$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft File: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft (raw, json) Hash identifier: dC1xfhV3ihhyGKIP2IdCU4fnntATJs2MP+brDHB2eE4= Subject key identifier: F7:A5:29:D2:49:9E:33:D5:D7:82:AB:54:FA:6B:98:56:5F:EA:1E:FB Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B Certificate issuer: /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft Manifest number: 0529 Signing time: Thu 24 Apr 2025 23:20:32 +0000 Manifest this update: Thu 24 Apr 2025 23:20:32 +0000 Manifest next update: Thu 01 May 2025 23:20:32 +0000 Files and hashes: 1: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl (hash: ffJddLt9RCPCB3V5YGT4EugQtnCgTz3sie9TOCDbXrM=) 2: F18DB130603911EF930C0567C4F9AE02.roa (hash: bMyNaPmBlCzUdt5NHJjdyDhr0LajMy+L36w7sDnDjCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Validity Not Before: Apr 24 23:20:32 2025 GMT Not After : May 1 23:20:32 2025 GMT Subject: CN=680ac740-a516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:56:32:70:0c:7d:77:1c:46:3f:61:1c:63: ec:87:4e:1b:17:a5:de:66:79:4c:12:61:7a:fc:26: 03:6e:b8:57:67:15:61:5d:e5:75:ba:94:c4:db:aa: aa:ad:f8:3a:f2:11:4d:0e:ac:5f:0e:89:85:96:56: f3:ad:b4:12:89:ef:79:ad:1e:ab:9b:dd:44:e3:61: 09:3d:4c:1d:91:56:08:f8:34:03:6d:d7:e7:8d:d6: 21:8c:ed:e0:c4:33:79:3e:03:f8:57:66:5e:15:0d: 1d:c4:17:ea:38:69:57:ea:bc:c9:2a:dc:60:23:4e: 16:a1:3f:b3:5b:1d:8d:5c:e5:23:a1:c8:7a:ad:f0: 5d:4f:dd:c7:d2:d1:a7:eb:dc:9f:d1:5c:ef:af:29: f3:ae:ee:35:8c:ee:b6:00:fb:b3:e1:5b:2f:8c:c0: f5:37:50:e1:c5:d5:2f:4b:f6:7b:44:13:7b:61:4d: 13:07:c2:a1:fa:40:e9:b1:de:fa:ae:33:8b:1f:0e: 84:f0:8a:82:f0:02:b8:19:40:15:14:0f:fd:d5:aa: de:45:49:68:82:d0:2f:2f:14:af:47:cc:56:94:11: 8e:ba:e7:1a:01:33:62:32:7b:18:4a:c6:91:ea:b1: 8d:38:33:fb:84:a4:3f:95:72:e0:fd:45:7f:0c:91: b8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A5:29:D2:49:9E:33:D5:D7:82:AB:54:FA:6B:98:56:5F:EA:1E:FB X509v3 Authority Key Identifier: keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:14:c3:28:74:65:3c:98:33:5b:8f:95:0d:ea:31:bd:da:78: 9e:83:00:a3:12:51:6d:99:2d:5c:08:c3:6d:29:06:a8:86:22: fa:1f:43:f5:17:13:ff:7d:97:27:f3:e4:7e:ee:3b:da:1e:4c: d2:45:82:2c:6f:be:3b:14:10:f5:13:85:cc:ef:b0:c5:e8:d7: 4b:4b:ee:88:75:13:02:17:9b:c0:ff:40:08:a9:23:8b:97:49: 36:27:7d:3d:fd:d3:57:23:8e:b9:19:55:39:21:52:fc:67:cb: 53:d7:bf:50:ee:56:60:89:ce:a8:ce:ca:0b:c0:20:ce:b0:a1: 64:08:cd:34:a0:5e:f8:25:ac:42:da:97:92:f7:ad:1d:c8:a7: 2d:02:b9:b6:a1:c4:f0:1f:27:0a:31:4c:5f:d6:97:ec:32:12: 56:4a:a6:d1:56:5a:d6:2e:bb:d6:7b:a9:95:49:91:08:f6:9d: dc:70:ac:e8:a8:97:c7:5c:de:dc:8d:93:df:ee:ad:3a:1a:10: 4e:0a:52:ba:a9:60:1c:02:5a:80:0e:d2:d1:42:b0:cb:9d:2a: 92:8d:5a:ab:4a:d3:8b:25:e3:41:e4:42:64:c4:1b:1e:ea:9c: cc:d5:dc:00:ac:e3:56:7c:83:36:1d:46:9f:2b:6a:8e:c1:16: ac:e7:84:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDhCQzAxQ0VBNDREM0VEODhGNDE1MzE3MkI3OTI0NTY3 MTVDNTI2MEIwHhcNMjUwNDI0MjMyMDMyWhcNMjUwNTAxMjMyMDMyWjAYMRYwFAYD VQQDEw02ODBhYzc0MC1hNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBFWMnAMfXccRj9hHGPsh04bF6XeZnlMEmF6/CYDbrhXZxVhXeV1upTE26qq rfg68hFNDqxfDomFllbzrbQSie95rR6rm91E42EJPUwdkVYI+DQDbdfnjdYhjO3g xDN5PgP4V2ZeFQ0dxBfqOGlX6rzJKtxgI04WoT+zWx2NXOUjoch6rfBdT93H0tGn 69yf0Vzvrynzru41jO62APuz4VsvjMD1N1DhxdUvS/Z7RBN7YU0TB8Kh+kDpsd76 rjOLHw6E8IqC8AK4GUAVFA/91areRUlogtAvLxSvR8xWlBGOuucaATNiMnsYSsaR 6rGNODP7hKQ/lXLg/UV/DJG41QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPelKdJJ njPV14KrVPprmFZf6h77MB8GA1UdIwQYMBaAFIvAHOpE0+2I9BUxcreSRWcVxSYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni9GQjU5MzQ0RUZC MUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZajBGVEZ5dDVKRlp4WEZK Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k4QWM2a1RUN1lqMEZURnl0NUpGWnhYRkpncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni9GQjU5MzQ0RUZCMUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZ ajBGVEZ5dDVKRlp4WEZKZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNFMModGU8mDNbj5UN6jG92niegwCjElFtmS1cCMNtKQaohiL6H0P1 FxP/fZcn8+R+7jvaHkzSRYIsb747FBD1E4XM77DF6NdLS+6IdRMCF5vA/0AIqSOL l0k2J309/dNXI465GVU5IVL8Z8tT179Q7lZgic6ozsoLwCDOsKFkCM00oF74JaxC 2peS960dyKctArm2ocTwHycKMUxf1pfsMhJWSqbRVlrWLrvWe6mVSZEI9p3ccKzo qJfHXN7cjZPf7q06GhBOClK6qWAcAlqADtLRQrDLnSqSjVqrStOLJeNB5EJkxBse 6pzM1dwArONWfIM2HUafK2qOwRas54RV -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:36 2025 by rpki-client