$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft File: 09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json) Hash identifier: 7R/1LTIpa5TPtAwE4Dgp30XTnVp9r5CxukEcIO3KK3A= Subject key identifier: 5D:1B:48:9B:D1:A7:76:45:70:6C:6A:E6:E7:2D:63:8A:33:C0:09:29 Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft Manifest number: 91 Signing time: Sat 31 May 2025 06:04:53 +0000 Manifest this update: Sat 31 May 2025 06:04:52 +0000 Manifest next update: Sat 07 Jun 2025 06:04:52 +0000 Files and hashes: 1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: ew1dlAHWDvbGh0NMhVmt67DjZQ/JCz9PhZMgY4Le1gc=) 2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: xlsUk+nBjbtHnwZ4MERgcwqdT/rxsOcTBiheef/VMVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Validity Not Before: May 31 06:04:52 2025 GMT Not After : Jun 7 06:04:52 2025 GMT Subject: CN=683a9c05-e090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:4d:4a:04:ff:c6:d5:fe:ee:05:e1:85:67: 05:01:a1:90:30:69:84:4f:40:68:4c:67:16:2a:83: 6c:74:f4:8c:b7:ee:1c:5f:bb:3b:28:d9:8d:3f:98: 04:b8:69:f4:ac:8b:28:ea:5e:5d:5c:b7:f2:5c:46: 78:be:52:f9:20:1d:c6:52:a0:b7:7d:cd:2d:7a:cd: ea:ff:e3:ef:1e:cd:1e:49:16:f7:9c:a3:66:68:26: 75:6a:ca:c5:71:d9:a8:3c:df:b9:5e:56:d5:0b:74: 82:68:2e:da:0b:72:e5:3e:24:a9:c5:35:f4:6d:ea: 41:71:7a:4b:c0:38:12:22:e7:66:d6:18:a3:c6:90: 6f:30:e3:ff:bc:0d:55:aa:64:ea:35:92:fd:dd:9b: c9:a1:09:2d:2e:85:03:7c:72:ad:f4:06:0a:39:18: bd:0a:a1:48:fb:8d:3d:d7:23:05:34:be:88:fb:ea: f2:be:07:9e:15:f4:76:f5:f1:66:6b:b4:77:a5:b9: 82:86:93:92:ec:e8:78:91:2f:f7:31:18:f5:4b:f1: 48:98:b2:30:d7:59:63:2a:ba:23:57:cb:b6:a4:1e: 76:80:3b:be:1a:5e:07:69:b1:eb:16:c6:65:d2:3d: 8a:ad:0a:78:4a:9e:9c:29:be:68:b2:d4:0c:c4:af: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1B:48:9B:D1:A7:76:45:70:6C:6A:E6:E7:2D:63:8A:33:C0:09:29 X509v3 Authority Key Identifier: keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:d3:4a:83:f9:0f:c5:c5:05:7d:9a:b3:26:d9:a7:d3:b4:b2: 45:6a:1a:62:90:72:69:b2:b7:72:9d:29:c3:e6:0e:09:94:19: b5:4f:31:78:22:20:5e:63:a7:f5:e5:fa:5b:2f:ab:bd:bb:cb: 86:58:98:9c:1f:75:15:60:b8:fe:88:b0:c5:03:dc:af:44:38: 37:b8:55:86:f5:72:cd:78:3d:b7:3d:52:4d:49:f1:9f:4e:a9: 20:e5:42:b0:9e:02:93:15:5b:b8:ca:80:bf:c9:9c:b8:02:8a: 99:21:2a:08:43:57:7b:14:fd:c7:aa:1b:b5:2d:2d:b5:ec:d8: 65:9e:8a:6f:83:7a:f8:81:9a:66:79:51:07:3a:45:f0:d9:c3: 76:90:af:b7:cc:12:94:32:7b:3b:b4:76:6a:38:b9:b7:45:ed: 95:5e:34:2e:39:da:a9:4f:24:3f:99:1d:57:f8:86:7b:0b:67: c5:9e:3b:e2:4d:06:0d:ac:3e:ee:b7:36:4c:42:2f:e9:ef:3d: df:48:cb:e8:69:63:a5:03:31:e2:c9:2f:a9:5b:a5:30:53:f9: e7:2e:05:d8:d0:83:4f:0f:c7:3c:c1:77:52:0a:13:78:07:e9: b2:9e:c8:6a:7b:07:2f:23:66:76:72:4e:44:32:be:a8:06:cb: fb:5e:92:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD OENDQzcwNDYwHhcNMjUwNTMxMDYwNDUyWhcNMjUwNjA3MDYwNDUyWjAYMRYwFAYD VQQDEw02ODNhOWMwNS1lMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeBNSgT/xtX+7gXhhWcFAaGQMGmET0BoTGcWKoNsdPSMt+4cX7s7KNmNP5gE uGn0rIso6l5dXLfyXEZ4vlL5IB3GUqC3fc0tes3q/+PvHs0eSRb3nKNmaCZ1asrF cdmoPN+5XlbVC3SCaC7aC3LlPiSpxTX0bepBcXpLwDgSIudm1hijxpBvMOP/vA1V qmTqNZL93ZvJoQktLoUDfHKt9AYKORi9CqFI+4091yMFNL6I++ryvgeeFfR29fFm a7R3pbmChpOS7Oh4kS/3MRj1S/FImLIw11ljKrojV8u2pB52gDu+Gl4HabHrFsZl 0j2KrQp4Sp6cKb5ostQMxK/CQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0bSJvR p3ZFcGxq5uctY4ozwAkpMB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5 MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q3NC8zNzhEOUEwQTY5MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXox MzRBRS1NWlpmN0xJek1jRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ00qD+Q/FxQV9mrMm2afTtLJFahpikHJpsrdynSnD5g4JlBm1TzF4 IiBeY6f15fpbL6u9u8uGWJicH3UVYLj+iLDFA9yvRDg3uFWG9XLNeD23PVJNSfGf Tqkg5UKwngKTFVu4yoC/yZy4AoqZISoIQ1d7FP3Hqhu1LS217Nhlnopvg3r4gZpm eVEHOkXw2cN2kK+3zBKUMns7tHZqOLm3Re2VXjQuOdqpTyQ/mR1X+IZ7C2fFnjvi TQYNrD7utzZMQi/p7z3fSMvoaWOlAzHiyS+pW6UwU/nnLgXY0INPD8c8wXdSChN4 B+mynshqewcvI2Z2ck5EMr6oBsv7XpL+ -----END CERTIFICATE-----Generated at Sat May 31 17:37:43 2025 by rpki-client