$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: 73Qrsnk+Ve5RszwAfF0DvBmgEyvsX54kKZUFN8zGFzw= Subject key identifier: D4:DB:C1:DD:04:19:34:65:7E:99:73:81:F4:A5:77:D6:02:C0:24:73 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 01C2 Signing time: Fri 11 Apr 2025 02:17:28 +0000 Manifest this update: Fri 11 Apr 2025 02:17:28 +0000 Manifest next update: Fri 18 Apr 2025 02:17:28 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: Qwfa5RaCmmOWIyltvyLbJZVO3nGvwpfqLCFAHLJvS3w=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Apr 11 02:17:28 2025 GMT Not After : Apr 18 02:17:28 2025 GMT Subject: CN=67f87bb8-12ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:33:44:2d:a1:be:40:ca:89:87:9f:7c:0c: 88:17:b5:84:5b:90:c4:c2:cc:6a:9d:90:83:2c:ad: 3a:f3:32:86:6b:e6:e6:9a:da:43:f5:5a:b4:7b:25: 39:e3:84:aa:19:b4:b4:ac:a3:20:f8:82:3a:c1:9d: 85:9b:1e:12:c2:6c:f4:d8:b3:7b:6a:51:21:fd:53: 4a:86:f1:61:07:b4:79:e6:f8:a4:23:3d:13:af:5d: af:30:9b:f9:36:84:1d:d0:ea:0d:f1:32:a2:55:09: 9a:42:25:28:f1:fe:1c:9f:d7:08:4a:3d:98:a1:d1: 91:20:a5:bb:5a:a0:eb:4f:73:e3:ec:c8:ab:f5:f6: df:48:8c:b4:30:18:be:52:26:9d:cb:34:c3:f0:1c: 9f:77:b8:97:0b:7d:e5:5b:3c:e0:e6:e5:6f:80:a9: ac:74:ef:cb:1d:0b:ab:c0:ff:2f:28:d7:22:b9:0a: 53:3d:09:0d:6f:4c:31:b9:b2:1f:aa:fe:b5:38:0c: 7e:d7:78:fe:a6:c9:68:90:ef:f6:5d:91:c4:ab:c6: 44:c0:19:5f:b8:76:dc:a5:de:e7:bf:c8:5e:1e:a3: f7:90:a6:e4:38:2c:d5:f5:38:48:bd:a2:a0:a6:b4: 7d:db:34:10:67:28:c3:a8:59:61:76:81:a3:c4:b7: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DB:C1:DD:04:19:34:65:7E:99:73:81:F4:A5:77:D6:02:C0:24:73 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cc:8e:ad:ce:65:38:0f:2a:f1:42:cd:87:5a:3d:a8:f3:22: 4d:28:96:38:42:b4:56:ee:10:3e:c4:b3:de:ba:74:14:b8:fa: 6a:c7:65:e6:22:26:7d:77:96:6c:96:94:84:67:34:49:1d:c9: 03:f5:d5:f9:36:0c:cd:e3:97:33:d2:72:33:c2:53:49:32:d4: 7d:77:7b:5a:fb:36:67:11:81:2d:e1:e3:fd:8f:0d:e2:fd:d2: ea:35:3b:6e:a1:5d:4c:c4:0a:c1:d8:db:65:4e:ab:0e:b6:ce: 8f:00:ce:de:28:1e:51:c0:53:33:ca:13:93:91:a0:cc:f1:72: 54:62:63:d2:c9:1f:6b:84:93:24:7a:d3:16:de:52:15:78:30: 21:0e:13:1a:93:e6:3a:31:48:07:d2:fc:d9:46:f6:ad:28:94: d8:c6:32:1c:96:42:d4:11:ae:82:4d:6d:99:41:b9:ab:be:b7: d8:58:fd:15:4c:8d:57:cb:9b:99:fd:bb:fd:13:0f:9e:df:1c: 13:c6:49:e1:d2:cb:8c:3a:2d:76:60:c6:ff:05:f8:c4:cc:0e: ec:3a:b8:9a:02:e0:74:6d:b2:9c:8d:48:5e:0d:55:70:87:b9: 39:7e:44:0c:37:85:4d:2f:9c:f7:b8:40:89:f7:f8:72:4b:13: bd:dd:cf:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUwNDExMDIxNzI4WhcNMjUwNDE4MDIxNzI4WjAYMRYwFAYD VQQDEw02N2Y4N2JiOC0xMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiwzRC2hvkDKiYeffAyIF7WEW5DEwsxqnZCDLK068zKGa+bmmtpD9Vq0eyU5 44SqGbS0rKMg+II6wZ2Fmx4Swmz02LN7alEh/VNKhvFhB7R55vikIz0Tr12vMJv5 NoQd0OoN8TKiVQmaQiUo8f4cn9cISj2YodGRIKW7WqDrT3Pj7Mir9fbfSIy0MBi+ UiadyzTD8Byfd7iXC33lWzzg5uVvgKmsdO/LHQurwP8vKNciuQpTPQkNb0wxubIf qv61OAx+13j+pslokO/2XZHEq8ZEwBlfuHbcpd7nv8heHqP3kKbkOCzV9ThIvaKg prR92zQQZyjDqFlhdoGjxLe80QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTbwd0E GTRlfplzgfSld9YCwCRzMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMzI6tzmU4DyrxQs2HWj2o8yJNKJY4QrRW7hA+xLPeunQUuPpqx2Xm IiZ9d5ZslpSEZzRJHckD9dX5NgzN45cz0nIzwlNJMtR9d3ta+zZnEYEt4eP9jw3i /dLqNTtuoV1MxArB2NtlTqsOts6PAM7eKB5RwFMzyhOTkaDM8XJUYmPSyR9rhJMk etMW3lIVeDAhDhMak+Y6MUgH0vzZRvatKJTYxjIclkLUEa6CTW2ZQbmrvrfYWP0V TI1Xy5uZ/bv9Ew+e3xwTxknh0suMOi12YMb/BfjEzA7sOriaAuB0bbKcjUheDVVw h7k5fkQMN4VNL5z3uECJ9/hySxO93c92 -----END CERTIFICATE-----Generated at Sat Apr 12 18:34:36 2025 by rpki-client