$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json) Hash identifier: HY+inPNLBEISO3O9UF6JdaowMJXC+bFkHkH93s7yF7w= Subject key identifier: 2A:CD:94:3A:18:6D:1F:4B:FA:A1:53:0C:49:9D:57:DC:B0:1A:81:A4 Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft Manifest number: 2C Signing time: Sat 31 May 2025 07:22:44 +0000 Manifest this update: Sat 31 May 2025 07:22:44 +0000 Manifest next update: Sat 07 Jun 2025 07:22:44 +0000 Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: QB5OVxd5w8gHCSnHkAoU9sR1zjk83DgG/TB7gLnbLSM=) 2: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: PQY0mTJA0slWwObUdYpstelwiTL+prFfmuh+/qU35kg=) 3: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: tN7XrcdoarGJoE1RdPj/CCm6dWvl1EGT3dxhZCMygsY=) 4: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: ri7YInMAbSmSsjfWYal4W711k38R/upA65HcOLcK83k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Validity Not Before: May 31 07:22:44 2025 GMT Not After : Jun 7 07:22:44 2025 GMT Subject: CN=683aae44-43a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:d9:de:69:e6:a2:b5:d0:a7:e5:f1:1d:a9: 7f:84:d2:f4:d5:11:36:ed:56:d1:98:85:f9:06:59: fd:f8:96:80:c3:a5:b3:fa:94:f5:9e:3e:fd:e2:81: 16:21:96:a4:d5:de:f7:27:c0:73:13:cb:66:eb:d7: 5e:75:39:47:b3:24:23:6a:9b:92:17:09:54:44:d0: cd:1a:f6:e1:e2:8e:52:05:af:a9:fd:81:a9:56:21: 0d:5d:5c:43:df:6b:26:bd:0e:f4:2f:4a:22:f9:a8: 10:e2:26:18:a5:c4:81:7f:e4:0d:ed:aa:98:34:fe: d7:64:42:7a:ae:2a:74:d0:59:5c:34:21:d5:72:45: 72:a1:4d:8e:6f:26:67:b8:b3:5b:4c:ae:72:01:d9: 37:7b:fa:b8:c2:6b:6f:7f:5c:35:a5:7a:86:3e:48: 48:c4:24:74:08:09:e7:3d:0a:ca:60:11:66:70:0a: 88:8b:aa:d3:e2:8f:d0:fd:fb:42:dc:1a:68:1b:af: a3:04:37:e2:22:c7:2f:26:89:d8:f8:fa:85:8e:51: 21:2b:98:6a:a6:08:e2:64:75:c4:90:7b:e9:f1:82: 4f:1a:fd:f3:3c:7d:83:ce:a4:72:b7:64:0a:00:4c: ad:d3:67:33:da:97:60:a2:07:8e:23:a4:ca:20:73: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:94:3A:18:6D:1F:4B:FA:A1:53:0C:49:9D:57:DC:B0:1A:81:A4 X509v3 Authority Key Identifier: keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f8:fd:3d:80:15:2b:1c:68:69:92:77:a8:47:d4:1d:eb:e1: 22:5e:ba:92:e7:1f:b7:34:99:08:6b:34:cc:c8:b9:3c:70:e0: 49:92:c1:bb:fd:cd:5a:49:5d:60:93:c4:0e:ab:22:ae:d4:52: fb:fa:5f:b1:60:fb:3e:5a:43:93:a1:e5:8f:b6:03:10:3b:69: 42:c5:28:11:89:98:29:2a:ff:50:eb:cf:c4:0f:a6:d2:76:8c: d2:fc:e3:d9:2b:df:4d:82:4b:20:f0:e6:82:bc:22:30:9a:56: c9:5e:d0:af:64:61:70:10:d3:3c:01:8a:7b:8b:4e:35:f2:ae: 3c:f8:6b:65:f2:fa:6b:c7:57:53:29:aa:22:7e:a4:e3:ed:84: e2:bc:85:4f:d7:56:e5:cc:08:42:fa:63:12:df:70:75:9a:ea: 7e:44:c3:ad:7d:bf:f5:f1:08:0b:63:9e:c8:9f:4e:0d:77:96: 53:36:5e:d0:61:22:74:35:08:97:b1:d4:4f:31:f5:cf:d5:79: ea:0b:a9:a6:2f:15:aa:27:d8:52:c3:e2:5f:e3:e0:3d:1b:7d: ac:21:e5:fd:fa:5f:49:97:bb:12:2f:b7:88:12:e0:c3:c3:e0: 99:e0:0b:cb:02:5c:cc:86:67:cb:07:d8:0b:ce:5e:4c:f0:95: 3c:f9:be:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QkE4NDExMC8GA1UEBRMoRjQ5NDk2Rjk1REY5NTg4ODFCRjRCN0U5NzJFNTFCNkYz Q0E1OURGQTAeFw0yNTA1MzEwNzIyNDRaFw0yNTA2MDcwNzIyNDRaMBgxFjAUBgNV BAMTDTY4M2FhZTQ0LTQzYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs0dneaeaitdCn5fEdqX+E0vTVETbtVtGYhfkGWf34loDDpbP6lPWePv3igRYh lqTV3vcnwHMTy2br1151OUezJCNqm5IXCVRE0M0a9uHijlIFr6n9galWIQ1dXEPf aya9DvQvSiL5qBDiJhilxIF/5A3tqpg0/tdkQnquKnTQWVw0IdVyRXKhTY5vJme4 s1tMrnIB2Td7+rjCa29/XDWleoY+SEjEJHQICec9CspgEWZwCoiLqtPij9D9+0Lc Gmgbr6MEN+Iixy8midj4+oWOUSErmGqmCOJkdcSQe+nxgk8a/fM8fYPOpHK3ZAoA TK3TZzPal2CiB44jpMogc/QHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKs2UOhht H0v6oVMMSZ1X3LAagaQwHwYDVR0jBBgwFoAU9JSW+V35WIgb9LfpcuUbbzylnfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCQTg0LzcyQzEwNDVDMDUx RjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0lnYjlMZnBjdVViYnp5bG5m by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUpTVy1WMzVXSWdiOUxmcGN1VWJienlsbmZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC QTg0LzcyQzEwNDVDMDUxRjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0ln YjlMZnBjdVViYnp5bG5mby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKf4/T2AFSscaGmSd6hH1B3r4SJeupLnH7c0mQhrNMzIuTxw4EmSwbv9 zVpJXWCTxA6rIq7UUvv6X7Fg+z5aQ5Oh5Y+2AxA7aULFKBGJmCkq/1Drz8QPptJ2 jNL849kr302CSyDw5oK8IjCaVsle0K9kYXAQ0zwBinuLTjXyrjz4a2Xy+mvHV1Mp qiJ+pOPthOK8hU/XVuXMCEL6YxLfcHWa6n5Ew619v/XxCAtjnsifTg13llM2XtBh InQ1CJex1E8x9c/VeeoLqaYvFaon2FLD4l/j4D0bfawh5f36X0mXuxIvt4gS4MPD 4JngC8sCXMyGZ8sH2AvOXkzwlTz5vm0= -----END CERTIFICATE-----Generated at Sat May 31 14:36:45 2025 by rpki-client