$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: gUWYSEZIJeSzTdR7WjOXt4l7T5/YZpEJLXImOr+Ts2c= Subject key identifier: 78:24:99:D1:D3:7B:A7:3D:8B:56:28:B1:6F:0A:3A:CD:38:22:B6:AA Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: 5F Signing time: Thu 03 Apr 2025 06:18:47 +0000 Manifest this update: Thu 03 Apr 2025 06:18:46 +0000 Manifest next update: Thu 10 Apr 2025 06:18:46 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: IaMiy1udGd8hbGfwbus+NopggCqVNE+l5uqwNMF2zkc=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72 Validity Not Before: Apr 3 06:18:46 2025 GMT Not After : Apr 10 06:18:46 2025 GMT Subject: CN=67ee2847-e383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:0e:16:ec:3c:a2:5b:16:90:18:49:62:fd: dd:a1:b6:7d:ab:d9:ab:71:9e:8f:35:ea:4c:c0:fb: 90:74:bd:7a:6f:eb:d4:87:18:85:99:37:c6:30:58: c8:81:50:0e:c6:8d:17:2b:14:1d:a9:4d:13:b9:e7: 30:71:d9:64:65:68:08:5e:f4:77:ef:b8:ec:da:50: 08:93:7e:79:4c:cd:15:fe:78:25:39:81:3c:74:d3: 92:c7:11:08:c4:8a:cd:cd:9c:3f:16:58:b0:e4:82: f9:ab:32:44:7b:a9:d4:e3:c9:12:23:d1:2c:d2:7b: ec:11:47:6c:46:ba:74:36:a6:36:fd:38:5b:0c:f5: eb:33:70:61:a4:7d:a1:6d:3f:fe:c9:9f:e2:30:c2: 12:62:e3:4c:b3:3c:e6:09:04:80:26:b7:60:1a:7d: 13:64:fc:56:3c:07:3e:3f:4c:0c:4b:d7:c8:90:cc: 95:c3:a9:d5:d0:ce:27:30:4b:09:32:1a:39:d8:2d: 7b:c1:a8:ac:05:89:a0:6d:b7:3f:48:13:d0:78:29: 57:5a:89:78:2a:c7:4a:6b:68:25:32:fe:77:1b:5b: 5e:d8:2f:27:f6:42:e3:f2:13:d1:08:8f:14:95:e5: 63:e6:76:0e:a7:ab:c7:e2:24:55:4c:53:2a:a4:59: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:24:99:D1:D3:7B:A7:3D:8B:56:28:B1:6F:0A:3A:CD:38:22:B6:AA X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a6:f6:25:c0:47:f0:65:c9:50:44:ae:f0:69:b7:e8:dc:39: 7d:fe:d3:a2:20:c5:84:7c:5c:49:e4:63:52:f9:90:a5:9c:bd: 9d:ef:b5:a6:55:54:f4:39:3d:2f:b8:b0:3e:c0:08:c1:5a:0e: ef:9a:28:4c:85:ae:99:1e:41:f0:e8:b5:57:4b:1b:c8:ce:21: 70:87:60:17:cf:f7:8d:97:ea:90:e4:c1:4f:e6:78:09:bd:71: af:6b:c1:9a:1f:3f:04:e3:cf:c8:9d:f3:cb:bb:95:57:8b:77: 62:c0:56:ba:78:2d:89:f3:34:79:6e:b3:98:c7:ba:26:49:2c: 98:ff:0f:a3:01:ae:08:72:a4:cd:00:b2:3d:5d:10:e4:9d:10: 7a:00:f2:d9:3b:c9:df:01:f1:b6:bf:98:30:c7:5e:dd:aa:0b: 3f:d4:f6:09:c7:a8:81:ac:46:6b:55:9b:48:92:04:b2:1a:2a: 99:42:6e:08:c5:25:0d:a7:e3:b6:0e:80:8a:d4:65:7a:0b:f4: 96:fa:1a:d6:40:c1:81:22:1a:8d:4b:7b:f9:95:eb:3e:64:91: f8:3d:c6:06:1c:cc:64:ae:c5:f9:89:4d:15:5d:73:86:15:f2: 44:d7:e3:9c:cb:87:6d:05:3b:22:cc:7a:82:e9:5a:85:dc:c6: 16:a7:a8:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU3MjExMC8GA1UEBRMoNzNEOTAwOTI0RTcwMTU0OEU2RTMyMDM4ODBGNkMwOTcy QTRDMjkxQTAeFw0yNTA0MDMwNjE4NDZaFw0yNTA0MTAwNjE4NDZaMBgxFjAUBgNV BAMTDTY3ZWUyODQ3LWUzODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpFA4W7DyiWxaQGEli/d2htn2r2atxno816kzA+5B0vXpv69SHGIWZN8YwWMiB UA7GjRcrFB2pTRO55zBx2WRlaAhe9HfvuOzaUAiTfnlMzRX+eCU5gTx005LHEQjE is3NnD8WWLDkgvmrMkR7qdTjyRIj0SzSe+wRR2xGunQ2pjb9OFsM9eszcGGkfaFt P/7Jn+IwwhJi40yzPOYJBIAmt2AafRNk/FY8Bz4/TAxL18iQzJXDqdXQzicwSwky GjnYLXvBqKwFiaBttz9IE9B4KVdaiXgqx0praCUy/ncbW17YLyf2QuPyE9EIjxSV 5WPmdg6nq8fiJFVMUyqkWW5RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeCSZ0dN7 pz2LViixbwo6zTgitqowHwYDVR0jBBgwFoAUc9kAkk5wFUjm4yA4gPbAlypMKRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTcyL0U2QjQ0OTAyODQ4 MDExRUZBQUQ4RTIzM0M0RjlBRTAyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzlrQWtrNXdGVWptNHlBNGdQYkFseXBNS1JvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RTcyL0U2QjQ0OTAyODQ4MDExRUZBQUQ4RTIzM0M0RjlBRTAyL2M5a0FrazV3RlVq bTR5QTRnUGJBbHlwTUtSby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAqm9iXAR/BlyVBErvBpt+jcOX3+06IgxYR8XEnkY1L5kKWcvZ3vtaZV VPQ5PS+4sD7ACMFaDu+aKEyFrpkeQfDotVdLG8jOIXCHYBfP942X6pDkwU/meAm9 ca9rwZofPwTjz8id88u7lVeLd2LAVrp4LYnzNHlus5jHuiZJLJj/D6MBrghypM0A sj1dEOSdEHoA8tk7yd8B8ba/mDDHXt2qCz/U9gnHqIGsRmtVm0iSBLIaKplCbgjF JQ2n47YOgIrUZXoL9Jb6GtZAwYEiGo1Le/mV6z5kkfg9xgYczGSuxfmJTRVdc4YV 8kTX45zLh20FOyLMeoLpWoXcxhanqEE= -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:43 2025 by rpki-client