6:22:9b:e9:c9:37:fc:0d:54:ce:24:5f:85:58: cb:71:d4:04:2c:6a:be:f9:a4:f5:b9:44:ad:a2:6c: 77:ee:f0:a7:5b:30:14:c7:e3:7a:2d:1f:87:0a:11: a9:3c:10:d7:40:e9:9e:fb:e5:ae:e2:29:c6:23:86: 01:3e:63:d3:df:e4:ef:4b:ea:a3:2e:5b:73:1e:d6: fa:63:1b:ed:ec:4a:22:61:a9:c7:83:88:6c:cc:64: c0:0f:7d:9e:bc:22:c3:5a:0c:9f:dd:a1:2f:4a:a4: 50:39:f0:56:19:9c:e6:c3:d4:79:43:31:be:ce:5c: 38:58:6d:91:0d:87:93:16:13:60:a8:3f:40:ff:23: 0e:8c:f1:7e:1b:f5:c1:fb:ab:82:4b:8e:e2:e0:09: 70:0b:99:49:4c:a5:e5:23:fa:97:da:f0:ff:45:64: 6b:f7:4c:f7:c9:21:fe:be:d9:85:3f:ab:63:58:68: 13:65:45:63:91:7d:5e:83:68:2c:db:2d:17:1d:19: 91:41:3c:a0:2a:60:39:90:b2:a1:f4:dd:e2:66:f0: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:23:93:1E:01:B8:B3:71:D1:9C:77:E4:75:AF:B2:4E:31:72:94:15 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:1d:06:77:fd:49:d4:4c:fb:eb:19:f2:bb:fd:28:ce:68:7e: e0:61:31:41:a1:83:30:8d:6f:e6:66:6c:8e:6b:cf:8a:a7:cf: 70:74:0c:c1:64:cf:25:f9:2f:4f:35:45:23:32:87:18:89:fd: 67:ee:e0:33:8a:0e:4d:0a:55:28:90:c1:b4:86:d9:03:ab:84: 49:6c:19:6c:f1:76:bf:d3:ee:8c:2c:06:d9:f8:28:f4:e4:cd: 2b:f1:31:59:e0:96:89:53:77:3c:70:4b:d3:cb:4d:2a:ae:e7: 4f:2b:80:56:07:7d:be:1f:20:c9:12:c2:38:fe:33:83:b1:35: 59:40:93:49:43:4b:7d:5c:56:fc:dd:0e:c7:43:64:8d:c3:95: 5d:dd:4c:b0:91:7c:b6:82:70:eb:4f:8a:e2:d2:33:82:f2:02: 17:18:7f:00:83:5f:99:94:c2:06:fc:e7:6f:b0:9d:73:e4:ad: 84:6e:c5:be:96:f6:25:c9:46:8c:30:2c:ab:0e:90:ef:4b:ec: 78:ae:df:21:b4:c9:da:4e:b4:ac:1f:30:5c:44:3b:c2:9c:30: 7d:b3:4e:11:6d:f6:a5:dc:ca:e9:72:3b:e8:c2:33:13:d4:13: ce:0d:1e:49:57:13:d5:22:f4:e0:c3:36:e5:a8:91:d0:c5:c1: 18:ca:f3:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjUwNTEwMTYwMzM2WhcNMjUwNTE3MTYwMzM2WjAYMRYwFAYD VQQDEw02ODFmNzhkOC1jN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvBjfYUkbj6rcWbQG9np6oyg23RIFFMNJLYywUug/5P0my7R3NQne7r3rXGI tiKb6ck3/A1UziRfhVjLcdQELGq++aT1uUStomx37vCnWzAUx+N6LR+HChGpPBDX QOme++Wu4inGI4YBPmPT3+TvS+qjLltzHtb6Yxvt7EoiYanHg4hszGTAD32evCLD Wgyf3aEvSqRQOfBWGZzmw9R5QzG+zlw4WG2RDYeTFhNgqD9A/yMOjPF+G/XB+6uC S47i4AlwC5lJTKXlI/qX2vD/RWRr90z3ySH+vtmFP6tjWGgTZUVjkX1eg2gs2y0X HRmRQTygKmA5kLKh9N3iZvD/kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEjkx4B uLNx0Zx35HWvsk4xcpQVMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkHQZ3/UnUTPvrGfK7/SjOaH7gYTFBoYMwjW/mZmyOa8+Kp89wdAzB ZM8l+S9PNUUjMocYif1n7uAzig5NClUokMG0htkDq4RJbBls8Xa/0+6MLAbZ+Cj0 5M0r8TFZ4JaJU3c8cEvTy00qrudPK4BWB32+HyDJEsI4/jODsTVZQJNJQ0t9XFb8 3Q7HQ2SNw5Vd3UywkXy2gnDrT4ri0jOC8gIXGH8Ag1+ZlMIG/OdvsJ1z5K2EbsW+ lvYlyUaMMCyrDpDvS+x4rt8htMnaTrSsHzBcRDvCnDB9s04Rbfal3MrpcjvowjMT 1BPODR5JVxPVIvTgwzblqJHQxcEYyvNY -----END CERTIFICATE-----Generated at Sun May 11 17:01:54 2025 by rpki-client