$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: jgvS0qEknri2wVfmG1/Ff7vBLTJvjT31k9HFfKeY0PE= Subject key identifier: 45:CC:CE:1C:FA:AB:4F:8F:04:0F:18:A1:77:33:98:E9:14:4F:DE:52 Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0C93 Signing time: Fri 30 May 2025 18:24:50 +0000 Manifest this update: Fri 30 May 2025 18:24:50 +0000 Manifest next update: Fri 06 Jun 2025 18:24:50 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: R56Nyc16Dh8KMHvEnuI0NBDFRdANvFz4L9Swap6vdJ8=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: May 30 18:24:50 2025 GMT Not After : Jun 6 18:24:50 2025 GMT Subject: CN=6839f7f2-4f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:67:8a:d2:12:23:f8:18:f4:3a:72:3c:49: 8e:9b:ea:89:7b:73:0e:cd:ac:af:2e:dc:25:12:fd: 0a:b7:dc:82:54:fe:b7:06:89:1a:b9:ee:21:e8:ea: e3:5e:bf:e7:af:f3:77:6b:bc:35:dd:0e:67:99:3a: 11:67:d5:6f:d9:ae:8f:de:a1:1c:2d:b6:8e:d1:57: de:d0:83:6f:34:7f:0d:65:96:e0:4e:f7:15:3e:05: 21:f7:2f:7e:dc:b2:43:de:cc:8d:89:a0:08:c5:08: 7c:50:55:59:2d:11:1d:39:25:4a:36:01:e2:f3:48: a1:42:0b:b3:a8:ce:77:10:20:7c:6a:22:d7:14:62: 83:52:41:8a:f4:51:12:1b:f2:6b:d9:2c:de:5a:ab: 4b:7e:86:a4:75:e0:42:6c:99:3d:1c:88:9f:f3:1d: 50:30:bc:e9:5f:b0:80:62:e6:06:99:86:3f:e9:40: 59:87:9e:c0:3e:b7:77:12:f8:4f:ed:1e:90:32:94: ca:0e:e5:1b:24:21:35:e6:f2:1a:d0:dc:31:ef:2d: a7:06:ef:41:ad:55:24:22:24:09:65:89:7f:ed:9b: 21:f1:55:3e:59:6f:11:7f:da:fe:a6:b7:68:29:78: 84:1f:c0:6b:83:7b:3c:f4:04:6a:33:55:cb:ae:3d: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CC:CE:1C:FA:AB:4F:8F:04:0F:18:A1:77:33:98:E9:14:4F:DE:52 X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fd:5c:ef:bf:56:2e:18:c5:00:c7:41:48:cc:79:7c:7c:85: 11:8c:5e:aa:4d:85:f7:61:7b:30:ee:f3:39:d6:20:30:3a:bf: 32:6e:18:81:19:df:7c:1f:08:2b:9a:68:f4:cd:2a:e3:48:5c: 51:ac:31:20:fd:16:b8:ac:58:73:13:8b:2a:6e:b4:86:2d:3b: 9b:75:07:09:fd:fe:8e:c5:9d:a4:75:5e:8c:6a:e4:8c:95:fb: 34:f4:2b:7d:b5:d9:a4:ac:be:e0:72:f7:68:3a:6a:da:fa:90: 03:2f:95:0e:0f:cf:09:9f:2d:26:15:7a:e4:6d:41:94:5f:2c: 96:3f:7e:b5:55:10:91:f3:ec:d2:77:3a:45:f2:50:e2:ff:ad: de:05:39:ca:8b:f8:2e:3a:8e:c1:d3:6e:e0:4a:e3:0b:00:70: 47:29:14:dd:4f:e6:cf:de:21:e4:db:3e:88:80:fb:1c:d2:dd: 28:3e:e3:c6:1b:4a:41:78:26:75:22:bc:a2:0a:07:f1:e7:ca: be:2f:cd:18:67:5f:0f:1c:80:54:94:a4:c9:d1:3c:02:e7:00: aa:13:8d:84:60:cf:35:0b:64:b0:95:ae:8f:66:52:20:e7:b4: 27:31:8f:9b:d7:35:1b:b4:1a:6e:13:4f:71:22:d6:4b:d5:93: 0b:7f:5c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjUwNTMwMTgyNDUwWhcNMjUwNjA2MTgyNDUwWjAYMRYwFAYD VQQDEw02ODM5ZjdmMi00Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApClnitISI/gY9DpyPEmOm+qJe3MOzayvLtwlEv0Kt9yCVP63Bokaue4h6Orj Xr/nr/N3a7w13Q5nmToRZ9Vv2a6P3qEcLbaO0Vfe0INvNH8NZZbgTvcVPgUh9y9+ 3LJD3syNiaAIxQh8UFVZLREdOSVKNgHi80ihQguzqM53ECB8aiLXFGKDUkGK9FES G/Jr2SzeWqtLfoakdeBCbJk9HIif8x1QMLzpX7CAYuYGmYY/6UBZh57APrd3EvhP 7R6QMpTKDuUbJCE15vIa0Nwx7y2nBu9BrVUkIiQJZYl/7Zsh8VU+WW8Rf9r+prdo KXiEH8Brg3s89ARqM1XLrj0u/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXMzhz6 q0+PBA8YoXczmOkUT95SMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB/Vzvv1YuGMUAx0FIzHl8fIURjF6qTYX3YXsw7vM51iAwOr8ybhiB Gd98Hwgrmmj0zSrjSFxRrDEg/Ra4rFhzE4sqbrSGLTubdQcJ/f6OxZ2kdV6MauSM lfs09Ct9tdmkrL7gcvdoOmra+pADL5UOD88Jny0mFXrkbUGUXyyWP361VRCR8+zS dzpF8lDi/63eBTnKi/guOo7B027gSuMLAHBHKRTdT+bP3iHk2z6IgPsc0t0oPuPG G0pBeCZ1IryiCgfx58q+L80YZ18PHIBUlKTJ0TwC5wCqE42EYM81C2Swla6PZlIg 57QnMY+b1zUbtBpuE09xItZL1ZMLf1wp -----END CERTIFICATE-----Generated at Sat May 31 17:27:49 2025 by rpki-client