$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json) Hash identifier: 7txE+dXWBaHwONIGvH0jp11uebuS2PmEP+naIWsiTmQ= Subject key identifier: A7:F1:92:DE:1E:05:24:56:A0:DA:40:05:6A:D0:45:8C:E4:4C:95:6C Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0BA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft Manifest number: 0B9A Signing time: Sun 20 Apr 2025 18:48:14 +0000 Manifest this update: Sun 20 Apr 2025 18:48:13 +0000 Manifest next update: Sun 27 Apr 2025 18:48:13 +0000 Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: DpGmV7d7e5X1RscKqi3N+rbCFou7QZnbUonVrWNE5s4=) 2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: r5uWTU+sYs/vGgm5oMxXApeoTDyzrDhvLimJL0rhlzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: Apr 20 18:48:13 2025 GMT Not After : Apr 27 18:48:13 2025 GMT Subject: CN=6805416e-48a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:24:66:a0:9b:7d:63:8f:23:ca:08:e7:80: 90:1d:a9:5d:af:5c:46:27:c7:54:35:e7:f9:80:0f: 5e:fa:eb:19:66:e0:2a:be:5e:56:9d:f8:2d:c6:96: c8:65:25:97:cc:a4:0d:e1:5f:39:96:ad:82:ef:8f: f7:96:b0:f3:63:25:6c:21:14:b8:0d:fc:c2:c4:6f: 38:2d:2d:b9:69:50:ce:d9:7e:76:23:07:a7:3f:3e: 28:79:6e:19:a1:4d:4f:e0:19:ec:a0:1f:c7:de:f1: 6f:f0:36:7e:14:1b:5c:65:cb:9e:d9:b6:08:25:13: 45:73:d3:3b:72:88:0f:20:c9:29:60:5f:c1:8f:9a: 06:33:ca:03:02:f2:de:18:87:5e:02:50:ee:ff:5a: 08:f3:87:bf:11:e2:ab:e0:5e:8f:ef:dc:a9:03:7f: 37:06:c3:12:1e:53:8c:20:a3:c3:7c:a7:00:c0:fd: 07:9e:fa:64:e3:e3:b1:a9:57:50:e0:5c:8f:53:03: 90:71:c8:e2:44:80:ed:11:e0:d3:1e:c0:2a:e7:5b: c7:65:cd:30:bb:37:db:55:e6:cc:96:7c:7d:b9:91: 1f:cd:d0:d2:7b:7c:2f:42:b9:cb:fa:18:b7:ff:f8: 37:72:fd:73:e7:05:66:9f:e5:a9:d3:42:bc:dd:de: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F1:92:DE:1E:05:24:56:A0:DA:40:05:6A:D0:45:8C:E4:4C:95:6C X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:88:48:ad:3b:80:f7:e9:d6:14:cc:8c:7f:56:25:81:39:75: 53:77:54:e0:94:12:97:28:a1:2d:50:95:c8:46:69:a7:09:b8: 52:4c:5f:04:4d:0b:92:9c:a5:57:56:e4:7c:31:53:62:20:5c: bf:8a:2f:e3:dc:e5:52:78:db:04:f9:03:0a:19:0e:9a:79:55: f2:06:37:e7:a2:df:af:25:89:82:94:64:7e:9d:00:bf:14:cb: a0:f1:0e:79:e4:c6:7b:1d:a5:54:ae:ad:87:30:81:f1:47:89: 7f:ce:5a:b1:02:db:bf:da:8f:c7:66:0f:14:74:99:46:98:36: 13:12:88:61:16:04:c0:9d:fa:1f:04:34:1d:b3:3d:da:78:b0: 0c:c6:cc:32:ef:a2:56:24:cc:a5:b3:da:cf:b9:fc:41:6b:95: a2:26:ac:d6:ef:ea:b0:4d:be:51:67:45:58:d9:e4:b9:b5:f8: d1:b5:e2:43:04:bb:e9:52:f2:cf:d3:d3:14:ae:7c:e1:9f:47: 90:ad:96:43:ce:94:f1:fd:7a:7b:6e:22:ad:92:d0:38:84:4a: eb:0c:01:1c:21:e4:b0:e1:d1:da:06:bd:07:82:54:91:06:2a: 35:53:f3:fe:97:2b:f5:da:8e:af:93:2a:e4:b8:18:ba:bb:b8: 89:58:f3:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjUwNDIwMTg0ODEzWhcNMjUwNDI3MTg0ODEzWjAYMRYwFAYD VQQDEw02ODA1NDE2ZS00OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwk4kZqCbfWOPI8oI54CQHaldr1xGJ8dUNef5gA9e+usZZuAqvl5WnfgtxpbI ZSWXzKQN4V85lq2C74/3lrDzYyVsIRS4DfzCxG84LS25aVDO2X52IwenPz4oeW4Z oU1P4BnsoB/H3vFv8DZ+FBtcZcue2bYIJRNFc9M7cogPIMkpYF/Bj5oGM8oDAvLe GIdeAlDu/1oI84e/EeKr4F6P79ypA383BsMSHlOMIKPDfKcAwP0Hnvpk4+OxqVdQ 4FyPUwOQccjiRIDtEeDTHsAq51vHZc0wuzfbVebMlnx9uZEfzdDSe3wvQrnL+hi3 //g3cv1z5wVmn+Wp00K83d5AEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfxkt4e BSRWoNpABWrQRYzkTJVsMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py SGNRbi0tci1jZy03Q1h3aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeiEitO4D36dYUzIx/ViWBOXVTd1TglBKXKKEtUJXIRmmnCbhSTF8E TQuSnKVXVuR8MVNiIFy/ii/j3OVSeNsE+QMKGQ6aeVXyBjfnot+vJYmClGR+nQC/ FMug8Q555MZ7HaVUrq2HMIHxR4l/zlqxAtu/2o/HZg8UdJlGmDYTEohhFgTAnfof BDQdsz3aeLAMxswy76JWJMyls9rPufxBa5WiJqzW7+qwTb5RZ0VY2eS5tfjRteJD BLvpUvLP09MUrnzhn0eQrZZDzpTx/Xp7biKtktA4hErrDAEcIeSw4dHaBr0HglSR Bio1U/P+lyv12o6vkyrkuBi6u7iJWPOV -----END CERTIFICATE-----Generated at Tue Apr 22 05:39:58 2025 by rpki-client