$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: fiYC0JxuwIdftq6C+1/drMlo7QQXeXrmi3o+w64kHA8= Subject key identifier: 52:DF:C8:19:45:DA:58:37:01:D4:CB:4A:F1:19:68:BB:77:05:28:57 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 0451 Signing time: Thu 24 Apr 2025 23:58:16 +0000 Manifest this update: Thu 24 Apr 2025 23:58:16 +0000 Manifest next update: Thu 01 May 2025 23:58:16 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: qtXqS5cxFjmtDa/FhVAIle62hZoHqS+5y5UNqMkP57M=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: F010fbR+bi9xTUBl3AUBVvzkCJVPeJDxWa/Ivtr1ZK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Apr 24 23:58:16 2025 GMT Not After : May 1 23:58:16 2025 GMT Subject: CN=680ad018-321e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:38:2c:49:f5:92:71:15:18:33:56:71:f7: 4d:82:07:3f:d6:dd:c7:38:de:69:e4:34:7d:ab:3b: 63:12:7e:25:90:10:33:d6:bc:d3:f9:fa:2f:71:e9: 5c:3c:12:a5:43:8b:e0:13:40:83:85:50:b5:07:ea: 45:63:86:45:d5:83:5e:dc:c4:9e:7a:d6:b6:7f:43: 4c:6c:90:2f:53:91:29:b4:d5:82:13:bc:e2:89:f5: 63:a3:9f:81:00:c3:59:35:ce:51:fc:cd:f1:49:80: 3d:28:98:62:24:a7:4c:50:5e:4a:5e:78:f2:98:62: 98:e0:f7:17:ac:87:59:82:08:5b:5b:8d:8d:ae:a7: db:09:3f:6c:74:78:ff:1a:ef:7d:c7:f0:82:d6:e0: 75:66:dd:8b:80:02:18:3a:2e:1b:28:71:f4:64:c1: a1:43:52:9b:b4:53:97:98:69:ae:23:c9:0f:e2:18: 82:b5:63:8b:64:69:23:a7:1e:fb:28:f1:18:a4:a1: 55:d4:fd:a0:72:58:5f:2c:e7:3a:2d:99:49:d3:f2: cb:d6:d9:54:d3:5b:71:11:5b:7b:0f:d7:67:d6:3a: ed:0d:57:ed:fc:70:f5:fb:fa:8f:d3:a7:9b:1d:8b: 4c:9d:11:22:ef:49:4a:0d:17:95:49:7b:5b:9e:2d: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:C8:19:45:DA:58:37:01:D4:CB:4A:F1:19:68:BB:77:05:28:57 X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8f:dd:68:97:10:01:6e:9f:b6:a3:f3:3f:89:5b:f5:0a:c1: a4:63:d5:58:d0:49:18:9b:7a:56:fa:fc:c3:fe:62:85:5a:c2: c3:6b:e6:6d:e8:e2:47:25:82:40:be:24:44:94:6a:f9:ef:de: 12:ab:79:12:31:c3:9a:76:4e:04:bd:de:bc:7e:b3:c9:90:62: ee:f9:ed:ae:93:8c:06:b1:50:05:32:f9:b9:b8:7c:31:b3:ac: c7:af:8a:5c:4a:d2:79:5c:12:f2:0f:e5:17:61:1f:12:08:ec: 57:a8:8c:a7:5e:90:14:84:90:9e:34:d0:f3:f6:d5:40:9a:ab: f7:3d:3e:cc:4a:84:a6:8a:03:1f:12:00:ad:36:fc:85:64:b6: 16:6e:aa:84:19:6a:2e:33:56:6a:39:63:77:c9:39:40:7e:e7: 48:31:4c:1c:97:fb:f6:c2:8a:77:46:ef:2f:02:8d:6b:b1:8d: d8:fc:fa:93:f1:a2:ec:ee:37:bc:0b:2b:ea:35:07:87:d6:9c: b7:99:8d:c4:a5:b9:a7:bb:51:3b:22:2b:c8:8c:13:5f:17:0a: 1a:e4:7f:fb:03:32:e2:17:3e:5e:73:81:03:da:f3:78:0a:d4: b4:b3:a3:96:3c:f3:57:fd:90:5a:c7:6b:68:51:da:c8:ff:42: 66:63:f4:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUwNDI0MjM1ODE2WhcNMjUwNTAxMjM1ODE2WjAYMRYwFAYD VQQDEw02ODBhZDAxOC0zMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujo4LEn1knEVGDNWcfdNggc/1t3HON5p5DR9qztjEn4lkBAz1rzT+fovcelc PBKlQ4vgE0CDhVC1B+pFY4ZF1YNe3MSeeta2f0NMbJAvU5EptNWCE7ziifVjo5+B AMNZNc5R/M3xSYA9KJhiJKdMUF5KXnjymGKY4PcXrIdZgghbW42NrqfbCT9sdHj/ Gu99x/CC1uB1Zt2LgAIYOi4bKHH0ZMGhQ1KbtFOXmGmuI8kP4hiCtWOLZGkjpx77 KPEYpKFV1P2gclhfLOc6LZlJ0/LL1tlU01txEVt7D9dn1jrtDVft/HD1+/qP06eb HYtMnREi70lKDReVSXtbni3rNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLfyBlF 2lg3AdTLSvEZaLt3BShXMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5j91olxABbp+2o/M/iVv1CsGkY9VY0EkYm3pW+vzD/mKFWsLDa+Zt 6OJHJYJAviRElGr5794Sq3kSMcOadk4Evd68frPJkGLu+e2uk4wGsVAFMvm5uHwx s6zHr4pcStJ5XBLyD+UXYR8SCOxXqIynXpAUhJCeNNDz9tVAmqv3PT7MSoSmigMf EgCtNvyFZLYWbqqEGWouM1ZqOWN3yTlAfudIMUwcl/v2wop3Ru8vAo1rsY3Y/PqT 8aLs7je8CyvqNQeH1py3mY3Epbmnu1E7IivIjBNfFwoa5H/7AzLiFz5ec4ED2vN4 CtS0s6OWPPNX/ZBax2toUdrI/0JmY/Rt -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:38 2025 by rpki-client