$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft File: V8WBYb3sTcee9I4gXyuNEgKPCuo.mft (raw, json) Hash identifier: rdxUU5V6pSUnPOJtp4g3IrBphZv5yVpEbvlf77Tvw9A= Subject key identifier: 4E:B1:18:9B:A7:9F:DA:EC:A6:83:6B:AC:7B:D6:96:BD:DA:C7:08:0E Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA Certificate issuer: /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft Manifest number: 33 Signing time: Fri 25 Apr 2025 06:41:50 +0000 Manifest this update: Fri 25 Apr 2025 06:41:50 +0000 Manifest next update: Fri 02 May 2025 06:41:50 +0000 Files and hashes: 1: V8WBYb3sTcee9I4gXyuNEgKPCuo.crl (hash: J3a5yQrVcpFAb7A4F3RMqPTQdGvLEl6QyC/wRnof+1s=) 2: 12316BAEE42C11EF9066AE3AC4F9AE02.roa (hash: Ij4MYxmZ1kvvIkA44sca2pptoxt6bSkjj51C+GS/Tgs=) 3: F971AC8CE42B11EFACAC6F3AC4F9AE02.roa (hash: PGaqXaUYwNRQvWR/0qrY71jZOIngXVLT0XurTqit5EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA Validity Not Before: Apr 25 06:41:50 2025 GMT Not After : May 2 06:41:50 2025 GMT Subject: CN=680b2eae-6e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:22:bf:c0:07:c3:d8:23:1b:4e:f6:43:48: 46:18:ad:3d:fc:6f:21:d3:b4:70:27:25:a7:6f:69: ec:e7:84:c8:65:7d:ba:d8:d1:14:26:39:1f:f7:4f: 19:66:49:df:22:35:3f:4b:d0:75:89:0a:8b:a3:fb: 97:96:8b:d1:5d:da:0c:96:2e:48:28:1d:70:36:f0: 7c:ec:25:bc:ee:f7:a9:33:5e:4e:8a:0e:52:06:cc: 9c:14:bb:5a:7b:76:14:11:1f:04:06:5b:45:1d:9c: ca:9f:34:a0:56:b0:13:52:8c:44:76:58:5b:6d:30: 49:a3:c3:b1:e8:7b:39:6b:96:eb:8a:b9:a3:73:94: cf:0b:35:64:0f:68:ab:a0:6a:5e:0f:38:a2:b3:67: b3:5d:8b:01:f3:b6:41:6d:e6:60:13:2d:44:54:4b: 31:d0:bf:96:0e:79:a6:85:00:5a:8c:10:5e:14:9c: 0a:2f:de:ac:09:b3:64:a3:66:ce:86:2d:8e:06:b0: 8c:57:a2:dd:79:57:3c:e8:e6:f9:7e:42:e6:c8:f4: e7:ce:95:96:78:1a:2a:30:57:34:33:2f:76:40:67: 10:02:b1:59:98:cd:fc:53:80:01:29:eb:67:ff:2d: f9:23:99:29:5d:f4:a8:ad:30:1c:99:d8:c9:07:68: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B1:18:9B:A7:9F:DA:EC:A6:83:6B:AC:7B:D6:96:BD:DA:C7:08:0E X509v3 Authority Key Identifier: keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:d3:3f:ee:1a:d0:33:56:61:0b:71:1f:85:2e:de:52:ad:d8: c9:95:a5:9c:9c:43:d2:0d:06:69:d5:18:c4:04:1b:9c:3c:6a: 7c:8a:8a:eb:24:48:f1:97:33:07:3f:e8:10:4d:be:97:8f:dd: f9:36:c1:b1:45:71:e4:35:92:46:ab:fd:6b:d7:72:8a:47:8f: d6:08:b6:49:b6:ae:f0:af:e8:3c:39:49:13:25:17:2a:dd:a3: fd:a2:0b:55:d6:fd:fb:cb:6c:ce:b3:78:33:c0:77:e3:b7:eb: c7:9c:ea:81:76:41:24:c4:4c:e4:4d:fa:b6:bc:9b:ac:8a:36: ff:cf:6f:b8:d9:61:78:5a:50:f6:bb:b1:9e:aa:3e:82:b0:9a: e4:16:da:c4:13:15:38:a6:82:a5:49:14:a0:f7:be:7e:86:ad: 74:4c:47:e5:ca:78:4f:f6:e7:21:72:c8:93:34:7b:f6:ad:b7: dc:52:d0:8b:a2:e2:c1:b3:4b:58:e1:d1:f6:98:58:7e:69:f8: 76:5c:f2:94:70:b6:56:e7:65:8d:4f:df:5b:71:c9:01:02:64: 0b:9c:0d:eb:40:f7:7d:19:e7:6e:72:d7:a1:b7:aa:8a:b1:85: a3:9a:f5:03:b4:83:a0:c3:18:54:4c:ab:45:0a:95:19:f2:7c: e4:dd:9f:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjdERTExMC8GA1UEBRMoNTdDNTgxNjFCREVDNERDNzlFRjQ4RTIwNUYyQjhEMTIw MjhGMEFFQTAeFw0yNTA0MjUwNjQxNTBaFw0yNTA1MDIwNjQxNTBaMBgxFjAUBgNV BAMTDTY4MGIyZWFlLTZlMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTkCK/wAfD2CMbTvZDSEYYrT38byHTtHAnJadvaeznhMhlfbrY0RQmOR/3Txlm Sd8iNT9L0HWJCouj+5eWi9Fd2gyWLkgoHXA28HzsJbzu96kzXk6KDlIGzJwUu1p7 dhQRHwQGW0UdnMqfNKBWsBNSjER2WFttMEmjw7HoezlrluuKuaNzlM8LNWQPaKug al4POKKzZ7NdiwHztkFt5mATLURUSzHQv5YOeaaFAFqMEF4UnAov3qwJs2SjZs6G LY4GsIxXot15Vzzo5vl+QubI9OfOlZZ4GiowVzQzL3ZAZxACsVmYzfxTgAEp62f/ LfkjmSld9KitMByZ2MkHaM+bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTrEYm6ef 2uymg2use9aWvdrHCA4wHwYDVR0jBBgwFoAUV8WBYb3sTcee9I4gXyuNEgKPCuow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCN0RFLzZDRTZCNDA0RTEz RjExRUZBRjE4ODQxRkM0RjlBRTAyL1Y4V0JZYjNzVGNlZTlJNGdYeXVORWdLUEN1 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjhXQlliM3NUY2VlOUk0Z1h5dU5FZ0tQQ3VvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC N0RFLzZDRTZCNDA0RTEzRjExRUZBRjE4ODQxRkM0RjlBRTAyL1Y4V0JZYjNzVGNl ZTlJNGdYeXVORWdLUEN1by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMbTP+4a0DNWYQtxH4Uu3lKt2MmVpZycQ9INBmnVGMQEG5w8anyKiusk SPGXMwc/6BBNvpeP3fk2wbFFceQ1kkar/WvXcopHj9YItkm2rvCv6Dw5SRMlFyrd o/2iC1XW/fvLbM6zeDPAd+O368ec6oF2QSTETORN+ra8m6yKNv/Pb7jZYXhaUPa7 sZ6qPoKwmuQW2sQTFTimgqVJFKD3vn6GrXRMR+XKeE/25yFyyJM0e/att9xS0Iui 4sGzS1jh0faYWH5p+HZc8pRwtlbnZY1P31txyQECZAucDetA930Z525y16G3qoqx haOa9QO0g6DDGFRMq0UKlRnyfOTdn+c= -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:29 2025 by rpki-client