$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: vXXbjQhIeGrkhF2FR+iJ0aSQoEKoqoxY+qZZoElZioQ= Subject key identifier: BC:D4:AC:E6:F6:F9:C9:91:9B:0A:94:73:5D:C1:6E:4E:3C:47:21:CF Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 075B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0C31 Signing time: Thu 24 Apr 2025 21:25:50 +0000 Manifest this update: Thu 24 Apr 2025 21:25:49 +0000 Manifest next update: Thu 01 May 2025 21:25:49 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: +DkcFhdnM4YuvXFotMBI8stfMweADKI9Lrm9/Gu1RvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Apr 24 21:25:49 2025 GMT Not After : May 1 21:25:49 2025 GMT Subject: CN=680aac5d-4843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:07:04:bb:80:71:df:5b:ec:95:e5:3e:03: 28:56:d3:20:4a:69:bb:63:51:82:9c:51:cf:97:ac: 56:ec:cb:b9:93:68:df:0a:76:77:18:4b:9e:5d:52: a1:bd:94:f4:a6:b2:68:78:35:78:61:9c:71:34:64: b5:f9:d3:50:ab:3c:d2:37:6f:3a:a4:35:2b:5d:a4: ec:26:a1:39:0a:9a:b8:a7:ce:8e:b5:bd:f7:d5:53: 7f:2e:5d:92:e6:92:86:f5:cc:33:67:c3:69:92:79: 5e:37:e3:39:89:13:e0:7a:a3:e5:26:e8:11:9a:ac: 79:41:a7:a0:47:bf:db:f2:cc:d4:81:0f:cb:10:dd: 39:90:80:b5:9b:b0:03:2c:6e:40:f3:e0:20:50:0e: 92:26:29:2b:4c:db:1a:c1:3d:83:f6:81:86:be:19: 5f:e4:f2:23:d6:b2:76:19:fe:f1:3e:20:68:3d:e8: e5:0f:6e:37:7c:ed:4c:3d:b1:71:2c:ab:30:bb:bc: 20:d1:8d:a3:89:c9:ee:3f:36:8e:11:80:87:ef:ad: f1:54:d3:eb:fe:48:e4:6b:69:42:9d:d4:1e:9d:17: 4b:8a:b6:33:50:d2:66:fb:9d:39:97:71:ad:10:d3: 09:a7:6f:55:e0:86:28:a6:e1:86:f2:61:2c:9d:ea: a0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D4:AC:E6:F6:F9:C9:91:9B:0A:94:73:5D:C1:6E:4E:3C:47:21:CF X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:3a:e6:e5:a4:f0:9e:29:35:63:57:df:cd:6d:38:d6:61:d3: 5a:47:a1:f8:ba:20:0f:20:62:f9:1d:0a:7f:3c:13:b3:12:ab: 52:f4:15:a7:c7:4b:1b:1d:87:7d:38:88:ac:07:b3:91:e7:30: ac:c3:61:95:03:c6:35:b3:c5:09:14:6c:53:3f:f7:0d:42:25: 7f:51:29:4d:d7:2f:89:c6:c6:77:34:f8:70:45:da:b0:26:44: b6:8a:ce:9d:55:fb:8e:d4:2a:c7:bb:4c:f1:8a:30:72:49:b0: 2d:6b:fd:b8:30:c1:b4:73:f8:ed:de:76:53:8b:e3:75:35:e1: 28:64:3b:07:5e:b0:80:a0:96:e1:85:82:45:22:bb:8c:0f:7b: 5d:78:46:d7:89:fb:a1:02:d4:c1:74:68:b9:b4:85:22:9d:37: d7:ab:68:52:ca:f0:ea:64:2d:08:85:b8:30:af:da:0a:0e:d3: 6c:a6:f0:93:60:0e:c0:d0:b1:7f:85:56:b3:07:1b:f5:dc:e8: 2f:bd:2e:a9:e0:a0:87:60:72:af:be:7c:7f:87:aa:7d:4c:14: 1c:a7:a8:9e:d3:f2:9f:33:e3:de:d2:0b:e1:33:72:ac:67:fb: 83:2b:f5:2a:d9:5c:63:b2:cf:ad:40:e4:40:6a:3d:71:1c:83: af:cc:08:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUwNDI0MjEyNTQ5WhcNMjUwNTAxMjEyNTQ5WjAYMRYwFAYD VQQDEw02ODBhYWM1ZC00ODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtMHBLuAcd9b7JXlPgMoVtMgSmm7Y1GCnFHPl6xW7Mu5k2jfCnZ3GEueXVKh vZT0prJoeDV4YZxxNGS1+dNQqzzSN286pDUrXaTsJqE5Cpq4p86Otb331VN/Ll2S 5pKG9cwzZ8NpknleN+M5iRPgeqPlJugRmqx5QaegR7/b8szUgQ/LEN05kIC1m7AD LG5A8+AgUA6SJikrTNsawT2D9oGGvhlf5PIj1rJ2Gf7xPiBoPejlD243fO1MPbFx LKswu7wg0Y2jicnuPzaOEYCH763xVNPr/kjka2lCndQenRdLirYzUNJm+505l3Gt ENMJp29V4IYopuGG8mEsneqg5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzUrOb2 +cmRmwqUc13Bbk48RyHPMB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZOublpPCeKTVjV9/NbTjWYdNaR6H4uiAPIGL5HQp/PBOzEqtS9BWn x0sbHYd9OIisB7OR5zCsw2GVA8Y1s8UJFGxTP/cNQiV/USlN1y+JxsZ3NPhwRdqw JkS2is6dVfuO1CrHu0zxijBySbAta/24MMG0c/jt3nZTi+N1NeEoZDsHXrCAoJbh hYJFIruMD3tdeEbXifuhAtTBdGi5tIUinTfXq2hSyvDqZC0Ihbgwr9oKDtNspvCT YA7A0LF/hVazBxv13OgvvS6p4KCHYHKvvnx/h6p9TBQcp6ie0/KfM+Pe0gvhM3Ks Z/uDK/Uq2Vxjss+tQORAaj1xHIOvzAje -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:56 2025 by rpki-client