$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: iqK6iUB7fQj31+ds2E/SUR7ytpkipY5smwQgFxY5U+E= Subject key identifier: 9F:BB:C4:A7:46:1E:92:DE:D8:B8:73:1A:73:A4:B7:EE:C0:66:95:3F Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 014C Signing time: Fri 25 Apr 2025 03:18:32 +0000 Manifest this update: Fri 25 Apr 2025 03:18:31 +0000 Manifest next update: Fri 02 May 2025 03:18:31 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: r0wyd3YA+bu0fhqMCJc7NsJ4WTdX+xF1+WZ77xwlsM4=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 61dFCpFb3ek9f8W7MGjus+wVQMOYkxnO6WKnJYsH5TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Apr 25 03:18:31 2025 GMT Not After : May 2 03:18:31 2025 GMT Subject: CN=680aff07-c425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:e1:be:d1:3b:9d:42:0b:c4:ab:c2:ae:27: 1d:35:41:02:91:0e:26:62:55:91:fd:ef:44:fa:fc: 2e:ae:9f:cd:3d:48:a9:00:43:e6:76:c0:e9:1b:dd: cb:0e:ef:02:2e:ca:db:75:b7:94:24:c3:a0:42:79: 2d:91:58:b8:b1:48:61:9e:a7:e5:7a:7a:39:4e:b7: 08:e3:13:c4:39:9d:66:29:1b:66:33:3b:0e:d7:40: 4f:3c:09:83:37:11:9b:2d:fb:1b:72:d4:09:95:1b: a1:aa:2f:87:33:59:75:e8:3b:2f:08:0c:d7:3b:44: d7:fa:f1:7f:49:7b:2c:ff:33:af:89:dd:dc:b6:3f: 6c:6c:5a:4d:fe:3b:24:36:4e:32:02:b8:f7:52:dc: 9a:2a:7f:cc:2c:3d:98:93:1a:d4:04:22:41:ec:01: 4c:a1:4f:fc:5d:5d:bd:b5:b2:ba:e1:f7:8a:3e:e8: f3:26:a4:a3:c8:d1:4f:44:10:b3:06:4a:53:92:a4: 9a:b7:58:2e:33:13:dc:00:24:2d:32:e1:f3:f9:be: 90:b2:3c:3c:ae:22:20:8d:a0:87:5c:22:09:c3:7c: e8:81:91:67:9a:70:aa:2d:53:12:61:43:c2:c1:44: fe:61:41:3b:b8:dc:1a:d8:8a:6f:d2:f7:0a:4d:6a: 29:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BB:C4:A7:46:1E:92:DE:D8:B8:73:1A:73:A4:B7:EE:C0:66:95:3F X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:75:1d:b6:76:a4:cf:40:e5:8b:6b:81:eb:a9:ff:07:bc:67: 2d:1e:45:11:12:e7:64:e6:bc:33:f8:ae:7f:09:6d:b7:9e:6f: 28:cc:8f:6d:f4:b4:ca:02:4b:8f:9d:ca:6f:0a:6a:fa:dd:8e: 29:f7:fd:3c:39:6f:af:88:f6:09:33:22:0a:ca:fd:c2:f8:21: fd:7c:80:06:33:9c:d3:3a:f2:d6:ce:e4:e6:1f:df:10:fd:30: ee:36:6a:a6:d9:d0:c2:67:d4:62:44:2a:2d:6a:44:57:4e:8c: d9:f1:59:29:e0:bf:95:9b:a7:7e:ac:0e:7d:c6:bb:b6:0b:f8: 6b:eb:af:6d:ea:a2:81:94:fd:8c:c5:c2:94:b4:71:80:80:a6: 5c:ea:75:bf:cd:02:e4:78:a3:a8:79:33:86:b4:9f:80:7b:76: 3c:89:bf:80:46:d8:e3:99:df:96:e3:b2:27:f0:1f:a0:b7:65: da:b7:64:47:11:18:95:0b:f7:e6:a5:ac:b1:64:78:1f:bd:f1: 92:89:71:5f:9c:82:ee:39:e9:b9:7f:a4:da:8b:39:6c:50:be: 53:4e:f3:37:f3:c1:80:04:af:52:f5:76:f4:93:c5:4b:86:4c: 91:58:25:8a:61:7e:3c:38:85:1f:da:c0:7a:9c:07:05:50:50: 84:32:5e:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwNDI1MDMxODMxWhcNMjUwNTAyMDMxODMxWjAYMRYwFAYD VQQDEw02ODBhZmYwNy1jNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAws7hvtE7nUILxKvCricdNUECkQ4mYlWR/e9E+vwurp/NPUipAEPmdsDpG93L Du8CLsrbdbeUJMOgQnktkVi4sUhhnqfleno5TrcI4xPEOZ1mKRtmMzsO10BPPAmD NxGbLfsbctQJlRuhqi+HM1l16DsvCAzXO0TX+vF/SXss/zOvid3ctj9sbFpN/jsk Nk4yArj3UtyaKn/MLD2YkxrUBCJB7AFMoU/8XV29tbK64feKPujzJqSjyNFPRBCz BkpTkqSat1guMxPcACQtMuHz+b6Qsjw8riIgjaCHXCIJw3zogZFnmnCqLVMSYUPC wUT+YUE7uNwa2Ipv0vcKTWop4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+7xKdG HpLe2LhzGnOkt+7AZpU/MB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4dR22dqTPQOWLa4Hrqf8HvGctHkUREudk5rwz+K5/CW23nm8ozI9t 9LTKAkuPncpvCmr63Y4p9/08OW+viPYJMyIKyv3C+CH9fIAGM5zTOvLWzuTmH98Q /TDuNmqm2dDCZ9RiRCotakRXTozZ8Vkp4L+Vm6d+rA59xru2C/hr669t6qKBlP2M xcKUtHGAgKZc6nW/zQLkeKOoeTOGtJ+Ae3Y8ib+ARtjjmd+W47In8B+gt2Xat2RH ERiVC/fmpayxZHgfvfGSiXFfnILuOem5f6TaizlsUL5TTvM388GABK9S9Xb0k8VL hkyRWCWKYX48OIUf2sB6nAcFUFCEMl6U -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:37 2025 by rpki-client