$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json) Hash identifier: UWnOAMwUU3DmJVkD5hr5eORIh2A4A2nCKSh9WHqTZtM= Subject key identifier: 6C:E7:1B:48:2B:77:80:E3:A6:BE:DF:26:2B:84:5E:D7:D3:D6:6D:BB Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft Manifest number: 0301 Signing time: Fri 25 Apr 2025 01:00:30 +0000 Manifest this update: Fri 25 Apr 2025 01:00:29 +0000 Manifest next update: Fri 02 May 2025 01:00:29 +0000 Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: q/ShLziqMzxEcUbDL74a6I8v0vk+Eff+uUa/7hu42bQ=) 2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: r+FlKKjUNgnx6Bj8dzyLXGS4dtd9pVHhE7jzwzS2cXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Validity Not Before: Apr 25 01:00:29 2025 GMT Not After : May 2 01:00:29 2025 GMT Subject: CN=680adeae-d7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d8:8a:b4:71:3b:62:aa:87:43:ae:ab:5e:df: f6:9b:ce:e8:62:3b:73:7e:e8:e5:93:a8:99:8c:93: ff:c6:fa:02:3b:e9:85:20:19:6c:c6:dd:a7:30:e1: f4:51:7e:97:b5:28:d6:b0:65:38:0a:3f:76:94:1b: 56:7c:be:18:c6:42:f9:ac:18:25:df:4e:eb:5d:3d: 6a:9e:f0:c6:d8:38:09:63:7f:7c:04:9e:0d:e7:38: 3b:f1:a7:87:97:27:57:57:fd:b7:4e:4e:45:d9:77: a9:da:85:d7:18:af:a4:21:96:67:ea:3c:1d:2a:cd: a7:b6:77:d0:43:37:41:66:b1:d5:9b:85:c4:05:7f: d8:89:9c:a2:2c:1d:a1:b2:3e:75:f6:3a:16:56:c4: 11:28:71:1c:75:f4:0d:9b:41:e8:f7:99:e9:0e:0e: cc:72:f7:c7:96:36:72:a4:26:35:25:ac:70:42:3a: 94:66:87:75:05:8a:40:82:62:19:6a:2f:28:fd:9f: 26:75:34:2c:9e:2a:7e:3b:c7:2b:4d:3e:17:18:09: e7:86:a8:8c:b4:62:e3:0d:de:42:77:54:79:c8:8e: 89:29:34:39:d4:8b:c4:42:94:a8:c4:7b:81:ee:30: 5b:fe:ef:2f:15:a8:c1:b5:62:25:a8:22:f8:53:73: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E7:1B:48:2B:77:80:E3:A6:BE:DF:26:2B:84:5E:D7:D3:D6:6D:BB X509v3 Authority Key Identifier: keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d6:4f:d7:23:2f:cb:9e:71:03:bc:4d:4c:bb:50:6e:ce:4d: 9d:b3:28:ac:a6:62:cf:73:71:2e:cd:fd:47:10:da:97:9f:4d: f2:82:50:b8:0c:3c:f7:06:96:df:eb:c1:cf:bf:b7:85:d0:46: c1:23:29:59:ff:c0:13:06:0c:3c:3b:6a:46:98:d7:fd:3e:84: f7:9b:13:a7:d1:54:87:d5:59:11:2c:5d:f0:30:b3:a4:78:30: d5:4a:c0:36:18:eb:21:08:f2:68:cc:94:1c:41:d6:69:f0:36: 58:39:e9:e4:2c:b4:a2:df:26:87:b7:c0:0d:dd:4c:b7:25:b8: 0e:82:ff:4d:ed:f2:2c:7b:f7:04:b7:1c:5a:47:62:31:0e:e3: 1d:94:ae:6f:9f:79:3b:d1:93:3e:7b:68:75:12:94:7d:80:57: 4f:c8:0f:e2:ce:85:b6:1f:9d:55:ea:70:f0:ee:24:b6:dd:12: 6f:8e:67:84:9a:4c:79:2a:fd:19:7f:cc:48:be:c0:c8:34:5e: f0:b3:3b:7e:9a:48:29:3b:58:2c:3e:f8:74:7b:be:40:27:db: 24:cd:10:a1:68:61:9d:6a:a1:21:2f:91:49:43:6a:b6:9a:b4: b6:22:49:3e:b7:90:de:d0:c9:39:85:ae:21:c0:03:b9:98:08: 93:0a:bd:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3 Q0Y4Qzg4RjgwHhcNMjUwNDI1MDEwMDI5WhcNMjUwNTAyMDEwMDI5WjAYMRYwFAYD VQQDEw02ODBhZGVhZS1kN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9NiKtHE7YqqHQ66rXt/2m87oYjtzfujlk6iZjJP/xvoCO+mFIBlsxt2nMOH0 UX6XtSjWsGU4Cj92lBtWfL4YxkL5rBgl307rXT1qnvDG2DgJY398BJ4N5zg78aeH lydXV/23Tk5F2Xep2oXXGK+kIZZn6jwdKs2ntnfQQzdBZrHVm4XEBX/YiZyiLB2h sj519joWVsQRKHEcdfQNm0Ho95npDg7McvfHljZypCY1JaxwQjqUZod1BYpAgmIZ ai8o/Z8mdTQsnip+O8crTT4XGAnnhqiMtGLjDd5Cd1R5yI6JKTQ51IvEQpSoxHuB 7jBb/u8vFajBtWIlqCL4U3PPOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGznG0gr d4Djpr7fJiuEXtfT1m27MB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIzNC9CMEZGMzBGRUQwMjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2 RnBLTHZsVkJnWEo4LU1pUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi1k/XIy/LnnEDvE1Mu1Buzk2dsyispmLPc3Euzf1HENqXn03yglC4 DDz3Bpbf68HPv7eF0EbBIylZ/8ATBgw8O2pGmNf9PoT3mxOn0VSH1VkRLF3wMLOk eDDVSsA2GOshCPJozJQcQdZp8DZYOenkLLSi3yaHt8AN3Uy3JbgOgv9N7fIse/cE txxaR2IxDuMdlK5vn3k70ZM+e2h1EpR9gFdPyA/izoW2H51V6nDw7iS23RJvjmeE mkx5Kv0Zf8xIvsDINF7wszt+mkgpO1gsPvh0e75AJ9skzRChaGGdaqEhL5FJQ2q2 mrS2Ikk+t5De0Mk5ha4hwAO5mAiTCr2Y -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:48 2025 by rpki-client