$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: GZmCACTNtskQS+yxaLrHrIjfgAgJMCAtRBpke8cfO0U= Subject key identifier: 12:31:90:FD:DB:A4:D0:0F:45:BB:D5:5C:64:0B:FB:01:B7:40:00:C0 Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0C3B Signing time: Thu 24 Apr 2025 18:22:37 +0000 Manifest this update: Thu 24 Apr 2025 18:22:36 +0000 Manifest next update: Thu 01 May 2025 18:22:36 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: C80s+zxZcVt0OKcQkIPFQOXu3tkvn7cJy8Q3SIUTK38=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Apr 24 18:22:36 2025 GMT Not After : May 1 18:22:36 2025 GMT Subject: CN=680a816d-3d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:6d:06:0a:69:7b:7b:d4:03:aa:15:54:48: 20:6e:54:d6:52:34:39:29:6d:5c:f4:43:23:e4:5f: b6:9c:4d:4a:b3:10:ce:50:25:fc:05:ea:34:2d:49: 37:b4:1e:02:86:81:1e:6b:de:ac:4a:69:9d:22:0f: ff:91:cb:1f:fc:39:cc:46:3d:de:00:73:3e:1a:19: b7:7d:ff:f5:60:7b:60:3e:d0:e3:e9:27:b9:d6:b4: 48:a4:55:0a:cc:5d:25:8b:32:3d:5f:9f:65:1d:b3: ba:e2:3a:7b:d2:67:f0:37:74:c2:52:68:90:15:58: 95:4f:ff:4b:5c:f0:91:af:d6:e4:d5:8f:46:70:ee: 72:97:ac:6f:3f:cd:10:5d:f7:00:3e:05:4a:f3:88: 99:de:00:18:e3:c7:3e:89:7a:34:16:2e:00:d5:52: d7:83:65:49:b0:ab:22:2a:2e:61:ea:00:24:c8:1a: 51:14:49:f7:40:3d:62:c9:fe:97:a5:4c:11:f6:7e: 5e:8d:a1:4f:7b:5a:6a:fc:6d:3c:8b:fb:da:00:bc: ce:af:c8:1e:fa:ab:dd:bf:5a:5c:ec:65:6f:5d:07: 6c:aa:b7:6c:0d:d7:b8:95:44:01:41:3b:ea:6e:b2: 1a:67:d5:9d:6d:1f:ab:96:84:c5:62:67:4a:b7:00: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:31:90:FD:DB:A4:D0:0F:45:BB:D5:5C:64:0B:FB:01:B7:40:00:C0 X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c5:6e:3d:7e:61:20:9d:4f:e6:b2:9d:b9:c9:33:1d:6e:fb: 25:be:8d:84:89:a7:4e:d7:75:09:af:44:42:3c:94:d1:12:9e: 3b:4a:74:93:0e:40:cc:92:7e:a0:56:37:99:47:94:10:80:8e: 59:dd:c4:ee:a0:94:42:65:67:c7:b2:2b:d8:4e:39:e9:e6:fb: 83:77:fa:20:61:e6:27:86:94:38:c2:b3:dd:4d:36:9d:5f:fb: aa:a8:af:81:da:5a:0c:d6:05:b4:68:28:c4:21:51:82:07:5e: c5:ee:9b:35:2e:02:93:09:c7:93:a5:af:75:9c:5e:5e:fc:ce: 17:34:7b:ed:5b:a1:d4:45:59:42:59:81:22:01:63:3a:ff:62: 17:99:90:d4:b7:85:95:6b:ea:27:ff:36:41:01:ca:ae:4a:d0: 78:d5:d3:5a:f9:91:4d:fe:cc:1b:0b:9b:16:b9:3b:56:ad:fd: 31:2c:71:d4:46:37:53:01:f3:1f:4f:2b:35:ad:2e:5d:1a:e1: 8b:c8:f9:29:5b:c0:26:38:36:dc:d7:65:9d:40:27:ea:75:c1: 8b:50:56:8f:64:35:a0:e0:a3:ad:5e:aa:1b:c6:1d:ac:d3:a3: 3c:6c:1f:74:ad:80:7e:3c:06:e6:af:24:f8:e3:c6:66:3a:65: 24:76:5e:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUwNDI0MTgyMjM2WhcNMjUwNTAxMTgyMjM2WjAYMRYwFAYD VQQDEw02ODBhODE2ZC0zZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKNtBgppe3vUA6oVVEggblTWUjQ5KW1c9EMj5F+2nE1KsxDOUCX8Beo0LUk3 tB4ChoEea96sSmmdIg//kcsf/DnMRj3eAHM+Ghm3ff/1YHtgPtDj6Se51rRIpFUK zF0lizI9X59lHbO64jp70mfwN3TCUmiQFViVT/9LXPCRr9bk1Y9GcO5yl6xvP80Q XfcAPgVK84iZ3gAY48c+iXo0Fi4A1VLXg2VJsKsiKi5h6gAkyBpRFEn3QD1iyf6X pUwR9n5ejaFPe1pq/G08i/vaALzOr8ge+qvdv1pc7GVvXQdsqrdsDde4lUQBQTvq brIaZ9WdbR+rloTFYmdKtwCq4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIxkP3b pNAPRbvVXGQL+wG3QADAMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9xW49fmEgnU/msp25yTMdbvslvo2EiadO13UJr0RCPJTREp47SnST DkDMkn6gVjeZR5QQgI5Z3cTuoJRCZWfHsivYTjnp5vuDd/ogYeYnhpQ4wrPdTTad X/uqqK+B2loM1gW0aCjEIVGCB17F7ps1LgKTCceTpa91nF5e/M4XNHvtW6HURVlC WYEiAWM6/2IXmZDUt4WVa+on/zZBAcquStB41dNa+ZFN/swbC5sWuTtWrf0xLHHU RjdTAfMfTys1rS5dGuGLyPkpW8AmODbc12WdQCfqdcGLUFaPZDWg4KOtXqobxh2s 06M8bB90rYB+PAbmryT448ZmOmUkdl4e -----END CERTIFICATE-----Generated at Sat Apr 26 05:20:55 2025 by rpki-client