$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json) Hash identifier: jj09sDiXC+RvPLR7PUioAa7lTeUgi9UlJ/dS20cf0jI= Subject key identifier: EB:25:45:90:3E:E9:02:19:F0:01:F5:5E:73:C9:A4:86:02:99:97:19 Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Certificate serial: 09B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft Manifest number: 09B3 Signing time: Fri 16 May 2025 20:15:28 +0000 Manifest this update: Fri 16 May 2025 20:15:28 +0000 Manifest next update: Fri 23 May 2025 20:15:28 +0000 Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: YnOflctEYpPJwdJ9uRE+oRUlhZN84spHGME91p7K+Bg=) 2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: IErhN2Rb0g9VI5rW4Q/U0ihFngJbQko3OlSb8ST5oQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2489 (0x9b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Validity Not Before: May 16 20:15:28 2025 GMT Not After : May 23 20:15:28 2025 GMT Subject: CN=68279ce0-7c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:13:ab:0b:0f:ad:30:0e:b3:c2:f7:2b:7e: 8d:f5:7d:8f:60:d0:40:f9:5c:e8:8c:a5:12:f2:97: 2d:e5:47:c2:32:22:af:e6:1f:28:2f:0d:9e:60:d6: c2:95:1f:6b:f2:e8:31:2a:16:9b:1f:d7:ea:28:c3: 4b:d6:78:c2:5d:7e:3b:5d:5c:c7:eb:87:58:95:e8: bf:76:48:ce:75:13:bf:03:db:ba:4d:04:d5:34:5f: be:99:30:57:fb:0c:34:15:3d:be:e5:8d:fc:94:fa: 02:91:ac:e7:a1:0e:21:67:4a:55:c3:13:77:56:1a: b7:8c:b7:fc:64:3e:18:36:b0:25:ad:ab:1d:0d:80: 00:f3:a4:c1:9c:29:8b:ae:0d:22:99:a0:a1:e8:b0: 11:99:22:45:be:94:5e:93:6c:8e:aa:c9:92:c8:e1: e3:b4:56:b3:5e:65:92:f3:b8:20:d2:87:3a:f6:69: 95:91:05:c2:44:8b:5a:3e:61:0d:a8:d1:3a:68:e4: 46:04:81:8a:e2:cb:4b:d9:29:9f:ab:53:ef:89:14: 13:bc:c2:00:ea:c6:ac:a4:52:6e:05:db:3a:a7:74: 3d:90:fe:fb:15:26:00:9b:14:ac:45:35:79:76:27: f5:2d:59:6e:21:53:e1:0e:e3:47:ac:18:5f:e5:5b: 8a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:25:45:90:3E:E9:02:19:F0:01:F5:5E:73:C9:A4:86:02:99:97:19 X509v3 Authority Key Identifier: keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d0:1d:ff:df:e7:36:c3:cb:48:8d:6a:40:66:45:c2:da:89: 4e:29:5a:2f:31:da:b0:06:fa:1c:ab:c3:f6:05:8d:6e:c5:7f: d4:53:59:e6:de:e9:af:e4:c0:ff:af:b3:42:74:d7:f7:f5:82: ff:8f:6f:ec:7f:8b:46:e4:95:14:e4:bc:af:50:8d:1f:6d:d3: 8f:00:0d:f9:f1:8a:3b:ca:2b:70:22:66:04:b7:fe:68:6d:4e: 89:1a:aa:07:b8:f8:a7:ff:c2:73:39:f4:1d:e5:f7:4a:cd:82: 05:99:eb:67:6d:2b:18:ae:26:67:0d:a5:0b:f1:46:cc:27:09: ac:78:d0:39:f2:e2:24:a9:26:49:1e:38:c0:f0:e2:39:81:a9: 38:08:32:92:32:df:fa:15:36:c0:52:9e:06:c0:14:bb:2e:75: 11:20:39:09:ae:94:66:d2:c3:62:aa:e7:c3:2d:5c:e2:dd:e3: 41:51:d4:70:4a:54:3c:57:7b:49:b8:25:7f:7a:5d:32:d8:96: e5:58:9f:34:0e:fb:dc:f4:71:67:86:20:4d:05:3c:1f:e1:02: da:fd:25:73:bb:12:13:35:30:b0:3c:c3:2c:c7:78:96:36:22: 21:15:f4:ca:60:c7:22:48:e8:75:c7:78:d9:1d:62:0c:07:e8: e2:94:c4:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2QjUxMTAvBgNVBAUTKEYzMDEyQ0VEMTc2OERFQUE2NEM0RTkzNkI4NkNCMzFF MTZDRUZDQkEwHhcNMjUwNTE2MjAxNTI4WhcNMjUwNTIzMjAxNTI4WjAYMRYwFAYD VQQDEw02ODI3OWNlMC03YzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqETqwsPrTAOs8L3K36N9X2PYNBA+VzojKUS8pct5UfCMiKv5h8oLw2eYNbC lR9r8ugxKhabH9fqKMNL1njCXX47XVzH64dYlei/dkjOdRO/A9u6TQTVNF++mTBX +ww0FT2+5Y38lPoCkaznoQ4hZ0pVwxN3Vhq3jLf8ZD4YNrAlrasdDYAA86TBnCmL rg0imaCh6LARmSJFvpRek2yOqsmSyOHjtFazXmWS87gg0oc69mmVkQXCRItaPmEN qNE6aORGBIGK4stL2Smfq1PviRQTvMIA6saspFJuBds6p3Q9kP77FSYAmxSsRTV5 dif1LVluIVPhDuNHrBhf5VuKpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOslRZA+ 6QIZ8AH1XnPJpIYCmZcZMB8GA1UdIwQYMBaAFPMBLO0XaN6qZMTpNrhssx4Wzvy6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDZCNS8wRjVBMDE0MDgy RjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNxcGt4T2sydUd5ekhoYk9f TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh3RXM3UmRvM3Fwa3hPazJ1R3l6SGhiT19Mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDZCNS8wRjVBMDE0MDgyRjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNx cGt4T2sydUd5ekhoYk9fTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG0B3/3+c2w8tIjWpAZkXC2olOKVovMdqwBvocq8P2BY1uxX/UU1nm 3umv5MD/r7NCdNf39YL/j2/sf4tG5JUU5LyvUI0fbdOPAA358Yo7yitwImYEt/5o bU6JGqoHuPin/8JzOfQd5fdKzYIFmetnbSsYriZnDaUL8UbMJwmseNA58uIkqSZJ HjjA8OI5gak4CDKSMt/6FTbAUp4GwBS7LnURIDkJrpRm0sNiqufDLVzi3eNBUdRw SlQ8V3tJuCV/el0y2JblWJ80Dvvc9HFnhiBNBTwf4QLa/SVzuxITNTCwPMMsx3iW NiIhFfTKYMciSOh1x3jZHWIMB+jilMT2 -----END CERTIFICATE-----Generated at Fri May 16 22:23:05 2025 by rpki-client