$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: Nt5GgdlTNlxwjbuNxxeQS7QiW7CMz/WFqWcrsAo9QM4= Subject key identifier: 55:00:13:29:3B:16:D8:14:55:82:74:66:89:7B:D1:47:18:16:23:2B Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: 2D Signing time: Fri 25 Apr 2025 06:41:19 +0000 Manifest this update: Fri 25 Apr 2025 06:41:18 +0000 Manifest next update: Fri 02 May 2025 06:41:18 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: 4rmM5+Ch5EXWsmLRzdy/YE5DaeF3L07pnrcjPw5Alx0=) 2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: mx4Ct5Tnd5YkFq5qkT60Yq1dgh6KZfYC5nrKRxnyy28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Apr 25 06:41:18 2025 GMT Not After : May 2 06:41:18 2025 GMT Subject: CN=680b2e8e-6547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:d8:16:fd:b5:6a:42:c7:3b:d9:45:ab:89: 6e:63:60:36:2e:41:f4:cb:9b:eb:13:af:6b:04:1b: ca:d2:2b:8a:ce:b4:8b:32:1d:e1:7c:46:a4:59:4b: 20:7f:cb:44:2e:fa:b3:dd:07:01:8d:8a:f1:5e:8b: e1:8a:e3:47:f0:aa:71:95:82:10:46:db:7d:db:09: be:d0:c2:97:d5:c6:ef:b6:34:89:30:22:a2:5a:69: 82:30:13:9c:81:da:6f:61:b7:00:1b:c6:63:9b:34: c3:cf:14:06:ce:0e:22:4b:67:6f:93:35:5d:3b:6f: b8:20:25:6e:ac:98:82:6d:7b:37:d8:93:44:f0:35: 7b:0b:ee:c8:e2:11:df:a1:05:6e:b9:75:4b:e8:6a: 9a:d7:55:33:05:ca:62:94:cd:86:df:01:92:f7:f2: 09:c1:78:c5:df:ee:54:b6:44:88:85:b9:23:a1:79: a8:11:4c:69:a8:e1:c5:9e:df:9c:c4:d0:64:9d:9a: 86:d7:d6:c3:74:25:d4:76:1b:72:bd:5b:74:64:f4: 96:fa:26:ea:50:50:65:cf:93:27:69:b7:80:cb:24: 73:51:42:51:34:2b:c7:ab:93:48:62:cc:e6:6c:0d: 92:f3:bf:8b:a3:43:56:3b:56:8c:ed:08:dc:67:e7: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:00:13:29:3B:16:D8:14:55:82:74:66:89:7B:D1:47:18:16:23:2B X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:af:15:2c:2c:2b:8f:38:0e:7d:f7:6b:cf:96:33:8b:bd:76: 48:0f:f3:f5:89:b5:18:db:b5:ab:d7:8e:41:b6:d3:61:69:51: 06:aa:70:db:a5:82:69:0f:99:6e:34:8c:d8:46:3d:36:fc:cb: 3a:4c:a6:f7:24:e2:46:9c:6e:1a:ea:92:25:aa:31:66:0a:09: 4a:ef:46:99:e9:c5:bd:23:d0:57:92:96:93:21:0f:25:88:00: c3:de:25:6c:d3:6c:87:d9:bb:e7:c8:cf:6c:d9:80:7d:b5:57: 73:fb:e0:41:68:33:9d:96:b1:9f:8b:93:29:10:57:1d:d3:87: 79:07:e2:c4:19:c6:6e:9e:ba:df:3b:68:09:57:c1:7a:37:af: 59:49:b8:00:94:f0:95:d0:1e:f9:de:4e:88:5a:76:2f:de:0e: c1:65:8b:1d:21:47:99:9b:eb:13:77:ae:71:00:32:17:e5:6e: 50:12:05:ff:d8:c4:63:08:7d:32:74:1a:2e:8d:30:b2:84:b3: 72:e5:f4:e2:82:86:a5:67:9c:d7:01:3d:bd:c2:cb:c5:05:e9: 64:c9:63:56:a9:68:89:b8:4a:c9:70:41:e3:cc:e9:03:ac:fe: a2:96:0f:fa:63:5a:88:5c:1e:0a:c3:62:cb:bb:5a:ab:da:64: b4:63:28:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDlGNTExMC8GA1UEBRMoRjEyODk1NzkyMTE3RTkwNzAzQTAwMjBGNEYzNTk4MzFE QjJGOTM3QTAeFw0yNTA0MjUwNjQxMThaFw0yNTA1MDIwNjQxMThaMBgxFjAUBgNV BAMTDTY4MGIyZThlLTY1NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrmNgW/bVqQsc72UWriW5jYDYuQfTLm+sTr2sEG8rSK4rOtIsyHeF8RqRZSyB/ y0Qu+rPdBwGNivFei+GK40fwqnGVghBG233bCb7QwpfVxu+2NIkwIqJaaYIwE5yB 2m9htwAbxmObNMPPFAbODiJLZ2+TNV07b7ggJW6smIJtezfYk0TwNXsL7sjiEd+h BW65dUvoaprXVTMFymKUzYbfAZL38gnBeMXf7lS2RIiFuSOheagRTGmo4cWe35zE 0GSdmobX1sN0JdR2G3K9W3Rk9Jb6JupQUGXPkydpt4DLJHNRQlE0K8erk0hizOZs DZLzv4ujQ1Y7VoztCNxn5yGLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVQATKTsW 2BRVgnRmiXvRRxgWIyswHwYDVR0jBBgwFoAU8SiVeSEX6QcDoAIPTzWYMdsvk3ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOUY1LzMyODNFN0Q0REZE QTExRUY4QjQ3ODYyNEM0RjlBRTAyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmsz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFNpVmVTRVg2UWNEb0FJUFR6V1lNZHN2azNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OUY1LzMyODNFN0Q0REZEQTExRUY4QjQ3ODYyNEM0RjlBRTAyLzhTaVZlU0VYNlFj RG9BSVBUeldZTWRzdmszby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADevFSwsK484Dn33a8+WM4u9dkgP8/WJtRjbtavXjkG202FpUQaqcNul gmkPmW40jNhGPTb8yzpMpvck4kacbhrqkiWqMWYKCUrvRpnpxb0j0FeSlpMhDyWI AMPeJWzTbIfZu+fIz2zZgH21V3P74EFoM52WsZ+LkykQVx3Th3kH4sQZxm6eut87 aAlXwXo3r1lJuACU8JXQHvneTohadi/eDsFlix0hR5mb6xN3rnEAMhflblASBf/Y xGMIfTJ0Gi6NMLKEs3Ll9OKChqVnnNcBPb3Cy8UF6WTJY1apaIm4SslwQePM6QOs /qKWD/pjWohcHgrDYsu7WqvaZLRjKH8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:13 2025 by rpki-client