$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: IxJ2nIwnX8CW6b+EWVPnnk2zOZiGhv1N9EZmE6kOCDU= Subject key identifier: 4D:B0:1E:9D:F1:5F:4F:F6:7E:72:28:30:1C:0D:9C:B2:9A:05:B8:F9 Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 0A61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 1321 Signing time: Sat 10 May 2025 19:24:34 +0000 Manifest this update: Sat 10 May 2025 19:24:34 +0000 Manifest next update: Sat 17 May 2025 19:24:34 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: OjC5I7XYzWKkKO3gHxXLg1hu2cZFIifC8gmDHkZzZ0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2657 (0xa61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: May 10 19:24:34 2025 GMT Not After : May 17 19:24:34 2025 GMT Subject: CN=681fa7f2-e5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:46:74:df:60:be:24:74:93:fa:67:8f:fc: 8a:5f:41:49:ad:ce:6b:e4:2b:e3:27:36:87:69:ca: 8c:d8:2c:1a:39:3f:10:ad:d9:5c:95:72:16:c6:d9: 96:b9:69:8f:94:2f:d6:5a:66:14:f4:eb:cc:1f:c9: 8b:61:1b:02:05:68:9a:94:38:eb:ec:b1:21:46:18: 04:c8:a9:ca:d3:a8:13:50:76:8b:71:f1:4e:35:b5: 40:e6:1e:e4:9f:18:4a:39:08:3e:59:31:d3:8d:97: 6a:07:f7:63:ad:37:1d:59:98:d3:33:33:45:e4:1d: 27:cf:c9:d6:cc:01:32:6e:2b:f3:25:ef:53:1a:f5: 0d:e1:c1:78:fd:54:7c:45:b0:21:42:72:1d:a6:d4: bd:84:d3:3f:d1:78:5a:7b:37:69:e7:62:6e:60:ac: 53:d0:4b:48:8f:4e:5d:86:c5:2b:b6:a4:5c:e0:a8: c9:e9:61:d3:48:14:75:26:ee:da:76:fe:58:d2:93: 4e:5e:2f:66:f4:6b:7b:8f:89:2a:fc:34:87:ac:79: 1f:48:35:1b:fd:0d:97:cd:4b:fb:60:09:b3:9b:d7: 24:0b:52:bd:a5:bd:c2:f8:6f:4d:7b:ca:15:f9:f3: 83:b3:00:47:36:98:12:32:b5:e7:fb:58:9d:48:17: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B0:1E:9D:F1:5F:4F:F6:7E:72:28:30:1C:0D:9C:B2:9A:05:B8:F9 X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:45:cb:62:bc:9d:9f:62:61:ed:cf:74:e1:fa:51:c7:01:ac: c3:92:40:b0:d4:d0:a3:39:9b:7d:28:43:9f:a1:83:04:49:85: a1:e5:9a:f3:c9:12:94:dd:36:bc:38:a3:17:92:cf:2c:89:3e: 9a:c6:92:e3:3f:77:ea:e2:f7:1a:38:fc:85:f6:48:8f:00:b8: a6:54:1b:1e:cc:72:cd:cc:d1:b4:cd:08:54:14:ad:9d:e0:63: bd:a8:56:e6:02:0a:ef:ec:db:23:c2:0b:8c:89:9c:e7:07:3b: 5b:c8:88:e9:ec:9d:69:c6:2b:2a:6b:11:e6:7b:17:d5:fc:a6: cb:b5:74:85:58:94:b3:14:d3:e8:27:ea:7f:b6:43:d3:85:a0: 55:64:6b:26:8e:85:69:77:d2:80:64:88:86:80:74:dc:25:18: 24:8a:1c:49:bb:fb:ae:69:cd:af:86:4b:d6:60:dc:00:41:a9: 4f:a9:60:37:a7:f0:f1:d7:cb:3b:60:c7:23:22:82:dc:99:b9: 98:8d:b5:19:5e:13:6a:ee:50:1b:23:7c:03:4b:7e:0c:0e:7c: 0c:4b:9a:b7:15:3c:83:c8:05:77:e3:0a:ae:eb:cf:ba:5a:11: 60:4b:f3:46:f4:26:58:9a:9b:e8:ad:aa:6e:8d:cc:d5:12:f8: 99:60:1f:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjUwNTEwMTkyNDM0WhcNMjUwNTE3MTkyNDM0WjAYMRYwFAYD VQQDEw02ODFmYTdmMi1lNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpdGdN9gviR0k/pnj/yKX0FJrc5r5CvjJzaHacqM2CwaOT8QrdlclXIWxtmW uWmPlC/WWmYU9OvMH8mLYRsCBWialDjr7LEhRhgEyKnK06gTUHaLcfFONbVA5h7k nxhKOQg+WTHTjZdqB/djrTcdWZjTMzNF5B0nz8nWzAEybivzJe9TGvUN4cF4/VR8 RbAhQnIdptS9hNM/0Xhaezdp52JuYKxT0EtIj05dhsUrtqRc4KjJ6WHTSBR1Ju7a dv5Y0pNOXi9m9Gt7j4kq/DSHrHkfSDUb/Q2XzUv7YAmzm9ckC1K9pb3C+G9Ne8oV +fODswBHNpgSMrXn+1idSBd3VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2wHp3x X0/2fnIoMBwNnLKaBbj5MB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQRctivJ2fYmHtz3Th+lHHAazDkkCw1NCjOZt9KEOfoYMESYWh5Zrz yRKU3Ta8OKMXks8siT6axpLjP3fq4vcaOPyF9kiPALimVBsezHLNzNG0zQhUFK2d 4GO9qFbmAgrv7NsjwguMiZznBztbyIjp7J1pxisqaxHmexfV/KbLtXSFWJSzFNPo J+p/tkPThaBVZGsmjoVpd9KAZIiGgHTcJRgkihxJu/uuac2vhkvWYNwAQalPqWA3 p/Dx18s7YMcjIoLcmbmYjbUZXhNq7lAbI3wDS34MDnwMS5q3FTyDyAV34wqu68+6 WhFgS/NG9CZYmpvorapujczVEviZYB/1 -----END CERTIFICATE-----Generated at Sun May 11 13:28:52 2025 by rpki-client