$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: Nb24NI5eQkwWIb3EJ7UW34gYMSRGRXfj9malu2W7DWs= Subject key identifier: B7:64:89:50:15:47:B4:68:6A:39:05:F3:C0:D3:02:57:15:F5:E2:86 Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 0689 Signing time: Thu 24 Apr 2025 22:03:21 +0000 Manifest this update: Thu 24 Apr 2025 22:03:20 +0000 Manifest next update: Thu 01 May 2025 22:03:20 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: lNo20DsseB2dn5RBjCT1J2W25gGOKvSNAIvfoaGe5/Q=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: Apr 24 22:03:20 2025 GMT Not After : May 1 22:03:20 2025 GMT Subject: CN=680ab529-4fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:10:b7:2a:9e:4d:bc:c3:e6:af:04:88:59: 3c:3f:f7:c1:4e:b9:a5:6f:bf:69:6a:e1:2d:f0:d6: 01:e4:63:59:93:77:24:d2:e0:8f:84:41:78:67:66: 2f:6b:f2:9e:ee:63:d3:a5:be:85:de:19:15:e8:7b: 72:f3:01:f1:14:59:cd:cd:b4:f3:08:81:1b:d2:71: 38:66:6f:e7:67:73:a8:02:71:c8:17:36:5e:a9:9a: d5:e4:1e:79:cf:c7:56:5f:78:83:75:19:70:1c:0f: 45:ce:f3:2c:5f:27:cb:7d:66:73:c9:bc:05:c0:d9: be:b8:09:e3:af:87:ab:6b:e3:b8:24:63:e4:0d:06: f8:cf:7f:b5:30:4f:fd:e9:c6:8d:b8:ea:fb:b8:bc: c4:51:1e:fe:0a:1f:28:e9:7f:51:54:bd:88:d1:4f: 29:6a:39:3b:90:80:f2:55:65:13:7f:c0:78:3a:be: 97:ef:9b:01:bf:61:31:f9:76:a1:3d:75:78:ed:6f: e5:2a:7e:50:e0:07:27:cf:6f:99:41:97:04:14:04: da:61:a5:91:8f:ae:35:59:1e:c3:03:6c:9d:32:90: 3f:41:e7:89:be:62:5c:85:f4:55:bc:18:83:50:b0: 21:c0:49:c6:e1:48:dd:af:56:ad:c9:d6:8a:3e:14: 58:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:64:89:50:15:47:B4:68:6A:39:05:F3:C0:D3:02:57:15:F5:E2:86 X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7a:d0:fc:62:13:77:5f:0e:9b:8f:f3:cc:dc:db:bb:bc:62: de:c4:75:7f:8b:4f:11:eb:32:32:dc:07:68:ca:87:ce:84:fb: 87:ad:20:d3:f4:a1:57:b3:90:93:52:db:3a:db:09:dc:ab:13: 12:30:05:b6:f8:12:17:db:34:f2:1f:9e:bc:33:8f:4b:0f:3f: 0b:4c:51:24:0d:34:40:5b:cb:8c:c7:d3:5d:7d:2a:bb:d3:28: 68:91:d7:01:1f:2e:be:06:df:6e:96:49:e4:67:ed:53:aa:29: 9f:27:ee:09:54:8a:48:c5:d7:bb:60:94:47:e4:50:3a:a3:72: c0:8a:e9:74:1c:04:58:1e:70:c3:a0:fb:e5:b6:6d:33:2f:2e: 37:27:2b:c3:c3:04:46:8d:b7:49:ab:82:a5:5b:b9:ac:47:3c: d7:90:80:4d:e9:12:d8:3f:1a:00:cd:4d:5d:73:8e:6c:4f:3b: 96:ec:da:8a:e1:35:35:c8:7c:f2:04:be:e2:7b:db:50:f2:ed: 32:99:b8:69:26:a6:4e:3c:82:42:8c:f4:dd:1c:4a:45:85:5c: 10:23:46:c5:bf:af:77:3e:3f:39:a7:d7:9c:cd:ef:bb:d2:df: e4:85:9e:5f:83:04:f6:c6:13:66:a6:4a:99:01:9b:6d:7b:3d: 9b:3a:37:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUwNDI0MjIwMzIwWhcNMjUwNTAxMjIwMzIwWjAYMRYwFAYD VQQDEw02ODBhYjUyOS00ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGAQtyqeTbzD5q8EiFk8P/fBTrmlb79pauEt8NYB5GNZk3ck0uCPhEF4Z2Yv a/Ke7mPTpb6F3hkV6Hty8wHxFFnNzbTzCIEb0nE4Zm/nZ3OoAnHIFzZeqZrV5B55 z8dWX3iDdRlwHA9FzvMsXyfLfWZzybwFwNm+uAnjr4era+O4JGPkDQb4z3+1ME/9 6caNuOr7uLzEUR7+Ch8o6X9RVL2I0U8pajk7kIDyVWUTf8B4Or6X75sBv2Ex+Xah PXV47W/lKn5Q4Acnz2+ZQZcEFATaYaWRj641WR7DA2ydMpA/QeeJvmJchfRVvBiD ULAhwEnG4Ujdr1atydaKPhRYHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdkiVAV R7RoajkF88DTAlcV9eKGMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMetD8YhN3Xw6bj/PM3Nu7vGLexHV/i08R6zIy3AdoyofOhPuHrSDT 9KFXs5CTUts62wncqxMSMAW2+BIX2zTyH568M49LDz8LTFEkDTRAW8uMx9NdfSq7 0yhokdcBHy6+Bt9ulknkZ+1TqimfJ+4JVIpIxde7YJRH5FA6o3LAiul0HARYHnDD oPvltm0zLy43JyvDwwRGjbdJq4KlW7msRzzXkIBN6RLYPxoAzU1dc45sTzuW7NqK 4TU1yHzyBL7ie9tQ8u0ymbhpJqZOPIJCjPTdHEpFhVwQI0bFv693Pj85p9ecze+7 0t/khZ5fgwT2xhNmpkqZAZttez2bOjek -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:25 2025 by rpki-client