$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: crLIyjkX4o3o73v8RN8PgZIBu82Qn+Gc1q/63kgFpso= Subject key identifier: 9D:65:D2:FA:B5:EB:4B:CD:F4:D6:C4:D0:2C:CF:EE:51:A0:38:6F:76 Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0B9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0B96 Signing time: Fri 30 May 2025 19:11:42 +0000 Manifest this update: Fri 30 May 2025 19:11:42 +0000 Manifest next update: Fri 06 Jun 2025 19:11:42 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: oQH/I/wdXafgcH8CORR8r6E3zt7EYTlyAq7P5oHZv+Y=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: ukt0pxqY8ok4zBKJR2dRuTwyGN5+UeLkjnvL96GEj4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2972 (0xb9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: May 30 19:11:42 2025 GMT Not After : Jun 6 19:11:42 2025 GMT Subject: CN=683a02ee-9cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:45:04:43:2f:f2:8c:f9:69:15:fa:0a:df: 98:e2:10:bd:e3:39:82:5a:66:aa:c9:84:75:f5:04: 89:10:c9:df:8e:dc:21:28:b3:f5:9c:85:86:7e:82: 0e:02:6e:66:08:39:f7:33:1a:d9:78:3f:dd:0d:b6: 93:51:9a:56:e7:4a:98:c7:6d:f3:e7:e1:49:45:1c: 8b:31:8b:65:20:81:6e:e2:3d:5d:32:51:dc:66:e3: 9f:a6:ed:f1:4d:64:23:bf:76:d8:b4:e8:91:0e:e9: cc:64:50:06:01:be:d2:0d:aa:e1:53:58:f6:ba:f3: 8e:20:8d:35:95:15:8f:79:8e:a5:23:23:a6:fc:2e: 35:c6:b8:6e:8c:0d:27:ab:b4:76:ce:21:36:11:2a: 70:20:0d:5c:a7:bf:c1:05:90:f2:a2:6b:07:0c:4b: 2d:2a:79:bd:55:e9:e4:31:c7:fc:c7:38:fe:69:c0: ff:8c:c3:ca:f2:2a:16:61:55:63:03:62:ae:12:21: 66:38:5a:f7:05:31:21:05:cd:47:9b:0f:fe:0d:73: 0a:77:c9:e7:2a:75:07:ab:da:c7:82:08:b1:cb:50: 0b:1a:94:e4:85:50:9d:75:2c:9f:1c:20:50:58:27: 28:1d:12:53:d5:2c:46:65:99:7c:bc:12:8f:56:d6: 01:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:65:D2:FA:B5:EB:4B:CD:F4:D6:C4:D0:2C:CF:EE:51:A0:38:6F:76 X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6e:cb:3d:31:10:4c:03:8e:a6:b8:3e:78:0a:23:27:95:35: b2:51:06:78:39:c7:5d:73:b7:ca:0a:6c:61:41:21:8b:d9:73: 92:ba:f4:ff:24:19:6f:33:a7:8f:50:aa:b0:39:97:4e:54:d0: fa:4c:5e:a7:71:d8:66:c5:61:c1:f6:5a:ca:32:2d:a0:34:0d: 1b:0b:67:36:f0:cc:71:cf:76:3b:7b:48:32:78:c6:9d:96:76: d8:c2:3a:e9:a6:3f:5c:14:23:13:20:2a:14:24:c3:76:60:66: 2f:66:e5:f6:5b:4f:a3:a1:cb:9e:d0:12:a2:77:94:70:bc:71: 70:8e:93:a9:3f:09:ea:13:01:b4:46:9e:1e:d5:1e:99:a7:54: 8b:eb:43:32:75:1b:40:52:68:43:f0:e4:cb:86:f3:6e:3e:3f: 33:7a:23:19:3e:f1:16:53:69:1c:68:79:04:db:53:68:de:72: bf:aa:b7:27:37:21:7f:ba:21:46:ab:4a:34:be:97:db:07:41: 9b:ba:83:37:3f:e7:fd:52:cd:5f:33:e0:ba:f8:0d:3c:18:1b: da:9a:f2:9f:3c:76:6e:2d:1a:af:25:e3:ea:2a:ab:54:74:77: 71:ed:fe:22:54:45:08:9e:2a:9a:6e:7b:e8:35:3e:25:a8:a0: 1b:b8:f8:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUwNTMwMTkxMTQyWhcNMjUwNjA2MTkxMTQyWjAYMRYwFAYD VQQDEw02ODNhMDJlZS05Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdZFBEMv8oz5aRX6Ct+Y4hC94zmCWmaqyYR19QSJEMnfjtwhKLP1nIWGfoIO Am5mCDn3MxrZeD/dDbaTUZpW50qYx23z5+FJRRyLMYtlIIFu4j1dMlHcZuOfpu3x TWQjv3bYtOiRDunMZFAGAb7SDarhU1j2uvOOII01lRWPeY6lIyOm/C41xrhujA0n q7R2ziE2ESpwIA1cp7/BBZDyomsHDEstKnm9VenkMcf8xzj+acD/jMPK8ioWYVVj A2KuEiFmOFr3BTEhBc1Hmw/+DXMKd8nnKnUHq9rHggixy1ALGpTkhVCddSyfHCBQ WCcoHRJT1SxGZZl8vBKPVtYBXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1l0vq1 60vN9NbE0CzP7lGgOG92MB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASbss9MRBMA46muD54CiMnlTWyUQZ4Ocddc7fKCmxhQSGL2XOSuvT/ JBlvM6ePUKqwOZdOVND6TF6ncdhmxWHB9lrKMi2gNA0bC2c28Mxxz3Y7e0gyeMad lnbYwjrppj9cFCMTICoUJMN2YGYvZuX2W0+jocue0BKid5RwvHFwjpOpPwnqEwG0 Rp4e1R6Zp1SL60MydRtAUmhD8OTLhvNuPj8zeiMZPvEWU2kcaHkE21No3nK/qrcn NyF/uiFGq0o0vpfbB0GbuoM3P+f9Us1fM+C6+A08GBvamvKfPHZuLRqvJePqKqtU dHdx7f4iVEUIniqabnvoNT4lqKAbuPio -----END CERTIFICATE-----Generated at Sat May 31 16:42:02 2025 by rpki-client