$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: ODnrpBq3qK57h88GvWMNseNRDlezKVTXnRIFEKPr93I= Subject key identifier: EE:1D:8C:21:96:F7:6F:88:CE:E9:67:40:AA:C2:E5:1D:1C:9E:41:EC Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 0118 Signing time: Fri 09 May 2025 04:05:38 +0000 Manifest this update: Fri 09 May 2025 04:05:38 +0000 Manifest next update: Fri 16 May 2025 04:05:38 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: JDRw127k4HTckrB24NC5Po4DeNfwtussJsdg7amMYig=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: LRpyZatatX4jc3xI3kv4CvOw5fWMnbigjWqOElPjGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: May 9 04:05:38 2025 GMT Not After : May 16 04:05:38 2025 GMT Subject: CN=681d7f12-897a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:8f:02:06:61:c5:b7:a1:ec:fc:1c:0f:93: 5b:80:bb:64:32:db:19:66:7c:49:3a:e6:0e:d2:8b: 7a:bf:06:35:73:74:14:be:a3:bf:da:32:0d:6f:4d: 7d:e3:37:b4:bf:cf:07:de:37:e9:1d:d2:a4:7e:f5: 8b:ac:c5:ab:fc:63:8f:3b:51:f0:58:9c:76:10:dd: d3:f4:52:97:2f:9c:88:10:19:be:47:b1:25:80:31: ac:9d:a3:f3:cc:86:b1:82:07:6c:cb:8a:33:3d:bb: 78:23:7a:11:73:d5:54:24:a0:56:21:67:50:44:8b: 74:80:5f:69:7c:47:74:d0:05:c8:22:1e:ba:b1:38: 71:60:92:50:f8:d4:42:a8:cd:49:72:c1:3f:bd:bb: 64:6d:4a:6a:1c:c1:68:ee:49:0f:91:93:d9:f0:96: e3:c2:be:4b:51:fd:75:a9:36:73:a6:be:68:e3:48: b0:4d:c0:be:d2:2d:4d:3a:53:b1:18:a2:aa:e2:2c: 6e:c3:ff:b8:7c:ad:4e:e7:db:b6:1a:fd:db:9b:29: 9d:29:75:f0:a2:ad:dc:56:50:3f:7a:d6:75:fb:a4: 78:da:7d:90:47:a7:d4:74:b0:07:8d:a7:7d:c8:3d: ef:cd:48:b7:01:d9:15:6d:cf:56:f0:ce:b9:03:b7: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1D:8C:21:96:F7:6F:88:CE:E9:67:40:AA:C2:E5:1D:1C:9E:41:EC X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:49:71:51:55:da:7d:90:0e:34:c7:32:2f:ad:f0:49:15:72: 3f:4e:c9:ba:5e:1b:47:60:8e:3a:58:c3:48:10:f5:57:61:23: 55:ae:89:70:e8:b5:2f:cc:03:87:24:43:45:53:fa:1e:3a:27: 92:98:28:16:f7:79:d0:75:0e:39:ff:23:76:6b:0e:0f:9a:ec: ba:69:7d:9f:75:1e:bd:a0:e4:89:7d:55:18:d2:b2:cb:e1:f8: 7f:16:7f:6d:9d:9a:76:74:76:0a:63:fe:cc:dc:54:7b:00:a1: fc:8e:c0:5a:ed:a5:4c:5d:c3:22:0e:8e:0f:1b:18:f2:21:d6: cb:35:3a:f6:1a:f4:5d:8a:23:32:e8:04:f2:8e:35:a3:7f:0a: 25:35:a8:9d:78:86:b4:e8:f8:b4:bc:c7:e3:5e:29:5b:de:cc: b1:0d:97:03:ea:3d:6e:1e:bf:18:99:90:ba:c6:5d:3e:57:e2: 85:44:42:6e:df:ba:7a:b8:91:af:fa:0b:88:4b:ae:51:71:6b: 01:e1:c0:01:51:b5:79:d5:9a:a5:20:5e:b3:cf:ff:68:19:32: 13:48:55:e8:d9:23:ac:ac:1c:71:27:f4:11:bd:b8:3b:25:c9: fa:51:af:71:3e:e0:3d:ed:c4:ba:7b:b6:a5:19:43:8f:a5:96: 4c:56:47:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUwNTA5MDQwNTM4WhcNMjUwNTE2MDQwNTM4WjAYMRYwFAYD VQQDEw02ODFkN2YxMi04OTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvluPAgZhxbeh7PwcD5NbgLtkMtsZZnxJOuYO0ot6vwY1c3QUvqO/2jINb019 4ze0v88H3jfpHdKkfvWLrMWr/GOPO1HwWJx2EN3T9FKXL5yIEBm+R7ElgDGsnaPz zIaxggdsy4ozPbt4I3oRc9VUJKBWIWdQRIt0gF9pfEd00AXIIh66sThxYJJQ+NRC qM1JcsE/vbtkbUpqHMFo7kkPkZPZ8Jbjwr5LUf11qTZzpr5o40iwTcC+0i1NOlOx GKKq4ixuw/+4fK1O59u2Gv3bmymdKXXwoq3cVlA/etZ1+6R42n2QR6fUdLAHjad9 yD3vzUi3AdkVbc9W8M65A7dDYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4djCGW 92+IzulnQKrC5R0cnkHsMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBASXFRVdp9kA40xzIvrfBJFXI/Tsm6XhtHYI46WMNIEPVXYSNVrolw 6LUvzAOHJENFU/oeOieSmCgW93nQdQ45/yN2aw4Pmuy6aX2fdR69oOSJfVUY0rLL 4fh/Fn9tnZp2dHYKY/7M3FR7AKH8jsBa7aVMXcMiDo4PGxjyIdbLNTr2GvRdiiMy 6ATyjjWjfwolNaideIa06Pi0vMfjXilb3syxDZcD6j1uHr8YmZC6xl0+V+KFREJu 37p6uJGv+guIS65RcWsB4cABUbV51ZqlIF6zz/9oGTITSFXo2SOsrBxxJ/QRvbg7 Jcn6Ua9xPuA97cS6e7alGUOPpZZMVkeh -----END CERTIFICATE-----Generated at Sun May 11 03:48:43 2025 by rpki-client