$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: JyFZIRP5fWbOvOalDT62o5YTnkzBhPo7PFUogJ/h1H0= Subject key identifier: 52:B3:3C:DF:B1:F6:9F:67:A7:13:2E:34:DE:A1:40:A6:F2:12:66:14 Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 19D4 Signing time: Fri 04 Apr 2025 17:17:05 +0000 Manifest this update: Fri 04 Apr 2025 17:17:05 +0000 Manifest next update: Fri 11 Apr 2025 17:17:05 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: JzrqTxFZbxurWRuSCebd6sKj6I5/Tb3AgFtip4a+6xA=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: k9wHhpt8UiUsBAqNUER2NNEPeQj08b6887cRTKa39g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8 Validity Not Before: Apr 4 17:17:05 2025 GMT Not After : Apr 11 17:17:05 2025 GMT Subject: CN=67f01411-f436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:73:54:67:60:4c:9f:bb:3f:42:1e:0d:45: 41:d3:15:39:c0:7f:a0:49:df:01:79:02:30:7f:77: 2d:3c:48:dd:95:53:ea:cd:9f:e5:f0:e5:8d:ba:ee: a2:14:00:a9:b2:52:13:e0:b3:a8:4c:a5:2d:44:35: c4:27:f6:d8:03:6f:ac:b6:da:0d:04:4e:9d:c0:4a: 60:06:c1:0d:0d:57:af:8e:fe:58:b9:1d:67:7c:fe: c1:6f:1f:1b:59:b2:7a:9e:5b:04:53:8b:fb:c8:1c: b1:a1:38:18:63:12:77:f3:c1:26:39:72:26:b7:63: 2c:c3:54:8e:21:79:29:64:fa:15:71:50:81:3b:71: b2:23:d5:ae:95:22:8b:51:70:ee:9c:c7:ce:67:47: 5a:7e:7f:ef:e4:5d:4f:bc:20:ad:9c:2c:06:50:c9: e7:22:48:4d:3b:c9:78:ad:b1:20:64:5b:ce:70:07: 45:7f:3c:9b:27:81:3a:95:65:0f:ef:ea:93:61:43: 48:d6:5c:76:d5:22:29:71:15:f1:f1:ae:8d:12:8f: 91:f7:28:61:03:4d:ba:ec:9f:aa:1a:3b:17:f1:a4: fd:cd:f9:cf:2e:61:13:c6:8d:4e:da:18:96:17:23: 70:53:84:40:3b:f1:ac:8e:20:d0:0d:e1:2f:db:85: fb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B3:3C:DF:B1:F6:9F:67:A7:13:2E:34:DE:A1:40:A6:F2:12:66:14 X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:22:ee:a5:79:d8:89:f2:47:ad:73:52:05:01:3e:6c:fa:44: 17:83:b8:34:57:41:fb:39:3f:bb:1f:dc:68:dd:7f:bc:ed:8d: f2:6a:ef:22:5f:17:35:34:b3:6f:cb:e5:5b:7a:a6:d1:0e:fd: 20:80:c1:bf:86:82:f1:00:61:b2:bc:4c:c7:93:19:1c:40:83: 89:db:16:60:0d:bc:af:02:31:9e:3f:b2:cb:8f:c8:b3:99:e9: a7:f4:e3:c4:ee:3e:71:30:2a:f8:c9:7b:3d:44:37:d3:48:05: 19:9e:93:80:3b:7e:b8:a6:27:fc:4f:e9:e9:43:0d:a3:a6:cd: c7:52:c0:40:5c:53:8d:e3:ac:23:aa:c1:0e:0e:78:9c:aa:ad: eb:c0:60:86:f8:ad:5e:19:71:b3:a4:9d:93:21:36:42:4d:a5: 61:39:f0:f0:2b:2e:c3:84:0b:d2:14:31:1c:68:4c:4c:14:29: 49:df:29:b0:39:6c:7a:5e:84:d2:3b:57:83:7a:bc:fd:34:19: 19:82:b8:80:1f:4f:ce:21:11:69:b9:04:89:15:9c:40:c7:ef: 1e:45:cf:38:a7:e8:af:25:09:c7:fb:9f:7c:a6:49:74:f8:e1: 86:b4:ef:42:dd:d5:d6:6e:d2:07:ef:da:9f:e8:91:ae:69:59: 16:71:38:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjUwNDA0MTcxNzA1WhcNMjUwNDExMTcxNzA1WjAYMRYwFAYD VQQDEw02N2YwMTQxMS1mNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMtzVGdgTJ+7P0IeDUVB0xU5wH+gSd8BeQIwf3ctPEjdlVPqzZ/l8OWNuu6i FACpslIT4LOoTKUtRDXEJ/bYA2+sttoNBE6dwEpgBsENDVevjv5YuR1nfP7Bbx8b WbJ6nlsEU4v7yByxoTgYYxJ388EmOXImt2Msw1SOIXkpZPoVcVCBO3GyI9WulSKL UXDunMfOZ0dafn/v5F1PvCCtnCwGUMnnIkhNO8l4rbEgZFvOcAdFfzybJ4E6lWUP 7+qTYUNI1lx21SIpcRXx8a6NEo+R9yhhA0267J+qGjsX8aT9zfnPLmETxo1O2hiW FyNwU4RAO/GsjiDQDeEv24X7zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKzPN+x 9p9npxMuNN6hQKbyEmYUMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZIu6lediJ8ketc1IFAT5s+kQXg7g0V0H7OT+7H9xo3X+87Y3yau8i Xxc1NLNvy+VbeqbRDv0ggMG/hoLxAGGyvEzHkxkcQIOJ2xZgDbyvAjGeP7LLj8iz memn9OPE7j5xMCr4yXs9RDfTSAUZnpOAO364pif8T+npQw2jps3HUsBAXFON46wj qsEODnicqq3rwGCG+K1eGXGzpJ2TITZCTaVhOfDwKy7DhAvSFDEcaExMFClJ3ymw OWx6XoTSO1eDerz9NBkZgriAH0/OIRFpuQSJFZxAx+8eRc84p+ivJQnH+598pkl0 +OGGtO9C3dXWbtIH79qf6JGuaVkWcTji -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:21 2025 by rpki-client