$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json) Hash identifier: 75AlIihyPLV/Xl47qMo12T6PojQfgia1P7fDB5KUjVA= Subject key identifier: 82:E2:DF:D4:F8:CB:E7:90:F7:D4:0E:25:60:26:D5:00:0E:1D:63:C4 Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft Manifest number: 0323 Signing time: Sat 31 May 2025 01:20:07 +0000 Manifest this update: Sat 31 May 2025 01:20:07 +0000 Manifest next update: Sat 07 Jun 2025 01:20:07 +0000 Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: sEpBnJfLFlhKZFXEUpnSojsEIwHLYS1tXAhBoWHxHqg=) 2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: C1ezUxuL3ClkX3BgQjjS1dTVihRitOogxbbsy9SR+JY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Validity Not Before: May 31 01:20:07 2025 GMT Not After : Jun 7 01:20:07 2025 GMT Subject: CN=683a5947-9cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:00:a2:6a:06:79:75:a6:81:9a:22:8c:77: aa:44:70:7d:e4:0f:ef:b8:4a:45:30:64:7e:da:a2: 16:fc:f3:88:7b:88:b1:2c:65:b6:9b:a9:68:61:08: 50:02:98:e6:0a:26:52:32:c2:18:d0:1a:97:a5:1b: d6:2b:3a:2f:b3:c7:31:d7:7c:22:07:80:54:2b:58: 30:6a:c7:71:5d:db:ad:60:15:c0:db:59:de:b5:60: 2f:c4:04:7a:8d:43:cf:97:c2:d9:b6:66:44:3e:9c: 37:1b:e2:2c:82:4d:5d:b6:ea:39:95:ec:ea:82:32: 79:77:d7:3d:7a:83:e4:02:e5:2a:97:f5:74:85:5c: 61:0a:a5:16:72:10:bf:96:1d:c2:54:03:5f:37:48: a9:44:21:1f:58:c2:07:f0:74:ae:36:b6:60:3f:8f: 90:e8:f8:a3:54:7e:b9:00:86:4e:60:ec:52:ff:e7: 7c:3a:2f:45:08:19:e6:d4:2c:32:1c:40:d9:24:8d: 00:4e:61:88:b9:eb:b3:1f:b4:bd:6c:df:c3:d3:71: 95:74:1a:a8:62:48:3d:ae:f8:1a:06:68:06:67:54: 72:e5:94:ee:fa:94:d9:0e:1d:90:ee:3a:ee:69:f3: d3:6f:d6:7a:f3:34:c8:4e:a1:d1:bd:de:d8:3a:87: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E2:DF:D4:F8:CB:E7:90:F7:D4:0E:25:60:26:D5:00:0E:1D:63:C4 X509v3 Authority Key Identifier: keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:14:f2:68:25:da:fa:f7:ed:cc:1e:dc:db:d6:4e:c0:13:e8: ac:4d:4f:ea:b0:3d:f0:58:df:ff:1b:b9:32:58:c5:a4:c1:92: 97:05:02:23:37:66:6a:55:04:58:59:53:c0:81:23:5a:85:da: 0e:ed:91:41:cb:22:c4:2b:fa:f1:c7:fe:62:6c:89:04:10:ff: 7d:f7:69:e6:8d:60:29:74:a2:bf:63:26:e2:94:0a:2d:c5:9f: 58:eb:90:fc:45:c5:f1:56:9e:98:8e:b5:43:a7:79:ec:95:ef: 69:32:94:21:d9:72:10:27:c4:30:45:7c:9e:f9:18:94:76:07: e0:d2:01:2a:c1:11:2a:df:2e:fd:c6:b2:6b:c3:a9:b4:fe:31: 76:a5:02:24:81:2b:88:f8:b5:87:e1:52:f2:ab:5b:17:e6:73: 95:5f:06:41:9d:47:64:f8:33:da:5d:b1:6d:93:88:d4:d4:7d: 9f:1b:ea:c1:32:1b:a4:2f:1e:10:b9:ef:89:b9:9e:29:12:c9: 4a:ce:65:1c:a1:46:81:16:2a:50:9f:27:87:ed:ad:b9:cb:f1: 16:00:24:8d:e3:62:f2:03:f4:54:bb:83:1a:67:ff:95:12:2f: e8:72:11:fb:ae:1a:cd:e7:27:6d:f9:5b:af:ca:a2:35:1a:cd: 4e:97:90:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy MUYwQTUxMzUwHhcNMjUwNTMxMDEyMDA3WhcNMjUwNjA3MDEyMDA3WjAYMRYwFAYD VQQDEw02ODNhNTk0Ny05Y2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj4AomoGeXWmgZoijHeqRHB95A/vuEpFMGR+2qIW/POIe4ixLGW2m6loYQhQ ApjmCiZSMsIY0BqXpRvWKzovs8cx13wiB4BUK1gwasdxXdutYBXA21netWAvxAR6 jUPPl8LZtmZEPpw3G+Isgk1dtuo5lezqgjJ5d9c9eoPkAuUql/V0hVxhCqUWchC/ lh3CVANfN0ipRCEfWMIH8HSuNrZgP4+Q6PijVH65AIZOYOxS/+d8Oi9FCBnm1Cwy HEDZJI0ATmGIueuzH7S9bN/D03GVdBqoYkg9rvgaBmgGZ1Ry5ZTu+pTZDh2Q7jru afPTb9Z68zTITqHRvd7YOocOLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILi39T4 y+eQ99QOJWAm1QAOHWPEMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP UndMZktmSFUzUFVoOEtVVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiFPJoJdr69+3MHtzb1k7AE+isTU/qsD3wWN//G7kyWMWkwZKXBQIj N2ZqVQRYWVPAgSNahdoO7ZFByyLEK/rxx/5ibIkEEP9992nmjWApdKK/YybilAot xZ9Y65D8RcXxVp6YjrVDp3nsle9pMpQh2XIQJ8QwRXye+RiUdgfg0gEqwREq3y79 xrJrw6m0/jF2pQIkgSuI+LWH4VLyq1sX5nOVXwZBnUdk+DPaXbFtk4jU1H2fG+rB MhukLx4Que+JuZ4pEslKzmUcoUaBFipQnyeH7a25y/EWACSN42LyA/RUu4MaZ/+V Ei/ochH7rhrN5ydt+VuvyqI1Gs1Ol5BC -----END CERTIFICATE-----Generated at Sat May 31 17:20:31 2025 by rpki-client