$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json) Hash identifier: YUhalD0Uu433P9tsuMH/1b3DQE8OwsdWxFh0/O+x9Fg= Subject key identifier: 11:8C:80:04:8C:7F:85:EE:9E:72:94:07:8E:6E:94:50:7A:38:C3:E4 Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft Manifest number: 0AE1 Signing time: Fri 30 May 2025 19:36:35 +0000 Manifest this update: Fri 30 May 2025 19:36:34 +0000 Manifest next update: Fri 06 Jun 2025 19:36:34 +0000 Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: TiwgV8OTn8r3wiC0vSXtsdeWMP3juN8NqEtOoqLQ7Nw=) 2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=) 3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: May 30 19:36:34 2025 GMT Not After : Jun 6 19:36:34 2025 GMT Subject: CN=683a08c2-a151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:e6:fb:46:b5:8d:42:8e:f3:0f:d9:8e:52: 60:66:97:ba:29:9a:cd:3a:a1:4d:86:1a:b7:4e:32: 25:e4:93:a1:7f:ac:2f:44:7b:6c:6e:25:c0:c4:6b: 93:34:fd:8d:db:50:f3:c0:65:a4:61:00:54:b9:a3: 7b:51:c8:66:e8:41:93:98:78:38:b1:c4:8b:63:cd: f1:af:0a:d9:d7:47:cc:6e:76:22:79:63:df:df:bf: 5e:27:7b:6d:98:9a:ee:2c:33:eb:73:50:3e:f1:ee: 92:21:c4:53:12:70:24:31:03:be:53:2b:5a:52:d1: ee:37:f7:a9:4b:67:f6:a3:30:0d:96:18:4b:5a:46: 18:7f:8b:51:ae:3b:76:4b:50:6e:3f:5d:fe:ff:ef: 83:76:5d:d8:3b:c3:b2:5d:f4:d7:6f:66:a7:05:e9: 88:b3:36:36:c7:e3:a5:56:13:2a:4e:a5:c6:fd:0d: 4b:8f:85:ee:a7:12:95:d8:35:e8:d4:8e:e1:5e:9a: ab:e2:f6:96:d7:af:de:1e:6d:cb:2d:99:36:a3:79: 81:47:30:ec:69:94:bd:da:ec:c2:d7:af:e2:38:fc: 7a:60:f4:55:a2:df:c1:82:44:43:4a:ae:f3:e4:4d: 35:5d:1a:46:5c:fb:6a:15:db:c2:0e:98:46:b4:d6: 90:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8C:80:04:8C:7F:85:EE:9E:72:94:07:8E:6E:94:50:7A:38:C3:E4 X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:92:61:9c:e0:b7:83:73:87:27:15:da:52:94:dd:c4:45:9f: e8:a7:19:8c:ed:92:83:f1:ef:d3:66:4c:8e:ca:16:67:16:be: 0a:dc:52:a3:cd:45:01:a2:f1:ca:aa:6d:af:0b:71:93:99:e5: 84:2a:75:65:e4:86:70:5d:be:68:5b:b6:41:a6:0e:d8:7f:13: 6b:cc:c2:34:95:e0:9a:56:94:6f:b1:fb:48:49:29:85:df:7e: 28:b9:96:be:28:c6:fa:4f:35:ed:4b:d1:57:dd:91:19:36:0b: 4d:b7:67:96:e6:f9:49:a4:c0:80:8b:ec:77:fe:ce:ed:5d:24: 78:ac:7b:4b:3d:5a:09:2a:3f:ca:3f:c7:f1:bd:6c:ad:22:7a: 14:fd:1a:2c:7b:5e:09:01:dd:ab:b6:07:ae:b8:26:95:89:23: eb:ee:2f:03:69:4d:1e:c3:e1:4f:18:06:19:dc:cc:91:fe:63: 2e:e2:46:e8:f2:94:a1:e5:07:7d:2c:c1:74:bc:f0:49:91:5a: fd:16:56:80:40:0a:a0:b2:56:ae:99:b8:0f:34:72:04:ad:59: b7:2a:41:18:46:62:26:f5:90:9e:37:8d:43:ef:a0:2b:7f:6f: 76:64:dd:a3:28:2a:43:75:71:b9:26:0c:86:9d:ae:99:24:d3: 8f:d0:3c:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjUwNTMwMTkzNjM0WhcNMjUwNjA2MTkzNjM0WjAYMRYwFAYD VQQDEw02ODNhMDhjMi1hMTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfbm+0a1jUKO8w/ZjlJgZpe6KZrNOqFNhhq3TjIl5JOhf6wvRHtsbiXAxGuT NP2N21DzwGWkYQBUuaN7Uchm6EGTmHg4scSLY83xrwrZ10fMbnYieWPf379eJ3tt mJruLDPrc1A+8e6SIcRTEnAkMQO+UytaUtHuN/epS2f2ozANlhhLWkYYf4tRrjt2 S1BuP13+/++Ddl3YO8OyXfTXb2anBemIszY2x+OlVhMqTqXG/Q1Lj4XupxKV2DXo 1I7hXpqr4vaW16/eHm3LLZk2o3mBRzDsaZS92uzC16/iOPx6YPRVot/BgkRDSq7z 5E01XRpGXPtqFdvCDphGtNaQTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGMgASM f4XunnKUB45ulFB6OMPkMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT djZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUkmGc4LeDc4cnFdpSlN3ERZ/opxmM7ZKD8e/TZkyOyhZnFr4K3FKj zUUBovHKqm2vC3GTmeWEKnVl5IZwXb5oW7ZBpg7YfxNrzMI0leCaVpRvsftISSmF 334ouZa+KMb6TzXtS9FX3ZEZNgtNt2eW5vlJpMCAi+x3/s7tXSR4rHtLPVoJKj/K P8fxvWytInoU/Rose14JAd2rtgeuuCaViSPr7i8DaU0ew+FPGAYZ3MyR/mMu4kbo 8pSh5Qd9LMF0vPBJkVr9FlaAQAqgslaumbgPNHIErVm3KkEYRmIm9ZCeN41D76Ar f292ZN2jKCpDdXG5JgyGna6ZJNOP0Dwv -----END CERTIFICATE-----Generated at Sat May 31 16:56:16 2025 by rpki-client