$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft File: 8u2bFw-uMIgyQDmZULa8lTgOdBw.mft (raw, json) Hash identifier: qkZKzQ6hko6n1wOjJk5UX+Wfe4iKDPUA/uP+r/n2sMY= Subject key identifier: 4D:CA:90:1A:95:63:0E:43:F8:2C:34:01:EA:B9:6D:1C:FE:90:E0:37 Authority key identifier: F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C Certificate issuer: /CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Certificate serial: 09E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft Manifest number: 09DC Signing time: Thu 24 Apr 2025 19:48:23 +0000 Manifest this update: Thu 24 Apr 2025 19:48:23 +0000 Manifest next update: Thu 01 May 2025 19:48:23 +0000 Files and hashes: 1: 8u2bFw-uMIgyQDmZULa8lTgOdBw.crl (hash: DK9zy8cG6nX6u/d/Vr3375mMwq7vy+h3+Qp2v2zn3XE=) 2: B42EBFF6796511EAB0595B6EC4F9AE02.roa (hash: lcdT2WKJng7KJMylMuLFFejoBYxRVE9D70A9AQhOkoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2530 (0x9e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4749, serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Validity Not Before: Apr 24 19:48:23 2025 GMT Not After : May 1 19:48:23 2025 GMT Subject: CN=680a9587-a0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:14:49:a4:0d:19:45:f5:81:e0:25:6f:8f: 92:e0:0d:ec:9b:1b:62:e4:cc:0f:f8:2e:e7:76:6a: bc:08:84:7a:41:0a:67:d6:73:a3:d1:e4:c8:05:21: 12:b5:26:b9:0f:a7:6a:31:80:67:63:f2:fa:1a:0c: b3:7f:07:32:47:7c:5d:7f:a5:a4:83:fa:67:1b:ef: 0a:ab:c5:a0:f4:71:e2:0d:1f:49:5a:d9:fd:a0:bb: fa:26:7f:70:d4:7a:0d:4e:3d:b8:6b:2f:40:19:80: 26:ee:7b:7e:96:ac:6a:fe:b6:f3:fa:48:81:29:da: b0:68:7e:da:91:a0:72:b0:86:e1:a6:2c:a3:62:65: c2:f1:51:54:c2:c3:53:0f:51:ae:8f:55:10:30:82: 9e:aa:66:a7:cc:b4:79:64:58:eb:1c:e5:9d:08:d3: 92:e9:e5:d4:1a:27:2a:bc:40:23:e2:79:c7:aa:13: 79:1a:10:1b:a2:04:b8:d3:5f:89:47:be:e9:db:f9: 85:90:e3:90:ef:24:2f:c9:e4:df:b8:2d:c4:48:83: 04:ed:46:6c:46:b6:54:dc:dc:cd:e1:78:47:df:fc: df:b9:10:5b:c2:a2:6b:c7:bd:7e:bf:8e:c8:69:23: 4e:2a:c4:e8:fe:dc:43:48:ad:03:d2:59:64:b3:c6: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CA:90:1A:95:63:0E:43:F8:2C:34:01:EA:B9:6D:1C:FE:90:E0:37 X509v3 Authority Key Identifier: keyid:F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6f:c1:ab:59:99:5e:3f:4a:2f:0b:4e:69:76:15:1b:10:2c: ca:d8:ca:c1:74:3e:89:b9:70:79:e9:7d:c0:14:40:3d:23:d8: 51:1b:45:2b:2f:7e:98:6a:73:fb:3b:49:60:3b:72:ce:1a:f1: da:56:ac:6a:4b:45:be:fb:c6:7f:ca:66:44:33:60:c7:60:86: eb:b9:27:69:9e:f8:7e:7a:53:42:22:a2:53:31:81:b1:f8:03: 6a:07:94:d9:e0:91:c4:28:b7:26:9a:6a:00:55:00:c2:53:20: 6e:ce:75:bb:b4:92:2a:4a:8f:db:35:37:3a:da:4a:95:ed:db: 68:80:09:30:e7:2c:d1:23:43:51:88:a0:0c:f3:95:64:14:ea: 25:c6:41:dd:ce:85:e8:71:c7:ba:55:7a:4b:e6:b5:a9:93:91: 7b:bb:ac:fd:00:75:fd:b8:ee:b5:5b:ea:e7:90:ed:e1:22:ae: 72:d4:1b:3c:62:9e:7d:6e:75:f1:8f:78:0a:53:d1:8d:46:f8: 9b:b2:0b:c9:d4:84:22:81:bf:e3:22:bd:43:dd:0a:3e:1e:c6: 0a:dd:db:5f:a7:dd:d7:69:ed:aa:f3:0e:0f:09:96:db:4d:60: ff:17:90:46:6f:c8:41:7d:10:c4:28:c1:8e:18:6c:79:e5:82: bc:51:d5:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3NDkxMTAvBgNVBAUTKEYyRUQ5QjE3MEZBRTMwODgzMjQwMzk5OTUwQjZCQzk1 MzgwRTc0MUMwHhcNMjUwNDI0MTk0ODIzWhcNMjUwNTAxMTk0ODIzWjAYMRYwFAYD VQQDEw02ODBhOTU4Ny1hMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkAUSaQNGUX1geAlb4+S4A3smxti5MwP+C7ndmq8CIR6QQpn1nOj0eTIBSES tSa5D6dqMYBnY/L6GgyzfwcyR3xdf6Wkg/pnG+8Kq8Wg9HHiDR9JWtn9oLv6Jn9w 1HoNTj24ay9AGYAm7nt+lqxq/rbz+kiBKdqwaH7akaBysIbhpiyjYmXC8VFUwsNT D1Guj1UQMIKeqmanzLR5ZFjrHOWdCNOS6eXUGicqvEAj4nnHqhN5GhAbogS401+J R77p2/mFkOOQ7yQvyeTfuC3ESIME7UZsRrZU3NzN4XhH3/zfuRBbwqJrx71+v47I aSNOKsTo/txDSK0D0llks8ZVPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3KkBqV Yw5D+Cw0Aeq5bRz+kOA3MB8GA1UdIwQYMBaAFPLtmxcPrjCIMkA5mVC2vJU4DnQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDc0OS9BNjUyNjUwQTc5 NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1JZ3lRRG1aVUxhOGxUZ09k QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1MmJGdy11TUlneVFEbVpVTGE4bFRnT2RCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDc0OS9BNjUyNjUwQTc5NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1J Z3lRRG1aVUxhOGxUZ09kQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsb8GrWZleP0ovC05pdhUbECzK2MrBdD6JuXB56X3AFEA9I9hRG0Ur L36YanP7O0lgO3LOGvHaVqxqS0W++8Z/ymZEM2DHYIbruSdpnvh+elNCIqJTMYGx +ANqB5TZ4JHEKLcmmmoAVQDCUyBuznW7tJIqSo/bNTc62kqV7dtogAkw5yzRI0NR iKAM85VkFOolxkHdzoXocce6VXpL5rWpk5F7u6z9AHX9uO61W+rnkO3hIq5y1Bs8 Yp59bnXxj3gKU9GNRvibsgvJ1IQigb/jIr1D3Qo+HsYK3dtfp93Xae2q8w4PCZbb TWD/F5BGb8hBfRDEKMGOGGx55YK8UdWb -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:41 2025 by rpki-client