$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json) Hash identifier: W4XcJ/mXWIiBoMrSLlKgJb4YETRM0b1Ln/zJc11rPqI= Subject key identifier: 61:4A:B2:F0:4A:F2:83:5B:2E:FA:F6:19:FB:36:7B:8C:74:4A:2B:25 Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft Manifest number: 11 Signing time: Thu 17 Apr 2025 06:51:50 +0000 Manifest this update: Thu 17 Apr 2025 06:51:49 +0000 Manifest next update: Thu 24 Apr 2025 06:51:49 +0000 Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: 48PxC7aMT9oHI0/KQeP7tjHIETS491VZX5IcBtMi5W0=) 2: 16B651C6048411F094895C27C4F9AE02.roa (hash: pwAo4LzFE8ykOXOE/sO5tKhbyP75rksTaUDUQRDRnG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Validity Not Before: Apr 17 06:51:49 2025 GMT Not After : Apr 24 06:51:49 2025 GMT Subject: CN=6800a505-dca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:3b:59:b4:96:13:82:8a:27:23:3e:bf:c6: 13:cf:9a:60:24:3a:72:eb:c7:72:04:7b:c5:23:22: 52:c2:47:9c:05:b5:81:97:a5:e8:79:7d:9b:29:0a: 69:3a:d8:ab:24:63:4a:91:3c:24:88:23:98:53:7a: 8a:fb:03:be:4a:ab:7d:ef:9f:44:7b:2f:b1:78:be: cc:47:d0:30:93:11:9c:8f:23:16:c1:cc:5e:b4:63: a8:a7:ff:99:b4:17:db:4c:1b:a7:05:c8:e8:e7:5e: bc:0b:00:5d:91:8f:1e:e0:a2:a0:0f:08:46:ce:6f: cc:65:fe:2d:3a:61:a6:42:d0:c0:6d:64:4e:4e:af: a4:ec:92:13:22:52:32:25:25:5c:bf:9e:b2:56:9b: 4d:b3:8f:26:10:02:51:48:5b:f2:5d:28:e1:68:8e: de:40:ee:e4:b8:27:ff:0a:f6:2b:76:66:59:8a:88: 79:0f:8d:1b:b6:9e:16:32:c4:ed:11:02:75:4d:f9: 59:8d:98:b3:ee:c4:95:6f:0a:dc:8f:6f:22:cf:70: 0b:8d:48:6e:c6:e6:77:70:dc:00:75:29:25:7d:b3: 20:03:92:1a:13:fc:68:8c:8b:fd:ed:32:ca:b4:12: 80:69:1d:65:16:41:48:3d:06:43:d4:44:f0:69:2d: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4A:B2:F0:4A:F2:83:5B:2E:FA:F6:19:FB:36:7B:8C:74:4A:2B:25 X509v3 Authority Key Identifier: keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:00:0a:6d:16:99:e7:07:14:c0:e3:de:54:95:9d:82:0d:51: e2:74:c9:1c:89:74:c3:47:1e:13:76:71:dc:83:3d:b0:fc:3c: 85:c0:25:88:5f:50:2d:11:f3:4a:20:c1:e1:d7:bb:bf:2e:10: 3b:66:cb:41:6f:7c:f7:4b:f2:3b:03:29:f0:fd:c4:f0:69:f0: 21:ec:0c:71:41:1b:5c:e2:41:71:68:fe:5d:cc:c7:36:98:cf: fd:17:39:d0:f1:b3:79:b9:0e:b2:38:0f:f0:3f:ea:29:85:c0: 3f:96:6c:04:20:69:33:74:c4:73:9b:e4:3a:82:0c:f4:97:34: 1d:a9:9a:d7:19:ef:17:db:7a:f0:76:17:d2:5f:ee:6d:68:ee: 61:80:4b:8b:2c:56:8d:f8:ba:39:2d:fc:fc:66:84:42:f0:6d: 0a:09:11:15:3a:db:28:af:22:c8:a4:b4:45:bb:2e:37:5a:59: fa:31:14:56:2f:92:a3:e9:9b:d9:b5:00:5a:c0:68:55:49:38: 03:82:67:74:70:fa:72:05:8f:7f:37:48:d3:9d:5b:78:ec:ec: ca:13:07:49:d2:eb:68:d9:52:ef:35:77:f5:48:bf:d4:8b:dc: 07:ce:a2:49:ce:8e:90:50:55:27:76:77:6a:73:06:cc:92:bd: 81:d9:ee:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTVGOTExMC8GA1UEBRMoRjVCQkFFODVDNkZGQjM2MENFRDQwODBEMTEzNkEyQkZE M0E5N0ZEMTAeFw0yNTA0MTcwNjUxNDlaFw0yNTA0MjQwNjUxNDlaMBgxFjAUBgNV BAMTDTY4MDBhNTA1LWRjYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNhDtZtJYTgoonIz6/xhPPmmAkOnLrx3IEe8UjIlLCR5wFtYGXpeh5fZspCmk6 2KskY0qRPCSII5hTeor7A75Kq33vn0R7L7F4vsxH0DCTEZyPIxbBzF60Y6in/5m0 F9tMG6cFyOjnXrwLAF2Rjx7goqAPCEbOb8xl/i06YaZC0MBtZE5Or6TskhMiUjIl JVy/nrJWm02zjyYQAlFIW/JdKOFojt5A7uS4J/8K9it2ZlmKiHkPjRu2nhYyxO0R AnVN+VmNmLPuxJVvCtyPbyLPcAuNSG7G5ndw3AB1KSV9syADkhoT/GiMi/3tMsq0 EoBpHWUWQUg9BkPURPBpLQJDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYUqy8Ery g1su+vYZ+zZ7jHRKKyUwHwYDVR0jBBgwFoAU9buuhcb/s2DO1AgNETaiv9Opf9Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNUY5LzY5MjBDNzRBMDQ4 MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJETzFBZ05FVGFpdjlPcGY5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWJ1dWhjYl9zMkRPMUFnTkVUYWl2OU9wZjlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NUY5LzY5MjBDNzRBMDQ4MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJE TzFBZ05FVGFpdjlPcGY5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIEACm0WmecHFMDj3lSVnYINUeJ0yRyJdMNHHhN2cdyDPbD8PIXAJYhf UC0R80ogweHXu78uEDtmy0FvfPdL8jsDKfD9xPBp8CHsDHFBG1ziQXFo/l3MxzaY z/0XOdDxs3m5DrI4D/A/6imFwD+WbAQgaTN0xHOb5DqCDPSXNB2pmtcZ7xfbevB2 F9Jf7m1o7mGAS4ssVo34ujkt/PxmhELwbQoJERU62yivIsiktEW7LjdaWfoxFFYv kqPpm9m1AFrAaFVJOAOCZ3Rw+nIFj383SNOdW3js7MoTB0nS62jZUu81d/VIv9SL 3AfOoknOjpBQVSd2d2pzBsySvYHZ7rQ= -----END CERTIFICATE-----Generated at Thu Apr 17 19:49:37 2025 by rpki-client