$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json) Hash identifier: VHuQL/VFMesbnDEQgDDndNtsQtIimgD5llqNCGqWHIE= Subject key identifier: B4:10:A2:3B:6B:A6:29:07:1E:8E:36:06:2F:8E:41:8A:83:96:42:42 Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft Manifest number: 0717 Signing time: Thu 24 Apr 2025 21:41:04 +0000 Manifest this update: Thu 24 Apr 2025 21:41:03 +0000 Manifest next update: Thu 01 May 2025 21:41:03 +0000 Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: iT23ePocI7wTlrGwH1a70E5LzisGyH0hizkzTQg/32U=) 2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: 8U9EPbtMKIJ3PvMvZUbdIHhWDysnxRWcaHtBd734a+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: Apr 24 21:41:03 2025 GMT Not After : May 1 21:41:03 2025 GMT Subject: CN=680aafef-72fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:6b:b1:d3:b9:49:06:57:b6:8e:8a:9d:d9: 93:fa:58:c0:6b:df:fe:db:85:a3:0b:07:29:04:cc: bb:56:bb:fd:d0:85:2d:45:84:b1:db:f8:ff:58:2a: 5e:fa:12:71:6d:9b:e8:e2:91:e9:5c:41:81:4d:c6: 3a:5f:45:98:74:be:41:1e:8d:91:b7:49:06:ff:dc: 8f:fb:45:c9:7d:0d:ab:3e:d4:85:51:83:81:16:81: 42:e4:26:9e:d8:5e:bc:04:48:72:9e:50:5a:dc:1d: 68:a4:bf:8f:ae:06:fb:9c:c4:f4:97:8f:99:9e:1c: cb:50:41:c7:37:e6:64:c5:17:f5:e8:dd:9a:df:6f: 68:a4:ba:a3:ce:cc:d6:83:78:7f:51:11:9e:10:da: 8e:e5:31:49:a7:a7:79:08:43:15:28:cd:a6:0f:42: cc:fe:9d:3c:a4:ea:00:83:9e:6b:b9:09:4b:32:f8: 86:32:48:fd:53:f9:0d:63:44:7f:d3:39:ea:47:54: 1b:75:f1:d5:f7:c0:0c:95:98:a2:7a:89:11:fd:12: 76:fc:2d:d1:dc:ca:d0:f2:a2:ee:f7:da:48:ef:29: ef:fc:c7:8e:f9:a6:af:1b:13:30:e7:26:ec:b1:8c: 8e:35:f0:6c:2a:57:44:a5:01:75:a3:9d:b0:7b:6d: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:10:A2:3B:6B:A6:29:07:1E:8E:36:06:2F:8E:41:8A:83:96:42:42 X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:fa:61:dd:28:e5:a5:26:f0:4c:b2:fe:fa:c9:d9:b2:b2:94: 9f:8f:63:e2:47:39:5d:9d:da:d1:d0:45:75:c2:ad:ba:5d:ac: 31:8c:56:e6:ce:d5:dc:f7:c1:0e:cf:c4:1f:7b:ed:34:de:7d: e9:b2:75:ca:a2:78:69:67:36:ea:a3:e9:d6:c1:a9:9e:24:5d: 41:bf:ca:32:b4:4a:b9:f3:49:18:37:07:6a:ed:a0:d9:af:57: 60:55:db:45:05:bf:c9:30:0d:84:7c:e5:70:ca:84:2d:02:4f: c3:61:d9:f6:8f:a9:53:6e:16:21:b5:46:44:0d:2e:f4:ef:91: 58:08:cc:2c:e7:c8:de:ac:6f:9d:7c:17:7e:88:a6:a3:97:33: eb:28:6d:7f:44:6e:a2:7d:76:8c:b5:e7:be:c6:df:3d:93:77: 27:56:1f:86:a3:41:4c:42:0a:cc:d1:e4:bb:b5:d0:22:ae:b5: ce:8d:58:09:12:8e:bb:ea:b4:29:a8:6a:51:63:58:af:7c:69: 8e:ee:60:e7:b4:cc:e7:56:f9:1f:b0:5b:54:98:74:3a:a3:f5: dd:07:36:84:ad:ae:10:8a:41:81:db:0e:aa:8e:82:78:92:31: a7:63:47:6b:57:4a:45:4f:a3:4a:c9:cb:3c:51:98:16:8f:ac: 21:15:29:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjUwNDI0MjE0MTAzWhcNMjUwNTAxMjE0MTAzWjAYMRYwFAYD VQQDEw02ODBhYWZlZi03MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAublrsdO5SQZXto6KndmT+ljAa9/+24WjCwcpBMy7Vrv90IUtRYSx2/j/WCpe +hJxbZvo4pHpXEGBTcY6X0WYdL5BHo2Rt0kG/9yP+0XJfQ2rPtSFUYOBFoFC5Cae 2F68BEhynlBa3B1opL+Prgb7nMT0l4+ZnhzLUEHHN+ZkxRf16N2a329opLqjzszW g3h/URGeENqO5TFJp6d5CEMVKM2mD0LM/p08pOoAg55ruQlLMviGMkj9U/kNY0R/ 0znqR1QbdfHV98AMlZiieokR/RJ2/C3R3MrQ8qLu99pI7ynv/MeO+aavGxMw5ybs sYyONfBsKldEpQF1o52we21i+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQQojtr pikHHo42Bi+OQYqDlkJCMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhGMy9FOUQzMEM4MDM1RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsz a0Y1cDBiOGw5TlU3TlVYSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp+mHdKOWlJvBMsv76ydmyspSfj2PiRzldndrR0EV1wq26XawxjFbm ztXc98EOz8Qfe+003n3psnXKonhpZzbqo+nWwameJF1Bv8oytEq580kYNwdq7aDZ r1dgVdtFBb/JMA2EfOVwyoQtAk/DYdn2j6lTbhYhtUZEDS7075FYCMws58jerG+d fBd+iKajlzPrKG1/RG6ifXaMtee+xt89k3cnVh+Go0FMQgrM0eS7tdAirrXOjVgJ Eo676rQpqGpRY1ivfGmO7mDntMznVvkfsFtUmHQ6o/XdBzaEra4QikGB2w6qjoJ4 kjGnY0drV0pFT6NKycs8UZgWj6whFSlI -----END CERTIFICATE-----Generated at Sat Apr 26 03:45:29 2025 by rpki-client