$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json) Hash identifier: cWdF2KZC+vpL/ee5LZeGWTYqvw/frVta9qBTU7ovbqM= Subject key identifier: 93:D0:26:01:16:41:15:4E:FE:B1:DD:24:2B:67:F8:92:5E:F3:90:96 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft Manifest number: A5 Signing time: Sat 05 Apr 2025 05:41:29 +0000 Manifest this update: Sat 05 Apr 2025 05:41:29 +0000 Manifest next update: Sat 12 Apr 2025 05:41:29 +0000 Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: EAOAXtTulcNsFejpM/pf2anQvZksMB0vBsYn0HikwtM=) 2: 06398E92797611EFAD5DCD6DC4F9AE02.roa (hash: oB1KrOj+GDSyYCYs5T2AxtFqZGFct9w3bhi2QDabxU4=) 3: 057FD54C797611EFAD5DCD6DC4F9AE02.roa (hash: IIcRFMkWVb72LioRJMwB/nH0T6BzbBtQr1NPRFzqssc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA Validity Not Before: Apr 5 05:41:29 2025 GMT Not After : Apr 12 05:41:29 2025 GMT Subject: CN=67f0c289-4126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:15:38:52:61:b2:b5:88:79:cf:02:fb:95: e0:2b:e4:eb:d8:4c:a8:7b:90:d2:40:a9:eb:d0:5b: f2:e6:b1:7d:20:a2:55:41:d7:21:34:52:6b:69:c5: 23:c3:d3:97:b3:68:20:70:d4:85:61:ff:5d:1b:e8: e8:c1:ce:d3:0f:71:31:cc:83:22:78:bc:75:38:b1: 32:fe:c8:03:1f:a8:1c:bd:d9:13:6e:ac:f4:86:75: 6c:c3:b3:9c:9c:b7:8a:83:64:a2:ed:16:8a:0d:75: 64:0b:3c:eb:ca:5a:d2:e6:c4:06:55:ee:4d:c2:95: fb:a9:87:04:27:2c:4b:6e:da:a1:2f:88:bf:38:8f: 7f:f4:5c:a0:ce:81:b6:12:01:b5:40:bb:54:82:67: a0:be:49:17:6f:46:10:fb:aa:01:d3:c4:10:1e:ef: 20:9d:16:03:44:c1:a6:67:b5:f4:fe:5a:c4:50:91: 51:83:2a:f3:52:20:82:70:06:d3:77:7b:ec:9d:94: 12:f7:dc:d7:25:f2:ef:91:8f:23:cc:fc:ce:19:b9: b6:5f:6d:11:45:bc:90:3b:07:c8:03:b9:25:da:34: 10:ea:d1:31:81:9b:c8:ee:03:dd:e3:55:4e:49:74: 4b:f7:84:c4:32:33:8d:89:d1:24:fa:23:9e:80:6a: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D0:26:01:16:41:15:4E:FE:B1:DD:24:2B:67:F8:92:5E:F3:90:96 X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6c:1f:08:60:7f:4d:32:02:3e:18:e3:3a:1e:68:60:f6:29: 00:fe:35:6a:f9:9d:e4:36:5e:e0:74:a9:e9:0f:a5:0d:4f:e9: 46:22:ee:5c:d2:9a:b7:4a:58:c2:1c:a4:3f:b9:d7:51:a7:db: 9a:9f:d6:f5:39:11:3d:d8:fa:5f:e8:23:fc:d0:a6:c8:6e:5f: 53:bf:78:20:0d:2c:89:bd:9f:a6:4f:59:9b:3f:e0:51:c3:e5: de:3d:4b:01:d4:9e:f5:42:5a:34:c8:a0:ba:84:93:4c:8e:9d: bc:ba:25:3f:06:38:bc:7a:e0:84:bb:60:6e:2c:8b:10:4f:89: e8:90:dd:07:18:3a:b6:87:43:bc:cd:c8:b9:1e:d4:95:8f:0b: ac:d5:f5:d1:01:a0:57:85:94:ac:9b:d5:cc:e5:25:f9:2c:3c: a0:f5:dc:ac:42:a7:db:24:84:a8:84:85:46:55:74:23:74:c0: e2:b7:a6:9b:0c:09:19:6f:93:7f:09:5f:97:6a:39:48:af:73: f8:6d:56:94:19:d5:74:c4:3b:93:96:c1:28:86:34:7b:30:a9: 18:da:b3:a2:61:71:d7:c6:f6:90:71:bb:c1:bd:70:59:f7:4f: 3b:04:78:f3:7f:73:58:85:46:5b:df:f2:29:e9:07:fc:84:42: f7:79:a7:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUwNDA1MDU0MTI5WhcNMjUwNDEyMDU0MTI5WjAYMRYwFAYD VQQDEw02N2YwYzI4OS00MTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNcVOFJhsrWIec8C+5XgK+Tr2Eyoe5DSQKnr0Fvy5rF9IKJVQdchNFJracUj w9OXs2ggcNSFYf9dG+jowc7TD3ExzIMieLx1OLEy/sgDH6gcvdkTbqz0hnVsw7Oc nLeKg2Si7RaKDXVkCzzrylrS5sQGVe5NwpX7qYcEJyxLbtqhL4i/OI9/9FygzoG2 EgG1QLtUgmegvkkXb0YQ+6oB08QQHu8gnRYDRMGmZ7X0/lrEUJFRgyrzUiCCcAbT d3vsnZQS99zXJfLvkY8jzPzOGbm2X20RRbyQOwfIA7kl2jQQ6tExgZvI7gPd41VO SXRL94TEMjONidEk+iOegGrLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPQJgEW QRVO/rHdJCtn+JJe85CWMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODhDQS81Njk2RTc0NjM0NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2 OWJ5ZGE5eEMyTkhCaXI4enMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdbB8IYH9NMgI+GOM6Hmhg9ikA/jVq+Z3kNl7gdKnpD6UNT+lGIu5c 0pq3SljCHKQ/uddRp9uan9b1ORE92Ppf6CP80KbIbl9Tv3ggDSyJvZ+mT1mbP+BR w+XePUsB1J71Qlo0yKC6hJNMjp28uiU/Bji8euCEu2BuLIsQT4nokN0HGDq2h0O8 zci5HtSVjwus1fXRAaBXhZSsm9XM5SX5LDyg9dysQqfbJISohIVGVXQjdMDit6ab DAkZb5N/CV+XajlIr3P4bVaUGdV0xDuTlsEohjR7MKkY2rOiYXHXxvaQcbvBvXBZ 9087BHjzf3NYhUZb3/Ip6Qf8hEL3eacB -----END CERTIFICATE-----Generated at Sat Apr 5 19:39:30 2025 by rpki-client