$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: +dDrVh9MP4lJA5KgBvVylQAEPHSfv5sINqr0yUa4P34= Subject key identifier: D5:7B:90:92:15:98:2F:B7:8A:50:C7:5A:1F:31:D2:D8:D5:33:4F:86 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 0133 Signing time: Sun 15 Jun 2025 03:43:48 +0000 Manifest this update: Sun 15 Jun 2025 03:43:46 +0000 Manifest next update: Sun 22 Jun 2025 03:43:46 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: 90yc5J6yuqesc709HHz0ah7pwdeuEakoWOgLhR5eAzE=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: C0wDD+AgzZ7rjhppUX9KQGRP55NqDPFQsX30TucXWZw=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: A+eIQ7dJ6b4jdnXFCKHgDz5bYK+SgjdqalthmATouvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 03:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Jun 15 03:43:46 2025 GMT Not After : Jun 22 03:43:46 2025 GMT Subject: CN=684e4173-1935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:88:b4:9e:a5:1c:fa:30:58:c8:03:13:de: 4b:78:2e:4e:d9:ca:cb:fd:e4:fd:53:97:59:aa:b3: 77:14:e3:58:ca:11:fa:56:4c:11:44:b4:5b:a8:e5: 16:b0:85:9e:eb:5b:40:4a:47:94:36:bd:7e:f0:b5: 95:a1:ca:55:f5:e4:8a:57:ef:c3:11:d4:43:ec:68: 58:6e:57:4f:06:cb:a7:ca:2b:0d:55:9d:2e:cb:b0: ec:18:ac:21:78:89:1c:0d:4e:66:f9:1d:70:d1:24: bf:d2:bf:7a:49:a8:0a:5c:2a:7c:72:6b:72:04:1a: 65:f9:02:c5:c9:fb:41:a4:4a:40:89:d2:1a:4f:34: 99:27:94:a4:d8:1f:65:9b:f6:35:ec:fb:a5:ac:59: c2:62:32:5f:8f:43:54:14:1d:65:01:27:df:79:2c: 68:61:5a:b1:03:63:08:1d:ca:30:4b:10:bf:2a:64: df:a4:72:e6:12:d5:57:98:1a:49:1a:dd:c9:5d:d6: 44:40:9e:f6:de:31:d1:2c:34:47:91:ec:a2:c0:b6: 3c:9a:2d:42:10:da:18:6f:04:d2:eb:c5:05:87:6b: 87:e7:61:95:80:fd:f9:59:c0:f8:06:15:bf:6b:61: de:ad:39:82:5f:0e:0b:a0:9d:f6:37:20:85:a0:75: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7B:90:92:15:98:2F:B7:8A:50:C7:5A:1F:31:D2:D8:D5:33:4F:86 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:41:84:aa:18:e0:01:0c:41:2f:88:6a:31:ba:61:6f:ad:d5: c2:84:26:cb:09:e4:14:36:41:74:88:f2:d5:7b:05:04:a2:1e: 59:d5:eb:1b:34:bd:cc:eb:ee:31:51:4b:8c:cf:26:85:eb:cc: c2:2d:06:aa:f4:a0:80:94:cc:40:82:0b:3d:30:dd:ea:1e:f6: e3:60:cb:7d:a7:e4:67:af:3d:1e:c1:dc:75:ee:03:7b:ca:01: ab:31:6b:95:66:68:ea:cf:ba:f4:57:df:d7:75:40:a6:26:04: f6:a5:a8:bf:a2:3e:ed:a4:92:8a:46:99:30:f6:12:e9:a4:cd: 86:cd:ad:e9:9f:85:69:ca:89:c8:c9:ff:76:fe:b4:08:0e:70: 77:b3:a8:c8:61:3f:da:bd:9c:d4:26:21:2f:53:e3:5b:33:36: 48:1b:97:dd:0f:d1:1c:45:59:bf:e7:5f:eb:b2:02:2d:06:92: 1d:96:d4:f7:55:3e:29:eb:0e:3e:e4:ab:c3:c9:c1:e0:70:cb: 14:00:41:b9:e8:e1:f3:78:69:ca:29:ff:18:5d:3d:1f:c3:6e: 49:c9:89:15:af:72:85:d4:03:0c:0e:a0:c9:ba:c1:9b:d8:e0: 1b:7c:84:b2:59:5e:95:1c:9c:85:55:9f:36:ac:5d:31:64:5d: c8:54:31:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjUwNjE1MDM0MzQ2WhcNMjUwNjIyMDM0MzQ2WjAYMRYwFAYD VQQDEw02ODRlNDE3My0xOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2CItJ6lHPowWMgDE95LeC5O2crL/eT9U5dZqrN3FONYyhH6VkwRRLRbqOUW sIWe61tASkeUNr1+8LWVocpV9eSKV+/DEdRD7GhYbldPBsunyisNVZ0uy7DsGKwh eIkcDU5m+R1w0SS/0r96SagKXCp8cmtyBBpl+QLFyftBpEpAidIaTzSZJ5Sk2B9l m/Y17PulrFnCYjJfj0NUFB1lASffeSxoYVqxA2MIHcowSxC/KmTfpHLmEtVXmBpJ Gt3JXdZEQJ723jHRLDRHkeyiwLY8mi1CENoYbwTS68UFh2uH52GVgP35WcD4BhW/ a2HerTmCXw4LoJ32NyCFoHUILwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNV7kJIV mC+3ilDHWh8x0tjVM0+GMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0QYSqGOABDEEviGoxumFvrdXChCbLCeQUNkF0iPLVewUEoh5Z1esb NL3M6+4xUUuMzyaF68zCLQaq9KCAlMxAggs9MN3qHvbjYMt9p+Rnrz0ewdx17gN7 ygGrMWuVZmjqz7r0V9/XdUCmJgT2pai/oj7tpJKKRpkw9hLppM2Gza3pn4VpyonI yf92/rQIDnB3s6jIYT/avZzUJiEvU+NbMzZIG5fdD9EcRVm/51/rsgItBpIdltT3 VT4p6w4+5KvDycHgcMsUAEG56OHzeGnKKf8YXT0fw25JyYkVr3KF1AMMDqDJusGb 2OAbfISyWV6VHJyFVZ82rF0xZF3IVDGY -----END CERTIFICATE-----Generated at Tue Jun 17 00:41:24 2025 by rpki-client