$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft File: 9h2bowrjVcgD-A3M8sQV3gB9eVM.mft (raw, json) Hash identifier: VHwgisfTQVt8rTFvmCoq7jCvgx6TMApNzKyH+w6vdEs= Subject key identifier: 82:CE:A3:19:FF:C0:CD:D2:3A:85:65:4C:63:17:F8:84:CB:F7:C8:94 Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 Certificate issuer: /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft Manifest number: 088C Signing time: Sun 06 Apr 2025 20:21:47 +0000 Manifest this update: Sun 06 Apr 2025 20:21:46 +0000 Manifest next update: Sun 13 Apr 2025 20:21:46 +0000 Files and hashes: 1: 9h2bowrjVcgD-A3M8sQV3gB9eVM.crl (hash: 88v2bDfk6TteajIh4LqPmzYjkdPsioS+GZgfeI4Pcjk=) 2: F84E14F6F7A411EC88E84259C4F9AE02.roa (hash: P/auEJgutUVl8dFubgi2n2lxk6hlWtNvdq3SLvKI4fQ=) 3: A069584E32B311EF809D8B35C4F9AE02.roa (hash: Gw0kNl2t8PieKLC+KrgxefhotSeMoj6pQV0MiEUUWsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 20:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC510 Validity Not Before: Apr 6 20:21:46 2025 GMT Not After : Apr 13 20:21:46 2025 GMT Subject: CN=67f2e25b-fd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:c5:49:45:e7:27:6a:1b:f9:a8:c3:3d:8a: ac:bd:30:8f:88:9b:a7:55:ed:5f:9a:9b:ac:99:08: 92:c1:11:c9:5d:f7:19:92:10:4e:1b:4a:bc:f8:c1: cf:ef:f1:56:e8:37:32:07:b7:6b:05:ee:e0:62:91: b3:e8:95:2e:75:e4:d5:f0:99:72:17:41:09:a6:fb: bf:ef:8c:9f:e5:5f:f4:9f:fc:af:a0:2f:89:af:40: 2d:e4:58:72:b4:05:d0:5e:a9:a1:42:75:16:06:59: 14:96:6d:79:e4:7d:8b:1b:2d:3a:cf:60:4b:57:7c: 5b:5b:cc:93:7c:4a:27:a4:38:81:c9:4b:ce:b5:f3: 5a:da:b9:41:0d:f1:f9:6e:c8:a6:d0:ad:d8:00:ce: 25:ab:ca:9c:fa:56:fd:1f:b2:90:63:66:90:2e:cc: fd:31:09:99:b8:41:99:55:59:89:38:b0:e1:bc:dc: 83:51:fd:8e:b2:55:fa:fa:93:93:f4:6d:af:ae:22: 47:cc:9c:56:95:17:ff:d6:37:1d:d4:3e:8e:ab:98: fe:3c:a8:c1:c1:8f:62:46:6f:0d:fa:a8:0f:cd:a0: 05:22:37:4e:96:75:df:68:f9:2d:0e:48:34:1b:1a: 9b:63:d5:9c:c9:e6:d9:33:2d:33:5c:b4:26:d7:b7: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CE:A3:19:FF:C0:CD:D2:3A:85:65:4C:63:17:F8:84:CB:F7:C8:94 X509v3 Authority Key Identifier: keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ae:1e:c0:4b:38:63:b8:c9:f5:5d:11:23:09:54:77:ba:83: b9:c2:9d:2b:ef:eb:86:1f:b3:94:15:29:4a:97:ab:30:66:5a: 3d:fe:52:61:9e:e6:ad:4f:e4:ea:10:da:d5:96:17:8e:4f:a4: 39:e8:8d:28:4f:67:a0:d7:4c:b8:ce:88:50:a6:2c:a4:0c:31: ef:72:e6:cc:5a:0f:17:a5:82:23:9d:f3:38:52:69:99:39:9a: 6e:90:63:d1:87:60:63:c5:44:40:5a:6c:65:15:74:99:cd:63: 31:c6:85:56:b8:22:a9:0a:2c:de:bb:3d:c0:88:84:3c:62:77: bf:db:48:a2:2d:c4:57:67:f7:41:84:48:ae:d3:06:45:ba:af: d9:d5:17:b0:30:1f:e7:4d:39:8e:b8:e7:2e:e3:fb:7b:f5:f5: 17:56:71:5e:27:eb:7a:cc:e4:66:83:e8:40:4d:63:6f:fb:20: ac:a9:fd:41:e8:14:65:45:c4:cd:c4:fb:83:10:7e:0c:4d:76: eb:c2:c8:b3:10:ca:0b:8b:ac:11:a8:04:b4:5d:c4:90:7a:d3: df:e7:25:bd:e9:13:67:36:de:ff:09:46:38:58:ea:62:f3:a4: f7:de:95:74:10:82:65:b9:c8:11:1a:d4:c8:f4:87:bd:f9:89: e1:e2:48:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1MTAxMTAvBgNVBAUTKEY2MUQ5QkEzMEFFMzU1QzgwM0Y4MERDQ0YyQzQxNURF MDA3RDc5NTMwHhcNMjUwNDA2MjAyMTQ2WhcNMjUwNDEzMjAyMTQ2WjAYMRYwFAYD VQQDEw02N2YyZTI1Yi1mZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCPFSUXnJ2ob+ajDPYqsvTCPiJunVe1fmpusmQiSwRHJXfcZkhBOG0q8+MHP 7/FW6DcyB7drBe7gYpGz6JUudeTV8JlyF0EJpvu/74yf5V/0n/yvoC+Jr0At5Fhy tAXQXqmhQnUWBlkUlm155H2LGy06z2BLV3xbW8yTfEonpDiByUvOtfNa2rlBDfH5 bsim0K3YAM4lq8qc+lb9H7KQY2aQLsz9MQmZuEGZVVmJOLDhvNyDUf2OslX6+pOT 9G2vriJHzJxWlRf/1jcd1D6Oq5j+PKjBwY9iRm8N+qgPzaAFIjdOlnXfaPktDkg0 GxqbY9WcyebZMy0zXLQm17d6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILOoxn/ wM3SOoVlTGMX+ITL98iUMB8GA1UdIwQYMBaAFPYdm6MK41XIA/gNzPLEFd4AfXlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzUxMC9FQzMxRTI1OEJE MTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZjZ0QtQTNNOHNRVjNnQjll Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloMmJvd3JqVmNnRC1BM004c1FWM2dCOWVWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzUxMC9FQzMxRTI1OEJEMTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZj Z0QtQTNNOHNRVjNnQjllVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOrh7ASzhjuMn1XREjCVR3uoO5wp0r7+uGH7OUFSlKl6swZlo9/lJh nuatT+TqENrVlheOT6Q56I0oT2eg10y4zohQpiykDDHvcubMWg8XpYIjnfM4UmmZ OZpukGPRh2BjxURAWmxlFXSZzWMxxoVWuCKpCizeuz3AiIQ8Yne/20iiLcRXZ/dB hEiu0wZFuq/Z1RewMB/nTTmOuOcu4/t79fUXVnFeJ+t6zORmg+hATWNv+yCsqf1B 6BRlRcTNxPuDEH4MTXbrwsizEMoLi6wRqAS0XcSQetPf5yW96RNnNt7/CUY4WOpi 86T33pV0EIJlucgRGtTI9Ie9+Ynh4khq -----END CERTIFICATE-----Generated at Mon Apr 7 07:43:06 2025 by rpki-client