$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json) Hash identifier: 9vXIItSjF99TuDaEHuJWqfThNeT+6X4vBsZcnuWyj8U= Subject key identifier: 03:D1:AF:17:C1:C3:0D:A0:8C:13:01:14:F5:01:66:94:AC:E2:C6:28 Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Certificate serial: 0607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft Manifest number: 05FF Signing time: Fri 28 Mar 2025 23:09:22 +0000 Manifest this update: Fri 28 Mar 2025 23:09:22 +0000 Manifest next update: Fri 04 Apr 2025 23:09:22 +0000 Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: N8+k0AimjCeXFUaUGWgTcR5kyfzgb9XRASOv/4oHdfY=) 2: 4482148613E611EE8ECA2D3CC4F9AE02.roa (hash: CdGumyD+dxyUx7Arkr24lgzoLZyjPLu4SVH4NeTvk7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBF Validity Not Before: Mar 28 23:09:22 2025 GMT Not After : Apr 4 23:09:22 2025 GMT Subject: CN=67e72c22-8dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:42:8d:51:13:77:e4:f2:24:a5:c8:c6:d5: da:bc:3b:cb:80:fa:5f:bb:34:1f:d8:41:8a:95:a8: c6:67:19:cd:6a:64:e2:01:76:1a:15:0b:99:c4:6b: 25:2a:82:da:43:77:f9:e0:32:8e:1e:97:30:a1:73: eb:b7:f0:b8:4a:8b:ea:30:43:92:8f:ce:df:24:15: ca:ae:d4:88:cb:71:21:94:ac:6f:ae:a8:c6:5f:ba: 62:ae:f9:a2:7e:77:89:a6:49:ff:c9:81:42:3c:02: b5:a4:81:ad:09:c2:4f:d7:b4:53:d9:99:ea:94:98: e0:0a:cc:7c:ef:85:fe:1e:ba:b5:8b:51:71:06:ac: 3c:97:28:bb:3b:07:b5:7c:e9:71:c4:ec:38:d0:94: 3f:3b:77:ef:a2:5e:15:5d:c6:5c:e8:76:67:b1:81: fd:7e:32:e0:9c:0c:cd:11:3b:60:f3:bf:72:97:5d: ee:ea:9e:31:0d:f9:18:01:de:79:7c:a2:df:e8:6f: 1b:39:b7:d8:09:15:b1:02:88:8d:f1:fe:78:88:03: 4b:ec:91:46:f0:fa:75:67:83:fd:cf:52:15:6f:de: 97:f3:f4:b4:ed:2b:b6:2c:46:47:76:59:9e:d5:6e: be:82:7d:ea:bb:24:b1:16:23:ff:f9:1b:c2:1e:da: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D1:AF:17:C1:C3:0D:A0:8C:13:01:14:F5:01:66:94:AC:E2:C6:28 X509v3 Authority Key Identifier: keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6a:1b:48:a5:62:5a:29:06:4b:1c:6c:64:6a:c0:f3:5a:7f: 4e:ae:26:36:9c:67:12:13:4d:1c:46:e0:f0:af:c3:ef:1b:79: d4:6c:e9:c7:e4:45:7b:ef:05:d4:a4:0a:1b:5a:bd:d5:19:4b: 05:cd:8d:5c:51:ec:4f:ea:fa:8e:85:33:d9:bc:35:08:fb:d4: 03:8b:84:ce:43:1f:c3:07:b2:c6:6a:42:30:41:0a:33:b0:c4: 15:69:a7:10:cc:78:19:85:66:a2:89:51:07:7d:87:a6:46:0f: 92:ad:26:2a:ad:95:d8:00:dd:4b:7d:c7:67:42:f6:d1:ef:48: a8:05:84:87:03:09:b3:52:5f:96:47:cc:e1:f6:c6:de:9c:1e: f8:48:0b:a0:12:69:88:67:5a:0b:9b:4b:50:eb:e1:51:59:94: a0:4d:60:b0:97:44:a5:9a:29:df:50:ca:88:a8:66:3f:88:b8: 93:39:ec:6e:06:09:f6:e1:68:d9:34:6d:7a:e5:27:75:35:bb: 0f:1b:d2:49:cd:a5:19:cd:7b:9e:a8:de:7c:de:f5:d3:3c:cd: e6:f6:33:e3:da:a3:48:16:47:a5:7b:90:dd:25:ce:81:d9:49: e4:29:bc:ea:40:38:73:f2:28:96:ca:f8:1b:53:18:c1:d4:c6: cc:a2:30:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw NTFFMTk0QkMwHhcNMjUwMzI4MjMwOTIyWhcNMjUwNDA0MjMwOTIyWjAYMRYwFAYD VQQDEw02N2U3MmMyMi04ZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmlCjVETd+TyJKXIxtXavDvLgPpfuzQf2EGKlajGZxnNamTiAXYaFQuZxGsl KoLaQ3f54DKOHpcwoXPrt/C4SovqMEOSj87fJBXKrtSIy3EhlKxvrqjGX7pirvmi fneJpkn/yYFCPAK1pIGtCcJP17RT2ZnqlJjgCsx874X+Hrq1i1FxBqw8lyi7Owe1 fOlxxOw40JQ/O3fvol4VXcZc6HZnsYH9fjLgnAzNETtg879yl13u6p4xDfkYAd55 fKLf6G8bObfYCRWxAoiN8f54iANL7JFG8Pp1Z4P9z1IVb96X8/S07Su2LEZHdlme 1W6+gn3quySxFiP/+RvCHtrEuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPRrxfB ww2gjBMBFPUBZpSs4sYoMB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUJCRi8xMjZCOTA5QTlEQkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVP OEEtTTZNYmI2dnNGSGhsTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsahtIpWJaKQZLHGxkasDzWn9OriY2nGcSE00cRuDwr8PvG3nUbOnH 5EV77wXUpAobWr3VGUsFzY1cUexP6vqOhTPZvDUI+9QDi4TOQx/DB7LGakIwQQoz sMQVaacQzHgZhWaiiVEHfYemRg+SrSYqrZXYAN1LfcdnQvbR70ioBYSHAwmzUl+W R8zh9sbenB74SAugEmmIZ1oLm0tQ6+FRWZSgTWCwl0SlminfUMqIqGY/iLiTOexu Bgn24WjZNG165Sd1NbsPG9JJzaUZzXueqN583vXTPM3m9jPj2qNIFkele5DdJc6B 2UnkKbzqQDhz8iiWyvgbUxjB1MbMojDK -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:43 2025 by rpki-client