$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft File: 8bt55W0rCYaSzH0fIm91bHlh4Zs.mft (raw, json) Hash identifier: S262QqKf+Oaoj8jVQ0Sk7GcKFbSJwhKG4qoSTo/IZ/4= Subject key identifier: D1:00:55:2B:E8:64:F2:3E:37:D1:72:3A:C0:FB:95:43:2C:4E:E8:F0 Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B Certificate issuer: /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft Manifest number: 0751 Signing time: Thu 24 Apr 2025 21:27:48 +0000 Manifest this update: Thu 24 Apr 2025 21:27:47 +0000 Manifest next update: Thu 01 May 2025 21:27:47 +0000 Files and hashes: 1: 8bt55W0rCYaSzH0fIm91bHlh4Zs.crl (hash: S+kaXYDqIemy1M9ktEnLgZJl+TALaY5i0u+B+gTDnAc=) 2: FD33BACA1E5211EBA055EE2BC4F9AE02.roa (hash: rp0zrUH9UGHjL2DLYngSyvnoyMj95GbsV1MCoTzBwJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29A1, serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Validity Not Before: Apr 24 21:27:47 2025 GMT Not After : May 1 21:27:47 2025 GMT Subject: CN=680aacd3-27bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:f7:f0:35:87:f8:22:69:f8:b2:be:37:8b: d4:36:40:92:4e:52:9f:5d:5b:94:b3:b2:8d:e6:18: b9:72:ac:b9:99:22:75:ab:71:65:5b:37:5a:8b:66: 7f:6c:d7:89:04:a9:a9:6b:ed:07:1a:12:46:70:af: 87:44:8c:ca:99:d5:16:d1:a5:f2:f7:81:f4:d4:0f: 00:7a:05:ff:d0:3c:0c:1d:05:38:ad:25:bf:0a:ad: 34:bd:dd:da:bf:42:f4:14:90:b3:64:c8:bc:24:63: 8c:ac:2f:ce:23:a0:7f:4d:49:02:64:f1:e6:28:a9: a4:d5:19:9b:da:a0:a9:6b:96:b0:77:64:53:ab:f5: 2f:18:05:7a:20:b4:e8:ad:2c:a1:c2:dc:0b:1a:60: 18:25:80:65:91:d6:ed:9d:93:52:14:91:80:59:d8: 0c:c7:1c:ec:30:da:47:12:92:18:13:45:60:b4:20: 6e:73:1b:4c:70:c0:d1:fa:fe:cf:66:f4:e7:69:cb: e6:5c:82:7e:06:fd:e5:01:19:63:d4:99:ce:35:f9: 4c:b6:18:45:ac:53:07:3f:b0:df:a2:a5:55:a2:07: bb:98:d5:1b:0f:64:d8:9f:12:80:c5:d4:fb:80:4b: df:e0:a1:56:b7:e8:6c:02:69:d0:9f:b1:06:7f:f9: 25:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:00:55:2B:E8:64:F2:3E:37:D1:72:3A:C0:FB:95:43:2C:4E:E8:F0 X509v3 Authority Key Identifier: keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:dd:f2:4b:34:10:76:6c:08:f4:a1:8c:9f:03:b0:74:12:82: 14:46:50:31:41:d5:d5:67:f0:4d:56:de:d1:9a:1d:82:f9:b9: 64:86:1d:e0:8c:cc:4d:4a:57:bd:28:c9:81:cb:27:91:fa:68: bf:c2:b7:8e:10:2e:95:94:34:da:20:b2:d8:d9:ab:fd:2a:02: f1:64:ae:f3:94:fb:eb:24:e8:00:7d:e5:67:52:01:27:6f:69: 43:89:1a:68:6d:ea:b7:9c:2f:d9:46:af:aa:f6:d3:b0:9c:95: 93:6a:fc:6c:58:2d:69:8c:5f:62:ac:d4:42:53:d6:1e:68:cd: 56:fb:1a:5f:14:8e:8b:72:a9:aa:15:04:e8:7e:b8:48:da:4d: 97:43:f5:1f:74:91:6f:61:04:fc:94:9d:90:79:63:b7:85:4a: c3:6c:99:1e:f7:fb:89:63:3f:6a:4d:c9:f2:ea:e9:9a:dc:6a: 47:45:44:78:32:eb:19:a9:0c:e5:38:7f:d1:18:6d:d9:0f:c6: 80:ff:d5:33:a8:3a:6d:d6:cc:d6:f2:8f:7a:cf:ec:4c:ce:74: 82:db:e2:a1:78:af:96:c9:af:77:8f:1a:9c:eb:d2:22:c3:e0: 6a:8b:bf:d7:51:9a:4e:98:18:84:8b:b2:23:a9:7a:e0:ca:63: b2:f4:85:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5QTExMTAvBgNVBAUTKEYxQkI3OUU1NkQyQjA5ODY5MkNDN0QxRjIyNkY3NTZD Nzk2MUUxOUIwHhcNMjUwNDI0MjEyNzQ3WhcNMjUwNTAxMjEyNzQ3WjAYMRYwFAYD VQQDEw02ODBhYWNkMy0yN2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYP38DWH+CJp+LK+N4vUNkCSTlKfXVuUs7KN5hi5cqy5mSJ1q3FlWzdai2Z/ bNeJBKmpa+0HGhJGcK+HRIzKmdUW0aXy94H01A8AegX/0DwMHQU4rSW/Cq00vd3a v0L0FJCzZMi8JGOMrC/OI6B/TUkCZPHmKKmk1Rmb2qCpa5awd2RTq/UvGAV6ILTo rSyhwtwLGmAYJYBlkdbtnZNSFJGAWdgMxxzsMNpHEpIYE0VgtCBucxtMcMDR+v7P ZvTnacvmXIJ+Bv3lARlj1JnONflMthhFrFMHP7DfoqVVoge7mNUbD2TYnxKAxdT7 gEvf4KFWt+hsAmnQn7EGf/klDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEAVSvo ZPI+N9FyOsD7lUMsTujwMB8GA1UdIwQYMBaAFPG7eeVtKwmGksx9HyJvdWx5YeGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlBMS9GOEYwRUM5NjFF NTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZYVN6SDBmSW05MWJIbGg0 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhidDU1VzByQ1lhU3pIMGZJbTkxYkhsaDRacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlBMS9GOEYwRUM5NjFFNTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZ YVN6SDBmSW05MWJIbGg0WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC03fJLNBB2bAj0oYyfA7B0EoIURlAxQdXVZ/BNVt7Rmh2C+blkhh3g jMxNSle9KMmByyeR+mi/wreOEC6VlDTaILLY2av9KgLxZK7zlPvrJOgAfeVnUgEn b2lDiRpobeq3nC/ZRq+q9tOwnJWTavxsWC1pjF9irNRCU9YeaM1W+xpfFI6Lcqmq FQTofrhI2k2XQ/UfdJFvYQT8lJ2QeWO3hUrDbJke9/uJYz9qTcny6uma3GpHRUR4 MusZqQzlOH/RGG3ZD8aA/9UzqDpt1szW8o96z+xMznSC2+KheK+Wya93jxqc69Ii w+Bqi7/XUZpOmBiEi7IjqXrgymOy9IUk -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:26 2025 by rpki-client