$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: 1LlxUzAyndw13h2FepjebZkSpocV1dV3KxDbmxS3lW8= Subject key identifier: 65:17:48:D8:D6:1B:63:73:8C:AA:A7:F2:09:CF:C6:25:C3:B7:29:2B Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 0349 Signing time: Tue 15 Apr 2025 00:43:55 +0000 Manifest this update: Tue 15 Apr 2025 00:43:54 +0000 Manifest next update: Tue 22 Apr 2025 00:43:54 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: vj2e9Zzhkae1Z5oCj7e5BCIZ1wesSn3CO//EpdldAPQ=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: q4NAjQjTJMFxxldl/AAiP8pDMUCdKKJhMRmCf+Jtl3M=) 3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: ICtuLoIJdvxcdfC6YrLD+/53y4ZZXc5VV+d4pptI4w0=) 4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: sTauF35xc8SZpRjcL8yNs6xEdRvTaoYQZFwMt4H/aTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Apr 15 00:43:54 2025 GMT Not After : Apr 22 00:43:54 2025 GMT Subject: CN=67fdabcb-251d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:1e:9a:37:50:48:f2:25:4b:45:69:88:37: e8:ac:18:48:39:06:48:8f:01:e2:f4:6b:af:ac:7b: 89:7f:d0:bd:86:42:a9:24:0c:c6:2f:84:c5:64:a4: 42:fa:76:90:9e:3b:36:8d:16:ce:6d:22:1d:d5:ab: 4f:b6:fa:a6:b9:54:92:db:77:69:eb:f4:34:25:de: 44:0c:1a:83:10:d8:27:8e:09:55:91:e4:04:36:b4: 15:92:22:69:db:1c:a2:3e:6f:c0:d3:9d:04:8e:d3: 70:ac:60:8c:2e:47:1f:0c:b4:5e:61:5e:3a:93:72: e5:c3:be:a1:c2:fe:ef:63:b3:ea:07:33:2b:49:f2: de:19:9d:f7:05:0c:cb:3f:ae:b4:d8:a3:94:ef:58: cd:b8:20:dd:c9:dc:5e:10:61:87:45:d9:94:f9:41: 30:e7:56:33:20:65:01:18:b2:b8:87:9c:d2:4c:4d: 4f:e1:f4:b5:f4:fb:b8:06:2a:21:41:d0:d6:ed:7d: 8e:ad:6f:c8:0e:65:79:be:f2:53:a3:3f:fd:b2:b9: 8a:57:a2:83:45:49:89:ef:4e:49:d8:17:64:2a:23: 88:5d:3e:e0:a6:07:ea:3d:82:8e:c1:62:ff:a9:7c: 8c:fc:a1:e4:00:19:2d:26:07:62:ae:48:63:ae:29: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:17:48:D8:D6:1B:63:73:8C:AA:A7:F2:09:CF:C6:25:C3:B7:29:2B X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:78:88:bd:61:e9:ac:bc:57:d5:21:d4:b8:83:41:a0:27:67: 18:bb:3e:bc:6b:d7:54:aa:40:84:54:4f:24:95:25:d9:c2:fc: ea:bf:5e:6e:e6:59:bd:6b:b4:1d:cc:f7:12:99:f2:c0:e9:d1: 22:2f:05:26:92:19:27:31:41:77:90:70:a8:d8:42:28:fa:5a: 1a:fb:6e:23:ed:8c:90:02:c5:25:87:ff:bf:bc:65:5c:ac:d4: b6:2c:d8:5f:7b:97:ba:7b:77:51:56:03:1d:41:7e:01:c9:b7: 8b:1e:45:cb:5d:cb:80:8b:38:c5:22:95:fd:b1:cd:b2:20:4b: fd:00:82:ff:70:18:c3:f6:82:f6:d6:53:9a:2b:7f:a6:c7:43: fd:47:2a:88:8e:a4:41:09:62:63:c3:d8:e0:28:91:a1:6f:a9: 20:7c:ad:ea:a4:cd:90:27:b8:1e:a8:a1:7f:d6:6a:d4:01:1b: a1:13:05:2f:7b:ce:52:80:27:73:5e:c3:1b:b2:1d:e4:77:33: 9f:ca:18:54:b1:8d:f1:b3:8c:ea:17:1b:75:d4:21:ae:78:c9: a0:ba:1a:b1:d6:35:0b:eb:f8:58:8a:3e:af:55:97:18:1a:55: c9:d6:7b:56:b0:71:b2:4e:39:e9:4e:2f:8f:e6:30:c9:48:9f: dc:02:aa:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjUwNDE1MDA0MzU0WhcNMjUwNDIyMDA0MzU0WjAYMRYwFAYD VQQDEw02N2ZkYWJjYi0yNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbgemjdQSPIlS0VpiDforBhIOQZIjwHi9GuvrHuJf9C9hkKpJAzGL4TFZKRC +naQnjs2jRbObSId1atPtvqmuVSS23dp6/Q0Jd5EDBqDENgnjglVkeQENrQVkiJp 2xyiPm/A050EjtNwrGCMLkcfDLReYV46k3Llw76hwv7vY7PqBzMrSfLeGZ33BQzL P6602KOU71jNuCDdydxeEGGHRdmU+UEw51YzIGUBGLK4h5zSTE1P4fS19Pu4Bioh QdDW7X2OrW/IDmV5vvJToz/9srmKV6KDRUmJ705J2BdkKiOIXT7gpgfqPYKOwWL/ qXyM/KHkABktJgdirkhjrildZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUXSNjW G2NzjKqn8gnPxiXDtykrMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeeIi9YemsvFfVIdS4g0GgJ2cYuz68a9dUqkCEVE8klSXZwvzqv15u 5lm9a7QdzPcSmfLA6dEiLwUmkhknMUF3kHCo2EIo+loa+24j7YyQAsUlh/+/vGVc rNS2LNhfe5e6e3dRVgMdQX4BybeLHkXLXcuAizjFIpX9sc2yIEv9AIL/cBjD9oL2 1lOaK3+mx0P9RyqIjqRBCWJjw9jgKJGhb6kgfK3qpM2QJ7geqKF/1mrUARuhEwUv e85SgCdzXsMbsh3kdzOfyhhUsY3xs4zqFxt11CGueMmguhqx1jUL6/hYij6vVZcY GlXJ1ntWsHGyTjnpTi+P5jDJSJ/cAqqB -----END CERTIFICATE-----Generated at Wed Apr 16 16:50:03 2025 by rpki-client