$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: 4NPNJpPX1G/cG9lXQC8jJzT7IkHGe7BZTO9qyZ+Ptl4= Subject key identifier: C9:E8:4D:38:7A:15:D1:2F:01:31:E5:86:17:DD:2B:74:97:E1:52:28 Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 03D2 Signing time: Wed 09 Apr 2025 00:17:22 +0000 Manifest this update: Wed 09 Apr 2025 00:17:21 +0000 Manifest next update: Wed 16 Apr 2025 00:17:21 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: Snf6MEXf05T7HWyAHFhS4JI1ouQqu5C8hMUSZBLg8PI=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09 Validity Not Before: Apr 9 00:17:21 2025 GMT Not After : Apr 16 00:17:21 2025 GMT Subject: CN=67f5bc91-039c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c8:2b:c1:21:22:ab:48:20:4f:28:39:47:b5: 70:58:2f:ef:0b:e8:7d:9f:7b:b3:34:2a:4c:e2:fb: 61:c5:c3:88:9e:99:87:b0:e6:54:55:98:69:65:2e: 6c:7c:dc:ac:26:f0:f8:76:24:9c:4f:01:31:3e:f4: 39:10:ce:ed:74:5b:9e:24:9b:1c:a5:2f:91:05:da: 6f:f2:de:24:38:83:a1:42:c5:41:85:9c:3c:b0:61: c2:8a:88:bb:42:df:1e:45:95:41:0a:01:9f:35:90: 77:0d:88:e5:cc:ee:74:2b:5f:ad:95:70:dd:68:af: a3:90:55:d5:fd:81:95:b9:4b:65:f8:81:80:a9:6d: d6:95:1d:1e:26:ae:7b:7a:ab:9b:f9:dd:ff:45:00: 01:5b:06:0e:1d:9f:15:6d:b4:c2:a8:4f:a9:dc:58: eb:e8:eb:45:6d:fe:0b:2f:36:31:0d:c5:40:99:6f: 09:e6:2a:2f:bf:17:22:aa:f3:82:38:98:ba:e0:a4: 7c:32:b3:e1:b7:78:ed:a6:05:2e:0a:18:21:63:ad: b5:5e:a7:13:bd:2d:d0:be:17:18:b9:2b:9b:43:be: 6a:02:07:3b:48:bb:ac:ed:f5:f8:39:ac:e0:26:dd: e6:58:ba:02:59:94:25:68:7e:c5:80:22:a2:a1:6e: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E8:4D:38:7A:15:D1:2F:01:31:E5:86:17:DD:2B:74:97:E1:52:28 X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:2e:c7:d8:a4:82:68:6a:60:d5:c0:8f:0f:35:8f:a9:55:19: f8:33:ca:e9:d7:74:aa:30:78:c7:f8:df:45:b1:d1:b9:2d:5b: a9:d7:40:89:a9:4f:76:c1:be:23:d4:3d:d3:8f:bf:79:58:ed: 85:20:0c:4c:94:da:5f:77:78:01:4a:0e:e2:51:7a:55:e9:e6: ed:15:cc:a2:7e:c2:73:80:ce:ef:d3:6a:f7:1f:03:af:0d:80: 91:08:de:4e:b2:7e:8d:82:62:54:c4:27:42:5b:2e:70:d7:b0: f8:73:27:4e:c9:9e:27:41:0d:1b:fd:01:23:6d:f9:59:03:3e: b8:e4:04:59:20:9a:47:f4:37:01:0f:75:60:f4:96:e7:71:29: 15:2f:87:59:b5:6b:2f:1b:8f:01:84:8b:6e:df:14:36:c0:a9: fa:56:39:2d:d0:c6:d4:50:cc:eb:f1:cf:b6:a4:d1:d2:3d:24: fe:3b:d8:12:38:48:a1:c1:8f:cf:ed:a0:60:3a:6d:46:0b:3c: 41:75:76:8c:bf:a8:e4:54:b9:4c:4b:e5:d4:1c:dd:1b:f2:f4: cb:e6:2f:cb:81:da:53:9f:10:27:12:2a:fb:0c:73:f6:56:c3: 73:c8:8d:c8:4a:a6:7e:a2:e4:69:5b:2e:48:c4:04:18:d6:fb: 91:8b:fb:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjUwNDA5MDAxNzIxWhcNMjUwNDE2MDAxNzIxWjAYMRYwFAYD VQQDEw02N2Y1YmM5MS0wMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9MgrwSEiq0ggTyg5R7VwWC/vC+h9n3uzNCpM4vthxcOInpmHsOZUVZhpZS5s fNysJvD4diScTwExPvQ5EM7tdFueJJscpS+RBdpv8t4kOIOhQsVBhZw8sGHCioi7 Qt8eRZVBCgGfNZB3DYjlzO50K1+tlXDdaK+jkFXV/YGVuUtl+IGAqW3WlR0eJq57 equb+d3/RQABWwYOHZ8VbbTCqE+p3Fjr6OtFbf4LLzYxDcVAmW8J5iovvxciqvOC OJi64KR8MrPht3jtpgUuChghY621XqcTvS3QvhcYuSubQ75qAgc7SLus7fX4Oazg Jt3mWLoCWZQlaH7FgCKioW4gmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnoTTh6 FdEvATHlhhfdK3SX4VIoMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXLsfYpIJoamDVwI8PNY+pVRn4M8rp13SqMHjH+N9FsdG5LVup10CJ qU92wb4j1D3Tj795WO2FIAxMlNpfd3gBSg7iUXpV6ebtFcyifsJzgM7v02r3HwOv DYCRCN5Osn6NgmJUxCdCWy5w17D4cydOyZ4nQQ0b/QEjbflZAz645ARZIJpH9DcB D3Vg9JbncSkVL4dZtWsvG48BhItu3xQ2wKn6Vjkt0MbUUMzr8c+2pNHSPST+O9gS OEihwY/P7aBgOm1GCzxBdXaMv6jkVLlMS+XUHN0b8vTL5i/LgdpTnxAnEir7DHP2 VsNzyI3ISqZ+ouRpWy5IxAQY1vuRi/v1 -----END CERTIFICATE-----Generated at Thu Apr 10 19:36:19 2025 by rpki-client