$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: 6kJOy3wG/WmdGJljc6sFbbTQBHvPZWE1LYtwwBF5T4g= Subject key identifier: 03:55:71:D1:F7:AC:74:5A:8D:21:A6:DF:7F:EF:E9:A7:6E:CF:10:5B Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 348F Signing time: Fri 30 May 2025 14:51:37 +0000 Manifest this update: Fri 30 May 2025 14:51:36 +0000 Manifest next update: Fri 06 Jun 2025 14:51:36 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: zsb9BKevbVg8bUPmJ7DQakfaMCWeXyvX8WZocStP8Bw=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: t/NnMy3xpmssx9DBTqRefxAqemELZw1L5Qwj8l5jaiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: May 30 14:51:36 2025 GMT Not After : Jun 6 14:51:36 2025 GMT Subject: CN=6839c5f9-371f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:8c:97:2d:23:91:a0:cc:41:4e:12:1d:18: 38:68:6b:ea:8d:b1:27:5c:44:9b:b6:e9:1c:f4:96: d7:48:a1:8f:05:b1:ef:57:c8:d2:fb:35:98:5f:18: d8:cb:28:86:82:63:23:12:cd:7e:5a:68:18:0f:77: fb:28:dd:d6:47:1b:e5:fa:6d:11:75:88:61:ec:3e: 83:ed:62:e1:01:cc:26:1a:d9:e5:4e:81:d0:8e:50: 2e:d6:19:43:5f:6e:3f:bf:2b:29:a5:9d:2e:ea:a0: be:23:f8:c7:7a:13:10:4a:86:20:28:88:e8:87:71: c3:98:e2:4e:b9:04:7d:8a:1a:1f:6b:b2:a8:fd:6e: 9c:ea:82:d1:db:01:79:bc:92:3f:f1:6c:b1:b1:d9: dc:12:ca:78:26:e8:10:8a:a4:5d:95:2c:ea:7f:64: 2c:bb:c1:79:d1:c6:f3:49:14:ec:84:0c:fa:99:b3: 28:b9:ca:d8:ba:9c:12:6a:ce:65:93:7e:0c:ec:e4: 6b:29:91:8f:b5:fe:c6:70:f5:8a:cd:0a:16:bc:b5: b3:09:2d:6b:3c:4c:a0:bd:c8:53:89:75:34:b1:6f: 34:1c:00:4e:21:14:4a:5c:ac:5a:a1:90:37:af:f5: 93:da:7e:02:8f:15:28:90:72:4d:f9:06:10:bc:cb: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:55:71:D1:F7:AC:74:5A:8D:21:A6:DF:7F:EF:E9:A7:6E:CF:10:5B X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:db:67:91:3b:41:78:56:b4:21:ad:63:2b:74:bc:d4:6c:00: 29:04:e0:a4:70:41:c6:8e:79:8f:04:1b:2e:8b:ea:a0:19:4e: ee:2f:d8:b0:2b:02:c5:5b:92:fc:4d:01:2c:c8:cf:a8:c7:78: 69:b5:ce:53:3c:da:b9:db:aa:e2:18:b4:56:cc:b2:9e:cb:d2: 61:69:36:74:ad:03:6a:75:b2:40:b1:83:1e:31:5c:17:94:7e: 76:54:94:fd:24:4d:b9:4b:03:97:74:b5:12:ce:13:af:18:36: 62:8a:85:71:a8:7b:56:66:84:1c:90:9a:99:9d:8b:df:28:37: 99:1e:7d:be:ed:65:04:22:95:ea:7e:c9:c4:a2:90:f7:85:a9: 18:88:2d:9d:d1:df:05:aa:63:aa:99:4b:bc:f8:d9:85:1e:4c: c5:f7:dd:d2:f4:73:38:73:c5:75:82:a1:76:39:9d:de:4c:58: 79:98:c1:33:1c:e3:b3:fd:fb:71:a3:15:10:79:df:48:05:a9: 2d:e2:f6:28:b0:31:ec:8a:6f:25:53:a6:b8:aa:08:27:5d:7d: c7:97:b3:fe:a2:df:95:ca:53:0b:dd:b6:be:11:b7:00:79:3d: 01:30:2d:ba:cc:8e:db:a0:0f:db:e5:29:ef:61:b8:f8:8f:81: 20:57:46:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjUwNTMwMTQ1MTM2WhcNMjUwNjA2MTQ1MTM2WjAYMRYwFAYD VQQDEw02ODM5YzVmOS0zNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsumMly0jkaDMQU4SHRg4aGvqjbEnXESbtukc9JbXSKGPBbHvV8jS+zWYXxjY yyiGgmMjEs1+WmgYD3f7KN3WRxvl+m0RdYhh7D6D7WLhAcwmGtnlToHQjlAu1hlD X24/vysppZ0u6qC+I/jHehMQSoYgKIjoh3HDmOJOuQR9ihofa7Ko/W6c6oLR2wF5 vJI/8WyxsdncEsp4JugQiqRdlSzqf2Qsu8F50cbzSRTshAz6mbMoucrYupwSas5l k34M7ORrKZGPtf7GcPWKzQoWvLWzCS1rPEygvchTiXU0sW80HABOIRRKXKxaoZA3 r/WT2n4CjxUokHJN+QYQvMu16QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANVcdH3 rHRajSGm33/v6aduzxBbMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ22eRO0F4VrQhrWMrdLzUbAApBOCkcEHGjnmPBBsui+qgGU7uL9iw KwLFW5L8TQEsyM+ox3hptc5TPNq526riGLRWzLKey9JhaTZ0rQNqdbJAsYMeMVwX lH52VJT9JE25SwOXdLUSzhOvGDZiioVxqHtWZoQckJqZnYvfKDeZHn2+7WUEIpXq fsnEopD3hakYiC2d0d8FqmOqmUu8+NmFHkzF993S9HM4c8V1gqF2OZ3eTFh5mMEz HOOz/ftxoxUQed9IBakt4vYosDHsim8lU6a4qggnXX3Hl7P+ot+VylML3ba+EbcA eT0BMC26zI7boA/b5SnvYbj4j4EgV0YD -----END CERTIFICATE-----Generated at Sat May 31 17:13:03 2025 by rpki-client