$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: mKm/JhbCZZMt4N6Tq82rfBR2DDQmagmGtDNfbJIjRZ4= Subject key identifier: 23:10:1D:82:FD:B3:95:FB:1B:18:75:74:C3:03:6D:66:31:28:3B:50 Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 1444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 1428 Signing time: Mon 28 Apr 2025 17:09:35 +0000 Manifest this update: Mon 28 Apr 2025 17:09:34 +0000 Manifest next update: Mon 05 May 2025 17:09:34 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: AgGJU5llebK0BWd9UmyKP9wgwpFQUuvSzmqTH1wBQmk=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: TyzdfixbvhgTgVbeTj4apy/zB+wf6IDh1/Lzfu3rZJM=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: 0LjZpONzgJ6xRmwAyv6QVE86pcOrLtlD9gU4D1tfLto=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: z0fyXCO60lkejMfyEE4mQL9l0P7nQ3XY65wfTKmQOmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5188 (0x1444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Apr 28 17:09:34 2025 GMT Not After : May 5 17:09:34 2025 GMT Subject: CN=680fb64e-ebae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:6f:e8:51:28:31:12:0a:aa:6f:4f:aa:2d: 02:d1:21:89:06:18:de:ca:04:e3:f4:7d:bc:d8:2c: e3:77:f8:14:b0:e8:51:1c:2f:02:70:ea:6e:0f:87: 99:5b:f3:81:1f:99:72:7d:0d:f8:55:6b:ec:b3:39: 8b:38:37:1c:a9:48:96:69:1c:4f:eb:a3:f9:71:58: 6a:5d:6c:83:5c:4d:d4:3c:92:0f:d4:55:99:5a:7f: ab:8d:fb:7f:ef:bd:42:ca:b1:7e:7f:59:26:b4:35: 32:97:7a:03:5d:e3:6a:b0:3b:12:62:86:6f:fb:9b: f2:7c:22:69:ef:06:d2:47:dc:39:9d:1c:fb:80:8a: c0:d9:0e:87:33:a5:9f:b6:e0:e4:14:f7:60:62:6d: 09:e2:80:b4:bf:bd:13:9b:58:56:39:67:bc:39:65: 6d:da:18:ae:ad:d2:9f:a8:fa:9f:57:e7:48:cc:d1: 1d:99:4c:28:24:a2:b7:37:0b:d9:2e:9b:d8:00:89: 5a:85:34:ee:54:9c:72:3c:a4:96:5b:0b:67:9f:88: 11:3d:16:49:15:ca:15:0f:c5:83:1c:18:1a:5e:4e: 34:8c:8c:bd:3b:67:4d:27:fe:70:3b:0d:6f:86:96: c1:09:5d:37:4a:0f:30:8e:31:24:21:d0:f8:4a:b7: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:10:1D:82:FD:B3:95:FB:1B:18:75:74:C3:03:6D:66:31:28:3B:50 X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:09:39:5e:0a:96:38:b8:8d:3c:1b:50:7d:1b:fe:d6:76:fc: c2:f5:0a:fa:43:bd:37:66:5f:7b:da:81:50:91:fa:1c:a5:34: 4f:1d:8e:77:35:63:ef:c3:9c:9e:c0:74:c5:10:17:a2:6f:0c: 09:d8:33:7f:e6:09:62:c1:b6:ca:32:ff:ba:2b:c6:a3:f0:07: ce:c8:39:7f:95:be:cf:5b:07:92:d7:2b:cb:80:7d:7d:99:0f: ce:58:bf:ba:05:1d:94:a8:7d:81:36:8a:7d:61:d0:42:78:c3: e4:24:7e:b5:1e:48:78:31:db:c1:6a:82:ad:33:a8:0b:32:75: a5:8e:d8:bf:ed:27:6d:a4:99:f5:5e:7d:ef:e6:5d:4e:3e:80: af:32:b1:a3:89:15:0f:1d:37:f5:5a:7b:26:e2:2d:24:d5:ca: 0d:d9:29:2b:e6:34:93:65:94:bc:0a:55:6e:58:d1:02:35:08: f0:32:ae:41:2a:95:32:97:80:24:13:e2:e4:83:fe:65:64:92: be:6a:af:9e:ee:61:e7:fb:ca:04:10:d4:97:28:43:6a:6a:bc: 10:a1:86:cc:6a:03:72:c3:db:75:7b:f0:66:b1:31:d8:44:ee: 27:5f:ae:b0:a3:28:14:5e:3b:3e:cb:69:5f:56:da:48:c5:7f: b9:c1:83:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUwNDI4MTcwOTM0WhcNMjUwNTA1MTcwOTM0WjAYMRYwFAYD VQQDEw02ODBmYjY0ZS1lYmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5Rv6FEoMRIKqm9Pqi0C0SGJBhjeygTj9H282Czjd/gUsOhRHC8CcOpuD4eZ W/OBH5lyfQ34VWvsszmLODccqUiWaRxP66P5cVhqXWyDXE3UPJIP1FWZWn+rjft/ 771CyrF+f1kmtDUyl3oDXeNqsDsSYoZv+5vyfCJp7wbSR9w5nRz7gIrA2Q6HM6Wf tuDkFPdgYm0J4oC0v70Tm1hWOWe8OWVt2hiurdKfqPqfV+dIzNEdmUwoJKK3NwvZ LpvYAIlahTTuVJxyPKSWWwtnn4gRPRZJFcoVD8WDHBgaXk40jIy9O2dNJ/5wOw1v hpbBCV03Sg8wjjEkIdD4SrcthQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMQHYL9 s5X7Gxh1dMMDbWYxKDtQMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbCTleCpY4uI08G1B9G/7WdvzC9Qr6Q703Zl972oFQkfocpTRPHY53 NWPvw5yewHTFEBeibwwJ2DN/5gliwbbKMv+6K8aj8AfOyDl/lb7PWweS1yvLgH19 mQ/OWL+6BR2UqH2BNop9YdBCeMPkJH61Hkh4MdvBaoKtM6gLMnWljti/7SdtpJn1 Xn3v5l1OPoCvMrGjiRUPHTf1Wnsm4i0k1coN2Skr5jSTZZS8ClVuWNECNQjwMq5B KpUyl4AkE+Lkg/5lZJK+aq+e7mHn+8oEENSXKENqarwQoYbMagNyw9t1e/BmsTHY RO4nX66woygUXjs+y2lfVtpIxX+5wYNP -----END CERTIFICATE-----Generated at Wed Apr 30 14:46:39 2025 by rpki-client