$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft File: 9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json) Hash identifier: QDYkqNOqPQ9PJGg4mnGIDfCnI/b2kuR9TsGQiuv1b3o= Subject key identifier: 85:83:34:2E:9C:2C:95:5D:92:14:98:96:C8:FA:11:FC:AC:15:69:97 Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F Certificate issuer: /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft Manifest number: 03F7 Signing time: Sat 31 May 2025 00:39:41 +0000 Manifest this update: Sat 31 May 2025 00:39:41 +0000 Manifest next update: Sat 07 Jun 2025 00:39:41 +0000 Files and hashes: 1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: ysI3EGwI0X2/J87RyLRZbsuVInhRPU7tBgUMYALd57Q=) 2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: +nAeLjb+TBEYVVPImLnPfEQNMqbzuQHLMiBByx+ZAiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F Validity Not Before: May 31 00:39:41 2025 GMT Not After : Jun 7 00:39:41 2025 GMT Subject: CN=683a4fcd-7357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:47:c8:07:5c:30:15:f0:d4:08:b0:b4:a9: 87:2d:49:08:5d:2f:8e:e6:ea:d6:b6:0c:ca:7e:01: e8:f4:5f:1a:f2:66:a1:c3:77:68:26:5a:47:fc:1d: aa:03:94:13:1f:08:db:f8:cf:9c:b1:0a:03:61:98: 7b:65:ad:2c:38:4f:66:34:ee:54:b2:40:0e:6d:7a: f0:85:3b:77:9b:1e:03:43:17:4b:b1:00:4a:66:9f: 6c:c9:11:76:b8:25:da:64:7d:90:75:50:05:22:8d: 61:83:9d:b0:db:78:50:5f:49:29:9c:6e:50:bd:46: 34:29:b0:23:b2:2f:25:4a:21:b7:2e:02:14:78:7d: a8:3b:a6:a1:80:77:d9:b6:aa:3e:f6:6b:bc:37:57: ca:e1:6d:bc:68:df:0c:e6:a6:60:e0:b1:11:c4:15: ce:12:70:00:5a:0a:12:8b:1e:52:9d:38:a5:88:5b: 92:fd:59:14:d1:c3:5e:f7:60:c8:ab:2a:8e:ad:e4: 37:0b:82:46:9e:07:c2:eb:61:4e:43:b6:d7:48:b3: ed:c2:9e:f7:31:87:24:02:ab:61:e8:2a:cd:49:5b: 51:36:07:2d:68:d5:f7:3e:f6:43:3d:c6:b1:f2:e1: 04:07:e7:cc:1f:be:f0:58:42:f6:7a:93:b9:9a:2c: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:83:34:2E:9C:2C:95:5D:92:14:98:96:C8:FA:11:FC:AC:15:69:97 X509v3 Authority Key Identifier: keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:51:dd:f3:8d:6f:02:36:22:0b:ae:50:f5:b2:04:c4:5c:bc: 7e:6c:a0:d9:cd:2d:06:21:85:76:89:23:d1:6b:cb:f8:05:4d: 14:9c:c7:62:10:8c:bb:68:b3:50:5c:01:bb:80:d4:e3:c8:48: 46:6c:e2:fc:7d:34:cf:a0:f8:41:c0:6f:ea:a1:8a:4d:a3:1a: 3f:be:ab:b7:74:c7:89:56:84:2d:d3:a2:56:9e:c6:81:7b:45: 77:8c:d0:2d:0e:71:d8:9c:65:ba:eb:58:89:2c:2c:4a:83:8a: b5:74:77:78:23:d8:42:3d:b3:41:b4:2c:8a:f7:50:7d:75:ce: bf:17:84:44:2f:0c:ff:1f:84:6e:41:5f:71:04:f4:8c:97:48: 4f:51:f6:8a:6a:40:1c:e9:dd:79:a2:76:e9:8e:4c:5c:9f:91: 03:59:08:6c:04:24:54:87:0c:59:70:5b:c2:91:bd:50:56:66: 87:20:a3:31:c6:ea:35:b7:c3:90:fb:7d:06:bb:fb:42:7e:84: eb:6e:b5:a3:1a:c2:59:e7:4f:e1:fa:b4:2a:69:b9:6a:c6:d4: 13:c4:d4:92:4b:c9:27:d6:97:f6:60:0d:49:a5:1c:e5:47:ba: 41:ea:08:f2:9c:af:65:98:5e:81:70:59:c3:75:8a:e3:ad:87: 18:e5:74:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCODExMTAvBgNVBAUTKEY0MTU3Rjc0NEM0MjEwQzNGRjQ2QUFGMEUwMjJERUU2 ODlGNDZFM0YwHhcNMjUwNTMxMDAzOTQxWhcNMjUwNjA3MDAzOTQxWjAYMRYwFAYD VQQDEw02ODNhNGZjZC03MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypJHyAdcMBXw1AiwtKmHLUkIXS+O5urWtgzKfgHo9F8a8mahw3doJlpH/B2q A5QTHwjb+M+csQoDYZh7Za0sOE9mNO5UskAObXrwhTt3mx4DQxdLsQBKZp9syRF2 uCXaZH2QdVAFIo1hg52w23hQX0kpnG5QvUY0KbAjsi8lSiG3LgIUeH2oO6ahgHfZ tqo+9mu8N1fK4W28aN8M5qZg4LERxBXOEnAAWgoSix5SnTiliFuS/VkU0cNe92DI qyqOreQ3C4JGngfC62FOQ7bXSLPtwp73MYckAqth6CrNSVtRNgctaNX3PvZDPcax 8uEEB+fMH77wWEL2epO5mizZ5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWDNC6c LJVdkhSYlsj6EfysFWmXMB8GA1UdIwQYMBaAFPQVf3RMQhDD/0aq8OAi3uaJ9G4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0I4MS80OUM4OTI1RTc3 MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VNUF9ScXJ3NENMZTVvbjBi ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCVl9kRXhDRU1QX1Jxcnc0Q0xlNW9uMGJqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0I4MS80OUM4OTI1RTc3MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VN UF9ScXJ3NENMZTVvbjBiajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJUd3zjW8CNiILrlD1sgTEXLx+bKDZzS0GIYV2iSPRa8v4BU0UnMdi EIy7aLNQXAG7gNTjyEhGbOL8fTTPoPhBwG/qoYpNoxo/vqu3dMeJVoQt06JWnsaB e0V3jNAtDnHYnGW661iJLCxKg4q1dHd4I9hCPbNBtCyK91B9dc6/F4RELwz/H4Ru QV9xBPSMl0hPUfaKakAc6d15onbpjkxcn5EDWQhsBCRUhwxZcFvCkb1QVmaHIKMx xuo1t8OQ+30Gu/tCfoTrbrWjGsJZ50/h+rQqablqxtQTxNSSS8kn1pf2YA1JpRzl R7pB6gjynK9lmF6BcFnDdYrjrYcY5XQq -----END CERTIFICATE-----Generated at Sat May 31 17:44:05 2025 by rpki-client