$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json) Hash identifier: nzfZA+J8dSZXkil3fhIK93SeWmYzUmJixhgMaFrudIU= Subject key identifier: 10:3B:BF:1A:FC:26:50:3A:AC:54:57:82:AF:74:F4:F0:08:10:9E:06 Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft Manifest number: 09 Signing time: Thu 13 Mar 2025 06:18:30 +0000 Manifest this update: Thu 13 Mar 2025 06:18:29 +0000 Manifest next update: Thu 20 Mar 2025 06:18:29 +0000 Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: tbaiSpUeGePaWDMglNy/QR6VbMvNvaDqvYS8w1kNpSw=) 2: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=) 3: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 06:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C Validity Not Before: Mar 13 06:18:29 2025 GMT Not After : Mar 20 06:18:29 2025 GMT Subject: CN=67d278b5-28a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:90:cc:9e:1a:e8:2b:cf:72:5c:d6:9a:08:7d: d1:b6:b7:80:74:a3:cd:10:4c:64:4c:05:ae:93:0a: a1:18:e7:9e:9b:12:61:c7:16:2b:78:e4:d7:f9:27: 5f:d5:49:2a:2a:97:3f:f7:ea:e2:2c:d8:10:2c:1e: 7a:a7:81:21:23:57:ed:39:79:7e:bd:56:8b:d8:11: b5:4b:4f:d4:c4:a7:6d:75:0a:c2:ce:ce:47:45:93: 2e:04:6b:df:b8:f4:59:aa:3d:27:5b:27:70:7a:c9: 56:69:55:9d:f8:73:c0:ad:e4:d0:fb:b3:54:16:d5: 25:5c:48:7e:06:2e:58:04:cd:34:95:13:e8:6c:8b: ef:ef:1f:87:c3:cc:96:79:2b:2e:9d:6c:d4:c5:12: 78:08:a2:d0:b1:44:2f:a1:37:60:97:9c:5a:cb:ad: 0a:8f:d4:22:0c:37:fe:d5:05:ee:3f:31:33:d9:41: eb:89:d5:1e:e6:69:90:af:64:1c:14:f1:fc:d4:c3: 2c:1c:53:78:13:a2:40:57:87:87:6d:d6:a4:eb:0a: 2a:a9:0c:fc:ec:03:5f:bd:74:ef:9f:c6:0e:8b:58: d5:73:19:10:d8:3c:82:81:93:8d:3f:15:18:ad:8f: 17:2a:ac:05:65:08:fa:2f:ca:db:5a:9d:26:fe:eb: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3B:BF:1A:FC:26:50:3A:AC:54:57:82:AF:74:F4:F0:08:10:9E:06 X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0b:41:e2:83:e3:fc:b1:3b:56:59:61:14:83:a5:f0:cd:d7: 21:6f:2f:dc:00:7b:95:55:fd:5e:49:1a:e5:40:86:34:7b:9f: 45:d6:e0:06:75:42:04:26:41:91:0a:36:a5:81:d9:ab:7c:38: 8d:fe:c3:49:bc:e4:25:1f:09:a1:d5:ac:2b:cc:c9:ec:94:02: b6:38:ef:0e:91:2c:04:2a:d7:0f:e8:ec:fa:cf:4b:0b:b3:2c: bc:24:ca:db:a7:72:5a:81:8f:87:60:61:bc:ab:ed:39:f1:fc: 9f:30:ad:6b:24:da:63:94:2e:92:e6:f6:0c:ed:99:21:b4:4b: d7:1a:0d:8d:a5:fa:76:8c:54:69:ae:4f:a7:9c:9e:01:f2:89: 17:d1:55:19:6d:fe:0d:66:40:a4:11:f3:02:4e:ff:bd:ae:d6: 8e:ff:a3:41:45:66:c3:c6:60:43:43:c8:a4:b3:38:76:87:94: 9e:15:ff:64:f1:eb:42:e0:01:a9:99:80:03:ef:c9:80:56:4b: 5b:0b:f8:8d:c1:72:33:e7:38:a4:26:54:01:8e:c3:6a:b4:8e: 44:e5:89:6e:93:74:e9:66:63:48:c4:51:a2:cc:70:94:2d:12: c4:6a:3e:98:ba:20:f7:b4:c4:e7:e9:5d:5c:a2:37:c4:e8:35: ef:56:86:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTgwQzExMC8GA1UEBRMoMzEyNDQwMjAxQjJFRjc0QjdDQUM2QzMxRkI4NUY0MUU5 QzQ2ODZBMDAeFw0yNTAzMTMwNjE4MjlaFw0yNTAzMjAwNjE4MjlaMBgxFjAUBgNV BAMTDTY3ZDI3OGI1LTI4YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtkMyeGugrz3Jc1poIfdG2t4B0o80QTGRMBa6TCqEY556bEmHHFit45Nf5J1/V SSoqlz/36uIs2BAsHnqngSEjV+05eX69VovYEbVLT9TEp211CsLOzkdFky4Ea9+4 9FmqPSdbJ3B6yVZpVZ34c8Ct5ND7s1QW1SVcSH4GLlgEzTSVE+hsi+/vH4fDzJZ5 Ky6dbNTFEngIotCxRC+hN2CXnFrLrQqP1CIMN/7VBe4/MTPZQeuJ1R7maZCvZBwU 8fzUwywcU3gTokBXh4dt1qTrCiqpDPzsA1+9dO+fxg6LWNVzGRDYPIKBk40/FRit jxcqrAVlCPovyttanSb+6wEbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEDu/Gvwm UDqsVFeCr3T08AgQngYwHwYDVR0jBBgwFoAUMSRAIBsu90t8rGwx+4X0HpxGhqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODBDL0RFOThFQUYwRkI2 NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVNSQUlCc3U5MHQ4ckd3eC00WDBIcHhHaHFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB ODBDL0RFOThFQUYwRkI2NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0 OHJHd3gtNFgwSHB4R2hxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA0LQeKD4/yxO1ZZYRSDpfDN1yFvL9wAe5VV/V5JGuVAhjR7n0XW4AZ1 QgQmQZEKNqWB2at8OI3+w0m85CUfCaHVrCvMyeyUArY47w6RLAQq1w/o7PrPSwuz LLwkytunclqBj4dgYbyr7Tnx/J8wrWsk2mOULpLm9gztmSG0S9caDY2l+naMVGmu T6ecngHyiRfRVRlt/g1mQKQR8wJO/72u1o7/o0FFZsPGYENDyKSzOHaHlJ4V/2Tx 60LgAamZgAPvyYBWS1sL+I3BcjPnOKQmVAGOw2q0jkTliW6TdOlmY0jEUaLMcJQt EsRqPpi6IPe0xOfpXVyiN8ToNe9WhgU= -----END CERTIFICATE-----Generated at Fri Mar 14 12:13:32 2025 by rpki-client