$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json) Hash identifier: p8pPymFZQcQy51yK7aUPqstbCSuvwnMYlg8yNll27ys= Subject key identifier: C4:63:A8:71:56:BA:80:9B:34:D3:DD:A7:9C:CD:79:A1:09:41:94:24 Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Certificate serial: 0AEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft Manifest number: 0AE5 Signing time: Thu 24 Apr 2025 19:17:14 +0000 Manifest this update: Thu 24 Apr 2025 19:17:14 +0000 Manifest next update: Thu 01 May 2025 19:17:14 +0000 Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: yoa5S9XRa354Su+cdTplKao4eBOYy6sUMaLb98S0j80=) 2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: d1emA2UMoO8VznsV+Ait8FlVXTOyXdepIAgXYTBBJeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2796 (0xaec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Validity Not Before: Apr 24 19:17:14 2025 GMT Not After : May 1 19:17:14 2025 GMT Subject: CN=680a8e3a-cfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:57:71:5b:f2:22:83:07:13:7e:20:8f:6d: 52:64:e5:f7:7f:83:e2:d3:b5:47:c0:7d:92:d4:75: f4:88:aa:7c:93:56:fd:22:53:8e:33:89:31:4a:00: 43:6f:93:63:64:b3:48:5d:4a:89:9d:c4:50:eb:52: 4f:55:c4:9f:5d:d8:cd:3f:9c:02:6e:cd:76:59:94: be:91:53:d4:c5:8f:fa:37:db:21:41:f3:47:18:13: 3d:0d:c4:42:60:b0:8a:6f:3c:62:9d:72:bb:c2:fe: 5c:0a:93:87:a4:2a:bb:da:1e:63:8a:7a:46:fc:71: 2e:1d:1a:86:82:a7:60:dd:e9:c0:f0:0a:65:d9:6e: c9:23:64:ce:77:46:89:3c:64:a6:8d:5c:aa:62:26: 9e:32:c6:85:50:0d:d9:92:59:48:17:5f:01:d5:ce: 73:b1:e6:c1:de:58:10:7a:d4:c0:e6:a2:63:09:40: 70:bd:6d:96:a2:1e:98:39:46:d7:0d:ea:36:15:9f: ff:6e:a6:6a:c7:73:c9:4b:bd:08:ca:59:4f:64:3d: 03:0f:92:70:c8:61:11:5b:85:77:11:33:da:74:7e: 0b:1a:6e:77:27:17:78:bb:ab:cf:19:65:22:83:79: 06:01:54:47:77:60:5d:13:a8:ad:ba:ea:6a:f1:fe: bd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:63:A8:71:56:BA:80:9B:34:D3:DD:A7:9C:CD:79:A1:09:41:94:24 X509v3 Authority Key Identifier: keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a0:6b:67:61:c9:29:d5:a2:e1:56:33:77:07:d2:ed:0b:2b: 99:9c:1f:33:2e:5a:50:f1:e2:d1:59:0b:dc:29:c0:61:22:3f: b5:7c:6f:60:2b:cb:80:14:82:96:79:cd:9f:a8:db:39:10:89: bc:b4:87:45:03:91:d1:92:f0:34:d9:62:72:dd:02:bf:53:d5: 04:13:90:9a:1f:0f:5d:e3:e9:61:a9:fa:b6:ba:f0:9f:b9:f8: ab:48:dd:1d:c5:77:22:e0:73:cd:0b:15:12:f8:db:6b:77:1c: 62:da:cd:dd:a0:cf:85:36:09:de:d6:d3:39:3e:2d:69:f0:8c: 01:75:70:eb:b3:06:52:a9:14:e6:d8:ec:19:51:b2:50:10:e3: 6e:b3:b3:54:00:23:c8:87:24:e8:99:aa:43:f6:ab:6a:fc:44: b4:fa:d9:a3:0f:5e:4e:92:cc:89:65:05:05:aa:dd:c5:d7:63: a2:79:23:0b:df:fb:49:a8:c7:84:10:e5:80:e9:22:fc:30:68: 79:47:9a:21:17:90:bc:eb:2f:1d:bc:73:10:87:02:45:2b:be: d5:b5:22:23:a6:29:de:7d:74:e8:01:29:c1:a1:16:8a:12:a5: 4b:8e:e3:7e:0a:d3:52:bb:11:56:50:fe:6c:f6:47:27:32:e9: 34:0d:03:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw RjcyODdDOUEwHhcNMjUwNDI0MTkxNzE0WhcNMjUwNTAxMTkxNzE0WjAYMRYwFAYD VQQDEw02ODBhOGUzYS1jZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kNXcVvyIoMHE34gj21SZOX3f4Pi07VHwH2S1HX0iKp8k1b9IlOOM4kxSgBD b5NjZLNIXUqJncRQ61JPVcSfXdjNP5wCbs12WZS+kVPUxY/6N9shQfNHGBM9DcRC YLCKbzxinXK7wv5cCpOHpCq72h5jinpG/HEuHRqGgqdg3enA8Apl2W7JI2TOd0aJ PGSmjVyqYiaeMsaFUA3ZkllIF18B1c5zsebB3lgQetTA5qJjCUBwvW2Woh6YOUbX Deo2FZ//bqZqx3PJS70IyllPZD0DD5JwyGERW4V3ETPadH4LGm53Jxd4u6vPGWUi g3kGAVRHd2BdE6ituupq8f69gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRjqHFW uoCbNNPdp5zNeaEJQZQkMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1 QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH LXEzSkl6aUxtR1lQY29mSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIoGtnYckp1aLhVjN3B9LtCyuZnB8zLlpQ8eLRWQvcKcBhIj+1fG9g K8uAFIKWec2fqNs5EIm8tIdFA5HRkvA02WJy3QK/U9UEE5CaHw9d4+lhqfq2uvCf ufirSN0dxXci4HPNCxUS+Ntrdxxi2s3doM+FNgne1tM5Pi1p8IwBdXDrswZSqRTm 2OwZUbJQEONus7NUACPIhyTomapD9qtq/ES0+tmjD15OksyJZQUFqt3F12OieSML 3/tJqMeEEOWA6SL8MGh5R5ohF5C86y8dvHMQhwJFK77VtSIjpinefXToASnBoRaK EqVLjuN+CtNSuxFWUP5s9kcnMuk0DQPM -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:36 2025 by rpki-client