$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: +F6xI5Cxda6nZVpaHVZg2ei9qQJIc9WAphWyD5O3eqY= Subject key identifier: DB:D4:FC:D8:26:41:4C:75:BF:7F:EC:A2:3C:0D:DC:0C:0F:9E:0C:9E Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 0617 Signing time: Fri 04 Apr 2025 22:57:07 +0000 Manifest this update: Fri 04 Apr 2025 22:57:06 +0000 Manifest next update: Fri 11 Apr 2025 22:57:06 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: EE1y5ehaYNIDDpk2TumRqfFPSwYsWUVAM1N/foq7h9c=) 2: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: 6bWPYL9HlnXbgKm1pf8hjZDzf0KdOhZ+kEEuV8xvMnc=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: GSq2aTh4Ighs8Kd5WfNm9bR33IhLvfkn/9rz4nvZ37o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91 Validity Not Before: Apr 4 22:57:06 2025 GMT Not After : Apr 11 22:57:06 2025 GMT Subject: CN=67f063c3-0476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:19:66:89:50:79:ca:1e:78:a0:20:e3:0f: 0c:13:20:6c:23:ad:8a:29:ab:35:2c:5e:48:85:46: 8a:0e:35:06:70:8e:34:f5:a0:b2:f8:ae:25:5f:e8: 62:6d:70:90:79:e4:09:3f:cf:30:6f:d3:98:10:77: 96:66:cf:57:c0:d7:9b:e4:b5:2d:6a:1a:81:df:54: b6:a1:0b:ac:9b:8f:c7:ab:7e:58:5e:5b:25:78:96: 10:4a:18:f5:de:72:a5:cc:be:50:29:5e:4a:0e:ad: 2f:c8:24:fe:6e:f6:55:a6:65:40:61:b5:53:2c:b9: 76:86:4d:07:00:d2:34:0b:b9:90:49:e8:d7:ef:16: 42:2e:97:6f:f3:bd:68:1a:52:ef:59:b5:c9:c3:70: 85:06:d1:1f:5c:f3:fc:86:a6:40:d9:a4:3d:b1:77: 98:bc:fe:22:82:0c:57:99:45:a7:b6:c8:94:5f:c3: 47:a7:54:c8:83:39:33:5a:be:14:dc:99:e9:cb:98: 4f:ed:2c:f4:c3:f8:60:a1:9c:8f:a2:7b:5d:18:78: e6:72:47:86:99:ae:30:ee:69:f1:59:85:50:7f:02: ac:a5:29:7e:08:bc:a1:60:9b:e6:65:67:f2:f4:65: ca:08:04:ef:59:3b:04:a1:4a:30:f3:82:d5:e0:82: 73:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D4:FC:D8:26:41:4C:75:BF:7F:EC:A2:3C:0D:DC:0C:0F:9E:0C:9E X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b6:25:85:3a:1d:e1:c7:b8:e7:f3:ea:71:1b:48:39:b7:17: de:b7:3f:b6:ac:b0:d7:37:d1:36:e6:97:b2:3e:87:86:f0:c0: 06:f8:40:69:b7:d8:64:1a:4b:67:b0:fe:3a:75:96:d6:f6:00: c2:0e:f6:85:9a:af:9c:8c:3a:23:24:7c:e2:c8:31:e6:17:a3: f6:02:dd:39:24:45:f7:9b:d6:73:7a:3d:e1:2e:e2:94:0f:7e: 78:9f:f9:cb:1e:4d:7e:39:4a:d7:96:d1:43:8f:73:25:bf:47: 44:5c:99:e6:b3:e6:c0:e6:79:00:c5:b6:df:de:ba:39:61:13: 0f:76:35:ca:77:56:60:b8:e7:51:e9:ca:65:6e:a8:a5:db:7a: c6:03:89:d5:df:e4:62:f2:a1:cf:81:1a:f1:79:34:6a:23:da: 84:c9:7f:9b:03:b5:b3:b6:c5:79:c5:97:99:1f:d8:35:81:21: 14:bc:aa:c8:53:21:04:97:33:ac:62:f9:5c:7c:dd:75:fd:bc: cf:52:91:28:1f:bb:23:d0:ba:a2:18:a2:8b:bf:63:2f:bb:8f: 36:13:71:18:10:d1:9e:16:d7:5e:15:a0:e6:30:f9:87:a9:3d: e5:fc:c2:f2:1b:da:e1:16:dd:5b:09:08:88:99:9e:46:66:e3: ed:45:51:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjUwNDA0MjI1NzA2WhcNMjUwNDExMjI1NzA2WjAYMRYwFAYD VQQDEw02N2YwNjNjMy0wNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIgZZolQecoeeKAg4w8MEyBsI62KKas1LF5IhUaKDjUGcI409aCy+K4lX+hi bXCQeeQJP88wb9OYEHeWZs9XwNeb5LUtahqB31S2oQusm4/Hq35YXlsleJYQShj1 3nKlzL5QKV5KDq0vyCT+bvZVpmVAYbVTLLl2hk0HANI0C7mQSejX7xZCLpdv871o GlLvWbXJw3CFBtEfXPP8hqZA2aQ9sXeYvP4iggxXmUWntsiUX8NHp1TIgzkzWr4U 3Jnpy5hP7Sz0w/hgoZyPontdGHjmckeGma4w7mnxWYVQfwKspSl+CLyhYJvmZWfy 9GXKCATvWTsEoUow84LV4IJz1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvU/Ngm QUx1v3/sojwN3AwPngyeMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAytiWFOh3hx7jn8+pxG0g5txfetz+2rLDXN9E25peyPoeG8MAG+EBp t9hkGktnsP46dZbW9gDCDvaFmq+cjDojJHziyDHmF6P2At05JEX3m9Zzej3hLuKU D354n/nLHk1+OUrXltFDj3Mlv0dEXJnms+bA5nkAxbbf3ro5YRMPdjXKd1ZguOdR 6cplbqil23rGA4nV3+Ri8qHPgRrxeTRqI9qEyX+bA7WztsV5xZeZH9g1gSEUvKrI UyEElzOsYvlcfN11/bzPUpEoH7sj0LqiGKKLv2Mvu482E3EYENGeFtdeFaDmMPmH qT3l/MLyG9rhFt1bCQiImZ5GZuPtRVFU -----END CERTIFICATE-----Generated at Sat Apr 5 11:32:56 2025 by rpki-client