$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json) Hash identifier: 4HMFt4ZSFAC54d5oTFvJh2V6AOWRSrqirEdfA9L6Dak= Subject key identifier: 03:FD:98:68:E6:0D:37:08:31:38:2C:58:80:3F:15:9C:96:52:C2:94 Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Certificate serial: 31D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft Manifest number: 31D8 Signing time: Thu 24 Apr 2025 15:26:19 +0000 Manifest this update: Thu 24 Apr 2025 15:26:18 +0000 Manifest next update: Thu 01 May 2025 15:26:18 +0000 Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: Vt1VH4b8YTguCkxE8CX7V5Sv/7+r2IZltEvpz7sM4Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12760 (0x31d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691 Validity Not Before: Apr 24 15:26:18 2025 GMT Not After : May 1 15:26:18 2025 GMT Subject: CN=680a581b-2694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:f4:ac:39:b4:6c:80:a1:f9:29:67:96:d7: 92:03:14:f1:d9:eb:03:c0:bd:95:de:3a:7e:76:9b: ab:5a:6f:14:ba:82:b9:b9:49:93:65:2f:b2:26:85: dd:6a:f1:1f:2f:67:dc:e2:2f:11:f8:1c:d7:2f:fb: b4:b2:90:58:69:05:2f:59:75:6b:cf:51:4a:f6:6c: 93:4b:3a:76:fc:91:c5:05:b8:0f:0c:ba:10:a6:6a: cd:7d:d0:0a:4c:32:d9:d9:9a:40:8c:95:24:34:69: 33:71:8d:81:2c:a6:a1:f7:21:1b:6a:4b:ce:a6:81: e6:af:41:8c:3a:f9:4f:41:ac:70:71:4e:c7:02:9b: 35:f2:58:06:e0:82:46:8d:73:0e:ee:19:ef:f6:84: d6:d4:eb:ed:de:c2:f9:63:cf:b8:9f:21:be:a9:26: c8:6c:bc:2b:1b:d8:f6:80:d9:22:2f:34:a9:e5:12: 75:a0:ad:55:d2:a8:11:40:86:fb:02:88:7d:b5:e5: 38:10:16:26:ac:73:c8:03:3d:31:e9:bc:9c:d3:04: 6c:a8:df:f4:aa:9d:a5:f9:cb:35:5e:69:ad:7c:d7: a9:01:bc:ff:af:a4:63:45:c3:59:8a:5b:ab:98:5a: 0f:4c:66:9f:9b:48:be:7a:bf:2c:91:e2:c2:6a:14: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FD:98:68:E6:0D:37:08:31:38:2C:58:80:3F:15:9C:96:52:C2:94 X509v3 Authority Key Identifier: keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:41:a8:50:d0:89:f3:7b:af:33:a1:7c:38:25:46:ca:58:1a: f5:f9:f9:fc:a7:b0:63:23:db:d9:ac:6d:c9:10:83:4a:84:ca: 5b:d1:fc:7a:5e:ae:e2:17:46:53:15:cb:6b:e9:95:b0:aa:58: e7:ef:10:cf:c9:af:1b:08:0c:66:33:fe:50:97:5c:50:8c:0b: 0d:23:cb:08:13:74:84:37:81:47:a1:29:0d:20:4c:d7:dc:58: 5b:06:65:d2:df:f5:c9:39:63:a4:52:e7:72:b1:ea:78:43:f6: 49:cc:8f:75:4d:41:03:bc:24:f3:e4:32:88:24:a5:6d:ae:ab: 13:88:fb:0e:b8:cb:4f:5a:b5:5e:09:4e:b5:c5:db:d9:3e:09: 9b:a5:17:35:d3:23:17:81:81:84:cd:6b:44:1c:b9:00:28:9c: fc:b3:a6:23:57:1b:ff:65:54:8e:8d:42:1a:a4:f6:13:d9:f5: 08:18:ed:17:38:a8:0d:f1:a4:ac:ff:f7:37:41:38:ce:92:72: 07:8e:06:7a:5d:08:06:73:71:e0:f3:6c:12:c6:fc:66:c7:89: 01:cc:16:f9:48:19:07:81:7e:43:ac:1b:fd:d1:79:10:c9:d1: 46:f1:68:9e:f4:9d:26:f3:cf:79:b3:9a:4e:61:94:dd:56:53: 9c:c8:3f:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3 QTU2Njg2OTEwHhcNMjUwNDI0MTUyNjE4WhcNMjUwNTAxMTUyNjE4WjAYMRYwFAYD VQQDEw02ODBhNTgxYi0yNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzw/0rDm0bICh+SlnlteSAxTx2esDwL2V3jp+dpurWm8UuoK5uUmTZS+yJoXd avEfL2fc4i8R+BzXL/u0spBYaQUvWXVrz1FK9myTSzp2/JHFBbgPDLoQpmrNfdAK TDLZ2ZpAjJUkNGkzcY2BLKah9yEbakvOpoHmr0GMOvlPQaxwcU7HAps18lgG4IJG jXMO7hnv9oTW1Ovt3sL5Y8+4nyG+qSbIbLwrG9j2gNkiLzSp5RJ1oK1V0qgRQIb7 Aoh9teU4EBYmrHPIAz0x6byc0wRsqN/0qp2l+cs1XmmtfNepAbz/r6RjRcNZilur mFoPTGafm0i+er8skeLCahT1ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAP9mGjm DTcIMTgsWIA/FZyWUsKUMB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2QahQ0Inze68zoXw4JUbKWBr1+fn8p7BjI9vZrG3JEINKhMpb0fx6 Xq7iF0ZTFctr6ZWwqljn7xDPya8bCAxmM/5Ql1xQjAsNI8sIE3SEN4FHoSkNIEzX 3FhbBmXS3/XJOWOkUudysep4Q/ZJzI91TUEDvCTz5DKIJKVtrqsTiPsOuMtPWrVe CU61xdvZPgmbpRc10yMXgYGEzWtEHLkAKJz8s6YjVxv/ZVSOjUIapPYT2fUIGO0X OKgN8aSs//c3QTjOknIHjgZ6XQgGc3Hg82wSxvxmx4kBzBb5SBkHgX5DrBv90XkQ ydFG8Wie9J0m8895s5pOYZTdVlOcyD/f -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:23 2025 by rpki-client