$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft File: fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json) Hash identifier: sueMwToAVjMYUIKJxl2GlgLOKiE2JtSs99U+JEdC9Pc= Subject key identifier: 2F:73:F7:F5:17:52:FF:B9:24:3B:41:BB:2C:9D:6B:04:6C:51:29:02 Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft Manifest number: 0161 Signing time: Sun 11 May 2025 02:58:44 +0000 Manifest this update: Sun 11 May 2025 02:58:43 +0000 Manifest next update: Sun 18 May 2025 02:58:43 +0000 Files and hashes: 1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: VFbLFuzV7aoaGLxrETzK7EIIF+fYqIg8UVBTGRm96ao=) 2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: A4DVK+hVAcm077tOI0UtMRITW1ft4Rq073mjOE1b4lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A Validity Not Before: May 11 02:58:43 2025 GMT Not After : May 18 02:58:43 2025 GMT Subject: CN=68201264-856f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:b7:a8:a0:64:24:14:37:ee:81:05:48:6a: 46:8b:31:9c:60:8f:52:4c:2f:f6:87:e2:38:01:28: a6:b4:ef:a5:f5:49:c6:c8:7e:28:57:02:08:47:4b: 5e:93:7b:8e:5d:99:f5:8a:95:c3:18:7d:fb:e9:c2: f0:6b:f1:eb:72:11:7e:39:75:73:85:35:74:03:55: 57:df:c2:a8:73:40:7d:07:6c:c4:24:ac:5a:62:c7: d8:0a:7c:8d:8c:be:a7:f1:04:21:da:d7:0e:b8:18: ba:21:d2:65:2f:e1:67:28:35:c6:e0:aa:4c:3b:ff: 2d:15:36:e2:cb:45:8a:b3:43:d1:b6:c4:69:96:e7: 36:90:23:b0:7d:dc:49:16:58:11:f2:38:76:b3:a2: b7:c3:9d:c2:b9:1f:4e:fb:30:7d:72:b6:2e:35:a3: 58:f3:e9:f4:71:f5:13:3a:a0:86:31:a3:b4:ab:ad: bd:45:43:76:ab:ce:fa:3d:85:18:74:2f:c8:fa:b5: e0:3b:20:1b:da:1b:6d:78:81:cb:dd:cb:c6:7a:7d: de:26:bd:a1:c5:92:39:74:b1:7d:11:35:44:ba:cf: 81:91:0c:39:e6:a7:35:6a:85:23:d8:8f:6b:24:e0: ae:66:07:1b:10:58:94:6c:23:3f:f9:47:7b:ce:fa: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:73:F7:F5:17:52:FF:B9:24:3B:41:BB:2C:9D:6B:04:6C:51:29:02 X509v3 Authority Key Identifier: keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:28:49:93:e8:a8:f3:03:7b:b4:ac:76:4e:cd:26:a4:76:7f: 5b:78:fc:95:6d:ee:d9:88:6b:8b:c7:7c:5d:43:0a:02:09:39: 18:a2:23:cd:4e:86:e7:81:ad:20:44:20:c7:c0:2b:1b:a2:1d: 3a:d6:83:0e:cc:aa:e6:76:c4:80:27:68:8b:45:aa:02:55:d9: c6:3c:f8:a1:0e:88:17:ea:3d:58:34:f3:84:f1:cc:14:aa:8f: 7b:c7:d0:42:f9:55:d1:2a:05:d7:51:53:c7:a9:6a:4a:5e:55: c8:91:af:91:76:a2:71:23:bb:26:76:4e:1e:95:3d:e8:8e:a5: 4c:d2:8a:9c:20:db:cc:0a:6a:be:c4:08:70:8d:85:68:f9:fb: 1b:fd:fa:3b:fc:ec:ab:d8:e3:af:24:7c:7f:39:d7:94:ce:e4: ef:dc:cf:d4:68:b8:04:02:f4:f3:30:78:b3:17:a5:a6:d7:c0: ab:91:67:51:9f:60:19:67:23:e2:91:29:fd:af:3e:20:bd:76: a1:41:c3:3e:c7:9a:ad:98:ed:65:1a:d7:9f:d6:04:48:af:03: c5:48:20:d7:ed:b7:26:fc:af:f7:da:59:68:35:ff:71:f7:70: b2:5e:6e:42:58:d6:fb:fa:ef:00:1b:ad:bf:8c:28:85:71:92: b2:79:32:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3QUQxMTAvBgNVBAUTKDdDOUY3MjIyOUVEMTEyNTk0Qzc3MjJEM0MyMUI1MTA1 RTI5RkM0OEEwHhcNMjUwNTExMDI1ODQzWhcNMjUwNTE4MDI1ODQzWjAYMRYwFAYD VQQDEw02ODIwMTI2NC04NTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobm3qKBkJBQ37oEFSGpGizGcYI9STC/2h+I4ASimtO+l9UnGyH4oVwIIR0te k3uOXZn1ipXDGH376cLwa/HrchF+OXVzhTV0A1VX38Koc0B9B2zEJKxaYsfYCnyN jL6n8QQh2tcOuBi6IdJlL+FnKDXG4KpMO/8tFTbiy0WKs0PRtsRpluc2kCOwfdxJ FlgR8jh2s6K3w53CuR9O+zB9crYuNaNY8+n0cfUTOqCGMaO0q629RUN2q876PYUY dC/I+rXgOyAb2htteIHL3cvGen3eJr2hxZI5dLF9ETVEus+BkQw55qc1aoUj2I9r JOCuZgcbEFiUbCM/+Ud7zvqJbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9z9/UX Uv+5JDtBuyydawRsUSkCMB8GA1UdIwQYMBaAFHyfciKe0RJZTHci08IbUQXin8SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdBRC9DRTZDMjM3QTIw QTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVsbE1keUxUd2h0UkJlS2Z4 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKOXlJcDdSRWxsTWR5TFR3aHRSQmVLZnhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdBRC9DRTZDMjM3QTIwQTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVs bE1keUxUd2h0UkJlS2Z4SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAKEmT6KjzA3u0rHZOzSakdn9bePyVbe7ZiGuLx3xdQwoCCTkYoiPN Tobnga0gRCDHwCsboh061oMOzKrmdsSAJ2iLRaoCVdnGPPihDogX6j1YNPOE8cwU qo97x9BC+VXRKgXXUVPHqWpKXlXIka+RdqJxI7smdk4elT3ojqVM0oqcINvMCmq+ xAhwjYVo+fsb/fo7/Oyr2OOvJHx/OdeUzuTv3M/UaLgEAvTzMHizF6Wm18CrkWdR n2AZZyPikSn9rz4gvXahQcM+x5qtmO1lGtef1gRIrwPFSCDX7bcm/K/32lloNf9x 93CyXm5CWNb7+u8AG62/jCiFcZKyeTJl -----END CERTIFICATE-----Generated at Sun May 11 22:18:21 2025 by rpki-client