$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: 5XAVRpfC8fOCLiPk1R+n20BJHMVjx776O31o8ktQ774= Subject key identifier: 79:DC:8A:42:C4:47:97:BC:AB:45:41:22:1F:C1:D8:5E:16:98:91:F9 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 07F5 Signing time: Thu 24 Apr 2025 20:46:36 +0000 Manifest this update: Thu 24 Apr 2025 20:46:35 +0000 Manifest next update: Thu 01 May 2025 20:46:35 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: o4gwX3zSwK369tn7Nc52+AgagMKc/7VoJpb13mY+F3o=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: BSpXz+Luvr8+353VTfwHRvV86BxwUFFmKEnBxGibaBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Apr 24 20:46:35 2025 GMT Not After : May 1 20:46:35 2025 GMT Subject: CN=680aa32c-305e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:97:51:82:0a:f1:38:f6:a7:9d:1b:7f:ba: a1:fe:ff:71:fc:fb:ca:38:ff:f4:d3:80:eb:51:f7: 7e:b3:61:f0:90:79:b7:d1:ce:f2:56:77:90:ff:ce: d5:b4:6d:43:2a:67:77:2e:4c:ad:53:e4:e5:d4:1b: 48:00:22:be:3c:9c:8f:93:05:a9:d4:d1:11:9f:69: db:e8:c8:2a:47:fd:49:db:f1:31:3c:66:28:db:7c: 7e:90:d7:03:32:b4:a2:b1:b1:a9:2f:65:98:63:bc: da:8f:a1:af:a7:a7:d9:d1:b2:98:10:9c:76:b9:e4: 24:c7:00:96:83:b9:0c:cb:df:d2:dc:e1:19:b4:51: 65:62:1b:fa:b3:eb:ff:ef:f4:c2:da:9c:e2:b4:aa: e9:f0:55:4e:a8:6a:c4:43:c9:6f:a7:2e:97:1e:24: ce:44:3f:5d:96:77:73:47:24:31:66:ac:5a:0c:12: 54:c7:5d:c9:1e:f5:61:01:18:d6:51:96:35:59:c6: 6e:0f:44:b2:d9:77:d5:90:ef:8f:68:f3:95:e1:2e: 13:d8:5c:a5:04:53:a3:ab:83:42:83:8c:8a:44:aa: 3a:bc:22:43:5c:9f:aa:4a:e7:7e:ca:ee:3e:9a:8e: cf:79:74:61:c1:d9:74:69:82:99:13:6a:5b:ef:62: 56:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DC:8A:42:C4:47:97:BC:AB:45:41:22:1F:C1:D8:5E:16:98:91:F9 X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:1c:cb:0e:fd:59:a4:a5:9a:d7:fb:b1:4c:2b:5d:14:79:e2: ed:6b:e8:fc:f2:31:e6:74:d5:e9:7b:d9:85:e4:dc:a1:f8:ef: 38:ea:d3:b2:e2:d3:85:d9:69:f7:82:9a:43:9f:17:4b:0c:21: 36:ff:b6:e3:7f:4f:b2:4e:be:b8:8d:b3:60:52:9a:62:3e:c2: ca:03:7b:17:7c:30:01:3c:87:c3:c5:d2:f1:ce:ea:1a:2e:6b: be:de:f8:bc:61:cc:8e:97:7f:ef:5e:b7:8d:89:bd:8f:99:ab: f6:18:91:62:25:b6:9c:83:00:5d:3a:6a:70:61:00:7a:fb:a2: a6:97:0e:3a:f6:36:5f:6c:fa:fd:8b:19:e4:be:29:c9:ff:2b: 04:e5:92:91:80:61:e3:47:9b:22:83:7b:65:e9:b7:85:14:66: 2c:2e:a0:59:32:93:b0:ca:af:70:6f:d6:7c:b2:b7:20:70:b0: fc:3b:72:64:c9:c5:33:b5:52:48:d5:8b:e1:7e:6b:dc:98:ad: 3e:73:b6:02:74:c4:a4:78:ba:48:78:35:e5:c9:f4:f5:54:c7: 64:7d:17:c6:d8:5b:fb:a5:d9:7f:6d:67:d4:00:37:ca:9d:c3: c8:e7:40:6e:15:74:91:f2:c8:c7:c9:83:5a:16:9d:82:49:6b: 3e:c3:f3:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUwNDI0MjA0NjM1WhcNMjUwNTAxMjA0NjM1WjAYMRYwFAYD VQQDEw02ODBhYTMyYy0zMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJKXUYIK8Tj2p50bf7qh/v9x/PvKOP/004DrUfd+s2HwkHm30c7yVneQ/87V tG1DKmd3LkytU+Tl1BtIACK+PJyPkwWp1NERn2nb6MgqR/1J2/ExPGYo23x+kNcD MrSisbGpL2WYY7zaj6Gvp6fZ0bKYEJx2ueQkxwCWg7kMy9/S3OEZtFFlYhv6s+v/ 7/TC2pzitKrp8FVOqGrEQ8lvpy6XHiTORD9dlndzRyQxZqxaDBJUx13JHvVhARjW UZY1WcZuD0Sy2XfVkO+PaPOV4S4T2FylBFOjq4NCg4yKRKo6vCJDXJ+qSud+yu4+ mo7PeXRhwdl0aYKZE2pb72JWsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHncikLE R5e8q0VBIh/B2F4WmJH5MB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoHMsO/VmkpZrX+7FMK10UeeLta+j88jHmdNXpe9mF5Nyh+O846tOy 4tOF2Wn3gppDnxdLDCE2/7bjf0+yTr64jbNgUppiPsLKA3sXfDABPIfDxdLxzuoa Lmu+3vi8YcyOl3/vXreNib2Pmav2GJFiJbacgwBdOmpwYQB6+6Kmlw469jZfbPr9 ixnkvinJ/ysE5ZKRgGHjR5sig3tl6beFFGYsLqBZMpOwyq9wb9Z8srcgcLD8O3Jk ycUztVJI1YvhfmvcmK0+c7YCdMSkeLpIeDXlyfT1VMdkfRfG2Fv7pdl/bWfUADfK ncPI50BuFXSR8sjHyYNaFp2CSWs+w/PK -----END CERTIFICATE-----Generated at Sat Apr 26 03:55:37 2025 by rpki-client