$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json) Hash identifier: TNPaXH6VqG+nhSWNXj3toOf+L032NBt0I6s7F1HodOk= Subject key identifier: 01:38:4B:9A:75:AC:C2:76:75:F7:14:79:8B:1F:B8:DA:51:3B:CF:8B Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft Manifest number: B9 Signing time: Thu 03 Apr 2025 05:13:18 +0000 Manifest this update: Thu 03 Apr 2025 05:13:18 +0000 Manifest next update: Thu 10 Apr 2025 05:13:18 +0000 Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: 3r73EHqWz8RQAxhyKASXl7AaEQKVaU8E+8K2cY3aisk=) 2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: BonjniXMbmI4yDYc3ynOZLv8pgVSOdRZa/c5jpsq0Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB055 Validity Not Before: Apr 3 05:13:18 2025 GMT Not After : Apr 10 05:13:18 2025 GMT Subject: CN=67ee18ee-50df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e6:5f:ce:cc:b0:1a:27:b0:be:c1:c9:da:1d: 49:2c:52:6a:78:af:7b:0e:e5:2c:07:ed:de:8b:ff: 5e:08:02:81:4e:ca:b9:0f:b0:e1:24:3f:b3:b5:89: a1:8b:99:91:8c:21:96:a2:69:89:0b:63:91:d3:fa: dd:08:53:ad:91:ed:bf:4b:20:9f:3a:42:94:a5:09: 24:9b:c9:a5:77:eb:16:64:71:a1:56:62:03:87:74: 2d:e8:8d:0f:64:b5:d8:12:ee:a3:69:6c:9b:ee:a9: a2:8a:12:c1:4a:26:48:9a:41:3c:34:00:00:b1:5a: 28:8b:9f:d4:1f:15:03:dc:15:36:ea:65:fc:ff:45: 57:31:53:c5:94:7f:a7:bc:c1:94:f0:61:19:9b:85: de:2c:f3:1e:f8:85:d7:f7:da:68:eb:04:f3:b8:01: 19:49:56:e9:fe:62:02:da:20:bc:4c:32:0e:68:e1: 93:30:99:f6:14:25:7a:d1:37:48:28:08:3f:f6:0b: 1e:f7:f3:c1:be:b9:14:71:91:a8:d9:3a:b7:f5:e2: 6c:5e:f1:fc:d9:70:d5:95:93:9b:a1:df:93:d6:98: 93:ec:e6:f5:46:3b:c7:0d:ca:38:72:22:41:bc:0f: b6:71:59:20:86:f2:6f:0a:0e:5a:ba:0d:ff:93:18: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:38:4B:9A:75:AC:C2:76:75:F7:14:79:8B:1F:B8:DA:51:3B:CF:8B X509v3 Authority Key Identifier: keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:62:bf:41:77:ae:e4:b7:79:92:56:00:02:75:f1:f0:31:df: 49:f6:fd:4b:09:4b:e4:e5:a5:7d:2b:6f:66:d7:6c:a7:dd:bd: e3:4c:ca:4c:4a:af:6c:f9:39:c7:30:05:0b:c5:1c:d6:ac:43: 8e:e6:ff:4c:90:ab:b2:4d:ee:4c:31:43:5f:4f:4c:26:e8:d7: 4e:a5:bd:48:0c:46:4b:24:bf:93:97:81:b8:16:3c:46:ef:d0: 2d:0c:21:ad:40:ef:a5:39:1e:c3:d6:a9:18:70:0c:e7:5f:84: 46:34:97:3d:3a:f2:b3:ce:65:a7:70:09:39:00:da:45:ca:3e: f0:e8:bc:52:06:79:71:6a:8f:67:67:66:80:f3:40:4a:71:43: 68:62:c7:73:fc:84:92:05:8f:09:3f:c5:9d:ba:cc:32:34:c0: bc:ee:d1:b4:92:b1:d9:05:12:7e:fe:0b:9f:76:b2:2b:70:4d: 7d:6e:a2:70:d3:5e:1e:c9:c0:06:d3:cb:a2:03:a3:fa:c2:c0: bc:be:ef:e4:a0:fb:90:bb:94:29:b3:ae:42:65:0c:49:2f:fc: 84:b7:00:5f:f3:c4:62:5f:73:91:f6:1c:a8:5c:cb:80:e8:88: 61:37:5c:eb:7d:ca:44:d8:37:ab:fe:7e:5d:fd:56:b0:f2:27: f5:9e:a4:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNTUxMTAvBgNVBAUTKDk5OUIyRjY1MzlDMjNFQUVCNDY5RTY3NTM5RkIyREM5 MzNEOTgwNDAwHhcNMjUwNDAzMDUxMzE4WhcNMjUwNDEwMDUxMzE4WjAYMRYwFAYD VQQDEw02N2VlMThlZS01MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uZfzsywGiewvsHJ2h1JLFJqeK97DuUsB+3ei/9eCAKBTsq5D7DhJD+ztYmh i5mRjCGWommJC2OR0/rdCFOtke2/SyCfOkKUpQkkm8mld+sWZHGhVmIDh3Qt6I0P ZLXYEu6jaWyb7qmiihLBSiZImkE8NAAAsVooi5/UHxUD3BU26mX8/0VXMVPFlH+n vMGU8GEZm4XeLPMe+IXX99po6wTzuAEZSVbp/mIC2iC8TDIOaOGTMJn2FCV60TdI KAg/9gse9/PBvrkUcZGo2Tq39eJsXvH82XDVlZObod+T1piT7Ob1RjvHDco4ciJB vA+2cVkghvJvCg5aug3/kxjfWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAE4S5p1 rMJ2dfcUeYsfuNpRO8+LMB8GA1UdIwQYMBaAFJmbL2U5wj6utGnmdTn7Lckz2YBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA1NS80QUJCQzAxQ0Y1 NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1BxNjBhZVoxT2ZzdHlUUFpn RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21ac3ZaVG5DUHE2MGFlWjFPZnN0eVRQWmdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA1NS80QUJCQzAxQ0Y1NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1Bx NjBhZVoxT2ZzdHlUUFpnRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYYr9Bd67kt3mSVgACdfHwMd9J9v1LCUvk5aV9K29m12yn3b3jTMpM Sq9s+TnHMAULxRzWrEOO5v9MkKuyTe5MMUNfT0wm6NdOpb1IDEZLJL+Tl4G4FjxG 79AtDCGtQO+lOR7D1qkYcAznX4RGNJc9OvKzzmWncAk5ANpFyj7w6LxSBnlxao9n Z2aA80BKcUNoYsdz/ISSBY8JP8WduswyNMC87tG0krHZBRJ+/gufdrIrcE19bqJw 014eycAG08uiA6P6wsC8vu/koPuQu5Qps65CZQxJL/yEtwBf88RiX3OR9hyoXMuA 6IhhN1zrfcpE2Der/n5d/Vaw8if1nqQ5 -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:46 2025 by rpki-client