$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: 08q0qh3BAkhcbfBg4EWonpwgIbEsBRlTsWXwDKSaqxg= Subject key identifier: 7E:D7:F8:FB:8E:77:20:B8:2A:99:87:75:8E:44:9C:C3:70:26:E7:E6 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 58 Signing time: Fri 25 Apr 2025 06:14:22 +0000 Manifest this update: Fri 25 Apr 2025 06:14:21 +0000 Manifest next update: Fri 02 May 2025 06:14:21 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: 4WUrEhu+VKYZoOUQ5xZXBN9DD+cMccekoyfOLIZe8BI=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Apr 25 06:14:21 2025 GMT Not After : May 2 06:14:21 2025 GMT Subject: CN=680b283e-f4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:97:7e:d4:8b:70:99:a2:7a:1a:a8:be:1f: ba:44:ed:49:01:13:42:f2:7e:e2:70:b6:c7:83:8a: 42:15:d2:a9:43:5a:d8:f4:e2:aa:c8:db:c2:7b:2d: 98:eb:d3:1a:74:d0:4f:98:ca:6b:fe:41:6e:f4:6b: d7:08:c2:7b:74:5a:5d:9d:e0:bb:db:ce:47:0d:ea: 1c:c9:cf:ab:c3:95:33:9c:14:f9:31:ae:a9:c0:f8: 4e:c3:6a:dc:78:6c:a2:c3:a5:a3:be:5a:e4:61:cb: 0f:53:86:92:5c:90:fe:7f:36:05:f1:99:e7:65:99: 95:1f:be:5b:a2:e7:27:78:72:e9:0f:e3:c1:fd:82: 69:22:01:f3:b3:19:a1:40:50:f0:b7:5b:a1:26:e6: 0e:5c:1d:be:ca:7a:dd:07:0e:9a:ae:7b:3b:46:19: 44:e4:a8:0a:e5:3d:f5:c9:77:67:b5:b8:67:49:3a: 5a:95:b3:8e:35:7b:d9:48:43:63:8f:d7:60:51:f1: c6:a2:8e:e9:c5:55:28:27:e2:80:0d:0e:56:6f:7e: 51:be:b0:3b:ec:92:fa:46:29:83:38:b1:d2:e0:fc: 8d:23:0b:00:a0:1e:a1:0d:92:0f:9f:33:23:4c:52: 7a:c6:5e:67:fd:e9:86:16:19:c3:c0:e9:0d:48:36: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D7:F8:FB:8E:77:20:B8:2A:99:87:75:8E:44:9C:C3:70:26:E7:E6 X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:e3:43:2d:06:a0:01:44:86:7a:7b:38:8b:64:74:e9:86:08: af:18:b5:53:ed:6e:41:04:70:a3:2d:d9:e8:86:09:fb:2b:a7: 21:aa:24:5c:90:52:23:00:39:ca:ae:38:29:6b:90:ae:bf:e4: 96:ba:fc:2c:99:30:9f:04:95:5e:1d:13:fd:66:1a:7b:8c:1d: 1a:92:1b:46:38:11:09:e6:2a:04:03:6e:3b:40:a6:af:40:b7: 43:47:05:b8:39:4c:82:72:b3:6f:43:da:5a:83:1b:54:f5:4e: 48:e1:d5:f5:41:a6:ac:e0:a9:ed:b5:57:42:b1:7b:27:9b:11: d2:b7:27:0f:14:76:7b:1f:d1:78:d5:05:aa:cd:d0:8b:f2:97: 2d:1a:0f:4e:ba:bf:bd:e5:49:7b:2b:c2:13:7d:33:bc:9d:80: 66:a7:64:a8:07:18:b4:cb:88:8e:10:df:98:8e:59:7d:b9:71: 0f:a5:e9:95:80:5b:1e:b1:e0:7e:ee:5f:41:7a:0b:29:92:8e: e0:36:2b:3c:f1:0a:7d:7e:36:e6:78:a9:76:85:1d:cd:65:35: e0:ab:05:6e:8c:e8:ba:72:1d:4f:e0:1c:bb:9b:b3:6e:73:25: 33:14:fa:cd:ee:91:b3:70:c4:a0:6b:29:02:11:42:a7:ce:52: 32:33:35:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoRjE1RDExNzkwQjBFNzUzNTc0MDY2MTFEQzU3MDU4RjY5 REM1NzhBMDAeFw0yNTA0MjUwNjE0MjFaFw0yNTA1MDIwNjE0MjFaMBgxFjAUBgNV BAMTDTY4MGIyODNlLWY0ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLX5d+1ItwmaJ6Gqi+H7pE7UkBE0LyfuJwtseDikIV0qlDWtj04qrI28J7LZjr 0xp00E+Yymv+QW70a9cIwnt0Wl2d4LvbzkcN6hzJz6vDlTOcFPkxrqnA+E7Datx4 bKLDpaO+WuRhyw9ThpJckP5/NgXxmedlmZUfvlui5yd4cukP48H9gmkiAfOzGaFA UPC3W6Em5g5cHb7Ket0HDpqueztGGUTkqArlPfXJd2e1uGdJOlqVs441e9lIQ2OP 12BR8caijunFVSgn4oANDlZvflG+sDvskvpGKYM4sdLg/I0jCwCgHqENkg+fMyNM UnrGXmf96YYWGcPA6Q1INpM3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUftf4+453 ILgqmYd1jkScw3Am5+YwHwYDVR0jBBgwFoAU8V0ReQsOdTV0BmEdxXBY9p3FeKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFYwUmVRc09kVFYwQm1FZHhYQlk5cDNGZUtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0NCODgyRTdFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRW MEJtRWR4WEJZOXAzRmVLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL/jQy0GoAFEhnp7OItkdOmGCK8YtVPtbkEEcKMt2eiGCfsrpyGqJFyQ UiMAOcquOClrkK6/5Ja6/CyZMJ8ElV4dE/1mGnuMHRqSG0Y4EQnmKgQDbjtApq9A t0NHBbg5TIJys29D2lqDG1T1Tkjh1fVBpqzgqe21V0KxeyebEdK3Jw8Udnsf0XjV BarN0Ivyly0aD066v73lSXsrwhN9M7ydgGanZKgHGLTLiI4Q35iOWX25cQ+l6ZWA Wx6x4H7uX0F6CymSjuA2KzzxCn1+NuZ4qXaFHc1lNeCrBW6M6LpyHU/gHLubs25z JTMU+s3ukbNwxKBrKQIRQqfOUjIzNTQ= -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:30 2025 by rpki-client