$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft File: 9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json) Hash identifier: zLwgzwkolsY892W3DzyTcsGAD3YX4Ki2aWiIeNeEfHw= Subject key identifier: 9D:63:8C:7D:1F:87:60:3B:9B:D1:09:D7:4B:50:09:94:8D:5B:D7:28 Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F Certificate issuer: /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft Manifest number: 03D8 Signing time: Sat 29 Mar 2025 00:48:58 +0000 Manifest this update: Sat 29 Mar 2025 00:48:57 +0000 Manifest next update: Sat 05 Apr 2025 00:48:57 +0000 Files and hashes: 1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: ENaCmDHxDUZwFY/nhMra6zgIpuwmbhjz1rz4SipnV9g=) 2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: +nAeLjb+TBEYVVPImLnPfEQNMqbzuQHLMiBByx+ZAiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7B81 Validity Not Before: Mar 29 00:48:57 2025 GMT Not After : Apr 5 00:48:57 2025 GMT Subject: CN=67e74379-8b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:fd:4c:5f:7b:5a:c1:ea:d9:15:e0:de:8b: 6f:b3:40:dc:26:bf:ff:0e:7b:94:de:0c:9a:35:e3: e6:c6:40:47:58:be:a4:67:8e:57:45:ec:25:86:f2: 3d:50:62:f1:3b:84:d1:d7:15:19:4e:8c:75:2e:6c: 1b:90:4d:ae:35:1f:ff:04:9a:08:00:82:8f:df:6f: 2c:5e:fa:87:c4:d4:64:59:e4:3a:9a:da:e1:3f:c6: 59:2d:27:dc:b0:b7:6f:32:92:c1:e0:75:c1:26:3e: 3a:c0:d6:4a:db:b6:af:1e:b5:86:5a:27:2a:47:28: ea:79:ea:33:64:49:2c:73:a7:70:5f:a1:9d:dd:58: 17:1e:34:19:94:95:73:fb:da:1d:bd:f4:8d:08:06: ac:ae:ab:e0:1d:c3:a0:57:67:a8:5c:8c:51:7d:f2: ad:79:d8:77:79:fe:ae:ec:a0:2b:c0:6f:20:99:c4: 7d:a8:66:4a:cb:48:e6:57:e4:f3:b9:53:56:86:09: b4:a9:c7:fe:5d:78:d4:8d:37:64:3d:c9:df:24:0f: b6:bb:72:f2:5a:3a:b7:00:b5:f6:93:d3:4e:2e:b7: 4e:c6:0b:28:31:5b:c9:73:2d:0e:46:f9:c0:27:dd: e1:39:fa:5e:d1:65:8a:cd:7f:9a:db:25:1d:79:5a: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:63:8C:7D:1F:87:60:3B:9B:D1:09:D7:4B:50:09:94:8D:5B:D7:28 X509v3 Authority Key Identifier: keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:40:19:db:f1:51:cc:d8:d8:16:29:8b:ba:d6:4d:6c:74:f8: be:f5:5a:d7:2e:6b:ce:66:e2:10:31:79:12:4d:8a:6e:27:34: 63:b1:86:ef:fe:c0:9c:53:01:45:97:6c:d1:2c:2c:79:4a:64: 22:2e:51:33:e4:42:c0:1b:2f:b4:c3:41:12:fc:c1:40:b2:b9: 4e:62:d7:a6:88:65:44:e5:28:42:45:d2:78:c8:90:ca:a4:77: 47:a3:55:a0:53:f2:d8:98:f2:12:45:a8:34:ff:0a:36:7c:e2: 3c:95:0b:ff:9e:0c:8a:f0:d1:16:61:17:61:be:37:23:61:1b: 20:a8:2c:49:ff:70:29:00:17:b7:c4:6d:b0:61:84:3a:cc:54: 06:d2:d9:79:a7:5e:7a:e4:47:6a:00:68:71:ef:20:37:b3:61: e6:d3:72:78:1c:be:db:71:f4:69:15:2f:a6:97:a6:a5:63:0f: ad:6d:e9:ce:d4:8b:8e:3e:b9:bc:a5:fe:ea:7d:0d:97:99:30: 2c:f6:02:98:ce:31:bd:55:a8:04:63:40:3d:ad:ce:a6:98:00: 56:4a:e8:47:3f:67:88:fa:a9:f5:d8:ab:21:57:9c:b4:d0:70: e6:03:b3:ea:61:41:21:95:11:59:fd:d8:b2:40:a7:83:b3:09: a3:d2:b1:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCODExMTAvBgNVBAUTKEY0MTU3Rjc0NEM0MjEwQzNGRjQ2QUFGMEUwMjJERUU2 ODlGNDZFM0YwHhcNMjUwMzI5MDA0ODU3WhcNMjUwNDA1MDA0ODU3WjAYMRYwFAYD VQQDEw02N2U3NDM3OS04YjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKb9TF97WsHq2RXg3otvs0DcJr//DnuU3gyaNePmxkBHWL6kZ45XRewlhvI9 UGLxO4TR1xUZTox1LmwbkE2uNR//BJoIAIKP328sXvqHxNRkWeQ6mtrhP8ZZLSfc sLdvMpLB4HXBJj46wNZK27avHrWGWicqRyjqeeozZEksc6dwX6Gd3VgXHjQZlJVz +9odvfSNCAasrqvgHcOgV2eoXIxRffKtedh3ef6u7KArwG8gmcR9qGZKy0jmV+Tz uVNWhgm0qcf+XXjUjTdkPcnfJA+2u3LyWjq3ALX2k9NOLrdOxgsoMVvJcy0ORvnA J93hOfpe0WWKzX+a2yUdeVo+hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1jjH0f h2A7m9EJ10tQCZSNW9coMB8GA1UdIwQYMBaAFPQVf3RMQhDD/0aq8OAi3uaJ9G4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0I4MS80OUM4OTI1RTc3 MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VNUF9ScXJ3NENMZTVvbjBi ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCVl9kRXhDRU1QX1Jxcnc0Q0xlNW9uMGJqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0I4MS80OUM4OTI1RTc3MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VN UF9ScXJ3NENMZTVvbjBiajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQQBnb8VHM2NgWKYu61k1sdPi+9VrXLmvOZuIQMXkSTYpuJzRjsYbv /sCcUwFFl2zRLCx5SmQiLlEz5ELAGy+0w0ES/MFAsrlOYtemiGVE5ShCRdJ4yJDK pHdHo1WgU/LYmPISRag0/wo2fOI8lQv/ngyK8NEWYRdhvjcjYRsgqCxJ/3ApABe3 xG2wYYQ6zFQG0tl5p1565EdqAGhx7yA3s2Hm03J4HL7bcfRpFS+ml6alYw+tbenO 1IuOPrm8pf7qfQ2XmTAs9gKYzjG9VagEY0A9rc6mmABWSuhHP2eI+qn12KshV5y0 0HDmA7PqYUEhlRFZ/diyQKeDswmj0rGv -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:33 2025 by rpki-client