$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json) Hash identifier: 5ehUmIjlrLuAAYHAbchHw7p6tVmqZxgDN/I9kOe8I80= Subject key identifier: 7E:A2:2F:FD:32:D3:50:2F:DF:E6:2E:FC:6A:E6:EF:B6:DA:A5:C4:85 Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft Manifest number: 016E Signing time: Fri 25 Apr 2025 02:56:22 +0000 Manifest this update: Fri 25 Apr 2025 02:56:22 +0000 Manifest next update: Fri 02 May 2025 02:56:22 +0000 Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: PYvMlG2szokL4ASEdg90sPvK9F7iKquO4HxJWhtw/Hs=) 2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: +bA3oLtddNBLbESFYmKhlFjoL38F7uGh4zuU1dN6BAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: Apr 25 02:56:22 2025 GMT Not After : May 2 02:56:22 2025 GMT Subject: CN=680af9d6-8aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:f5:29:db:f9:c6:c4:f2:77:0d:fb:ad:0d: fd:bb:7e:09:23:7d:8c:5d:c2:1d:35:df:42:e2:c9: 23:e5:ac:04:6a:e5:db:fb:bd:9c:4b:6f:0a:b5:62: 66:13:55:31:f3:98:cd:cc:cb:dd:cb:ed:c9:53:5d: 94:1d:70:12:e6:f1:8c:63:ee:28:70:23:28:aa:c1: bb:42:95:69:24:50:42:58:98:de:3e:6a:4e:5c:93: b2:d7:42:cd:26:93:0f:52:bf:b1:93:05:6a:79:b4: f3:a4:61:7d:39:07:86:22:60:be:c3:65:99:cd:87: 17:95:85:8e:b0:8f:4d:e7:16:60:fe:d8:e8:d1:e0: a0:9f:61:d0:9e:55:16:47:34:d3:77:b6:e5:4e:07: a1:6a:0f:2a:95:64:6b:34:b5:fa:2b:1e:20:73:5f: d0:5f:8d:5c:24:93:d1:34:44:2c:d7:42:c7:8a:8d: 5f:65:32:c8:dd:32:be:e3:11:e7:b3:10:fd:d0:86: b4:6c:f2:3b:ae:ad:98:81:11:8b:d1:aa:8b:bd:62: 37:81:c9:bd:f8:18:da:f8:91:b3:5a:f4:49:51:44: fd:9e:25:55:87:d5:2b:90:4a:73:6c:b8:ea:ae:b6: ea:65:02:ab:20:37:b2:4c:e8:d0:92:83:d4:0c:7d: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A2:2F:FD:32:D3:50:2F:DF:E6:2E:FC:6A:E6:EF:B6:DA:A5:C4:85 X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2f:f8:39:2e:a0:1f:bb:71:3c:2c:ef:4e:1a:e5:e4:e2:77: d6:24:28:8d:23:7b:bd:6e:2c:ae:30:87:14:7d:c1:74:a0:2a: b5:08:29:7d:ea:3c:a9:db:e2:cc:8f:5b:74:7f:b2:97:fe:d0: 27:0d:c8:ca:81:90:c3:16:d7:cf:4a:08:d1:61:9a:3b:01:fe: 19:b3:ca:2d:c5:52:8d:ec:a6:ba:6b:3f:d6:e4:ca:23:50:fc: 9a:b9:01:fd:b5:8a:db:7a:98:3a:53:13:db:5b:6f:ec:b0:5f: 9d:77:af:a5:95:73:58:b2:01:36:42:4c:81:1c:ab:33:1e:53: bd:74:f4:e2:5d:0c:81:0c:81:39:3f:20:91:57:3e:02:f9:09: 56:0d:50:b2:b7:60:9c:46:78:dc:93:d1:6c:96:ae:d8:01:4a: 5b:a5:c9:51:dd:d6:86:66:a6:f7:a4:09:cc:f0:99:67:85:ea: bb:45:cf:9d:dc:07:eb:ed:87:2e:ed:ba:ca:bd:d2:60:c4:ed: 56:36:bc:81:44:33:a5:34:d4:24:a9:61:68:d6:6e:df:ed:59: bd:4e:42:d8:87:5e:cf:71:a0:ff:cb:3a:66:c5:26:33:1d:0c: b9:f2:13:03:e8:d7:52:c4:37:2f:f6:a7:59:3d:d8:f6:c7:44: a5:40:7b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjUwNDI1MDI1NjIyWhcNMjUwNTAyMDI1NjIyWjAYMRYwFAYD VQQDEw02ODBhZjlkNi04YWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUL1Kdv5xsTydw37rQ39u34JI32MXcIdNd9C4skj5awEauXb+72cS28KtWJm E1Ux85jNzMvdy+3JU12UHXAS5vGMY+4ocCMoqsG7QpVpJFBCWJjePmpOXJOy10LN JpMPUr+xkwVqebTzpGF9OQeGImC+w2WZzYcXlYWOsI9N5xZg/tjo0eCgn2HQnlUW RzTTd7blTgehag8qlWRrNLX6Kx4gc1/QX41cJJPRNEQs10LHio1fZTLI3TK+4xHn sxD90Ia0bPI7rq2YgRGL0aqLvWI3gcm9+Bja+JGzWvRJUUT9niVVh9UrkEpzbLjq rrbqZQKrIDeyTOjQkoPUDH2IkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6iL/0y 01Av3+Yu/Grm77bapcSFMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz R19sMzR4RnZXQjlSRk5BMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXL/g5LqAfu3E8LO9OGuXk4nfWJCiNI3u9biyuMIcUfcF0oCq1CCl9 6jyp2+LMj1t0f7KX/tAnDcjKgZDDFtfPSgjRYZo7Af4Zs8otxVKN7Ka6az/W5Moj UPyauQH9tYrbepg6UxPbW2/ssF+dd6+llXNYsgE2QkyBHKszHlO9dPTiXQyBDIE5 PyCRVz4C+QlWDVCyt2CcRnjck9Fslq7YAUpbpclR3daGZqb3pAnM8Jlnheq7Rc+d 3Afr7Ycu7brKvdJgxO1WNryBRDOlNNQkqWFo1m7f7Vm9TkLYh17PcaD/yzpmxSYz HQy58hMD6NdSxDcv9qdZPdj2x0SlQHuU -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:48 2025 by rpki-client