$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: Fkc9m8oVv7CV5eywOkSJ8GpU3uI36s1QE1YvwI1oLeo= Subject key identifier: F6:0E:FA:D2:98:5A:EF:54:85:7F:08:4C:0A:BB:0C:33:DF:A8:92:50 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0B5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0B56 Signing time: Thu 24 Apr 2025 19:00:20 +0000 Manifest this update: Thu 24 Apr 2025 19:00:20 +0000 Manifest next update: Thu 01 May 2025 19:00:20 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: 8yl69rsFhUkaS/GSj3vcoEcgMEU9fv/YljfjbHjiXlA=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: 5tQROkuKBdGr5CDnMUVPHlhLeJ1/YaIHTHWkyStRniQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2910 (0xb5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Apr 24 19:00:20 2025 GMT Not After : May 1 19:00:20 2025 GMT Subject: CN=680a8a44-c926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4c:5e:78:8d:44:86:a2:45:13:6b:6c:e2:61: 51:f9:fa:a1:4c:5c:da:78:52:22:5d:15:48:6e:cd: 8d:20:1d:e3:1c:11:e6:d9:4b:b4:f0:65:ac:da:a3: a8:95:9b:08:6f:10:30:07:03:0e:8b:1c:61:36:76: 1b:cf:52:8e:7a:9b:4c:48:a1:82:dd:bf:34:4e:49: 5c:07:a2:99:a2:d0:cf:df:0f:18:94:23:74:92:84: e0:18:cc:94:04:b6:bf:7d:97:0c:23:9d:98:46:c6: a1:5a:58:7f:9c:be:a8:56:bf:42:c1:21:ed:e9:c4: dd:3f:52:ba:6b:15:10:4f:32:0a:38:71:e2:ea:58: 61:30:0d:49:ba:3e:f2:73:02:dc:bb:ae:ce:82:e1: c5:e7:37:b3:17:0b:87:c9:70:c8:41:bf:c5:be:f8: c2:d0:d6:a8:67:fb:7a:14:af:20:6e:f8:3d:50:cf: 11:e4:8d:22:df:69:16:bb:0b:06:92:6c:1e:97:cb: ad:6e:94:02:63:ec:66:3d:85:ff:c2:73:d7:fa:53: 04:3e:fb:44:36:cb:bb:34:2f:47:82:fb:97:fc:57: 91:cc:96:06:b8:8d:1e:aa:4d:18:65:0b:24:2f:b1: a1:da:ff:27:df:e7:8f:ff:44:a1:47:d8:b9:40:1f: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0E:FA:D2:98:5A:EF:54:85:7F:08:4C:0A:BB:0C:33:DF:A8:92:50 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:93:9a:b9:4a:b6:ee:ca:c6:5b:c2:51:5e:9f:a2:7b:ec:1e: b8:43:9d:8b:12:65:9e:9d:b5:49:25:be:d1:27:dc:43:c0:84: 7c:0b:f2:7b:ac:ab:28:bf:4b:d5:6b:f8:0a:d1:33:08:69:ee: 4c:2f:e6:4a:e2:5c:d5:8a:73:e8:59:7b:76:e6:f2:de:92:99: a3:ab:b9:5e:ad:9d:cf:7c:c6:a5:e7:35:70:37:0b:50:19:c0: 86:04:8c:96:c5:1c:6c:a2:7d:f4:86:db:b1:78:98:e8:be:b9: f9:01:0e:98:e1:63:4b:77:4a:94:3f:0e:b2:6f:0f:1c:02:99: e0:72:f8:6a:e7:a0:0c:9f:d7:be:53:ea:53:ad:13:da:26:8f: ca:ba:bd:52:73:11:6d:bf:a0:ad:2e:2a:d5:da:22:f4:70:2f: a4:1d:60:c1:0e:5f:61:fb:68:c9:20:e7:ff:73:3c:a1:06:52: 57:12:cb:89:47:a1:0d:73:17:9d:07:09:ce:59:bb:7c:c1:de: aa:c9:84:6b:8e:da:48:41:ca:94:11:cc:40:37:51:74:aa:0b: ff:1f:68:27:7b:b1:22:1d:09:b9:a3:34:8d:bf:f0:3b:e4:5e: 18:bf:3e:9f:9f:d8:30:b0:38:27:be:b7:fb:7c:00:15:cd:b7: fe:e5:c1:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjUwNDI0MTkwMDIwWhcNMjUwNTAxMTkwMDIwWjAYMRYwFAYD VQQDEw02ODBhOGE0NC1jOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kxeeI1EhqJFE2ts4mFR+fqhTFzaeFIiXRVIbs2NIB3jHBHm2Uu08GWs2qOo lZsIbxAwBwMOixxhNnYbz1KOeptMSKGC3b80TklcB6KZotDP3w8YlCN0koTgGMyU BLa/fZcMI52YRsahWlh/nL6oVr9CwSHt6cTdP1K6axUQTzIKOHHi6lhhMA1Juj7y cwLcu67OguHF5zezFwuHyXDIQb/FvvjC0NaoZ/t6FK8gbvg9UM8R5I0i32kWuwsG kmwel8utbpQCY+xmPYX/wnPX+lMEPvtENsu7NC9HgvuX/FeRzJYGuI0eqk0YZQsk L7Gh2v8n3+eP/0ShR9i5QB9P/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYO+tKY Wu9UhX8ITAq7DDPfqJJQMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFk5q5SrbuysZbwlFen6J77B64Q52LEmWenbVJJb7RJ9xDwIR8C/J7 rKsov0vVa/gK0TMIae5ML+ZK4lzVinPoWXt25vLekpmjq7lerZ3PfMal5zVwNwtQ GcCGBIyWxRxson30htuxeJjovrn5AQ6Y4WNLd0qUPw6ybw8cApngcvhq56AMn9e+ U+pTrRPaJo/Kur1ScxFtv6CtLirV2iL0cC+kHWDBDl9h+2jJIOf/czyhBlJXEsuJ R6ENcxedBwnOWbt8wd6qyYRrjtpIQcqUEcxAN1F0qgv/H2gne7EiHQm5ozSNv/A7 5F4Yvz6fn9gwsDgnvrf7fAAVzbf+5cFD -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:19 2025 by rpki-client