$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: DBz9F1VQfcd0dG8toErge+fViwNsnG6AoUdmSvsBqPE= Subject key identifier: 28:76:EC:9A:C6:EC:67:2E:79:4F:74:C6:02:36:FD:1B:B0:4E:3E:0A Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 09F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 09EF Signing time: Thu 24 Apr 2025 19:46:38 +0000 Manifest this update: Thu 24 Apr 2025 19:46:38 +0000 Manifest next update: Thu 01 May 2025 19:46:38 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: m7uORXA14sUjuLtNUAyvvW7sSgMfjRx0xciwEi4U5ME=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2549 (0x9f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: Apr 24 19:46:38 2025 GMT Not After : May 1 19:46:38 2025 GMT Subject: CN=680a951e-8b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:7b:68:7a:e8:23:00:8e:ae:9c:e2:e3:5c: ae:ed:51:95:5b:67:e3:47:50:69:11:5a:57:1e:b4: e0:fa:6d:1a:88:62:fb:26:10:76:64:80:16:44:4a: db:9a:ac:87:31:36:39:c0:ce:c9:0b:ed:35:65:cc: 66:fe:50:23:18:74:c3:6d:bb:54:fd:66:98:a7:7a: a2:21:39:96:7a:41:c4:9b:b1:fe:83:50:21:1f:99: ef:ef:5b:9b:f1:26:52:bf:05:03:1c:b1:6e:d7:04: 1f:b5:66:74:7c:fe:f6:28:9b:1b:0e:d0:da:14:94: e9:71:74:a7:6f:2d:47:e9:fa:6d:d7:83:a8:63:43: 19:0f:9d:e8:33:42:a4:b5:fb:66:19:f5:9b:ec:02: 18:85:db:e0:d6:ea:d1:f2:98:9a:0c:a5:69:5f:a9: 21:d0:cd:e7:9f:c1:96:d1:07:d8:e3:0d:d6:21:5d: 26:47:3c:2c:3d:52:10:e1:eb:99:e2:f5:3b:ae:d3: bc:f3:8e:b5:ad:d0:dd:8e:ef:3a:a4:af:9f:16:87: 46:b4:55:88:70:1a:51:09:54:15:3f:04:de:06:77: fd:84:20:76:8f:67:3c:f6:61:7e:e8:13:ea:b4:83: 02:30:b3:97:03:2b:36:eb:85:c5:3d:46:61:6e:c3: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:76:EC:9A:C6:EC:67:2E:79:4F:74:C6:02:36:FD:1B:B0:4E:3E:0A X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:21:12:1c:82:08:83:e1:88:6a:de:1e:8f:42:68:4e:e7:81: fd:66:51:6a:3e:8b:de:29:0f:10:48:00:9f:ea:26:24:55:13: fe:4d:89:cb:74:b2:ed:5a:50:a0:37:24:59:cd:ac:53:b0:cc: 53:0d:14:a2:76:ee:33:4a:ea:c5:cc:99:30:c7:00:c6:54:a3: 33:61:db:5d:d9:3c:a8:f2:63:e5:e3:23:96:5d:2e:25:27:18: 14:86:f1:e6:12:e0:7e:6b:60:0a:d2:3a:e5:87:6d:9c:9a:32: 89:bb:e1:41:47:1f:c0:1a:74:78:1f:92:c9:e4:e7:c8:fb:c2: df:0c:bf:77:7f:24:68:d3:73:e7:51:68:d8:ea:eb:2b:cb:21: 86:23:58:85:7d:86:00:62:18:b6:d0:89:31:cc:dc:90:86:3c: 0c:52:35:b3:5e:97:4d:99:ad:c1:73:19:cb:86:5e:2e:ad:2c: ee:75:71:62:a3:89:a9:1b:d1:b5:bc:27:65:f2:51:0f:1a:c3: 83:69:1e:77:bd:eb:0e:11:e1:80:a9:63:89:d9:03:18:23:bd: d3:83:f1:c8:1e:a4:32:21:02:8e:c7:92:f4:a1:ac:24:67:15: 4e:83:dd:06:99:ec:55:67:b4:82:36:29:d3:10:62:c2:96:03: 1e:d7:57:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUwNDI0MTk0NjM4WhcNMjUwNTAxMTk0NjM4WjAYMRYwFAYD VQQDEw02ODBhOTUxZS04YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzep7aHroIwCOrpzi41yu7VGVW2fjR1BpEVpXHrTg+m0aiGL7JhB2ZIAWRErb mqyHMTY5wM7JC+01Zcxm/lAjGHTDbbtU/WaYp3qiITmWekHEm7H+g1AhH5nv71ub 8SZSvwUDHLFu1wQftWZ0fP72KJsbDtDaFJTpcXSnby1H6fpt14OoY0MZD53oM0Kk tftmGfWb7AIYhdvg1urR8piaDKVpX6kh0M3nn8GW0QfY4w3WIV0mRzwsPVIQ4euZ 4vU7rtO88461rdDdju86pK+fFodGtFWIcBpRCVQVPwTeBnf9hCB2j2c89mF+6BPq tIMCMLOXAys264XFPUZhbsMykQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCh27JrG 7GcueU90xgI2/RuwTj4KMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcIRIcggiD4Yhq3h6PQmhO54H9ZlFqPoveKQ8QSACf6iYkVRP+TYnL dLLtWlCgNyRZzaxTsMxTDRSidu4zSurFzJkwxwDGVKMzYdtd2Tyo8mPl4yOWXS4l JxgUhvHmEuB+a2AK0jrlh22cmjKJu+FBRx/AGnR4H5LJ5OfI+8LfDL93fyRo03Pn UWjY6usryyGGI1iFfYYAYhi20IkxzNyQhjwMUjWzXpdNma3BcxnLhl4urSzudXFi o4mpG9G1vCdl8lEPGsODaR53vesOEeGAqWOJ2QMYI73Tg/HIHqQyIQKOx5L0oawk ZxVOg90GmexVZ7SCNinTEGLClgMe11fc -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:03 2025 by rpki-client