$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: dc9KmnmNtBja3n1IPmcbt7ITjgLnNyef/rL+EAnUNzg= Subject key identifier: BC:AC:31:C9:7B:F2:4D:A2:5C:87:74:06:A7:73:01:2B:1E:E5:91:89 Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 047F Signing time: Thu 24 Apr 2025 23:48:40 +0000 Manifest this update: Thu 24 Apr 2025 23:48:39 +0000 Manifest next update: Thu 01 May 2025 23:48:39 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: OJaiUHTO1WPJ4DhyzOp/tMIm0ZzuCttMN/daiTj4zMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Apr 24 23:48:39 2025 GMT Not After : May 1 23:48:39 2025 GMT Subject: CN=680acdd7-597d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:3e:8e:6a:b1:3f:44:fc:d6:3e:9a:a0:7a: c0:07:39:ad:9f:9a:a1:27:b5:3e:9f:8a:73:c7:25: 0d:ba:fd:88:04:9f:f4:5a:6c:0d:23:86:af:1b:97: 75:7d:af:a1:f4:87:89:a9:71:43:b7:ae:1a:45:0c: 97:00:f4:5b:6c:d1:c5:3c:49:f2:ac:59:1a:66:62: a0:c2:8a:ee:06:a9:0a:8f:ff:15:dc:3f:20:08:d8: ee:52:40:8f:d5:49:c8:ae:82:5c:65:9f:e1:a1:2d: f3:53:3d:92:51:4c:cf:f2:23:e5:8d:26:39:fa:48: 7b:da:35:8b:78:56:42:99:99:ab:e0:fe:28:c0:4c: f3:c0:85:60:5d:31:c3:d2:40:8f:3e:77:c4:b8:3e: 95:cc:5c:4b:e1:c8:8e:7c:79:88:79:ed:d7:ef:5f: ab:0d:56:0f:8f:d3:e2:40:9a:e1:0f:00:09:9b:d6: 8e:80:04:5a:a5:c5:a4:6e:a3:a4:16:23:8b:c4:3e: a8:a8:22:bf:37:fa:e3:c0:ef:45:93:87:da:8a:6d: ff:43:8d:25:51:e5:bf:20:ca:a6:85:45:70:3c:52: c4:61:6f:df:f1:75:37:c5:c3:2b:4c:aa:11:0d:15: 08:f3:fb:18:4a:df:31:c6:fa:aa:3e:29:24:90:15: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AC:31:C9:7B:F2:4D:A2:5C:87:74:06:A7:73:01:2B:1E:E5:91:89 X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:73:f7:52:c9:35:67:b5:74:12:44:69:ab:50:55:70:cc:0d: 92:1b:e7:44:de:91:9d:1c:01:fe:46:a2:6c:6a:0a:1c:98:56: 61:73:0b:25:c9:c7:2f:fd:7e:23:ac:40:7b:6d:24:2d:77:b4: 3e:cd:37:33:00:c1:b4:b0:ca:08:0c:89:24:9b:6f:45:39:85: db:9f:9e:dd:f6:fe:25:5e:93:1b:58:84:ed:55:09:96:4b:45: a4:65:74:1a:a5:87:e0:ca:cb:56:d8:19:3d:48:f7:29:4f:04: 76:c3:f6:b9:95:0d:70:8c:4c:c7:6f:3f:e4:5f:af:fc:37:e6: 0b:f5:8e:03:64:32:69:d6:45:f2:43:d9:28:b7:55:95:2f:e1: 1f:48:16:be:32:0c:d5:43:ba:a5:97:0b:f8:f6:94:99:c7:bc: fe:4e:58:2d:8f:b5:37:f7:7a:48:c9:f9:dd:54:56:57:f7:1e: e3:6f:7e:ce:c0:01:57:a3:94:50:c3:ac:4a:87:0e:a2:2f:8c: 54:2c:b8:72:7d:1c:97:81:86:07:63:0d:3c:bb:77:3a:e5:03: a1:62:6e:95:32:06:a6:08:dc:6e:1d:5e:57:6f:0e:bc:60:90: d0:50:d6:82:51:11:af:29:2a:e7:01:39:9b:67:1e:88:8a:82: 50:8f:3f:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUwNDI0MjM0ODM5WhcNMjUwNTAxMjM0ODM5WjAYMRYwFAYD VQQDEw02ODBhY2RkNy01OTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyco+jmqxP0T81j6aoHrABzmtn5qhJ7U+n4pzxyUNuv2IBJ/0WmwNI4avG5d1 fa+h9IeJqXFDt64aRQyXAPRbbNHFPEnyrFkaZmKgworuBqkKj/8V3D8gCNjuUkCP 1UnIroJcZZ/hoS3zUz2SUUzP8iPljSY5+kh72jWLeFZCmZmr4P4owEzzwIVgXTHD 0kCPPnfEuD6VzFxL4ciOfHmIee3X71+rDVYPj9PiQJrhDwAJm9aOgARapcWkbqOk FiOLxD6oqCK/N/rjwO9Fk4faim3/Q40lUeW/IMqmhUVwPFLEYW/f8XU3xcMrTKoR DRUI8/sYSt8xxvqqPikkkBUf2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLysMcl7 8k2iXId0BqdzASse5ZGJMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVc/dSyTVntXQSRGmrUFVwzA2SG+dE3pGdHAH+RqJsagocmFZhcwsl yccv/X4jrEB7bSQtd7Q+zTczAMG0sMoIDIkkm29FOYXbn57d9v4lXpMbWITtVQmW S0WkZXQapYfgystW2Bk9SPcpTwR2w/a5lQ1wjEzHbz/kX6/8N+YL9Y4DZDJp1kXy Q9kot1WVL+EfSBa+MgzVQ7qllwv49pSZx7z+Tlgtj7U393pIyfndVFZX9x7jb37O wAFXo5RQw6xKhw6iL4xULLhyfRyXgYYHYw08u3c65QOhYm6VMgamCNxuHV5Xbw68 YJDQUNaCURGvKSrnATmbZx6IioJQjz// -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:58 2025 by rpki-client