$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: wWu5uWsAhEWnzi8Wz4uY7nStZJzSC9uB2vO5vh2NGOY= Subject key identifier: 32:FF:87:FB:17:56:A3:D4:11:72:8C:B9:D0:4B:DA:7A:BA:57:D7:5C Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: 53 Signing time: Fri 25 Apr 2025 06:13:26 +0000 Manifest this update: Fri 25 Apr 2025 06:13:25 +0000 Manifest next update: Fri 02 May 2025 06:13:25 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: Cj/d3QcEJVK6Ujy6cQl44/RLi+T/mp1DMUiY2+FWaP4=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Apr 25 06:13:25 2025 GMT Not After : May 2 06:13:25 2025 GMT Subject: CN=680b2805-06d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:1b:a6:62:29:34:c8:e8:7d:8f:b3:a6:11: 24:1e:67:10:6d:12:1d:9a:2e:d4:c2:68:c5:33:28: da:c5:84:d7:ac:a4:4d:5b:12:05:68:58:87:a7:26: 72:90:37:0f:35:34:a7:1f:69:69:a9:63:a2:6f:9d: 40:36:b0:97:8e:af:30:57:f1:a5:ff:5c:fc:b1:d7: e7:f7:9c:ea:25:74:58:aa:8a:e4:29:5c:a3:2c:84: 0d:ec:f3:95:c7:38:7c:02:65:78:39:dd:d4:54:99: 3b:ee:6c:60:27:ce:8a:9d:ce:69:6d:70:a5:c5:1c: 5f:bb:14:15:9b:fd:96:6c:95:aa:50:f9:38:bd:b3: 88:da:bf:c1:89:90:41:6d:6c:70:92:39:7f:c3:2e: 6b:e7:fc:1c:6e:95:c3:24:a0:d3:a7:96:b5:c1:ab: 12:0e:b3:b4:3c:61:fa:ad:e2:dc:58:ab:cb:3f:a7: 21:a7:5f:ec:13:59:24:82:4b:4e:e4:d7:6f:a5:b2: 86:12:4a:6b:2c:a0:a9:b8:f8:5c:3d:be:fe:0c:70: 1c:d2:2a:42:6a:29:04:a0:a0:02:2b:d6:08:56:e9: 80:e6:a6:a2:99:b6:80:d7:e0:8f:8b:55:a9:19:43: 2c:fd:b8:82:98:25:bd:5f:67:4f:98:fb:3d:05:23: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:87:FB:17:56:A3:D4:11:72:8C:B9:D0:4B:DA:7A:BA:57:D7:5C X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:99:47:42:03:27:32:93:fe:22:4c:32:e6:dc:2b:5b:27:39: 21:41:d0:24:8e:31:fb:b1:a7:7f:ea:5e:03:64:0d:1f:f3:89: d7:d8:5a:19:21:3c:a2:19:45:99:25:53:89:73:a9:d3:f1:b2: ff:57:0c:ce:25:ce:1d:4b:3c:7b:75:a1:55:37:4f:ea:d2:29: 40:24:16:ba:22:59:11:11:fd:7c:5c:de:79:7e:41:ff:6a:ad: cb:b5:f2:89:05:9e:5e:9c:1d:8d:21:73:65:58:ba:d4:f9:68: 3d:13:2a:79:ea:b5:c3:ad:d0:38:4e:f5:1b:84:2b:da:0e:78: 6b:9c:b0:5d:7c:96:89:aa:a4:6d:22:31:e6:63:f3:7d:11:65: 8a:22:65:15:c9:9e:5f:42:06:3b:bf:70:7b:b1:a2:92:30:34: a2:aa:e0:bc:e3:b9:5e:c7:54:99:34:cb:e9:08:30:cb:6b:44: f2:29:ea:fd:da:86:7d:80:10:cb:a5:85:93:8a:4b:1e:2c:25: 7b:34:0a:8c:a6:59:c8:59:ec:18:c4:1f:c1:da:b8:05:c1:e6: b5:03:18:48:36:7e:9f:c1:6a:e5:33:ce:ef:be:a9:7a:fb:82: 52:54:94:2d:8d:b8:93:99:57:65:1c:28:8b:a8:36:55:58:2d: fb:90:c8:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoRjA0OTI5RUY3NDNDNTRDMDhCNDVFMTlDRkM1MUJGMkFB NTU5REFBMTAeFw0yNTA0MjUwNjEzMjVaFw0yNTA1MDIwNjEzMjVaMBgxFjAUBgNV BAMTDTY4MGIyODA1LTA2ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt0BumYik0yOh9j7OmESQeZxBtEh2aLtTCaMUzKNrFhNespE1bEgVoWIenJnKQ Nw81NKcfaWmpY6JvnUA2sJeOrzBX8aX/XPyx1+f3nOoldFiqiuQpXKMshA3s85XH OHwCZXg53dRUmTvubGAnzoqdzmltcKXFHF+7FBWb/ZZslapQ+Ti9s4jav8GJkEFt bHCSOX/DLmvn/BxulcMkoNOnlrXBqxIOs7Q8Yfqt4txYq8s/pyGnX+wTWSSCS07k 12+lsoYSSmssoKm4+Fw9vv4McBzSKkJqKQSgoAIr1ghW6YDmpqKZtoDX4I+LVakZ Qyz9uIKYJb1fZ0+Y+z0FI6exAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMv+H+xdW o9QRcoy50EvaerpX11wwHwYDVR0jBBgwFoAU8Ekp73Q8VMCLReGc/FG/KqVZ2qEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzhDMjE0OTc0QTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVrcDczUThWTUNMUmVHY19GR19LcVZaMnFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzhDMjE0OTc0QTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1D TFJlR2NfRkdfS3FWWjJxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmZR0IDJzKT/iJMMubcK1snOSFB0CSOMfuxp3/qXgNkDR/zidfYWhkh PKIZRZklU4lzqdPxsv9XDM4lzh1LPHt1oVU3T+rSKUAkFroiWRER/Xxc3nl+Qf9q rcu18okFnl6cHY0hc2VYutT5aD0TKnnqtcOt0DhO9RuEK9oOeGucsF18lomqpG0i MeZj830RZYoiZRXJnl9CBju/cHuxopIwNKKq4LzjuV7HVJk0y+kIMMtrRPIp6v3a hn2AEMulhZOKSx4sJXs0CoymWchZ7BjEH8HauAXB5rUDGEg2fp/BauUzzu++qXr7 glJUlC2NuJOZV2UcKIuoNlVYLfuQyFI= -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:51 2025 by rpki-client