$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: y9QPotTqEPDtcebtgjJxxOdFogVP1ky1n8uoTO92uCE= Subject key identifier: 70:87:BC:71:52:F8:40:85:83:6F:BE:BE:D2:90:B7:B7:13:CB:65:B7 Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 2451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 2437 Signing time: Thu 24 Apr 2025 15:49:30 +0000 Manifest this update: Thu 24 Apr 2025 15:49:29 +0000 Manifest next update: Thu 01 May 2025 15:49:29 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: hvM98/BxGE4j+LxLb2c7q3MRdhcEJvNqKvCpQFXqd0A=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: aC8EINXIC01Iys9eKuxANUXX5lS0IOCfT6iahbBp2dk=) 3: 2B20B9CCCBEA11EEB82B690CC4F9AE02.roa (hash: jONv3AteqZr2Pz8WL2R2omzTcnceAzq3S4OqALo7cqA=) 4: 427FC74C972011EE8EEC5F75C4F9AE02.roa (hash: oO1xFuhAbWa8jnpge9HNWcKJyJkQpOd7FW4dAr7Fm4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9297 (0x2451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Apr 24 15:49:29 2025 GMT Not After : May 1 15:49:29 2025 GMT Subject: CN=680a5d89-7f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:3a:65:f3:14:3b:0f:eb:56:dd:28:71:60: a1:bb:6f:5b:43:34:17:05:ca:55:1a:71:2a:ec:f8: f6:cf:60:70:f7:ee:d0:ee:c3:8c:66:9e:92:6e:7c: 23:50:e6:9d:06:10:e0:46:6f:b6:06:37:6c:73:c6: 4b:d4:bc:c6:52:21:fb:a4:f3:3a:c4:ba:8d:6d:eb: e0:95:2f:f5:a5:c7:0a:cc:20:69:12:33:0f:f2:71: 24:49:0f:2d:41:c5:d6:6f:14:5d:e6:47:a9:6b:69: fc:f0:aa:65:b0:06:cb:a0:11:4b:19:6d:a5:a6:79: 60:c6:7c:15:6c:6e:d7:bb:45:5d:e2:9d:77:d2:1a: 77:17:4c:9d:1f:29:a1:1c:1b:5a:07:85:96:7a:72: 85:58:00:d6:9a:b9:10:ab:41:87:73:45:2b:bc:78: 25:99:4e:81:c9:90:2d:8c:21:70:8e:10:29:24:65: 02:56:41:26:f4:73:d6:ce:9c:e1:15:82:8b:c9:08: a1:59:23:9b:72:6e:cf:76:ae:88:30:0b:a0:95:bc: ba:92:cb:f5:8f:0f:b2:7f:a3:be:3b:94:ef:b5:26: d0:85:4d:38:f9:65:bf:e4:ee:c5:60:73:b0:ef:cb: 1f:eb:55:bc:8f:64:7d:25:28:e7:fd:64:24:7c:a5: 5e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:87:BC:71:52:F8:40:85:83:6F:BE:BE:D2:90:B7:B7:13:CB:65:B7 X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:42:1e:f4:63:d0:aa:d0:0e:f7:8d:fa:63:8a:22:9b:bc:9b: b2:ce:53:8d:26:e5:8a:c7:a5:34:10:d2:38:7e:56:01:81:ba: 11:88:58:b7:43:8e:f9:7b:c7:61:c7:34:d1:43:7f:db:4f:54: 15:30:f0:e8:0a:fd:b8:95:c5:d5:41:88:e2:a1:6e:73:8e:d3: 8d:a2:36:be:5a:a9:19:7d:de:be:0c:4f:b1:80:e7:61:c4:a6: 5a:a5:3b:8d:56:95:9a:df:3f:00:16:91:d8:cb:07:ef:50:8a: fe:f0:c7:98:7b:ce:fe:c5:a2:f0:b6:78:d2:1e:88:ed:7a:65: 1f:75:76:d7:fb:c0:c0:d8:54:14:76:c0:f9:15:33:46:8e:a9: 02:86:7e:ab:0c:2f:72:1a:21:dd:43:09:02:20:ce:f8:3c:d7: 83:2b:05:ce:3d:7c:ba:7c:20:5d:19:ba:fd:23:86:7d:ac:82: 59:91:d4:c1:0b:1e:98:41:61:a5:35:95:05:80:3c:cb:99:5f: 1a:1f:b1:99:c0:85:b0:12:0b:05:66:e1:44:f0:a5:bb:12:c9: 84:8d:92:db:88:69:88:ce:dd:8c:30:b5:66:8b:3a:c9:0f:b4: e4:48:21:0f:a7:e8:a1:94:55:04:a5:23:96:af:ea:c2:eb:5e: 7c:28:90:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUwNDI0MTU0OTI5WhcNMjUwNTAxMTU0OTI5WjAYMRYwFAYD VQQDEw02ODBhNWQ4OS03ZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXc6ZfMUOw/rVt0ocWChu29bQzQXBcpVGnEq7Pj2z2Bw9+7Q7sOMZp6Sbnwj UOadBhDgRm+2Bjdsc8ZL1LzGUiH7pPM6xLqNbevglS/1pccKzCBpEjMP8nEkSQ8t QcXWbxRd5kepa2n88KplsAbLoBFLGW2lpnlgxnwVbG7Xu0Vd4p130hp3F0ydHymh HBtaB4WWenKFWADWmrkQq0GHc0UrvHglmU6ByZAtjCFwjhApJGUCVkEm9HPWzpzh FYKLyQihWSObcm7Pdq6IMAuglby6ksv1jw+yf6O+O5TvtSbQhU04+WW/5O7FYHOw 78sf61W8j2R9JSjn/WQkfKVeIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCHvHFS +ECFg2++vtKQt7cTy2W3MB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGQh70Y9Cq0A73jfpjiiKbvJuyzlONJuWKx6U0ENI4flYBgboRiFi3 Q475e8dhxzTRQ3/bT1QVMPDoCv24lcXVQYjioW5zjtONoja+WqkZfd6+DE+xgOdh xKZapTuNVpWa3z8AFpHYywfvUIr+8MeYe87+xaLwtnjSHojtemUfdXbX+8DA2FQU dsD5FTNGjqkChn6rDC9yGiHdQwkCIM74PNeDKwXOPXy6fCBdGbr9I4Z9rIJZkdTB Cx6YQWGlNZUFgDzLmV8aH7GZwIWwEgsFZuFE8KW7EsmEjZLbiGmIzt2MMLVmizrJ D7TkSCEPp+ihlFUEpSOWr+rC6158KJDz -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:46 2025 by rpki-client