$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft File: 8fFj2FT-czviVA83o0T_alpayfY.mft (raw, json) Hash identifier: Hx+MDfZGDsOrzzlPQN6hDMACRZOJjeAertTOhChmt/8= Subject key identifier: 81:48:7B:DE:5B:AA:0D:7E:97:CB:5B:4A:24:7E:34:DB:2E:42:5D:55 Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6 Certificate issuer: /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft Manifest number: 0110 Signing time: Fri 25 Apr 2025 04:00:08 +0000 Manifest this update: Fri 25 Apr 2025 04:00:08 +0000 Manifest next update: Fri 02 May 2025 04:00:08 +0000 Files and hashes: 1: 8fFj2FT-czviVA83o0T_alpayfY.crl (hash: JDGoAAputy8ZVnoVJm6285TSf9R658ozKbHkTK+/Tuc=) 2: E84C2B9083D711EE871C4048C4F9AE02.roa (hash: rmSlyhnDPvPSFvbFMmRCs9JHSxTZmt3FdyC7wK+xTxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9CD7, serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6 Validity Not Before: Apr 25 04:00:08 2025 GMT Not After : May 2 04:00:08 2025 GMT Subject: CN=680b08c8-4aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:12:a8:d0:ed:d3:28:05:75:f8:82:6e:1b: f3:25:cf:1a:3c:a7:f2:c1:47:b1:93:43:75:fe:09: 7a:f3:44:17:c0:27:d3:a7:f3:a3:56:5a:2b:11:6b: d0:92:41:79:36:df:5b:36:49:6e:4d:bc:f8:7d:e3: d8:e3:74:68:05:89:67:fc:fe:8e:6f:db:0b:00:13: a7:b6:0b:fe:ef:c9:0d:b2:b5:c9:c1:61:2b:24:a3: 0b:a4:ec:f4:9f:95:87:e4:07:92:21:b1:80:e7:c4: 0a:41:4d:6f:61:b6:49:db:cd:dd:ec:5f:a5:37:c2: ec:39:91:b5:ff:12:83:f7:39:bc:5d:fa:ef:78:c8: e3:0a:44:53:d3:33:a3:68:e0:6f:cb:ca:21:41:a1: 37:cb:09:4a:6a:54:83:70:11:2d:0d:b3:95:08:ce: ff:e6:25:3b:c0:bb:5a:74:8a:32:c3:c1:da:93:cb: f1:43:d2:92:6a:52:3c:7f:d2:d0:a7:d7:c9:43:38: 10:da:b0:5a:ec:7d:b3:83:31:fe:e1:e6:af:3b:97: 73:04:87:ba:2b:e3:5f:2a:a6:a0:ba:fb:25:c3:db: 92:8d:4f:a8:ef:2b:09:33:c2:85:43:33:b7:71:1e: 2b:35:e5:67:64:53:ea:4c:e8:1a:05:dd:84:9a:8c: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:48:7B:DE:5B:AA:0D:7E:97:CB:5B:4A:24:7E:34:DB:2E:42:5D:55 X509v3 Authority Key Identifier: keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:62:f1:56:dd:af:9c:54:8a:6d:13:c4:d8:07:e3:fa:a2:2c: 88:c8:db:16:59:dd:f9:7b:cf:f2:dc:4f:b3:84:b1:50:c5:83: c2:35:83:73:90:d3:92:e7:d7:69:6c:e3:92:fc:fb:71:c8:58: 01:42:35:99:06:05:c2:6c:38:c6:26:bc:6f:b3:43:03:72:16: e0:93:f9:fe:ea:bd:db:68:31:02:01:96:6f:e0:89:05:95:d3: 29:13:fa:ff:fa:0b:f5:12:c5:1f:2e:f8:76:40:a9:62:c3:b2: 5f:e3:96:19:40:ab:8a:1f:dd:ff:08:b9:a9:7a:ad:a7:9a:ec: 63:64:69:e2:51:3d:27:ed:aa:e6:e3:99:0e:30:96:44:4b:49: 23:f2:ff:51:c1:97:a5:71:b0:47:ba:db:1c:dc:9e:ad:92:ed: b0:b4:c2:1e:58:5f:c8:5e:4b:db:77:8f:c7:c4:d4:1a:e3:63: 31:e6:eb:c6:cf:1d:85:67:6c:33:c9:34:98:a3:87:f2:cd:ad: 60:ca:f3:a7:0b:73:a9:55:c9:89:83:27:49:7e:ce:8d:53:ed: 31:a1:fc:25:71:15:58:ff:55:e4:9a:05:0d:f0:99:15:69:e9: 17:7e:1c:1d:0c:6e:ce:c6:08:31:d2:d8:99:09:e3:69:d5:40: 1b:77:dc:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDRDcxMTAvBgNVBAUTKEYxRjE2M0Q4NTRGRTczM0JFMjU0MEYzN0EzNDRGRjZB NUE1QUM5RjYwHhcNMjUwNDI1MDQwMDA4WhcNMjUwNTAyMDQwMDA4WjAYMRYwFAYD VQQDEw02ODBiMDhjOC00YWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+wSqNDt0ygFdfiCbhvzJc8aPKfywUexk0N1/gl680QXwCfTp/OjVlorEWvQ kkF5Nt9bNkluTbz4fePY43RoBYln/P6Ob9sLABOntgv+78kNsrXJwWErJKMLpOz0 n5WH5AeSIbGA58QKQU1vYbZJ283d7F+lN8LsOZG1/xKD9zm8XfrveMjjCkRT0zOj aOBvy8ohQaE3ywlKalSDcBEtDbOVCM7/5iU7wLtadIoyw8Hak8vxQ9KSalI8f9LQ p9fJQzgQ2rBa7H2zgzH+4eavO5dzBIe6K+NfKqaguvslw9uSjU+o7ysJM8KFQzO3 cR4rNeVnZFPqTOgaBd2Emox7CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFIe95b qg1+l8tbSiR+NNsuQl1VMB8GA1UdIwQYMBaAFPHxY9hU/nM74lQPN6NE/2paWsn2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUNENy9BQkVCODc2MDgz RDUxMUVFOTg4REI3NDRDNEY5QUUwMi84ZkZqMkZULWN6dmlWQTgzbzBUX2FscGF5 ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmRmoyRlQtY3p2aVZBODNvMFRfYWxwYXlmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUNENy9BQkVCODc2MDgzRDUxMUVFOTg4REI3NDRDNEY5QUUwMi84ZkZqMkZULWN6 dmlWQTgzbzBUX2FscGF5ZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFYvFW3a+cVIptE8TYB+P6oiyIyNsWWd35e8/y3E+zhLFQxYPCNYNz kNOS59dpbOOS/PtxyFgBQjWZBgXCbDjGJrxvs0MDchbgk/n+6r3baDECAZZv4IkF ldMpE/r/+gv1EsUfLvh2QKliw7Jf45YZQKuKH93/CLmpeq2nmuxjZGniUT0n7arm 45kOMJZES0kj8v9RwZelcbBHutsc3J6tku2wtMIeWF/IXkvbd4/HxNQa42Mx5uvG zx2FZ2wzyTSYo4fyza1gyvOnC3OpVcmJgydJfs6NU+0xofwlcRVY/1XkmgUN8JkV aekXfhwdDG7Oxggx0tiZCeNp1UAbd9yM -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:10 2025 by rpki-client