$ rpki-client -vvf rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft File: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft (raw, json) Hash identifier: m+XH7/SrNe8DSIsNq8TotjPO6E6738Umi7A3vR9u1OE= Subject key identifier: 01:C3:DC:88:C3:F3:C6:9B:E6:86:FA:B4:C3:97:18:AE:83:9E:02:D8 Authority key identifier: F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94 Certificate issuer: /CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194 Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft Manifest number: 05C3 Signing time: Wed 02 Apr 2025 23:05:09 +0000 Manifest this update: Wed 02 Apr 2025 23:05:08 +0000 Manifest next update: Wed 09 Apr 2025 23:05:08 +0000 Files and hashes: 1: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl (hash: HDb/14GU9PZeeG7AH3MtCdmI8lxdS7DNCBwwmQxM2C4=) 2: E8C597A6CAC311EC910B8C20C4F9AE02.roa (hash: ca8WhLHbBa7EcZLiVkbwKc/O4N20Afp/5/zNnD+5YJY=) 3: DB5A14DED46911ECBA5B5F41C4F9AE02.roa (hash: AUr7V0EIgEALueuFSq5XM/MsO85yQ02h1CJnq/h0usU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B734D Validity Not Before: Apr 2 23:05:08 2025 GMT Not After : Apr 9 23:05:08 2025 GMT Subject: CN=67edc2a4-9718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:c2:a5:05:e9:e5:ce:db:2e:d5:4b:cd:07: 36:3c:0f:74:75:5d:41:23:21:22:42:c1:f5:3b:79: 40:f4:ea:eb:d8:dd:05:9f:6a:1d:b7:d6:81:d3:53: 83:8a:73:86:e2:41:c0:4d:f5:6e:fd:04:67:b9:59: 6b:eb:07:39:05:49:fd:29:27:3e:f5:ec:e9:0a:56: 07:56:90:b6:73:b9:a5:96:2d:fb:09:90:93:8f:f0: 83:8c:48:a1:2c:c3:b3:fd:29:c0:09:f9:c8:f1:fc: 47:fc:51:f7:e3:0f:fe:35:85:69:47:0b:8f:9b:45: 1d:35:63:c8:ca:27:fe:75:a7:16:5e:e2:b8:9b:e3: 32:fe:9c:3d:81:43:82:f4:65:f1:78:4a:98:82:93: 10:90:1c:96:c0:89:de:f6:4b:65:0f:cf:ff:40:b8: dc:ad:74:e9:c2:64:8f:e7:c9:4d:21:d6:3a:4e:57: 56:db:da:28:a9:dc:73:19:e8:24:9f:11:e5:01:3f: 6b:99:c7:14:39:7c:4c:e5:60:82:a1:24:59:b4:e4: c9:e0:92:40:e5:47:00:91:25:25:f8:71:c5:f1:8c: 07:04:aa:f7:59:9c:42:b1:5f:40:11:6d:c9:39:61: f8:0a:18:28:40:31:14:cf:ec:33:dc:cd:fa:ab:be: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C3:DC:88:C3:F3:C6:9B:E6:86:FA:B4:C3:97:18:AE:83:9E:02:D8 X509v3 Authority Key Identifier: keyid:F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d4:d7:aa:27:f4:bf:ef:c2:42:f7:79:72:e7:de:80:42:04: 41:00:02:c0:3d:70:b0:5d:42:8d:3d:7e:06:94:84:7e:d2:55: 20:97:1a:47:e1:11:ef:87:c3:0e:a7:23:4c:17:4d:cf:f0:fb: 90:fd:b9:0a:02:65:b2:6c:59:50:d7:05:ef:f9:68:0e:55:86: ad:77:8a:99:11:45:fe:5a:b0:a6:6f:da:f6:96:88:1d:5e:cd: 7c:76:14:20:bb:fb:93:16:71:e6:39:63:69:43:2d:e2:3c:cf: 28:1f:c1:71:d3:2a:6a:6f:1e:fd:5b:6a:c9:68:af:05:03:fc: 8a:15:85:11:93:98:5e:12:1c:c4:eb:99:dd:4d:18:56:c1:9a: c4:62:f7:13:66:68:1f:d8:79:34:e4:6d:3f:32:f2:29:8f:72: 4b:7c:f8:f1:79:07:07:ce:be:7f:75:7f:4b:bb:0a:59:cc:74: 93:fe:2d:c2:b7:c2:dc:26:a1:a6:50:05:8e:ed:e0:2b:04:44: 36:bf:46:9f:29:13:7b:dd:ec:18:f9:ab:97:c8:e5:e8:90:5d: 35:d9:28:00:63:9a:22:48:31:65:e9:91:5a:ee:cd:8a:be:46: 72:13:c8:6d:bb:8e:e9:8d:0c:61:81:ac:b4:4e:82:40:44:1f: 74:bf:3c:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczNEQxMTAvBgNVBAUTKEY0QzMzMjQ1OEJFREM4NzhCOTZBMDdFMUUwODFFNUJG NEE5MUExOTQwHhcNMjUwNDAyMjMwNTA4WhcNMjUwNDA5MjMwNTA4WjAYMRYwFAYD VQQDEw02N2VkYzJhNC05NzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdPCpQXp5c7bLtVLzQc2PA90dV1BIyEiQsH1O3lA9Orr2N0Fn2odt9aB01OD inOG4kHATfVu/QRnuVlr6wc5BUn9KSc+9ezpClYHVpC2c7mlli37CZCTj/CDjEih LMOz/SnACfnI8fxH/FH34w/+NYVpRwuPm0UdNWPIyif+dacWXuK4m+My/pw9gUOC 9GXxeEqYgpMQkByWwIne9ktlD8//QLjcrXTpwmSP58lNIdY6TldW29ooqdxzGegk nxHlAT9rmccUOXxM5WCCoSRZtOTJ4JJA5UcAkSUl+HHF8YwHBKr3WZxCsV9AEW3J OWH4ChgoQDEUz+wz3M36q77tAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHD3IjD 88ab5ob6tMOXGK6DngLYMB8GA1UdIwQYMBaAFPTDMkWL7ch4uWoH4eCB5b9KkaGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzM0RC8xMTU4NDMyNkI5 NEYxMUVCOUE2QUVGMzJDNEY5QUUwMi85TU15Ull2dHlIaTVhZ2ZoNElIbHYwcVJv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNTXlSWXZ0eUhpNWFnZmg0SUhsdjBxUm9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzM0RC8xMTU4NDMyNkI5NEYxMUVCOUE2QUVGMzJDNEY5QUUwMi85TU15Ull2dHlI aTVhZ2ZoNElIbHYwcVJvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe1NeqJ/S/78JC93ly596AQgRBAALAPXCwXUKNPX4GlIR+0lUglxpH 4RHvh8MOpyNMF03P8PuQ/bkKAmWybFlQ1wXv+WgOVYatd4qZEUX+WrCmb9r2logd Xs18dhQgu/uTFnHmOWNpQy3iPM8oH8Fx0ypqbx79W2rJaK8FA/yKFYURk5heEhzE 65ndTRhWwZrEYvcTZmgf2Hk05G0/MvIpj3JLfPjxeQcHzr5/dX9LuwpZzHST/i3C t8LcJqGmUAWO7eArBEQ2v0afKRN73ewY+auXyOXokF012SgAY5oiSDFl6ZFa7s2K vkZyE8htu47pjQxhgay0ToJARB90vzw5 -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:33 2025 by rpki-client