$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: TGVFxBNDKkEyc0uaEkjFpqc+vVSVIe5A5v2gNXH8RCs= Subject key identifier: 89:F8:FF:BC:0B:52:97:C6:47:95:DA:D5:AD:FB:1C:92:CE:72:47:73 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 01CD Signing time: Fri 25 Apr 2025 02:08:01 +0000 Manifest this update: Fri 25 Apr 2025 02:08:00 +0000 Manifest next update: Fri 02 May 2025 02:08:00 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: pakBp+r/K48deiezxFjk5/1M5uukXHUiwBIuZGgeax8=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Apr 25 02:08:00 2025 GMT Not After : May 2 02:08:00 2025 GMT Subject: CN=680aee80-4ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:de:50:c6:f4:9e:95:99:b4:6f:5c:f5:67: 68:a4:ba:1c:5e:27:96:e9:65:a8:4a:d2:b2:5b:2f: dc:9f:d1:2a:1c:48:9d:46:6a:16:cf:4d:6c:75:fa: ff:fb:90:e2:92:15:00:10:ec:e8:01:2a:cf:d3:74: a9:20:5a:8c:d7:d1:2b:08:69:74:3f:0e:89:bb:a3: 0f:8a:55:66:65:8e:ec:24:06:08:46:19:85:e4:02: 86:72:27:75:0d:6a:c2:c0:7b:ba:4e:35:33:a9:c8: d5:c5:59:aa:4b:5d:2b:fa:61:05:d8:2a:a0:1c:5f: a7:d3:e0:81:47:cc:7d:21:f1:24:bc:c4:34:79:65: e7:2c:cc:ad:cd:52:4a:21:c9:6f:07:dc:0b:56:41: 72:10:f1:68:0a:fe:67:72:46:e6:9a:09:d1:7a:26: 6b:85:de:b0:94:60:69:c5:b5:9d:ae:e5:cc:a1:c8: 8d:c6:06:e6:1c:03:22:e1:a5:76:dd:b4:93:a3:9e: ef:08:3e:5f:c1:7f:90:b3:01:e1:70:99:da:62:ee: fa:30:64:cc:f2:6b:dd:a0:e2:28:47:27:15:43:c4: 44:43:cf:33:f7:cb:e8:a8:2f:71:f0:8a:5c:d8:95: 7e:96:c7:23:45:25:32:f0:b8:d0:cc:1d:81:b7:dc: 0e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F8:FF:BC:0B:52:97:C6:47:95:DA:D5:AD:FB:1C:92:CE:72:47:73 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c5:5c:4e:db:39:52:27:19:f8:be:df:8e:33:8a:b9:02:b2: e1:2c:76:6f:69:19:89:d3:86:fb:07:26:48:06:74:98:8a:51: 07:d7:b1:3c:5e:fc:97:63:81:75:c9:64:ec:06:fb:21:13:a0: 52:c7:10:38:e8:3f:f3:ad:f4:93:7e:0b:98:d5:fb:d8:5a:d2: f7:66:9c:94:a2:6e:ef:fc:fe:fb:7d:6c:6c:e3:34:e8:07:de: 34:a9:c1:9d:51:59:1e:bb:02:75:dd:4f:5c:b1:ed:55:92:7a: 1e:e9:a0:b0:8f:2f:4e:e2:54:c9:db:f5:f6:4f:9c:e6:72:07: 70:58:48:e7:95:b0:f0:08:30:c9:ee:f9:21:ff:be:a5:fa:25: d2:de:48:a4:8d:78:03:4d:0f:cc:1d:df:fc:cf:88:13:ad:05: 4c:7e:5d:e3:43:72:e5:70:8d:93:ed:b6:3f:27:3d:e8:8c:b5: a6:6d:d5:25:a4:fa:cf:d3:55:1a:f7:a1:32:53:ab:2c:25:5a: 6c:7d:70:a3:7c:ff:9a:3a:ce:07:5d:44:35:4f:a0:45:f4:39: 65:af:2c:fb:82:2c:23:1a:a6:07:c7:e9:52:ec:94:fd:6d:a6: 29:b9:7e:49:41:bf:cf:e1:4b:3d:5c:f8:17:04:f7:5a:74:ae: 8f:ab:df:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUwNDI1MDIwODAwWhcNMjUwNTAyMDIwODAwWjAYMRYwFAYD VQQDEw02ODBhZWU4MC00YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkveUMb0npWZtG9c9WdopLocXieW6WWoStKyWy/cn9EqHEidRmoWz01sdfr/ +5DikhUAEOzoASrP03SpIFqM19ErCGl0Pw6Ju6MPilVmZY7sJAYIRhmF5AKGcid1 DWrCwHu6TjUzqcjVxVmqS10r+mEF2CqgHF+n0+CBR8x9IfEkvMQ0eWXnLMytzVJK IclvB9wLVkFyEPFoCv5nckbmmgnReiZrhd6wlGBpxbWdruXMociNxgbmHAMi4aV2 3bSTo57vCD5fwX+QswHhcJnaYu76MGTM8mvdoOIoRycVQ8REQ88z98voqC9x8Ipc 2JV+lscjRSUy8LjQzB2Bt9wO+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIn4/7wL UpfGR5Xa1a37HJLOckdzMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYxVxO2zlSJxn4vt+OM4q5ArLhLHZvaRmJ04b7ByZIBnSYilEH17E8 XvyXY4F1yWTsBvshE6BSxxA46D/zrfSTfguY1fvYWtL3ZpyUom7v/P77fWxs4zTo B940qcGdUVkeuwJ13U9cse1Vknoe6aCwjy9O4lTJ2/X2T5zmcgdwWEjnlbDwCDDJ 7vkh/76l+iXS3kikjXgDTQ/MHd/8z4gTrQVMfl3jQ3LlcI2T7bY/Jz3ojLWmbdUl pPrP01Ua96EyU6ssJVpsfXCjfP+aOs4HXUQ1T6BF9Dllryz7giwjGqYHx+lS7JT9 baYpuX5JQb/P4Us9XPgXBPdadK6Pq99B -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:51 2025 by rpki-client