$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: AcOAnC6R/xYUZ9D3cBG0QVf1oLCqgl7rxign+sA+8e4= Subject key identifier: 00:FA:B0:6F:08:B1:B7:25:49:79:E7:CF:5A:C6:F5:57:15:08:C5:AD Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 0322 Signing time: Fri 11 Apr 2025 01:05:02 +0000 Manifest this update: Fri 11 Apr 2025 01:05:02 +0000 Manifest next update: Fri 18 Apr 2025 01:05:02 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: VU8kliYHn1urrOtI8FLYShj1hknVGbtiYDisOi5HCf4=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: 3J77t/X4d8FbFqMziCtfhDxfCbOMGAItxZzB2H4f4P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 01:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: Apr 11 01:05:02 2025 GMT Not After : Apr 18 01:05:02 2025 GMT Subject: CN=67f86abe-af0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:8e:51:4a:05:82:8c:ec:6f:26:ac:c9:c2: f2:6f:6f:d5:2c:cc:23:eb:c8:c3:df:0d:8e:94:d7: 83:cc:6a:e2:7b:0f:3a:64:15:cd:30:68:18:5e:21: fb:29:f8:e5:3b:33:66:e2:22:ec:4a:33:d1:d3:d2: ed:d0:c5:2e:cc:67:94:3e:6a:b6:ea:c8:a4:43:87: 9d:ec:ec:9f:e4:ea:47:73:1d:fa:ea:a1:39:81:83: da:c6:22:d6:e9:f9:f0:6a:00:ca:22:8b:ac:32:44: be:af:17:8a:e2:1b:32:06:cf:33:bc:dd:e3:88:af: 79:cf:c2:11:a1:92:b2:79:be:3b:26:76:77:ba:43: c8:ac:18:d7:64:57:9f:95:3d:99:7c:1d:c4:c9:2e: 48:d8:16:06:aa:13:7f:b2:f9:5a:fa:93:12:f1:08: da:41:63:e2:0b:82:7e:be:68:42:62:f5:76:f0:c1: 9e:cc:e1:ff:c0:ad:cc:fe:0e:8c:f4:07:4b:88:a7: 0e:17:10:a8:cd:b9:a6:6b:2e:b9:8e:5e:90:b1:e8: 6c:e2:4a:a2:48:04:14:08:61:9f:c9:a6:2a:cd:f1: 7b:ac:93:28:3a:00:70:a9:50:cb:d7:00:9b:cf:5c: eb:ba:22:23:bd:26:c5:5b:ef:00:61:38:bd:0c:c8: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:B0:6F:08:B1:B7:25:49:79:E7:CF:5A:C6:F5:57:15:08:C5:AD X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:62:9e:91:9e:b7:63:13:e2:26:97:ac:65:35:d5:60:7f:7c: 29:c1:f8:0b:27:f2:92:9d:64:9e:ab:dd:da:10:3f:a6:cf:3c: 39:2e:10:12:5e:83:ac:c7:47:dc:26:79:56:e5:05:24:c1:3f: 54:65:47:e5:c4:32:53:e5:31:01:1c:62:95:f8:f0:1c:d6:71: da:8e:eb:84:b2:7e:9f:4d:ef:85:c7:b2:d4:bf:ef:28:c7:00: 53:24:3f:b4:79:4c:e3:d1:98:04:94:df:d3:1e:30:11:cb:77: 1b:5d:7b:70:af:2f:e6:63:22:3c:4e:02:96:57:56:20:49:91: 85:20:b6:a6:f2:f6:24:de:54:d4:ac:59:27:b1:95:27:7f:86: de:be:c8:c4:40:31:b2:b8:24:85:1c:3a:7b:d5:6a:61:9c:a0: 94:d7:9e:69:e0:22:72:6b:53:9e:bf:4f:62:99:8c:b5:4e:5c: 15:56:f5:43:64:48:92:9a:f4:6f:b2:35:3c:08:6d:f3:b9:fc: 12:93:71:5b:cb:35:60:01:67:76:4f:40:68:ff:0f:07:cf:06: 0a:df:4f:1e:bd:22:7e:b3:2b:04:82:d4:2e:6b:84:55:bc:e3: 1c:31:46:87:18:76:2c:e9:e8:08:4f:3a:27:19:b5:56:fe:0f: be:4b:fd:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjUwNDExMDEwNTAyWhcNMjUwNDE4MDEwNTAyWjAYMRYwFAYD VQQDEw02N2Y4NmFiZS1hZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdWOUUoFgozsbyasycLyb2/VLMwj68jD3w2OlNeDzGriew86ZBXNMGgYXiH7 KfjlOzNm4iLsSjPR09Lt0MUuzGeUPmq26sikQ4ed7Oyf5OpHcx366qE5gYPaxiLW 6fnwagDKIousMkS+rxeK4hsyBs8zvN3jiK95z8IRoZKyeb47JnZ3ukPIrBjXZFef lT2ZfB3EyS5I2BYGqhN/svla+pMS8QjaQWPiC4J+vmhCYvV28MGezOH/wK3M/g6M 9AdLiKcOFxCozbmmay65jl6Qsehs4kqiSAQUCGGfyaYqzfF7rJMoOgBwqVDL1wCb z1zruiIjvSbFW+8AYTi9DMh5rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD6sG8I sbclSXnnz1rG9VcVCMWtMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvYp6RnrdjE+Iml6xlNdVgf3wpwfgLJ/KSnWSeq93aED+mzzw5LhAS XoOsx0fcJnlW5QUkwT9UZUflxDJT5TEBHGKV+PAc1nHajuuEsn6fTe+Fx7LUv+8o xwBTJD+0eUzj0ZgElN/THjARy3cbXXtwry/mYyI8TgKWV1YgSZGFILam8vYk3lTU rFknsZUnf4bevsjEQDGyuCSFHDp71WphnKCU155p4CJya1Oev09imYy1TlwVVvVD ZEiSmvRvsjU8CG3zufwSk3FbyzVgAWd2T0Bo/w8HzwYK308evSJ+sysEgtQua4RV vOMcMUaHGHYs6egITzonGbVW/g++S/0/ -----END CERTIFICATE-----Generated at Sat Apr 12 23:17:43 2025 by rpki-client