$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: zuwNq1PGb53/FtOjAk9aNn6MZ45KbtM6LKDp2NaQiro= Subject key identifier: 89:32:B6:A4:9A:34:69:EE:93:70:EA:E0:7A:EC:C2:4D:E6:CA:77:1B Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 0118 Signing time: Fri 25 Apr 2025 03:55:14 +0000 Manifest this update: Fri 25 Apr 2025 03:55:14 +0000 Manifest next update: Fri 02 May 2025 03:55:14 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: vWdKEDyZbOXEHoNQCKAZHz6hZcKIb2X8PMLlJjwdoOs=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: SshOC3gU6HUaIU7OUJCNAnBTxBahFjxoE/rfFGZssow=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: GCUYfktdJtM3w3x/AngT0svZ6AfcPm8+X/17pTPoOCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Apr 25 03:55:14 2025 GMT Not After : May 2 03:55:14 2025 GMT Subject: CN=680b07a2-7e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:4f:b1:fc:1c:8a:ca:10:44:04:19:77:4a: 21:4d:6f:b4:60:4e:24:15:6d:9c:9c:d2:35:de:20: 7b:e7:7c:a9:7c:14:bb:c2:ab:e1:89:cd:30:fc:85: f2:8c:2e:c5:b0:ed:c5:b9:a0:64:87:0d:38:4a:e1: 6c:d5:79:c2:51:f9:77:9b:2b:90:d7:9b:34:a1:bf: 44:17:58:88:3d:2f:f4:e3:f3:1d:79:52:a9:48:88: 1d:bc:ac:85:87:eb:8b:22:e2:fd:9c:91:9a:fc:08: 30:15:9a:5c:46:b1:86:50:b0:92:7c:5c:f3:7c:51: 90:df:c4:10:c8:aa:aa:63:c2:bb:5c:6c:e7:f3:84: c1:44:cc:5a:e5:32:ca:17:f1:28:37:27:a7:c6:c2: 8f:50:48:67:34:a6:17:24:ab:98:86:ec:e9:11:b9: 79:39:1b:b8:4f:d8:e7:29:14:3f:ec:8e:d4:6f:17: dc:d0:ea:83:1e:76:09:53:fa:e4:a9:0e:90:3c:35: 4e:da:0b:0a:2c:98:2b:b6:08:30:c3:4d:29:90:68: cc:32:26:6a:25:34:56:34:1f:a1:32:62:f6:88:6a: 62:7a:9c:87:52:de:fe:b5:d2:0f:18:15:f5:3f:15: 6e:c3:3d:bb:ac:91:7c:96:d0:1b:99:7d:5a:e9:d3: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:32:B6:A4:9A:34:69:EE:93:70:EA:E0:7A:EC:C2:4D:E6:CA:77:1B X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d9:a7:f5:0d:85:b3:8e:03:83:ec:48:ae:6b:1a:1f:40:07: 38:d3:60:76:9d:b5:eb:e2:65:e0:37:5f:3e:e4:bc:79:7f:d4: d3:6a:ae:c0:d2:da:30:98:a1:18:44:c1:f9:5f:4d:42:e1:6c: 2b:cd:8d:ef:3b:9c:40:1e:b4:5e:38:fd:62:70:d8:df:05:3e: 73:51:25:ae:ac:5b:10:31:f3:b4:13:bd:f8:1f:48:02:8b:51: e4:6c:d9:1f:e9:4e:4c:11:12:57:c1:6d:92:d0:24:b2:d8:e2: b7:bf:4a:6d:39:09:36:ce:a0:4a:43:bc:cd:22:43:6c:cd:9e: a5:61:f1:f7:6b:20:c4:a5:bc:a4:04:e7:f5:66:1c:c8:f0:41: 22:9f:70:d1:66:46:e8:b5:f3:e4:4e:be:0b:e0:9f:8d:36:d1: 29:e8:46:b5:11:91:13:69:16:95:61:bb:e7:29:e6:f3:6d:88: 3b:d1:a0:19:90:48:ef:20:c7:95:2a:2c:08:f9:aa:6a:43:8a: c2:73:4f:00:86:66:5e:8b:24:9c:84:ba:84:32:ed:c7:21:02: 6f:da:a9:44:56:95:0e:85:ee:6a:8f:72:c0:36:d3:e3:b9:e6: 4d:f3:74:74:eb:c7:ff:34:e3:ef:47:c3:3e:d1:48:1e:3b:d4: 7a:4a:3a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjUwNDI1MDM1NTE0WhcNMjUwNTAyMDM1NTE0WjAYMRYwFAYD VQQDEw02ODBiMDdhMi03ZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowlPsfwcisoQRAQZd0ohTW+0YE4kFW2cnNI13iB753ypfBS7wqvhic0w/IXy jC7FsO3FuaBkhw04SuFs1XnCUfl3myuQ15s0ob9EF1iIPS/04/MdeVKpSIgdvKyF h+uLIuL9nJGa/AgwFZpcRrGGULCSfFzzfFGQ38QQyKqqY8K7XGzn84TBRMxa5TLK F/EoNyenxsKPUEhnNKYXJKuYhuzpEbl5ORu4T9jnKRQ/7I7Ubxfc0OqDHnYJU/rk qQ6QPDVO2gsKLJgrtggww00pkGjMMiZqJTRWNB+hMmL2iGpiepyHUt7+tdIPGBX1 PxVuwz27rJF8ltAbmX1a6dNj0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkytqSa NGnuk3Dq4Hrswk3myncbMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi2af1DYWzjgOD7EiuaxofQAc402B2nbXr4mXgN18+5Lx5f9TTaq7A 0towmKEYRMH5X01C4WwrzY3vO5xAHrReOP1icNjfBT5zUSWurFsQMfO0E734H0gC i1HkbNkf6U5MERJXwW2S0CSy2OK3v0ptOQk2zqBKQ7zNIkNszZ6lYfH3ayDEpbyk BOf1ZhzI8EEin3DRZkbotfPkTr4L4J+NNtEp6Ea1EZETaRaVYbvnKebzbYg70aAZ kEjvIMeVKiwI+apqQ4rCc08AhmZeiySchLqEMu3HIQJv2qlEVpUOhe5qj3LANtPj ueZN83R068f/NOPvR8M+0UgeO9R6SjqA -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:55 2025 by rpki-client