$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: 9Mfr5YwJC42GsU7pdBIpk7dAqQiphL7Rq5CRshKzbb0= Subject key identifier: 5D:9E:B2:AE:3C:81:2C:13:EB:CF:3C:DF:61:66:C2:97:2A:D2:19:B2 Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: B6 Signing time: Fri 25 Apr 2025 04:59:49 +0000 Manifest this update: Fri 25 Apr 2025 04:59:49 +0000 Manifest next update: Fri 02 May 2025 04:59:49 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: rYFwKsQn0q/aUUpQfqN3D83tGs8WqGitTRawpLTNVjY=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Apr 25 04:59:49 2025 GMT Not After : May 2 04:59:49 2025 GMT Subject: CN=680b16c5-bc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:b6:59:3d:1a:11:4f:ca:34:e2:c1:a1:ef: ba:08:04:d8:bb:28:d1:45:2e:d2:91:78:9c:1e:95: 5b:c6:0b:cc:22:70:d9:e6:96:89:f3:aa:e9:55:c2: c2:80:48:14:77:ee:27:d6:0f:13:6c:21:9c:9a:4b: fa:cd:a8:ee:ce:b9:3d:87:9b:81:fb:28:e2:ba:75: 64:97:7d:f9:f7:cf:59:07:a3:65:65:02:2e:12:81: 12:38:93:a5:9f:84:a5:17:dc:9f:a4:7d:5b:96:71: 51:38:bd:57:fd:fb:c0:02:d2:21:95:3a:16:a8:24: d0:4c:61:7b:14:10:68:45:36:2d:11:a3:81:e0:b3: af:a6:06:d5:45:db:b2:e9:5d:99:64:6f:b3:e0:6f: 4b:f5:98:48:8f:c5:bd:6d:3c:54:1f:63:d7:d1:c3: be:f0:1c:b7:44:3b:29:d8:6a:02:0b:7f:7e:bb:97: 5d:5d:48:3c:53:e5:01:3f:44:02:77:80:c4:aa:1a: 0c:6a:45:d2:1c:29:20:00:e9:4e:0e:eb:0c:8d:83: ac:5d:d1:47:e1:5f:16:d7:a5:77:76:d6:f7:ae:0c: 07:05:57:62:14:ed:dd:cd:bd:27:47:4c:38:4c:42: 23:33:98:c5:86:3c:2a:10:24:50:ee:2f:71:57:99: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9E:B2:AE:3C:81:2C:13:EB:CF:3C:DF:61:66:C2:97:2A:D2:19:B2 X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:36:2c:3e:1d:54:86:5f:34:5c:db:dd:7b:b6:9b:6b:13:c6: 70:e9:16:48:6c:c2:34:06:17:46:2a:50:c0:9c:2f:48:15:b6: 05:cf:f0:3b:70:2a:30:19:3f:93:30:6b:69:96:98:f0:e5:8b: 41:31:b0:22:ca:87:0b:ac:32:d6:32:72:e3:14:aa:0e:86:18: f5:68:14:01:7e:4d:f8:f4:16:21:4e:53:3b:c3:c9:c6:cf:78: ae:4b:d4:2d:71:ff:bd:1f:79:7a:9f:dc:67:72:21:8c:f4:3c: f7:15:5e:b6:3d:10:f0:2d:c4:50:57:ce:f5:39:65:a6:23:8a: 26:1a:60:e3:b4:74:34:17:57:88:89:fa:60:e7:44:5e:3a:1b: ba:ec:75:95:cd:49:76:d6:1e:c5:c3:4d:0c:83:94:f4:a0:df: 38:1d:57:c3:52:54:d4:1f:bd:f0:b9:c3:14:10:18:6c:ea:b7: 30:2a:17:d7:39:f7:97:be:e8:2f:ac:6c:b9:4b:6c:bf:b8:3c: 25:4c:d6:5f:4d:4f:69:4a:e0:04:a4:b4:8f:31:a7:7d:21:13: 36:d2:34:cd:11:a8:5c:7a:ce:c4:c1:38:57:26:e8:2a:09:f7: 5d:74:5b:76:9a:5f:47:4f:99:88:7f:d5:97:63:72:f7:fe:73: c7:5f:cc:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUwNDI1MDQ1OTQ5WhcNMjUwNTAyMDQ1OTQ5WjAYMRYwFAYD VQQDEw02ODBiMTZjNS1iYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOG2WT0aEU/KNOLBoe+6CATYuyjRRS7SkXicHpVbxgvMInDZ5paJ86rpVcLC gEgUd+4n1g8TbCGcmkv6zajuzrk9h5uB+yjiunVkl335989ZB6NlZQIuEoESOJOl n4SlF9yfpH1blnFROL1X/fvAAtIhlToWqCTQTGF7FBBoRTYtEaOB4LOvpgbVRduy 6V2ZZG+z4G9L9ZhIj8W9bTxUH2PX0cO+8By3RDsp2GoCC39+u5ddXUg8U+UBP0QC d4DEqhoMakXSHCkgAOlODusMjYOsXdFH4V8W16V3dtb3rgwHBVdiFO3dzb0nR0w4 TEIjM5jFhjwqECRQ7i9xV5lU8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2esq48 gSwT688832Fmwpcq0hmyMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcNiw+HVSGXzRc2917tptrE8Zw6RZIbMI0BhdGKlDAnC9IFbYFz/A7 cCowGT+TMGtplpjw5YtBMbAiyocLrDLWMnLjFKoOhhj1aBQBfk349BYhTlM7w8nG z3iuS9Qtcf+9H3l6n9xnciGM9Dz3FV62PRDwLcRQV871OWWmI4omGmDjtHQ0F1eI ifpg50ReOhu67HWVzUl21h7Fw00Mg5T0oN84HVfDUlTUH73wucMUEBhs6rcwKhfX OfeXvugvrGy5S2y/uDwlTNZfTU9pSuAEpLSPMad9IRM20jTNEahces7EwThXJugq CfdddFt2ml9HT5mIf9WXY3L3/nPHX8zZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:39 2025 by rpki-client