$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: lpFjXmaxIA6FidZX0WsLypN7cHMwcxvIEfdmJPI2e9k= Subject key identifier: 8F:0E:75:A7:CC:FF:1D:86:9C:40:60:7D:18:5B:27:00:11:56:F5:9A Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0C1A Signing time: Fri 04 Apr 2025 18:45:46 +0000 Manifest this update: Fri 04 Apr 2025 18:45:46 +0000 Manifest next update: Fri 11 Apr 2025 18:45:46 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: kmu+yX0esUwl57lafhygFgFOjnYM3poRk1BmfdySFPw=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: Tra2m9br+70DR7E4OQkNdt1e6QXjZmJJfqTvZfV9wL0=) 3: 3762D3A44BA311EEA33D4B34C4F9AE02.roa (hash: 7jGf0oL08kyRPkfbbjOTxtmf2H3WTL9jhNs8s/Yud9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928 Validity Not Before: Apr 4 18:45:46 2025 GMT Not After : Apr 11 18:45:46 2025 GMT Subject: CN=67f028da-0b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:52:f5:53:79:2b:50:7e:37:3e:c0:5e:a1: 8e:89:77:46:2b:5c:c1:a2:fc:ad:22:5f:ba:55:1b: 50:d3:c1:1e:e7:70:98:63:99:24:47:8a:4b:b0:b5: 7e:23:f3:1f:95:2a:56:73:a3:6a:58:97:6d:09:4c: 46:f0:92:24:56:bd:0f:aa:0e:23:c8:73:36:70:4f: f1:99:46:ee:19:68:9d:0f:7d:06:20:cf:b4:de:11: 0c:f4:5a:47:5f:8f:5b:cf:1a:cd:8a:98:b7:13:a2: 5f:ee:4e:4d:44:3c:cf:92:5d:51:d9:c5:f1:fe:fe: 32:91:24:de:0c:f1:f8:5e:61:e4:03:f1:8d:94:2d: 38:7c:98:f5:b4:5f:22:ce:02:63:f7:75:e8:42:61: f2:ed:c7:ef:bb:b1:e0:30:46:dd:9a:33:1d:82:9e: 71:a9:a5:52:6d:53:3c:29:8d:4e:8c:60:04:31:ec: 52:0c:b9:8e:67:14:84:f9:e4:e0:fb:1e:aa:03:0e: b4:52:a3:ec:07:db:06:8e:df:a3:8b:99:45:20:b5: c3:d2:4a:62:4b:66:6b:ff:b7:d5:c1:68:ea:42:46: c3:32:54:98:c6:f5:01:7e:d1:d0:19:40:a9:c5:5b: 17:52:60:ff:6f:1d:93:df:b8:21:cf:17:fe:6a:a7: 2f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0E:75:A7:CC:FF:1D:86:9C:40:60:7D:18:5B:27:00:11:56:F5:9A X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:2a:30:02:e7:95:e2:27:75:1a:63:76:02:52:93:1b:1b:45: 22:1d:3b:37:b8:73:aa:d5:27:a8:d9:10:08:e1:a7:38:ab:99: dd:d3:b8:04:5e:cb:80:ec:e8:02:8b:31:5a:e6:9c:c6:d3:f8: 95:c1:df:16:8a:69:d3:d3:83:c5:54:8c:75:47:2a:f8:cf:05: 0d:44:49:e1:3b:f5:5c:b5:e7:e5:d3:00:80:fe:b4:8d:13:45: 84:1a:e7:46:06:06:18:69:b9:fe:e3:79:b3:bc:a1:93:c7:55: da:8e:71:be:76:ea:79:e7:03:ce:f4:e1:1a:5f:3d:40:5c:52: 21:95:25:c2:37:7e:b8:cd:5f:5d:da:8d:f4:b0:25:af:6a:a8: fb:1c:ec:a9:d2:3a:da:de:e4:fb:bc:7e:1f:33:1f:73:11:35: 89:7c:54:26:09:03:64:b0:86:53:6c:89:a2:e1:01:8d:ab:a9: 65:7c:d2:e5:ac:c5:64:11:b9:00:61:83:92:81:a1:74:6e:58: d2:19:40:65:85:22:b5:f3:63:95:30:b1:a0:73:f9:20:26:c4: db:87:f2:76:53:65:c1:12:f1:98:29:4a:e0:3a:ad:ae:7b:b9: c2:f7:ac:99:81:d0:93:37:d3:62:59:4b:81:59:9f:93:0b:36: cd:d3:b5:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjUwNDA0MTg0NTQ2WhcNMjUwNDExMTg0NTQ2WjAYMRYwFAYD VQQDEw02N2YwMjhkYS0wYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33FS9VN5K1B+Nz7AXqGOiXdGK1zBovytIl+6VRtQ08Ee53CYY5kkR4pLsLV+ I/MflSpWc6NqWJdtCUxG8JIkVr0Pqg4jyHM2cE/xmUbuGWidD30GIM+03hEM9FpH X49bzxrNipi3E6Jf7k5NRDzPkl1R2cXx/v4ykSTeDPH4XmHkA/GNlC04fJj1tF8i zgJj93XoQmHy7cfvu7HgMEbdmjMdgp5xqaVSbVM8KY1OjGAEMexSDLmOZxSE+eTg +x6qAw60UqPsB9sGjt+ji5lFILXD0kpiS2Zr/7fVwWjqQkbDMlSYxvUBftHQGUCp xVsXUmD/bx2T37ghzxf+aqcvxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8OdafM /x2GnEBgfRhbJwARVvWaMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgKjAC55XiJ3UaY3YCUpMbG0UiHTs3uHOq1Seo2RAI4ac4q5nd07gE XsuA7OgCizFa5pzG0/iVwd8WimnT04PFVIx1Ryr4zwUNREnhO/Vctefl0wCA/rSN E0WEGudGBgYYabn+43mzvKGTx1XajnG+dup55wPO9OEaXz1AXFIhlSXCN364zV9d 2o30sCWvaqj7HOyp0jra3uT7vH4fMx9zETWJfFQmCQNksIZTbImi4QGNq6llfNLl rMVkEbkAYYOSgaF0bljSGUBlhSK182OVMLGgc/kgJsTbh/J2U2XBEvGYKUrgOq2u e7nC96yZgdCTN9NiWUuBWZ+TCzbN07UT -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:42 2025 by rpki-client