$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: MH8xth7Qijr8wdpJ9apbQ6YkmC0euUx5UnOW5GPwb4o= Subject key identifier: 86:3D:99:87:10:D1:B4:76:8A:04:9D:ED:10:35:ED:0A:12:F9:4A:3A Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: 3A Signing time: Thu 03 Apr 2025 06:58:06 +0000 Manifest this update: Thu 03 Apr 2025 06:58:06 +0000 Manifest next update: Thu 10 Apr 2025 06:58:06 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: egssl3S80DG9Dl0qoHuKg+RfCaFLTkxSWIkf/f7qCP8=) 2: 8D88F6EEDC9011EFA0219858C4F9AE02.roa (hash: jLDieWIRNg8FoWvPe6GNayNZYERhEqz23NTu1Iqy4LY=) 3: 06C84D20DC9B11EFB3BCA087C4F9AE02.roa (hash: jckmyQxpUBI6CgfUPTNi2GpMJpyKjsAzxMXFFNKFXtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9 Validity Not Before: Apr 3 06:58:06 2025 GMT Not After : Apr 10 06:58:06 2025 GMT Subject: CN=67ee317e-9440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:19:15:90:ef:c9:99:be:48:cb:20:8a:6e: 6b:7e:e2:fd:06:6e:a2:21:6e:ad:06:ed:4b:b6:18: 0b:56:31:ad:7c:8d:4f:6c:39:02:83:ba:fb:fe:26: 57:b0:df:03:87:d3:95:52:4b:d5:c8:d6:fa:c7:bc: d0:90:d0:7d:0a:51:a6:3f:a9:eb:c1:78:c2:1d:13: 3e:f6:fe:53:3d:d2:56:28:7a:75:e2:25:85:01:7f: be:bc:76:d8:2c:85:57:49:cd:d4:d2:bc:bc:b0:f9: 92:07:4d:af:5e:65:36:f4:54:d4:e8:3f:f0:d0:32: f5:36:14:0b:61:7d:fd:80:ba:bc:c9:06:55:04:c6: 61:7d:e6:12:3c:9e:02:34:56:73:10:eb:57:da:75: 54:8a:cd:93:1c:d6:2b:a3:6e:7c:c4:b3:a5:2e:1d: 39:ac:1e:f3:55:bf:8d:ea:04:a2:d5:55:be:16:96: 2c:56:1c:6a:f3:b4:f0:40:3c:c5:2a:e6:4f:1c:a2: 73:a2:d3:aa:75:54:32:d1:ee:a1:19:c6:85:3b:e0: e6:ff:c7:df:aa:1d:ec:81:4e:52:f7:f4:dd:3c:81: 4c:08:44:37:77:76:a8:9e:71:22:0b:df:4f:8e:dc: 6f:da:0e:71:a1:fd:4c:62:d9:44:36:6a:60:62:78: b5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3D:99:87:10:D1:B4:76:8A:04:9D:ED:10:35:ED:0A:12:F9:4A:3A X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:df:00:ee:25:9a:df:76:c8:44:72:90:29:f0:4c:f8:91:c6: b6:f0:08:8c:67:e6:5f:7d:e6:18:cc:03:31:1c:d4:10:59:8c: 74:09:f1:7c:00:a0:b7:2f:b9:86:81:c0:a7:51:75:68:1f:7c: 09:f5:f1:02:ad:3e:e1:7a:6b:dc:66:ed:af:fd:f0:ae:33:13: 65:ec:93:3f:7c:c8:26:37:19:94:27:e1:9a:cb:7e:02:88:9f: f5:38:99:e3:21:38:3a:c3:35:25:9a:57:3f:63:0c:c0:f6:ae: 47:4f:3d:ea:d3:f2:ba:89:fb:32:15:20:34:a8:95:e2:4d:94: f3:98:12:ad:34:c7:0d:89:13:d1:05:f4:f1:2b:e0:0e:23:d9: 21:50:bc:91:7a:57:41:40:14:11:a3:66:14:ea:bc:cf:82:eb: 2e:f8:de:78:82:77:e0:10:52:bf:ff:c5:8b:06:72:9b:3c:bc: d9:d0:87:0e:cd:96:92:58:c0:af:61:59:f1:74:85:fd:61:93: 86:4c:55:14:3b:d2:49:f6:39:ea:30:41:fc:6b:b0:bc:90:b6: 5d:5a:23:df:6f:ed:a8:0e:66:50:92:5f:d7:52:ed:c0:eb:65: 11:2b:d0:98:f5:44:a6:59:e1:4f:6b:b8:9e:c4:3f:be:8b:49: ce:7e:cd:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODVFOTExMC8GA1UEBRMoRjY5OEI1QjQ3QTA2RDUzMDdERUM2MDg5NjkwNjMwNzRC NjhGRjVDQTAeFw0yNTA0MDMwNjU4MDZaFw0yNTA0MTAwNjU4MDZaMBgxFjAUBgNV BAMTDTY3ZWUzMTdlLTk0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHmBkVkO/Jmb5IyyCKbmt+4v0GbqIhbq0G7Uu2GAtWMa18jU9sOQKDuvv+Jlew 3wOH05VSS9XI1vrHvNCQ0H0KUaY/qevBeMIdEz72/lM90lYoenXiJYUBf768dtgs hVdJzdTSvLyw+ZIHTa9eZTb0VNToP/DQMvU2FAthff2AurzJBlUExmF95hI8ngI0 VnMQ61fadVSKzZMc1iujbnzEs6UuHTmsHvNVv43qBKLVVb4WlixWHGrztPBAPMUq 5k8conOi06p1VDLR7qEZxoU74Ob/x9+qHeyBTlL39N08gUwIRDd3dqiecSIL30+O 3G/aDnGh/Uxi2UQ2amBieLV/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhj2ZhxDR tHaKBJ3tEDXtChL5SjowHwYDVR0jBBgwFoAU9pi1tHoG1TB97GCJaQYwdLaP9cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0M5MjgwNDNBRDE3 NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDlj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXBpMXRIb0cxVEI5N0dDSmFRWXdkTGFQOWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NUU5L0M5MjgwNDNBRDE3NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRC OTdHQ0phUVl3ZExhUDljby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJPfAO4lmt92yERykCnwTPiRxrbwCIxn5l995hjMAzEc1BBZjHQJ8XwA oLcvuYaBwKdRdWgffAn18QKtPuF6a9xm7a/98K4zE2Xskz98yCY3GZQn4ZrLfgKI n/U4meMhODrDNSWaVz9jDMD2rkdPPerT8rqJ+zIVIDSoleJNlPOYEq00xw2JE9EF 9PEr4A4j2SFQvJF6V0FAFBGjZhTqvM+C6y743niCd+AQUr//xYsGcps8vNnQhw7N lpJYwK9hWfF0hf1hk4ZMVRQ70kn2OeowQfxrsLyQtl1aI99v7agOZlCSX9dS7cDr ZREr0Jj1RKZZ4U9ruJ7EP76LSc5+zbg= -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:40 2025 by rpki-client