$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: EzJX5uLHm9Lzwr3AbBHvxGjklxUASu3zpD6eGP6uEps= Subject key identifier: DC:8C:26:EF:1E:3D:BB:F6:C4:67:59:0A:A2:9E:43:96:FA:E2:39:35 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 01DA Signing time: Sat 31 May 2025 02:26:35 +0000 Manifest this update: Sat 31 May 2025 02:26:34 +0000 Manifest next update: Sat 07 Jun 2025 02:26:34 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: pkysUKXU30MMaTKSuBOZbGrUtIX5wEuxw44hUUCt4F8=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: May 31 02:26:34 2025 GMT Not After : Jun 7 02:26:34 2025 GMT Subject: CN=683a68da-9d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:d8:c5:d4:6a:bd:b6:02:31:5a:44:7a:3a: ce:08:89:55:7c:a6:03:64:06:e5:60:87:f2:1e:98: 5e:ac:cf:67:21:ce:7f:9b:9b:1f:91:26:61:aa:2c: a5:1c:1b:bd:37:f4:e8:c4:7a:0c:5c:20:db:20:88: ac:1f:b1:d4:fe:23:01:de:b8:b5:fd:cb:d2:8b:0c: 45:ba:f7:9d:f5:3d:df:7c:b6:0f:ff:08:93:c3:90: 6b:c7:1d:a0:d7:08:8f:86:81:06:bb:55:65:3d:6e: 8f:0d:45:09:be:9d:91:fb:36:4c:d6:58:03:06:38: 57:c5:0b:1c:4b:63:b4:bb:f7:53:b5:09:fe:e0:55: e6:d7:90:03:37:2e:36:86:7f:83:5b:4a:28:34:1d: 35:cd:1f:e6:12:0c:12:75:64:0d:4b:3a:4c:88:27: f0:e0:81:a0:a0:ff:8d:ab:7f:cb:6d:46:f7:1a:c5: d1:26:a7:c4:49:6a:93:4f:a4:75:36:f2:21:85:9b: f5:5e:73:be:09:0c:c1:40:84:ae:d0:17:bc:c7:11: d6:a2:55:f4:3f:89:62:b5:e8:34:f2:6a:37:e3:80: cf:34:2e:15:b6:86:85:e5:dd:31:65:3c:f4:18:22: 60:8c:d7:0d:08:b7:3e:31:16:7e:c7:7c:11:b9:af: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8C:26:EF:1E:3D:BB:F6:C4:67:59:0A:A2:9E:43:96:FA:E2:39:35 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d3:80:60:54:c9:a9:45:f7:c3:a0:bc:eb:30:6f:63:c2:85: 6b:0a:37:4f:02:3f:a3:1a:96:4a:b3:3e:22:7d:c4:e8:75:4e: eb:cf:a4:b7:89:52:ad:d9:14:a7:fc:5f:55:aa:ba:df:5a:e8: bd:ed:ae:13:ca:ae:f0:42:0f:8b:c1:af:41:bd:a3:a1:c0:9b: 2c:8b:a6:dc:a2:36:4d:9f:de:32:60:00:4f:af:27:4b:35:3b: f5:ac:40:4c:74:d3:19:21:16:e1:68:51:03:1c:50:e0:83:93: 71:fc:7c:c9:0d:1c:18:4a:ce:44:46:91:1f:bb:d9:c9:ce:95: c9:f4:31:3e:7a:34:be:52:b5:06:21:b7:a0:2c:8f:60:e8:5d: 13:a6:e0:98:f1:77:77:91:3e:aa:4d:e1:78:bd:e4:9a:75:7f: 75:86:94:7f:76:eb:a2:a3:66:35:60:c2:98:dc:b9:f2:f8:33: 54:50:e7:c0:10:43:f9:04:36:d9:27:a3:62:15:e8:9a:75:ff: 4e:49:fc:69:12:89:8c:97:5b:c8:30:f4:e1:24:07:f0:2f:f9: a2:52:9c:71:71:2c:06:e5:7a:36:db:39:3b:6d:0b:cc:88:a1: 39:98:54:23:69:ba:59:d4:21:45:31:f2:f0:16:27:c9:69:03: 63:51:eb:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUwNTMxMDIyNjM0WhcNMjUwNjA3MDIyNjM0WjAYMRYwFAYD VQQDEw02ODNhNjhkYS05ZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbXYxdRqvbYCMVpEejrOCIlVfKYDZAblYIfyHpherM9nIc5/m5sfkSZhqiyl HBu9N/ToxHoMXCDbIIisH7HU/iMB3ri1/cvSiwxFuved9T3ffLYP/wiTw5Brxx2g 1wiPhoEGu1VlPW6PDUUJvp2R+zZM1lgDBjhXxQscS2O0u/dTtQn+4FXm15ADNy42 hn+DW0ooNB01zR/mEgwSdWQNSzpMiCfw4IGgoP+Nq3/LbUb3GsXRJqfESWqTT6R1 NvIhhZv1XnO+CQzBQISu0Be8xxHWolX0P4liteg08mo344DPNC4VtoaF5d0xZTz0 GCJgjNcNCLc+MRZ+x3wRua/BeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyMJu8e Pbv2xGdZCqKeQ5b64jk1MB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi04BgVMmpRffDoLzrMG9jwoVrCjdPAj+jGpZKsz4ifcTodU7rz6S3 iVKt2RSn/F9VqrrfWui97a4Tyq7wQg+Lwa9BvaOhwJssi6bcojZNn94yYABPrydL NTv1rEBMdNMZIRbhaFEDHFDgg5Nx/HzJDRwYSs5ERpEfu9nJzpXJ9DE+ejS+UrUG IbegLI9g6F0TpuCY8Xd3kT6qTeF4veSadX91hpR/duuio2Y1YMKY3Lny+DNUUOfA EEP5BDbZJ6NiFeiadf9OSfxpEomMl1vIMPThJAfwL/miUpxxcSwG5Xo22zk7bQvM iKE5mFQjabpZ1CFFMfLwFifJaQNjUetl -----END CERTIFICATE-----Generated at Sat May 31 16:28:42 2025 by rpki-client