$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json) Hash identifier: TRUXea7e94vLUsvhUdzRWEwVV+gI1Ww4p6q6Ux1DOqY= Subject key identifier: F0:8E:47:F6:C1:7C:31:AC:78:A5:1A:95:8A:8E:B1:48:B2:B2:BF:4E Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft Manifest number: 01E7 Signing time: Fri 25 Apr 2025 01:54:42 +0000 Manifest this update: Fri 25 Apr 2025 01:54:42 +0000 Manifest next update: Fri 02 May 2025 01:54:42 +0000 Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: zP9xqmlyhmMr3tM8Tr2ZadG5WqdbmdpQzR1vR2rXGOc=) 2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: rc/VDMjkPbB4X1/rw349yGgl9pIXGG2Nvyj57rr+IWw=) 3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: 1pnwFpSmR4EBTHjCO/gvMKBX3b/KZHcHGgKDB9usLIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Validity Not Before: Apr 25 01:54:42 2025 GMT Not After : May 2 01:54:42 2025 GMT Subject: CN=680aeb62-f3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:c6:29:9e:e1:c8:1b:9b:13:7a:b0:e4:5d: 37:b5:c2:4c:b2:3a:42:36:7c:e4:2e:6e:5c:49:27: 4b:5a:12:9c:0c:05:39:4c:d7:b6:f5:02:ab:d1:c9: 69:9d:d6:0d:5a:69:d0:8c:a3:a5:5b:65:63:05:ce: 24:cc:67:f9:81:51:86:2b:0e:e6:2b:98:71:81:3e: cb:40:b3:5c:2c:82:6d:81:0a:6e:c5:9e:66:b2:fd: b3:a0:2a:fe:13:86:db:df:9c:3c:75:c5:9a:a8:11: 42:00:06:00:4c:bd:d0:1b:f3:09:a8:01:37:b3:4e: 7b:c3:c5:a2:88:b1:be:1a:7f:87:01:40:f5:4d:4e: 8d:b9:8b:40:25:07:c7:f1:8f:3b:1a:af:e9:9a:e8: 08:84:10:f9:a7:29:5c:67:2c:8f:35:99:76:85:69: c9:58:f4:90:35:b3:1e:fb:02:a0:54:95:66:62:e6: 1e:61:3c:8a:43:c3:6f:ee:04:21:ae:03:88:5d:3c: 5d:fb:a0:87:b1:1d:8a:52:9b:db:fb:16:07:de:c5: 02:e8:f6:1a:77:d8:5c:8b:7f:c5:30:ed:dc:fd:24: 21:ff:2e:0f:f3:7c:0f:54:3c:91:32:95:70:c3:b5: 53:23:8e:a3:62:d6:fe:12:8b:73:1c:8e:8e:b4:fe: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8E:47:F6:C1:7C:31:AC:78:A5:1A:95:8A:8E:B1:48:B2:B2:BF:4E X509v3 Authority Key Identifier: keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:51:85:11:a0:fc:43:65:7a:57:8d:3b:a7:84:0a:67:b9:e8: 26:c0:79:61:98:9a:ba:2f:f1:a1:c3:3a:99:5c:91:2b:7b:af: 8c:b4:21:f9:06:9c:d3:65:33:36:b5:cf:96:c7:dd:d8:bf:2f: 7b:1d:51:4b:d8:c9:30:79:b9:83:38:1e:6e:10:7e:45:59:ce: a9:e9:17:d5:98:53:ef:da:57:f7:af:41:1b:07:83:10:83:47: 1b:48:dc:30:8c:58:e6:56:b3:f9:61:8f:17:a2:54:7a:d4:05: 1b:6f:9c:a9:1d:93:f4:58:9d:1a:52:ca:e9:80:6f:39:64:bc: 31:7a:8a:80:0f:f8:87:a4:74:4b:40:26:be:7c:42:7d:d2:de: f2:0b:24:a3:83:90:4a:d9:1b:ad:cd:c5:af:d7:74:20:bc:e4: 99:fa:09:f5:d2:58:6a:36:da:72:66:33:9a:9c:6e:50:a0:9e: 6c:14:f3:2d:ff:83:ff:04:d0:27:d9:a4:7a:11:eb:4e:b0:a2: f5:1b:eb:cf:13:c7:95:fd:3a:8e:d3:7f:0b:b4:e2:96:49:b5: 23:cb:64:ba:98:97:24:3e:49:04:6e:16:76:e0:7b:9c:0b:40: 92:92:a6:21:4a:22:b2:69:45:3a:7f:6b:72:85:9f:26:13:26: d5:8e:51:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5 QjEzNzU4MUYwHhcNMjUwNDI1MDE1NDQyWhcNMjUwNTAyMDE1NDQyWjAYMRYwFAYD VQQDEw02ODBhZWI2Mi1mM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoV3GKZ7hyBubE3qw5F03tcJMsjpCNnzkLm5cSSdLWhKcDAU5TNe29QKr0clp ndYNWmnQjKOlW2VjBc4kzGf5gVGGKw7mK5hxgT7LQLNcLIJtgQpuxZ5msv2zoCr+ E4bb35w8dcWaqBFCAAYATL3QG/MJqAE3s057w8WiiLG+Gn+HAUD1TU6NuYtAJQfH 8Y87Gq/pmugIhBD5pylcZyyPNZl2hWnJWPSQNbMe+wKgVJVmYuYeYTyKQ8Nv7gQh rgOIXTxd+6CHsR2KUpvb+xYH3sUC6PYad9hci3/FMO3c/SQh/y4P83wPVDyRMpVw w7VTI46jYtb+EotzHI6OtP7L7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCOR/bB fDGseKUalYqOsUiysr9OMB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL Wl9paG0tV2hzb0tiRTNXQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6UYURoPxDZXpXjTunhApnuegmwHlhmJq6L/GhwzqZXJEre6+MtCH5 BpzTZTM2tc+Wx93Yvy97HVFL2MkwebmDOB5uEH5FWc6p6RfVmFPv2lf3r0EbB4MQ g0cbSNwwjFjmVrP5YY8XolR61AUbb5ypHZP0WJ0aUsrpgG85ZLwxeoqAD/iHpHRL QCa+fEJ90t7yCySjg5BK2RutzcWv13QgvOSZ+gn10lhqNtpyZjOanG5QoJ5sFPMt /4P/BNAn2aR6EetOsKL1G+vPE8eV/TqO038LtOKWSbUjy2S6mJckPkkEbhZ24Huc C0CSkqYhSiKyaUU6f2tyhZ8mEybVjlED -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:12 2025 by rpki-client